Not a new issue, see this article from 2017

https://www.newsweek.com/sex-toys-we-vibe-recording-708761

The issue is not even limited to sex toys. Few years back there was big a leak of Apple Watch recordings that included both intimate situations and rape:

https://www.howtogeek.com/apple-settlement-for-unauthorized-...

Who knows which dataset they are now a part of...

“Accidentally recording” sensitive data is happening pretty much everywhere. Last year I was tasked with removing sensitive payment information that had been stored in an insurance company’s database as “call transcripts”. The automated system would state that the payment information would not be stored. It was in fact always stored…

My first hand experience with Windows vs Linux this month:

A friend of mine recently bought a very expensive laptop to do some gaming. I helped him set it up and god that was a horrible experience. For example, we could not get rid of LinkedIn and other crap Microsoft wanted to force on him. Disabling copilot and removing Office required registry surgery. And the damn fans were always running because of some unknown activity in the background, maybe Microsoft is moving into bitcoin mining business?

He eventually got fed up, installed Ubuntu 26.04 as an experiment and a week later still seems to enjoy the experience. Games run fine on steam and his laptop finally feels like his own.

Most surprisingly, Linux worked fine out of the box. Windows 11 on the other hand needed a bunch of PowerShell and registry hacks to be copy pasted from various sources before it was even remotely usable. It's funny how it felt as if Windows was the OS for nerds with too much free time on their hands while Ubuntu was created for ordinary people. And my god, Ubuntu feels so much more fluid on the same hardware. The difference is *huge*.

Gaming on Linux works pretty good now. Setup is easy thanks to Steam and other launchers (e.g. heroiclauncher).

Sure, for many games Riot games / others with kernal level anticheats dont support linux sadly

Not the main focus but, FYI, a number of pieces of hardware will default to full tilt fans unless you have their tooling running to manage things.

NVIDIA GPUs were infamous for doing this with nouveau on less ideally supported cards, for example.

But it's the kind of things you'd expect Windows to take care of automatically, or in the worst case, to prompt the users to install on first boot, especially if Linux (with overall less driver support from manufacturers).

And with a preinstalled Windows (tuned to the laptop) this behavior should not be observed at all.

One would hope.

I have never personally owned one, but I have been told that some Alienware and similar flavored devices have had issues like this when you closed their bespoke Alienware management software because it was the thing driving the fan controls.

I installed CachyOS for my 8-year old son and his desktop instead of Windows.

It's been wonderful.

@keepamovin this looks cool, but notice that your README and github links are ghosting us (404)

Thanks. I posted and really didn't expect any points. So checking back after 40 minutes and seeing it blown up was quite a shock. I'm working through all the things people have pointed out!

You can run nullclaw etc on a Pi zero. People who are paying big $ are mostly trying to run local LLMs.

Personally, I would rather pay a few bucks for Qwen or just use gemma4 which runs on a potato. But I guess we are all different.

There was an AI roundtable on HN front page 2-3 months back. Someone made an outlier analysis and put it on his github.

Guess which LLM was the top outlier and about what type of questions it disagreed with all other LLMs...

Okay, this sounds familiar.

If you run Claude Opus 4.6 at max settings on forgejo repo, it will give you a bunch of RCE's ... that need prior knowledge of the server internal token :) You have to tell the stupid LLM that these attacks doesn’t make sense.

The author seem to be a experienced security researcher. I am surprised he didn't catch this.

I think the author would argue they did try to do so, but their efforts were poorly received.

The author doesn’t owe forgejo anything. They are doing them a favor by highlighting the issues

coordinated disclosure has always been a courtesy (with a deadline to motivate the vendor to fix their stuff) and i don't like how people seem to just expect it now

Advisory, fresh from the owen

https://github.com/Lightning-AI/pytorch-lightning/security/a...

Also, that zig team is already working on other approaches that are better and more stable than what Bun team did:

https://ziggit.dev/t/bun-s-zig-fork-got-4x-faster-compilatio...

Notable quotes:

>There’s the 4x speedup claimed by the Bun team, already available on Zig 0.16.0!

>Each [incremental] update is taking less than 0.4s, compared to the 120+ seconds taken to rebuild with LLVM. In other words, incremental updates are over 300 times faster on this codebase than fresh LLVM builds are. In comparison, an enhancement capped at a 4x improvement is pretty abysmal. [..] Again, this feature is available in Zig 0.16.0—you can use it!

WTF is the "planned shooting" you casually dropped here?

Oh, nothing special, just a run-of-the-mill school shooting he wanted to do at some point.

i was beginning to wonder if this is the new world we're living in now where such things are casually discussed

I assume its a misstranslation, basically somebody trying to go to the shooting range with friends?

I doubt that it is the case. The registration of the gun is a part of the process everywhere afaik.