🇵🇱 Okay my final Poland video because we're leaving soon! It was really fun and we had a great time I liked Warsaw most to be honest, a very modern city, a bit like East Asia in terms of modernity, with rapid delivery services and apps, everything just works great and fast I'm not saying it's perfect btw, there's moments where you still realize it's Eastern Europe (or as they'd like to call it Central Europe) but then the difference is they generally solve problems fast and pragmatically Many shops you go will actually have a long line at the checkout, annoying, but usually there's a second checkout but it's closed That's because Poland too has a big labor shortage, one of the lowest fertility rates in Europe, so they too kinda have to import people, but they choose to import them from Ukraine and Belarus (and some South Asians actually too) But wait, so that checkout line is closed yes? I'm so used to Portugal where there is zero incentive to then open another checkout counter but in Poland usually within a few minutes they notice it's busy and open another counter. I know, basic stuff but hard to come by these days. They're fast and pragmatic Ordering flowers for my gf was easy, the flower shop has an IG (but I don't) so I msg them over Whatsapp, they immediately respond, give me some options, I say what I want, address, payment link with Stripe (!) and done delivered at my hotel by a nice guy. All soooo smooth. Fast response, friendly people. Things just work here! Poland has done a great job keeping bad immigrants out while bring good immigrants in. The Ukrainians and Belarussians are neighbors and their cultures overlap strongly with Poland. So they fit in easily. Same cultures, same religions, same routines etc. for the most part A young Polish Uber driver I talked to said to him Krakow (his city) looks just like Lviv in Ukraine, so it's easy for Ukranians in Poland to integrate There's a lot of police presence in places, and military vehicles also (probably cause of the Ukraine war), the security at the Warsaw Airport is not done by some 5 layer outsourced company with staff that hates you, but by friendly people from the Polish Border Guard (Straż Graniczna) wearing military uniforms Warsaw has lots of skyscrapers now, and actually the tallest in Europe now at 310 meters is the Varso Tower, crazy! Poland is a booming economy and growing fast. When you're growing of course it's easy to make things go well. I'd say it's important for Poland to look ahead carefully and don't make the same mistakes that Western Europe did when everything was going well and we were very rich We became complacent, stagnant, added regulatory burdens, became overly obsessed with climate change and the environment, and imported the lowest quality tier of people from cultures that hate our guys and are diametrically opposed to Western culture That last part is especially interesting considering Poland's history, where 6 million (!) or 20% of the country was ruthlessly murdered in World War II I think that gives them the power to not have to be politically correct about immigration like Germany, because Poland after all was the victim, while Germany then was the purpetreyor. Which is why Germany does have to be so politically correct about it, due to extreme historical guilt You walk on the streets of Poland in the day and at night and you see the difference what sane policy does to daily life We're all dealing with the echoes of history So my message to my Polish friends: don't make the same mistakes Western Europe did and you will soon be the richest, safest, most modern country in Europe and hopefully then have the power to be the new leader of Europe And maybe you can then save Europe as a whole!! Niech żyje Polska! 🇵🇱

Another one What a day 🤯

Some people say this will be the end of PHP I don't think so because these AI-assisted vulnerability exploits will now increasingly happen to any language, any framework, any server software etc. I mean Node patched a high security vulnerability this week too A new era of infinite cat and mouse games between people assisted by super intelligent AI trying to hack every single app, site and server and on the other side companies trying to defend themselves from it also assisted by AI A new era of cybersecurity has begun

Here is the prompt to make your own GTA San Andreas mission on MacOS, just paste it in your clanker, you can change the mission of course to your own story: You are helping me build a custom story mission for GTA San Andreas (classic PC version) running on macOS through CrossOver. Work step by step, check each step works before moving on, and back up everything before changing files. GOAL A playable mission called "Vibe Coded". CJ walks into a marker in San Fierro, drives to a diner, sits at a desk with his co-founder and "vibe codes" a startup called Vibes AI in a minigame. Then he drives to an investor office and pitches. The investors invest $10,000,000 and the mission passes. All dialogue is voiced and subtitled. PART 1: PREPARE THE GAME 1. Back up the full game folder and the save folder ("Documents/GTA San Andreas User Files") before touching anything. 2. Downgrade the game to v1.0 US. The modding tool CLEO only works on v1.0, and the Steam and Rockstar Launcher versions are newer. Use Jetpack Downgrader (open source, on GitHub), which supports the Rockstar Launcher version. You don't need its Windows GUI. Its package contains the full v1.0 exe (game.jpp is a zip holding it) plus JojoDiff binary patches for 15 data files. Apply each patch with its bundled patcher.exe, run through CrossOver's wine command line. Syntax: patcher.exe original patch output. The files are anim.img, gta_int.img, gta3.img, TrakLkup.dat, nine audio streams, script.img and main.scm. Verify: gta3.img should be 940,064,768 bytes with CRC32 c8ccf06f, and main.scm should be 3,079,599 bytes. 3. Install CLEO 5 (the version bundled with Silent's ASI Loader) and SilentPatch. SilentPatch is required, because without it v1.0 refuses to start on a Mac with "Cannot find 800x600x32 video mode". 4. Make the save compatible. v1.0 uses v1 scripts, so a save from the newer versions won't load. Use GTASnP.com to download a save from the right point in the story (we used one right after "Are You Going To San Fierro?"), converted to v1. Put it in a free slot without overwriting existing saves. 5. Launch gta_sa.exe directly, not through the Rockstar Launcher, which may undo the downgrade. Create a CrossOver shortcut for it inside the bottle. Don't put shortcut files on the Mac desktop. PART 2: MAC/CROSSOVER GOTCHAS (IMPORTANT) - The game crashes on launch if a settings file (gta_sa.set) saved by a previous session exists. Delete it before every launch. We made the shortcut run a small .bat that deletes it and then starts the game. The downside is that in-game settings reset each launch. - The game stops loading whenever its window isn't the active window. After launching, keep the window focused (Cmd+Tab to it) even if it looks black or invisible. - Force-quitting leaves orphaned Windows processes in the bottle, which silently block future launches. If the game won't start, kill every process in the bottle (or use CrossOver's Force Quit / Restart Bottle), then launch again. - If the camera spins with mouse and keyboard, set the Wine registry value HKCU\Software\Wine\DirectInput MouseWarpOverride = force. Don't enable Retina mode, because it broke launching. - Windowed mode through dxwrapper produced an invisible window on the Mac, so we removed it. Film the full-screen game with Cmd+Shift+5 instead. PART 3: WRITE THE MISSION 1. Write the mission in Sanny Builder 4 syntax, in GTA SA v1.0 SBL mode, as a CLEO script (.cs). Compile it with Sanny Builder's command-line option (sanny.exe --no-splash --mode sa_sbl --compile input.txt output.cs), run through wine. Compile in a different CrossOver bottle from the game's, so compiling never disturbs a running game. Put the .cs file in the game's cleo folder. It loads whenever a save is loaded. 2. Use real data from the game files, never guesses: - Get interior coordinates and interior IDs from the "enex" sections of the game's .ipl map files. We used the SF diner (DINER2, interior 5) and the Planning Department office (PAPER, interior 3). - Get object model IDs from the .ide files: office chair kb_swivelchair1 (1714), office desk officedesk1 (2008, has a computer on it, top at 0.8 m), computer PC_1 (2190). There is no laptop model in the game. - Measure object sizes by reading vertex bounds from the .dff models inside gta3.img and gta_int.img. - Verify animation names by parsing the .ifp files. We used OFF_Sit_Type_Loop from INT_OFFICE, the prtial_gngtlk talking animations and the business handshake from GANGS, and shout_01 from ON_LOOKERS. 3. Placement rules that took several tries to get right: - The enex coordinates are not floor height. Find the real floor with get_ground_z_for_3d_coord once collision has loaded (after load_scene and about a 1 second wait). - set_char_coordinates already adds the ped's standing height (about 1 m). Pass the floor height itself, not floor + 1, or characters float in mid-air. - A frozen character in mid-air plays a falling pose instead of its animation. Freeze characters only once they're on the floor. - The sitting animation lowers the body by 0.403 m (read from the .ifp file), which lands the hips on a 0.49 m chair seat. 4. Mission flow: - Trigger: a $ blip and marker outside the Doherty garage. Start only when not already on a mission, then set $ONMISSION = 1. - Diner: fade out, teleport inside, place the desk, chairs, computer and co-founder, play the typing animation, set a fixed camera, fade in. - Minigame: draw a fake laptop screen with draw_rect and display_text_formatted. Tap SPACE to prompt the AI and raise a progress bar. A scrolling agent log appears with jokes (spawning subagents, context compaction, auto-approved rm -rf, deleting the tests). Random red bugs appear, and you have 4 seconds to press Y to accept the AI fix. Each bug has its own funny fix reply. Failing costs 12% progress. - At 100%: "SHIPPED!", teleport outside, and a blip marks the investor office downtown. - Office pitch: teleport in, spawn three investors, then three questions with Y or N answers. After each choice, show what CJ said ("CJ: ...") before the investor reacts. Then the $10M offer. Answering N triggers a counter-offer gag where the investors panic and cave. - End: handshake, fade out, teleport outside, add $10,000,000, play the mission-passed tune, show MISSION PASSED. - Fail: if the player dies or gets busted, clean up all spawned objects and characters and show MISSION FAILED. 5. Sanny Builder pitfalls: some variable names clash with built-in names (for example "blip" and "fx"), so rename them. There is a limit on local variables, so reuse them. Check the compiler log after every build. PART 4: VOICE ACTING 1. Write a list of every spoken line, one file per line, with clear filenames (for example vc_02_q1, cj_01_q1_yes, cofounder_01). Spell out numbers for text-to-speech. 2. Generate the voices with text-to-speech, using original or designed voices 3. Process the clips with ffmpeg: trim leading and trailing silence, cut any extra takes, normalize loudness so all characters play at the same volume, and convert to mono mp3. 4. Transcribe the final clips (we used Whisper locally) and adjust the subtitles to match exactly what was said. 5. Play the clips with CLEO 5's audio plugin (SA.Audio.cleo): load_audio_stream with "cleo:\vibes\filename.mp3", play it, show the subtitle for exactly the clip's length, then remove the stream. If a clip fails to load, show the subtitle without sound instead of crashing. 6. Optional: real character lines can be pulled from the game's own audio. The file audio/SFX/SCRIPT holds 218 banks of raw 16-bit PCM speech (find them via PakFiles.dat and BankLkup.dat), about 6,800 clips. Extract them to WAV and transcribe them to search for specific lines. PART 5: TESTING After every change, reload the save and play through the changed part. Ask for screenshots when something looks wrong, especially positions and sitting. Change one thing at a time.

✅ Everything is back up Ubuntu published the backported PHP fix very fast, great work @ubuntu and @ThePHPF team!!!

Me after rewriting to Rust

ubuntu.com/security/notices/… Ubuntu now has a fix for PHP Ask your clanker to install it!

It's only an imperfect STOP GAP solution Safest is to just not have your PHP site have any access until it's patched

I notified a friend working at a big tech corporate about the PHP vulnerability as their entire infrastructure runs on PHP He answered "Thanks, I'll try patch it in a few days as I'm Out of Office (OOO) now" And this is a modern tech company, imagine the traditional companies running PHP People won't update fast enough and the vulnerability will be out in the wild once the patch hits as anyone can reverse engineer it based on the patch Considering this, there's gonna be so many sites hacked and so much user data exposed I think 🤯

Interesting how things change: 🇮🇩 Canggu, Bali at the bottom now and 🇿🇦 Cape Town is at the top!

Euro Karens

Here is the prompt to build your own music MP3 player and internet radio for Amazon Alexa: [ 🎶 Jukebox for Alexa ] by @levelsio Build me a private Alexa skill that plays my own music from a cloud bucket, plus internet radio I want my Amazon Echo to play my own MP3s instead of being forced to use Amazon Music or Spotify. Build a private Alexa skill for this. Do as much as possible yourself: use CLIs and APIs, deploy and test it yourself, and only ask me for things only a person can do (logging in, clicking Allow, testing on the Echo). Setup - My music is in an S3-compatible bucket (AWS S3 or Cloudflare R2) under a music/ prefix. Each folder under it is a genre/playlist (music/Coffee Jazz/) or an artist/album (music/Artist/Album/). - I'll create an access key for the bucket and give it to you. Keep it in a config file and never print it. The skill only needs read access; the upload tools need write access. - My Echo and my Amazon developer account use the same Amazon login. Build 1. An Alexa-hosted (Node.js) custom skill with invocation name "jukebox" (use two words if Amazon rejects one) and the AudioPlayer interface enabled. 2. Voice model: a PlayIntent with an AMAZON.SearchQuery slot ("play {query}", "put on {query}", "tune in to {query}", "shuffle {query}"), a ShuffleAllIntent, a WhatsPlayingIntent, a ListStationsIntent, and all the built-in AudioPlayer intents (pause, resume, next, previous, loop on/off, shuffle on/off, start over). 3. Library: list everything under music/ with ListObjectsV2 (follow the continuation token), build folders from the key prefixes, keep only .mp3/.m4a/.aac files, and cache the result for 5 minutes. Match spoken phrases to folder and file names loosely: ignore track numbers and spacing ("ama piano" = amapiano), turn number words into digits ("thirteen beaches" = 13 Beaches), and handle genre aliases (dnb, drum n bass, hiphop, lo fi). 4. Playback: give Alexa a presigned HTTPS GET URL for each file. Make it valid for at least 12 hours so long mixes and pause/resume don't expire mid-play. Keep the bucket private. Store the play queue in the AudioPlayer token (folder, shuffle seed, position) so there's no database, and enqueue the next track on PlaybackNearlyFinished. Folders shuffle and loop. A folder whose files all start with track numbers is an album and plays in order. A single song carries on with the rest of its folder. 5. Radio: a stations list of HTTPS MP3/AAC/HLS streams, with good underground electronic stations (Rinse FM, NTS, Bassdrive, Intergalactic FM, Kiosk Radio, Refuge Worldwide, and so on) plus news (BBC World Service, NPR). Test every URL with curl first and drop the plain-HTTP ones, because Alexa refuses them. Support "play rinse fm", "drum and bass radio", "techno radio" and "the news", and make next/previous switch stations. Live streams drop and Alexa treats a drop as the end, so re-enqueue the same stream with a new token on PlaybackNearlyFinished, and retry once on PlaybackFailed. 6. Log one line per request (type, intent, token, offset, error) so playback problems show up in CloudWatch. Deploy without the web console - Install the ASK CLI (npm i -g ask-cli). If ask configure won't work in your shell, run ask util generate-lwa-tokens --no-browser, have me paste the one-time code, and write ~/.ask/cli_config yourself. Get the vendor ID from GET api.amazonalexa.com/v1/vendo…. - The hosted skill's code is a git repo (find it with ask smapi get-alexa-hosted-skill-metadata). Push to master to deploy, with ask util git-credentials-helper as the git credential helper. The helper needs ask-resources.json and .ask/ask-states.json next to the repo. If pushes start failing with 403, clear the cached macOS keychain credential. - The hosted runtime may run an old Node version, so pin an S3 SDK version that supports it, or sign URLs with a small SigV4 library. - Upload the voice model with ask smapi set-interaction-model, check the skill manifest lists AUDIO_PLAYER, and test with ask smapi simulate-skill. The web console's simulator can't play audio, so a "problem with the requested skill's response" error there is expected. When it works, tell me how to add Alexa app routines (When: voice "coffee jazz" → Action: Customized "ask jukebox to play coffee jazz") so I can just say "Alexa, coffee jazz". And how to play internet radio stations I like.