We have had good experience with kache so far to speedup builds in CI and local

How does it compare to sccache ?

Kache caches more, and is path independent, so can be shared between worktrees.

Sccache has base dir support now. But you have to be vigilant about not including things like cargo manifest dir

Interesting. First time I hear about Kache, I'm definitely gonna give it a try.

So I guess everyone uses IDE to code now. I consider anybody not using vim to be a complete moron. Auto complete and syntax highlighting are for the weak minded. /s

You joke but when I first picked up C, I did find it quite helpful to write it in a plain text editor and write my own Makefiles to understand what project setup the IDEs would abstract away - our uni also had pen-and-paper exams where relying on autocomplete would have been difficult :)

(Likewise I can see "you should have read through your generated code and understood the key points yourself" becoming the rule of thumb for keeping maintainers accountable in a project, keeping the pace of changes manageable, and keeping the codebase from becoming a rat's nest _only_ agents can work with)

If you think it's more fun that way, sure. Sometimes (often?) satisfaction is about friction.

And I've seen the /s, but your comment seems to mock OP's point more than just trying to be funny.

Since I checked Rust servers should be fine since the brotli crate is not a binding on the C.

Nope, run ldd on cargo; it links to libbrotlidec.so.1. Via libcurl.

Aren't you glad cargo connects to the network whenever it feels like it? I just love it when my build tool does that.

There are 753 crates that drag in brotli this way: https://lib.rs/crates/curl/rev

The real killer is the oath crate. Basically every rust project using OAuth is vulnerable. That's 398 projects on crates.io plus who knows how many binaries (a lot of non-library projects don't bother publishing to crates.io).

Another scary one is "a practical HTTP client that is fun" https://lib.rs/crates/isahc used in 317 crates including sequoia. In case you wanted somebody to steal your private keys.

Apparently it doesn't contain a binding to the C library, but it does contain some compatibility and shares design decisions with it. In other words, it's not a clean-room implementation from the spec, but rather it's a port. Since this RCE is triggered by a OOB access, it's unlikely to have made it into the crate, but it's good to keep these things in mind.

What are the best brands / models to buy right now to install webOS?

webOS is under LGs stewardship; I find their OLED displays to be gorgeous. However, there software leaves much to desire

their*

The Canadian oil is always 10-20% cheaper right now because it only has one buyer, if anything the price will just track the global market more

Ability to export more will lead to greater production.

The pipeline will both increase the price Canada gets for its oil by reducing the share the railways get from the price, and (very slightly) decrease the world price because of increased supply.

Splitting the earnings differently between Canada and Canadian railway companies is a zero–sum game. It just changes which company makes what percentage of the profit. The real win for Canada will be additional production. The Prime Minister of Canada stated that the new pipeline would allow them to “export an additional 1 million barrels a day to growing markets in Asia.” That’s a net benefit for everyone. It’s additional profits for Canadian society and increased supply on the world market.

Carney has quite a unique opportunity for massive public spending that would have never been popular in any other case. The US always kept Canada well enough that the economy was "good enough" with declining infrastructure and underinvestment (capital fleeing to better return in the states).

Now that he can claim to have no choice and people are really mad, then he can even force retirement funds to invest massively here through those "nationnaly important projects". If successful that would seriously boost our stagnant productivity and economy.

> force retirement funds to invest massively here

wot? Funds for peoples retirements should be invested to maximize their return. They shouldnt be "forced" to invest in ... whatever is happening here.

Always happy when I see software I built being used to hack cool targets. Very nice finding!

Agreed we should ban the term rogue for agents. This implies a moral compass that is not there. They were directed to find data without guardrails or limits, it is not rogue it is intended.

"they were given the hacking test, what did OAI expect?"

"they didn't watch it, they didn't stop it when they first became aware"

"are we going to defer to the same valley elite that brought us algos and social media?"

"both Anthropic and OpenAI are preparing to IPO, what are their incentives behind recent statements?"

statements normies are using and resonating with

This was discussed a lot on the news here. Couple of authors feed their pre AI books to pangram and also got false positive. Maybe it is AI, maybe not. But using AI to accuse someone else of using AI is ironic.

Can you post some links? I know some authors said that, but had used a different tool than Pangram, and I don't expect non-technical people to understand the difference. Pangram is reputedly the best of them and personally I couldn't get a single false positive on my own work (both French and English).

They are a great team! You will defacto also use Caido if you add it to your stack