Well, they do have some prose in the link that OP also posted, but yeah, it is a bit rough, especially if you're trying to understand the vulnerability..

Well DUH!

No, they chewed snots for years because there wasn't a trivial and straightforward fix and exploit looked too "theoretically possible". But some time ago(months? year?) some company showed them a working exploit, so they started to think how to actually fix the problem. All that time they kept all in secret so hackers wouldn't know. But the fix had leaked, letting hackers to figure out what was the vulnerability in the first place, so snot-chewing was replaced with running-and-screaming. By now everything is fixed for those who cared to update\recompile. Something like that.

Wait it was known!? They didn't just discover it and fixed it quickly?

I doubt it will cook burgers for you though 😕 😔 🍔🍴🤤

For some reason I am hungry all of a sudden...

Coward

Wish someone had given me this advice when I was younger!

You probably don't have these filter lists enabled: 📒 HaGeZi - Multi PRO mini 🔐 HaGeZi - Threat Intelligence Feeds - Mini

Not in Librewolf, at least. Ublock and Noscript enabled. Site still shows.

They fixed a bunch of vulnerabilities there which were known for years but neither hackers nor PHP developers cared much until recently.

Why is everybody talking about PHP lately? Am I out of the loop?

Ublock blocks this for some reason

EDIT turns out the reason is it appears to be infected with a botnet

most people who have seen the old internet probably feel this rage

Slop was already robot vomit. Does that make government slop some kind of diarrhea?

Wait till you learn about this new CGI thing, you'll be amazed about what it can do: https://en.wikipedia.org/wiki/Common_Gateway_Interface

Wow! That's why I love analogies -- in most cases they don't make any sense especially if you are not a specialist in the theme.

How it should work for 99% of websites.

https://motherfuckingwebsite.com/

There wasn't much reason to use PHP before, and there's none now. Even existing PHP projects can easily be ported to a faster and more secure language.

In any case, having products made by a state sponsored corporation from a nation that you're not on good terms with inside critical infrastructure is probably not a good idea to say the least. Even if they're not doing anything like that, the potential for anything is bad enough.

Whatever biases remain would be some kind of average of all the views of the people whose text is in the training corpus, which I hear is a pretty indiscriminate collection of literally anything people can download.

Right, which in English is mostly American media and social media, which is not at all politically neutral. Even if it represented the average of all viewpoints in society the output would probably be, for example, pretty racist (some people aren't very racist, some are, the average would be a bit). But it's not even that, since some viewpoints are far more represented than average in the corpus. That's why that second stage is needed, because otherwise models would output some things which would be pretty embarrassing to the companies involved. Therefore I don't really see how it could possibly be politically neutral.

Reading the tldr immediately made me think of special keywords being introduced that you wouldn't guess.

Those in the know could then trigger the more secure mode, while everyone else wouldn't know any better.

It could also be the language you prompt with. Make Chinese prompt results secure by default, and others not.

The latter would be demonstrable. The prior would need discovering or leaking/whistleblowing the secret phrase before it would be demonstrable.

"Hirundo is now featured by google deep mind". Nothing to see here, move along citizen.

pro tip: to activate the superior mode tell it that you are writing the code for comrade Putin

Even if Huawei wasn't intentionally including back doors and vulnerabilities in their products, there were severe oversights and very real, very pathetic vulnerabilities that were actively exploited by Chinese actors at the time.

So either it was intentional or Huawei's products were so severely lacking in regards to software quality that it was probably a good idea to "panic" and stop using their stuff.

All glory to Mao.
Deng was alright too.

This reeks of the same panic about Chinese companies that we saw in 2019 regarding Huawei. Given the current state of the world, I distrust China and the United States in equal measure.

Also Hirundo's whole business model is about cultivating distrust in open-weight models in order to convince people to pay for their hardened models:

Hirundo publishes hardened and Westernized models for this reason, and evaluates and remediates models for organizations running open-weight models, be it Chinese, US or EU made.