Apple implemented a similar change for the EU App Store earlier this year to comply with the Digital Services Act (DSA), a regulation that now requires app developers to provide their “trader status” to submit new apps or app updates for distribution.
For the record, Apple notes that the DSA requirements only impact developers distributing through the App Store, not through alternative distribution [1].
[1]: https://developer.apple.com/help/app-store-connect/manage-co...
Honestly, the worst thing about this story is that apparently the Copilot LLM is given the instructions to create audit log entries. That’s the worst design I could imagine! When they use an API to access a file or a url then the API should create the audit log. This is just engineering 101.
Technically, CVEs are meant to only affect one codebase, so a vulnerability in a shared library often means a separate CVE for each affected product. It’s only when there’s no way to use the library without being vulnerable that they’d generally make just one CVE covering all affected products. [1]
Even ignoring all that, people are incorporating Copilot into their development process, which makes it a common dependency.
> The front stoop/street/sidewalk where everybody hangs out?
My kids and other kids in the neighborhood close by play around in the cul-de-sac quite often. Lots of people are out walking around. A lot of neighbors have patio furniture in their front yard and can be found out there, at least when its not 100F+ outside.
> The public square?
The downtown area nearby has lots of events going on.
> The park?
My suburban town has 42 of them. Almost 2,000 acres. They're mostly connected by dedicated bike paths. There's a city park attached to nearly every neighborhood area. Down the street from me there's a park with multiple playground areas, walking path through some small woods, a fishing pond, some basic sports areas (fences and graveled areas for baseball/softball, space for soccer, etc). So yeah, plenty of parks to be had. And there's usually a good bit of people at these places.
And that's before getting into the public sports facilities and other recreation facilities.
> The market—not to buy or sell necessarily, but because everybody’s there?
I hung out at the farmer's market this morning that's routinely held in town most weeks on Saturday mornings. Lots of people walking/biking to it.
> The library?
Excellent library with lots of events going on. They're rebuilding the main building after a fire, but even in their temporary space its great. Its usually pretty busy. It has excellent transit and bike paths to get to it, even in its temporary location.
> The public pool/baths?
Lots of city pools. Even one with a lot of water slides, its like a small water park.
> The house of worship in walking distance?
There are plenty of churches in Texas, trust me.
So once again, what's missing? And I'm not in an absurdly wealthy place, my suburb has a pretty average average household income. And its been roughly like this for most places I've lived or stayed at for significant periods of time. Maybe a bit less on transit, that is something my current place is probably a decent bit better than the average US suburb there.
Other countries have similar issues, of course, but often (not always) they have more cultural factors keeping third spaces alive. In my experience traveling Europe and Africa, community and familial ties generally have a more active role, so there’s just more opportunities for stable third places to develop. It’s not that the spaces are different, imo, but they do seem more common.
Up until recently, you could hit somebody else's S3 endpoint, no auth, and get 403's that would charge them 10s of thousands of dollars. Coudnt even firewall it. And no way to see, or anything. Number go up every 15-30 minutes in cost dashboard.
Real responsibility is 'I have 100$ a month for cloud compute'. Give me a easy way to view it, and shut down if I exceed that. That's real responsibility, that Scamazon, Azure, Google - none of them 'permit'.
They (and well, you) instead say "you can build some shitty clone of the functionality we should have provided, but we would make less money".
Oh, and your lambda job? That too costs money. It should not cost more money to detect and stop stuff on 'too much cost' report.
This should be a default feature of cloud: uncapped costs, or stop services
Perhaps requiring support for bill capping is the right way to go, but honestly I don’t see why providers don’t compete at all here. Customers would flock to any platform with something like “You set a budget and uptime requirements, we’ll figure out what needs to be done”, with some sort of managed auto-adjustment and a guarantee of no overage charges.
Ah well, one can only dream.
This seems more like a model-specific issue, where it’s consistently generating flawed output every time the cache gets invalid. If that’s the case, there’s not much Google can do on a case-by-case level, but we should see improvements over time as the model gets incrementally better / it becomes more financially viable to run better models at this scale.
Rhetorical question, we all know that me reading books is not "transformative" so it won't be considered fair use for me to yoink them (transformative as in transforming more damage to the society at large into more money for the already rich).
The “Java” prefix still confuses new users, not to mention "bizdev" people, and probably leads to legal issues beyond just the trademark. "JavaScript" has always sucked as a name, we're just used to it now. Why are we fighting so hard for it? Let's just take this as an opportunity to name it something that actually makes sense. It will maybe be sort of annoying for a few years, but I'm certain one day we'll look back and not believe we used to call it "JAVA Script".
[1]: https://www.apple.com/legal/intellectual-property/trademark/...
There is no such thing as an offical y combinator data