She-Ra's Pantsuit

@SheRaPantsuit
2 Followers
15 Following
31 Posts
I am a mathematician and computer scientist (sorry) who likes She-Ra. Well, the 2018 version, anyway.
Pronounshe/him

RE: https://grapheneos.social/@GrapheneOS/116710664736541147

"replace our implementation of restoring compatibility with apps opting into a combination of two separate anti-competitive Play Store features preventing using their apps on GrapheneOS when combined together by replacing the insecure Play Store installer check injected into the app with a secure Play Source source stamp check by the OS (this will fix compatibility with the new Play Store injected code that's being rolled out for apps using this)"

based

RE: https://mathstodon.xyz/@counting_is_hard/116629878319160788

This is hilarious and very accurate. We leave the proof to the reader.

So, it’s becoming clear that some devs treat their peers as authorities irrespective of the nonsense they’re spouting. What matters is, effectively, “time served”

Been a noticeable part of the tech or OSS communities for years? Then your hallucinatory ravings get treated as a double-blind peer-reviewed study

Been less noticeable? Nothing you say will ever shift their opinion.

Sure, they’ll feel bad that you feel harmed, but they’ll always back their friends

(Yes. This is an rsync post)

within the past 24 hours I’ve watched two people claim there was nuance to the rsync story that made tridge right, and after not too much discussion they admitted they didn’t know rsync’s slop code only got noticed after a severe breakage occurred, or that people have evaluated the slop commits and found them to be of extraordinarily poor quality (including rendering rsync’s test suite ineffective by translating it from bash into broken python). the story they heard is that someone saw Claude in the commit log and freaked out and directed harassment towards tridge. they seemed to be under the false impression that rsync still worked fine.

how is it that the members of the supposed angry mob are doing deeper analysis than the people claiming nuance?

@davidgerard "People keep telling me gambling is bad, but what they don't know is this: I have a *system*. These new machines are so much more sophisticated, your ideas about how they work are totally outdated. What do you mean 'am I on cocaine?' Of course I am! It's part of the system, dummy!"
We quickly shipped the patch after it was disclosed to OEMs by Google but we plan to do better in the future. SQLite 3.44.5 was released with this backport on 2025-07-24. We weren't previously aware SQLite maintained upstream LTS branches for Android but our plan is to closely follow those now.
Google disclosed CVE-2025-48595 to OEMs in a security preview release near the end of September 2025. Those patches are allowed to be shipped right away, so it was included in our 2025092501 release. We noted it was already publicly fixed so it was added to our regular releases too in 2025100300.
June 2026 Android Security Bulletin notes CVE-2025-48595 is being exploited in the wild. It's being widely misreported in tech media as a 0-day vulnerability being exploited. That's a major misunderstanding of Android Security Bulletins and how poorly OEMs keep up with patches.
tell me, how many managers have you had who would stomach this one?

> LLM-assisted coding is fine.

Depends on what you mean by fine. If you mean in an ethical sense, then no. If you mean in a practical sense, then also no.