Fred Brooks and the mythical man month observed that communication between people expands faster than linear, and that adding more people to a project makes it later.
In my experience with more than a couple dozen software projects, the ideal team size to successfully deliver a non-trivial effort is between five to nine people.
One subject matter expert visionary
One technical architect visionary
One or two technical masters
One or two UI/UX masters
One or two padawans capable of becoming a master
Staffing exceeding the above for an individual team is more a managerial genitalia contest than anything focused on organizational success.

via Cult of Mac https://ift.tt/sGUnbHS

w1zard starred nihe0909/zh-humanizer-literary

w1zard starred bojieli/ai-agent-book

w1zard starred lintsinghua/DeepAudit

w1zard starred kolega-ai/Real-Vuln-Benchmark

An open format — a format whose specifications are published, freely available and implementable by any software without restrictions — stores information in such a way that any compliant application can read, write and reproduce it faithfully.

A proprietary format, by contrast, may contain undocumented features, private extensions or behaviours that only the original software implements correctly. The document may be opened by other applications, but it cannot always be reproduced faithfully.

The practical consequence is familiar to anyone who has tried to open a Microsoft Office document in another application: the formatting becomes distorted, bullet points shift, tables lose their proportions, and headings appear different.

A presentation that looked polished in PowerPoint seems slapdash in a different viewer: the content is all there, whilst the document, strictly speaking, is not.

This is “lock-in”: it is not a padlock, it is not a technical ban, it is not a contractual restriction, but a silent and persistent friction that makes any work outside the Microsoft ecosystem seem slightly off, slightly unreliable, slightly unprofessional — and ensures that the easiest route is to return to the tools that produce documents with the expected appearance.

Lecture notes and exam-style questions.

Smart TVs won't cast arbitrary web video, and screen mirroring is laggy and drops resolution. Castor casts the real stream instead, at full quality, from your terminal.

L’aumento di foto di uccelli generate o ritoccate con AI sta creando falsi avvistamenti su piattaforme come iNaturalist e Macaulay Library, usate dai ricercatori per monitorare distribuzione e migrazioni delle specie. Gli esperti avvertono che anche modifiche non intenzionalmente fraudolente possono alterare dati cruciali per biodiversità, clima e conservazione.

speech to text

Found on YouTube: Turn WiFi completely ON/OFF with Siri on iPhone! 🤯 | Siri Se WiFi ON/OFF Kaise Kare https://www.youtube.com/watch?v=s6dY_JqH0Ok

Debian11升级Debian13与每日Zero Touch Patching – IAM-LC via Instapaper https://iam.lc/2026/07/debian-in-place-upgrade-n-ztp.ping

don't throw away expired narcan/generics. Expired is better than none.
there can be 90% potency for 30 years past expiration.

wrongful dui arrests / breathalyzers cannot distinguish / blood tests recommended

via Snappy Baby Flannel Fabric By The Yard https://www.pinterest.com/kimchristian_chattyreview/snappy-baby-flannel-fabric-by-the-yard

Markdown library for Keyboard Maestro.

can be fatal in 6 to 48 hours

the aalsmeer flower auction prompted me to this paper

全国の実在する駅名で続けられる無料のタイピング練習サイト。ローマ字入力の反復練習でプレイ記録は自動保存され、上達が実感できます。山手線周回・日本縦断・区間指定など、乗り鉄気分で全国の駅名を巡りながら練習できる多彩なモードを収録。

A typing game powered by real Taiwan metro routes and station names. - ridemountainpig/tw-metro-typing

用台灣真實捷運站名練習英文打字。

Since the start of 2023 its share price has more than tripled. *Analysts expect its revenue to grow by 15% a year, on average, until the end of the decade, more than three times the median of its peers.*

Zepbound, Lilly’s slimming jab, generated $4.9bn in sales in its first full year on the market in 2024. This year analysts expect sales to be quadruple that figure. *The company now accounts for 60% of GLP-1 sales in America.* Bloomberg Intelligence estimates that Lilly could capture 66% of a global obesity-drug market worth more than $120bn a year by 2030.

Novo Nordisk launched its treatment in America more than two years before Lilly. Yet by 2025 Zepbound had overtaken Novo’s drug. Mr Ricks credits both superior science and execution. Zepbound produced greater weight loss with fewer side-effects. Lilly also invested early in manufacturing, priced lower and quickly recognised that obesity would become a consumer market as much as a medical one.

More than 120 companies are developing drugs, with at least 190 candidates in clinical trials. Lilly’s answer is to “cover the chessboard” with treatments offering different combinations of efficacy, tolerability and convenience. Manufacturing is another advantage. Since 2020 Lilly has committed more than $50bn to expanding production, betting that the ability to make these medicines at scale will matter as much as discovering them.

GLP-1s are proving useful beyond their original purpose, reducing the risk of cardiovascular disease, sleep apnoea and chronic kidney disease. Early evidence suggests they may also help with addiction and psychiatric illness.

A business built on prevention has to stay much closer to patients than pharma traditionally has. It must persuade people to start treatment earlier, make medicines easy to obtain and keep them on therapy for years. Today more than half of new patients starting on its GLP-1s come through online channels including LillyDirect.

12,145 words. “Calling my kid a liar and a thief. Insinuating that he and his friend wouldn’t be smart enough for an internship in the future. One of your students pushing Peter into a desk, among plenty other things I’ve heard be said to Peter.”

“Your kid?” Mr. Harrington squeaked.

Or

Peter goes on a field trip to his own home. It goes just as well as you'd think.

// Peter seems to live with Tony, though May is still his guardian? Anyway, Peter starts getting sick before the field trip, but decides to tough it out and ends up vomiting in the robotics lab. FRIDAY sends Tony footage from the field trip and he gets Flash expelled and Mr Harrington fired.

“What is this?”
“A mini Yoda,” Thire says, grinning.
“Bu,” says the kid.
Fox’s right eyelid twitches.

———

Or, Grogu worms his way into the hearts of the Coruscant Guard and saves the Galaxy.

Sicherheitsforscher haben zwei Sicherheitslücken in WordPress gefunden, die sich zu einem Exploit verketten lassen und dann das Einschleusen von Schadcode ermöglichen. Administratoren des beliebten Blog-Systems sollten zügig updaten oder ein Mini-Plugin als Notfallflicken einspielen.

Eine kritische SQL-Injection-Lücke (CVE-2026-60137) hat einen CVSS-Wert von 9,1/10 und kann durch Angreifer aus der Ferne ausgenutzt werden. Die Lücke betrifft den author__not_in-Parameter von WP_Query, der nicht korrekt validiert wird.

Die zweite der beiden Sicherheitslücken haben die Forscher von Searchlight Cyber entdeckt – und dem Trend gehorchend direkt mit einem Spitznamen versehen: „WP2Shell“. Die Sicherheitslücke mit der CVE-Kennung CVE-2026-63030 ist für sich genommen „nur“ mit einem hohen Risiko bedacht (CVSS 7.5/10) und basiert auf einem Fehler im REST-API des freien CMS. Nur wenige Details sind bekannt, doch der API-Endpunkt /wp-json/batch/v1 scheint der Schuldige zu sein.

Die Finder haben unter wp2shell.com eine Prüfmöglichkeit für Blogbetreiber veröffentlicht. Sie erlaubt eine erste Einschätzung und enthält einen praktischen Flicken: Ein wenige Zeilen PHP-Code umfassendes WordPress-Plugin, das die schadhafte API-Route mit einer Authentifizierung versieht. Wer sein WordPress nicht sofort auf den neuesten Stand bringen kann – die empfohlene Vorgehensweise –, sollte zu diesem Behelf greifen.

Unheilvolle Verkettung – updaten!

Problematisch ist die Verkettung beider Lücken – sie führt zu einer Möglichkeit, Code ohne vorherige Anmeldung in verwundbare WordPress-Installationen einzuschleusen. Derlei Sicherheitslücken sind leicht automatisierbar und können etwa zu Großangriffen führen: Derzeit sind etwa 500 Millionen Installationen von WordPress im Internet zu finden.

Das WordPress-Team hat bereits reagiert und neue Versionen publiziert:

WordPress 7.0.2,

6.9.5,

6.8.6 sowie

7.1 beta 2

Versionen vor WordPress 6.8 sind nicht betroffen. Admins sollten die Aktualisierung schnellstmöglich einspielen – es ist zu erwarten, dass Angreifer die Sicherheitsflicken mit KI-Hilfe analysieren und noch am Wochenende erste Exploitversuche starten.

Das freie CMS WordPress erfreut sich vor allem durch sein reichhaltiges Angebot an Vorlagen und Plugins großer Beliebtheit. Letztere sind häufiges Einfallstor für Sicherheitslücken, ein Fehler im Kern der Software ist mittlerweile seltener geworden.

(cku)

"Site deaths are one of the big reasons why you should own your own identity and content on the web. This is a chronology of content hosting sites that have died"