I just want to buy home automation gadgets that don't need a bloody cloud account to work.

I think car automation peaked at adaptive cruise control. It's a simple tractable problem that's generally well confined and improves the drivers ability to concentrate on other road risks.

I'm not sure how assaulting children is ever going to build an effective relationship between kids and their parents. Parents should represent safety and unconditional love because then the educational message will have an easier time being accepted by the kids.

As I understand it is to operate the defensive missile battery they have just shipped.

Syncthing should have inotify support which allows it to watch for changes rather than polling. Does that help?

Very binary, much wow.

Buy games from indie developers on platforms like itch.io. You may have a negative view of the other people involved in funding and marketing a triple AAA game but they all contribute and get a share of the retail price. You don't get to pick and choose who deserves to get their slice.

Don't be too hard on Collin. Looking back on the threads it's fairly clear he's been the victim of a social engineering attack on an overworked maintainer. People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development. The off-list contact by Jia must have seemed like a helpful enthusiastic solution to a burnt out developer.

Well the account is focused on one particular project which makes sense if you expect to get burned at some point and don't want all your other exploits to be detected. It looks like there was a second sock puppet account involved in the original attack vector support code.

We should certainly audit other projects for similar changes from other psudoanonymous accounts.

It's looking more like a long game to compromise an upstream.

Time to audit all their contributions although it looks like they mostly contribute to xz. I guess we'll have to wait for comments from the rest of the team or if the whole org needs to be considered comprimised.

Yes training is the most expensive but it's still an additional trillion or so floating point operations per generated token of output. That's not nothing computationally.