And don’t want to upgrade/switch because it is too expensive

Oh boy, you better have no employees or Oracle will make you pay for their existence:

https://www.oracle.com/in/a/ocom/docs/corporate/pricing/java-se-subscription-pricelist-5028356.pdf

Last month I tried to unlock a Motorola phone. Guess what: There is no option to unlock the bootloader because it’s one of the models that can’t.

The year before a Huawei phone: I had to disassemble half the device to shortcircut something while running a custom made software on the PC.

Yeah now try to get an average user doing this… good luck.

And I’m not even scratching the part where some of your devices hardware is not working properly because the closed source firmware is not available.

A quick look at which recent phones (since 2022) can install LineageOS: https://wiki.lineageos.org/devices/ Just 35 phones (Pixels exluded), including only a single Samsung phone!

Now compare that to installing Windows/Linux on a PC where you literally plugin a USB and hit install…

I would probably hold off on buying a phone specifically for the purposes of installing a custom ROM on it… Custom ROM installation is generally extremely simple…

Hahaha, nice joke:

https://en.wikipedia.org/wiki/Bootloader_unlocking#Android

That GitHub comment makes my brain hurt and gives me Microsoft community forum advisor (run ChEcKDiSK tO mAYbe fIX tHe ProBLem) and “leave the multi-billion dollar company alone” vibes.

Also it’s not a single line - when looking at the source file - and a complete section instead.

GitHub Copilot, as used in the documentation here, is free and integrated into the IDE.

1. It’s inside the dotnet Docs. dotnet has nothing to do with an IDE. You can code/run dotnet code in any editor or terminal if you like.
2. This person assumes that Visual Studio is the only IDE for dotnet. Looks like they never heard of Rider or VS Code or anything else.

I do not think that you can call it an ad if it is for a free tool.

WTF is he defining as an ad? “Advertising is the practice and techniques employed to bring attention to a product or service”. The whole section is bascially “Hey you can use Copilot to do this” - that’s an ad right there.

Even if you interpret this as encouraging users to pay

Makes no sense. Does this person think ad = you have to pay for it???

it is hardly the first time that dotnet documentation guides users towards paid Microsoft products: are we going to start complaining about all pages with references to Azure next?

1. A deployment target is not the same as “AI”
2. If a page/section is not named like “How to deploy example app to Azure” then it shouldn’t contain any reference to Azure. And yes you should complain about such stuff if it exists.

The only part of this I actually object to is that I don’t think that what essentially amounts to ‘prompt an LLM’ belongs in documentation, although at the very least the page does disclose that the output may be erroneous.

That’s basically what the whole issue is about. WTF are you even talking about then? Just shut up and give an upvote.

Overall a totally useless comment.

Not sure if you read this blog post: https://blog.jetbrains.com/pycharm/2025/04/unified-pycharm/

Rest assured – our commitment to open-source development remains as strong as ever. The Community Edition codebase will stay public on GitHub, and we’ll continue to maintain and update it. We’ll also provide an easy way to build PyCharm from source via GitHub Actions.

PyCharm is - like all JetBrains IDEs - based on intellij-community and the “Pro” stuff just some fancy pre-installed plugin that requires a license.

Alternatively, you may choose to manually switch to the new PyCharm immediately and keep using everything you have now for free, plus the support for Jupyter notebooks.

So all community functionallities will also be available in the unified edition for free.

Also the Pro license - which you can also get 4 free in like 10 different ways - pricing is extremely fair: A license costs $100-60 for an individual, which is cheaper than most streaming subscriptions…

Can’t wait for all the other horror stories getting posted here :D

IP based blocking is complicated once you are big enough

It’s literally as simple as importing an ipset into iptables and refreshing it from time to time. There is even predefined tools for that.

While AI crawlers are a problem I’m also kind of astonished why so many projects don’t use tools like ratelimiters or IP-blocklists. These are pretty simple to setup, cause no/very little additional load and don’t cause collateral damage for legitimate users that just happend to use a different browser.

because it takes a like 3 or 4 minutes to boot

What kind of PC is this? Does it have an SSD?

There are some more privacy friendly forks of “Firefox for Android”, which have sponsored shortcuts disabled or minimized by default. For example:

• https://gitlab.com/relan/fennecbuild
• https://gitlab.com/ironfox-oss/IronFox

Feel free to give them a try :)

The same apps that have access to more of your data (because they’re not sandboxed in a browser), use electron (ships a browser) and include trackers that one can’t simply block with an extension?

I also personally ask myself how a PyPI Admin & Director of Infrastructure can miss out on so many basic coding and security relevant aspects:

• Hardcoding credentials and not using dedicated secret files, environment variable or other secret stores
• For any source that you compile you have to assume that - in one way or another - it ends up in the final artifact - Apparently this was not fully understood (“.pyc files containing the compiled bytecode weren’t considered”)
• Not using a isolated build process e.g. a CI with an isolated VM or a container - This will inevitable lead to “works on my machine” scenarios
• Needing the built artifact (containerimage) only locally but pushing it into a publicly available registry
• Using a access token that has full admin permissions for everything, despite only requiring it to bypass rate limits
• Apparently using a single access token for everything
  • When you use Git locally and want to push to GitHub you need an access token. The fact that article says “the one and only GitHub access token related to my account” likely indicates that this token was at least also used for this
• One of the takeaways of the article says “set aggressive expiration dates for API tokens” - This won’t help much if you don’t understand how to handle them properly in the first place. An attacker can still use them before they expire or simply extract updated tokens from newer artifacts.

On the other hand what went well:

• When this was reported it was reacted upon within a few minutes
• Some of my above points of criticism now appear to be taken into account (“Takeaways”)

So just for additional context:

This meme was brought to you by the following API response scheme:

{
  "time": "2007-12-24 18:12",
  "servertimezone": "Europe/Vienna",
  "timezoneoffset": -8
}

when it could have just been

{
  "date": "2007-12-24T18:21:00-07:00"
}

As far as I can tell it’s the other ways around: IPv4 is getting more costly

Example: AWS started to charge for IPv4 addresses a few months ago - a IPv4 address now costs around $3.6 per month