This is the meat of the headline:

For example, the Anthropic-claimed 181 Firefox exploits ran with the browser sandbox turned off and the FreeBSD exploit transcript “shows substantial human guidance, not autonomy.”

Additionally, the “‘thousands of severe vulnerabilities’ extrapolates from 198 manually reviewed reports. The Linux kernel bug was found by Opus 4.6, the public model, not Mythos,” Devansh said.

Another researcher, Davi Ottenheimer, pointed out that the security section (Section 3, pages 47-53) of Anthropic’s 244-page documentation “contains no count of zero-days at all. With no CVE list, no CVSS distribution, no severity bucket, no disclosure timeline, no vendor-confirmed-novel table, no false-positive rate.”

Ottenheimer likens it to “the ending of the Wizard of Oz, a sorry disappointment about a model weaponizing two bugs that a different model found, in software the vendor had already patched, in a test environment with the browser sandbox and defense-in-depth mitigations stripped out.”

From the github if you were wondering:

Free, open-source, self-hosted wardrobe organizer. Catalog clothes, build outfits, PWA. Docker one-liner deploy.

On the positive side the PMOS device wiki for Fairphone 4 is accurate to what he discovered i.e. audio, battery and calls not yet fully working:

https://wiki.postmarketos.org/wiki/Fairphone_4_(fairphone-fp4)

I mention https://lemmy.ca/c/linuxphones in case you’ve not found it already. It’s not like an authoritive, central forum where everyone goes but maybe it’s a start.

Little bit more on it here:

https://forum.syncthing.net/t/does-anyone-know-why-syncthing-fork-is-no-longer-available-on-github/25661/251

Minimal wrapper for Syncthing on Android. Unlike Syncthing-Fork, it does not use Android’s Storage Access Framework to avoid performance degradation. The intention behind this project can be found here. This one needs more vetting from the community to determinate if the developer is trustworthy.

For example filesystems like btrfs can be very sensitive to errors in ram due to all the checksumming. On the positive side you’ll know about it fast!

Not used bacula myself, couldn’t say.

You might also want to keep an eye on vykar which is promising all the best bits from restic/borg:

https://github.com/borgbase/vykar

More than one it seems:

https://forum.typst.app/t/tinymist-vs-typst-vim-vs-typst-preview-nvim/1775/7

For restic:

1. Every backup is incremental after the first or rather restic makes no distinction because it chunks and dedups the data on the way in so if it’s already in the repo it doesn’t get stored twice.
2. Restic has customisable ‘forget’ cmd that can do whatever you want
3. Restic has filtering flags, you can use a gitignore style file also. Many people use a wrapper though like autorestic.
4. The ghost files are interesting. Restic has nothing special for this. A script that mirrored those files and wrote them all as 0 bytes which restic could then backup would be possible, this would work same for any backup tool.
5. You get that summary after every restic backup. You can also compare snapshots and mount them all to run your own analysis if you want.
6. Again if you mount a restic backup you have access to every file and snapshot taken in the repo. You could compare or diff them using usual tools.
7. There is a ‘exclude-if-present’ option where you can say if a file with the name of your choosing is present do not backup that dir etc

Rick Astley’s birthday is 6th Feb 1966, just saying

Hello

Somebody developed a Home Assistant integration for monitoring and managing sourdough starters

I like your thought so I wondered if there is a site to help people pick a distro and found this:

https://distrochooser.de/

For a windows gamer type of person it came up with Linux Mint

https://distrochooser.de/en/d59f9b3e7b9b/

…at the top of a long list of other choices. Not bad!

NY is next

New York Senate Bill S8102A goes further. It “requires manufacturers of internet-enabled devices to conduct age assurance” to check all users’ ages, and provide this info to “all websites, online services, online applications and mobile applications” – as well as app stores.

https://www.theregister.com/2026/03/06/os_age_verification/

At 5mbps it should take about 1 hour for 2GB. It sounds like your actual speed is 2-3x lower. Can you take that up with your ISP? Are you certain your machine has the best connection within your control, i.e. directly wired into the router? Network equipment is not faulty? Have you tested with iperf within your network? Just in case there’s another issue beside the slow external speed…

Another thing that springs to mind is to use a backup tool like restic that will not only compress but deduplicate your data into hundreds of small files that might make upload faster. Dedup can save significant space and you can try it out locally first. Just do restic init then restic backup PATH.

Restic can use rclone as a backend also and upload straight to google: https://restic.readthedocs.io/en/stable/030_preparing_a_new_repo.html#other-services

Finally there’s sometimes nothing faster than physically moving data. A person jogging with a 100gb drive has great bandwidth! Is there a location with better internet within reach? A library or school perhaps?

The danger being raised with the licensing is that you can’t license something if you’re not considered to be the author. There are growing examples of courts and lawmakers determining AI output to be public domain:

The US Supreme Court recently refused to reconsider Thaler v. Perlmutter, in which the plaintiff sought to overturn a lower court decision that he could not copyright an AI-generated image. This is an area of ongoing concern among the defenders of copyleft because many open source projects incorporate some level of AI assistance. It’s unclear how much AI involvement in coding would dilute the human contribution to the extent that a court would disallow a copyright claim.

https://www.theregister.com/2026/03/06/ai_kills_software_licensing/

This is an evolving, global situation and hard to know what to do right now. I think what you’ve got is fine though - you’ve made it clear your intention is to license with AGPL. It’s just that depending on the jurisdiction it might be public domain instead.

This is another reason to be clear about the use of AI in the README so your users can make an informed decision.

https://web.archive.org/web/20241002175430/https://www.ft.com/content/dca3f034-bfe8-4f21-bcdc-2b274053f0b5

Managed to find a capture on IA that has s_me content_

The source article:

https://www.ft.com/content/dca3f034-bfe8-4f21-bcdc-2b274053f0b5

Archived:

https://web.archive.org/web/20241002175430/https://www.ft.com/content/dca3f034-bfe8-4f21-bcdc-2b274053f0b5

Three distinct factors are at work here…

…a shared culture that values the privacy of one’s own home

…the planning regimes in all six anglophone countries are united in facilitating objections to individual applications

…Anglophone planning frameworks give huge weight to environmental conservation, yet the preference for low-density developments fuels car-dependent sprawl and eats up more of that cherished green and pleasant land.

The author’s conclusion:

Ultimately, whether the goal is tackling the housing crisis, protecting the environme or boosting productivity, the answer to so many woes in the English-speaking world is to unburden ourselves of our anti-apartment exceptionalism.

Here’s where they link to find out more:

https://keepandroidopen.org/

https://strudel.cc/

What can you do with Strudel?

• live code music: make music with code in real time
• algorithmic composition: compose music using tidal’s unique approach to pattern manipulation

Interesting, some effort required to keep it on track:

Claude can be very persistent when it really wants to do something. I’ve seen Claude run the contents of a make command when make itself is blocked, or write a Python script to edit a file it’s been told it can’t edit. But hooks at least offer better enforcement than prompting alone.