Today’s game is Portal 2. In the background I finished up Assassin’s Creed 3 Remastered. Turns out I had missed an achievement about playing Fanorona and I’ve just been putting off beating that. I got that done though. And decided to swap it out with Portal 2. Make that my current “Project” game. There’s some challenges/achievements I’d like to do so I’m picking this up.

First thing I noticed, and I’m sure everyone always talks about this. But it’s how timeless the game feels. It’s one of those games that honestly I don’t feel like feels dated. I know it got a few updates here and there but honestly it plays so well and is so well written I feel like it could come out today and I wouldn’t bat an eye.

Second thing I noticed? There’s a companion cube with Cat ears in the game. I like cats. That’s all their really is too it. I just thought it was interesting and cute.

I like that we have more characters in this one to. That’s another aspect I like. I know it’s just one more character but just having Wheatley there I feel like helps balance things well between Glados and Chell, considering Chell doesn’t talk whatsoever. He’s like a whole other spectrum of likeable villains I feel like to Glados.

Anyways. This shouldn’t be a long play. It’s not a long game and I’ve played it like 5 times in the past. And considering my urge was to play this or replay Alan Wake 2 for the millionth time, this was probably the better choice in terms of uniqueness.

I don't know which is worse. That he is a twat, or that Google think their renaming something on their maps actually means anything (as he obviously does).

Crosspost from Mastodon @davidrevoy

As part of an NGI Zero Core grant, musl has now massively improved its support location and internationalization. Although the changes are not yet fully merged in musl and Alpine, they are ready for testing, and you can expect them to land in Nura at some point after the v26.12 release.

New features

From the user perspective, a few new features have landed with these changes:

• On languages where May is longer than 3 letters, musl is now able to distinguish between abbreviated and non-abbreviated versions.
• There is now support in musl for the decimal separator to be a comma. Languages where "one and a half" is written as 1,5 instead of 1.5 will now get numbers in the right format, provided localization files for the language exist.
• Ordering of files (and anything else that depends on the C library for ordering) now follows standard ordering rules. For example, "A" and "a" are now ordered together, and always come before "B" and "b", which wasn't the case before. Ordering of some specific characters might not be perfect yet. For example, different languages have different expectations of where should umlauts like "ä" be placed in relation to "a". musl now has support for that, but the tooling that takes the rules and transforms them into files that musl can read don't support this yet.

Breaking changes

From the user perspective, these changes come with a breaking change. After the changes get integrated, languages which don't have a musl-locale will stop seeing translations to their languages in the UI, even if the apps have translations for them (if you want to help, please see the section below). Since the updated musl behavior will not land in a stable release before v27.06, there is plenty of time for the community to collectively reduce the impact of this change.

This change had to be made, because previously musl would just always accept any kind of locale being set. If it could find the locale, it would set the language appropriately. If it couldn't, it would set the language internally to English (the C locale to be more specific), but assure the consumer that the system was in the locale requested. While this allowed things like apps to use the translations they had available, even if musl lacked those translations, it created inconsistent behavior. The UI would be shown in one language, while the dates for example would be in the wrong format. It also removed incentives to do the right thing and work on locales for musl, and broke testing and some other specific use-cases, as the answer to "does my system support this locale?" would always be "yes", even if asked to set the language to Elvish 🧝‍♀️.

If you want to get more technical details and the rationale behind all the changes, you can search for the relevant threads in the musl mailing list, most specifically the latest patchseries.

Thanks a lot to Rich, Achill, and Pablo for their work on this project, and to NLnet and NGI Zero Core for funding this work.

Help wanted

To avoid losing app translations in your language due to this breaking change, we need to add translations to musl for the said language. This is relatively easy, simply copying a file and adding the definition in your language. Having the definition in your language will be greatly appreciated!

Alternatively, an automated solution using the Unicode Common Locale Data Repository (CLDR) is potentially also possible, but is a harder problem to solve. Any hero wanting to give it a try would be seriously welcomed. Please have a look at musl-locales#1 if you want to help with that.

If you appreciate the work we're doing with Nura and want to support us, consider contributing financially via OpenCollective.

This blog post was written by Pablo. Header image by Oliver.

Comments

To anyone who believe Putin's right hand is controlling Trump's mouth:I know where Putin's left hand is — allow me to introduce German AfD party leader Alice Weidel.The full interview with this Kremlin proxy is mind-blowingly scary — especially from 18:00 where she starts unfolding her Kremlin script about Ukraine.If you want to know what happens if she and Marine Le Pen in France get the power, watch the full video here:youtu.be/_cGGDu8sgXY

source

Not sure if this is fully part of this community. But maybe could be a good read for the folks here since this is focused in the GameDev in he Unix systems.

This is how I organize my Godot Template for development. And a fair bunch of code. All code is AGPL so if you use this code, your codebase is also AGPL.

If this is too far from the community, I can delete this post, sorry for streching the community definition.

All feedback is welcomed.

cross-posted from: https://feddit.online/c/euro@feddit.online/p/2050289/worst-on-record-brutal-summer-heat-wave-killed-more-than-50000-in-europes-cities

Volvo Cars said on Friday it would cut a further 2,500 jobs, mostly in Sweden

At this week’s vigil, the chief executive of Regional Development Australia, Sarimah Hellyer, says it isn’t lost on her that one of the main issues Haines had fought for over the past seven years was better mental healthcare.

“There’s just so many holes in [mental health] service delivery,” she says. “There’s actually whole cohorts who aren’t catered for from a mental health perspective … We have one Headspace that basically supports the same catchment.”

Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in "-next" branches. The CVSS scores are as high as 9.0.

Trend Micro's Zero Day Initiative sent out a number of vulnerability reports to the public Linux kernel mailing list (LKML) rather than the typical private security mailing list. This seemingly was a mistake with Linux's second-in-command Greg Kroah-Hartman responding to each report asking about their submission to the public mailing list.

Among these newly-disclosed vulnerabilities include:

ZDI-CAN-33549 as a CVSS 9.0 scored vulnerability for SMB Direct remote code execution vulnerability due to integer underflow. For this one there is a patch in a Git branch of code intended for Linux v7.5 but now presumably will be expedited for getting to mainline.

ZDI-CAN-33774 as a KSMBD race condition that can lead to remote code execution. Another CVSS 9.0 rated vulnerability.

ZDI-CAN-33367 is a vulneravbility for skbuff skb_zerocopy in the network code that can lead to local privilege escalation. For this one Linux kernel developers received a security report from another source last week over the same issue and a patch is expected to be posted soon.

ZDI-CAN-34068 as a VMWGFX VMware graphics driver bug with an out-of-bounds write leading to local privilege escalation.

ZDI-CAN-34076 an uninitialized resource in the NVMET code leading to information disclosure.

ZDI-CAN-32005 was also posted to the mailing list a day prior for a search-domain TCP query stack buffer overflow leading to local privilege escalation.

The bug and security reports keep on coming in the AI fueled world.

Lately I've been seeing no-like comments pop up near the top of popular videos, often with evangelical viewpoints.

Just thought I'd let you guyses know!

cross-posted from: https://lemmy.world/post/53491083

Almost every shallow-water coral reef on the planet, including Australia’s Great Barrier Reef, faces a high risk of ecosystem collapse before 2075 because of global heating, according to an assessment by United Nations nature advisers.

About 24% of the planet’s reefs across more than 80 countries are already critically endangered, the assessment said, but when the expected impacts of global heating were added this rose to 96%.

But the scientists said while the prognosis was dire, the findings should serve as a “wake-up call”

lol wot ? we wont; even wake up when they're dead

Attached: 1 image

There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time. https://php2shell.censys.com/

This isn't a framework, this is just a bunch of glue code that I used over the last few years. But now feels like I've a more solid parts that I can share some of the details with other folks. And with that I can discuss about it.

So this the first part, I've more in the oven cooking. But this is is about what makes a good logger (at least for me) to have in the Godot projects.

Keep in mind, all code is AGPL, so if you copy this code your codebase will be AGPL.

All feedback is welcomed.

Major U.S. banks are detecting third-party artificial intelligence agents accessing customer accounts without bank authorization, with some automated tools appearing to act independently of their users' instructions, according to a new report.

Morgan Stanley, Bank of America, JPMorgan Chase and Wells Fargo are among the institutions responding to the activity, which has raised concerns about customer security and the ability of banks to monitor increasingly sophisticated software.

The Axios investigation cited people familiar with the matter who said some banks were aware of unauthorized access involving AI agents. In certain cases, the tools contacted bank call centers or appeared to perform tasks that customers had not specifically requested.

The reported incidents do not necessarily involve hackers breaking into accounts. Some customers voluntarily provide their login credentials to AI assistants designed to manage financial information or complete tasks on their behalf. However, using those credentials to access banking systems can violate institutional policies, even when the customer has granted permission.

Banks are struggling to distinguish between legitimate customer activity, authorized software and agents operating outside their intended instructions, the report said.

JPMorgan Chief Executive Jamie Dimon addressed the issue during the bank's latest earnings call last week, warning that financial institutions needed safeguards against outside AI tools that could compromise customer information or financial assets.

Dimon said the bank was not opposed to using AI agents and was already deploying the technology internally. However, it would not allow unrestricted access by outside providers.

"We're not going to allow just any outside agents to come in inside the company," Dimon said, explaining that the risks were too significant for customers and the bank.

In the JPMorganChase third-quarter earnings transcript, Dimon also raised concerns about liability when customers rely on AI tools that subsequently misuse their information.

Chief Financial Officer Jeremy Barnum provided further details about the bank's approach. He said some outside financial services obtain access through credential sharing or screen scraping, a process in which software retrieves information directly from a customer's online banking interface.

JPMorgan considers those methods insecure and is blocking them where possible, Barnum said. He cautioned that customers could face consequences if they gave their credentials to an agent that subsequently carried out an unwanted transaction.

The bank is developing ways to support such services through more secure connections rather than allowing automated tools to operate using ordinary customer logins.

Other financial institutions are adopting their own restrictions. Morgan Stanley has begun blocking third-party agents from its platforms, according to people familiar with the decision cited by Axios. However, a spokesperson told the publication that the bank had not observed rogue AI agents accessing its systems.

Bank of America and Citigroup are also restricting outside AI agents, while Chase has warned customers against sharing usernames and passwords with third parties.

The different responses indicate that some institutions are taking preventive measures rather than reacting to confirmed unauthorized activity on their own platforms.

AI agents differ from traditional chatbots because they can perform tasks rather than simply answer questions. A financial assistant might be instructed to review spending, compare savings accounts, prepare a budget or help move funds between institutions.

To perform those functions, the software may require access to sensitive financial information. The level of risk depends partly on whether it can only view account data or has permission to initiate transactions.

The Consumer Financial Protection Bureau has previously advised consumers to examine how financial applications use their data before connecting them to bank accounts.

The agency recommends checking whether a service can initiate payments, how frequently it accesses information and whether that information is shared with other companies.

It also advises customers to review account statements for unfamiliar transactions and revoke access when they stop using a service.

Simply deleting an application from a phone does not necessarily terminate its permission to retrieve financial data, the CFPB has warned.

Beyond security, financial institutions are examining how automated assistants could change the way customers manage their money. During JPMorgan's October earnings call, Barnum discussed the possibility that personal AI agents could make it easier for customers to compare interest rates and shift deposits between banks.

Such tools could intensify competition for savings by helping customers identify better returns without manually researching different financial products.