Have a look at the Steam Hardware [and software] Survey [0] results. Linux has been trending upwards whist Windows has been trending down for a wee while. And the population this looks at is primarily interested in gaming, which means that this is despite a compatibility layer being needed for a large amount of the software used. I imagine in other communities (software, old people) it's trending much faster.
E.g. I recently installed Linux Mint for my grandma so she could use email and an up-to-date web browser on her old laptop that can't run (secure) Windows anymore. The UI differences are marginal for her, and she can do everything she needs to much better than she could before (which was not at all).
So the protection is that debit cards take longer to pay out to merchants? An increased window to dispute charges doesn't strike me as innovative but more like an arbitrary variable from the CC company.
For example in New Zealand, EFTPOS cards are very popular (similar to debit cards, but issued directly by our banks so no user fees ever - the merchant pays for the machine and that's it). People usually have all 3 - an EFTPOS card for most in-person purchase (although online EFTPOS is gaining adoption), a debit card for online or paywave-only places, and a credit card for large purchases/ emergencies. Credit cards here are highly unpopular among the under-25 age bracket; most young people just have EFTPOS and debit.
I think this might be a result of our stricter banking regulations compared to economies like the U.S.; it's difficult for banks to offer tempting enough rewards schemes to entice people to credit cards. Additionally, there is much less of a borrowing culture - most people will only ever properly borrow money once - buying a house. Paying cash for cars is the norm, and purchasing anything else on finance is seen as stupid compared to just saving the money (and earning the interest yourself).
TimeLine maintainer here. Their demo for live-streamed data [0] in a line plot is surprisingly bad given how slick the rest of it seems. For comparison, this [1] is a comparatively smooth demo of the same goal, but running entirely on the main thread and using the classic "2d" canvas rendering mode.
Now, with our ALL NEW Agent Desktop High Tech System™, you too can experience prompt injection! Plus, at no extra cost, we'll include the fabled RCE feature - brought to you by prompt injection and desktop access. Available NOW in all good frontier models and agentic frameworks!
This still wouldn't be perfect of course - AIML101 tells me that if you get an ML model to perfectly respect a single signal you overfit and lose your generalisation. But it would still be a hell of a lot better than the current YOLO attitude the big labs have (where "you" is replaced with "your users")
So a trivial supply-chain attack in an npm package (which of course would never happen...) -> prompt injection -> RCE since anyone can trivially publish to at least some of those registries (+ even if you manage to disable all build scripts, npx-type commands, etc, prompt injection can still publish your codebase as a package)
The example in this article is prompt injection in a "skill" file. It doesn't seem unreasonable that someone looking to "embrace AI" would look up ways to make it perform better at a certain task, and assume that since it's a plain text file it must be safe to upload to a chatbot
Even if you don't fully retrain, you could get what's likely a pretty good safety improvement. Honestly, I'm a bit surprised the main AI labs aren't doing this
You could just include an extra single bit with each token that represents trusted or untrusted. Add an extra RL pass to enforce it.
Also cool that when you open it in a new tab, the svg [0] is interactive! You can zoom in by clicking on sections, and there's a button to reset the zoom level.
This is missing the best part of windows 8/metro - the glow around the cursor. I found it really fun playing with how the glow highlighted smooth sections of tile borders as well as illuminating the whole tile. IIRC it also affected window borders, etc. Very fun to play with.
Seems that OpenCode is YC-backed as well [0] [1]. I would've thought YC would encourage better cyber security practice than OpenCode have demonstrated here.
I guess it depends highly on what you value. I dislike site that eagerly load all their images below the fold, since on my mobile phone I have a metered data plan. Unlimited data is still uncommon or very expensive in many countries. For example I pay $13/mo for 650Mb of data, which is one of the best value plans (under $40/mo) from any provider.
Their structure in the markup can be a bit confusing imo - something more like a <figcaption> inside a <figure> or a <legend> inside a <fieldset> would be much nicer imo.
The spec even mentions [0] that you're allowed to use <div>s to group dt/dd pairs for styling purposes.
[0]: https://github.com/AlexanderGrooff/mermaid-ascii