Submit Your Own Short & Sweet Post Grab the code: Short & Sweet posts from BHI The post Short & Sweet – Wash And Go appeared first on Black Hair Information.

This is Proposition 15.8 and its proof from p.106 of Daniel Bump's Lie Groups, 2nd Edition. $\textbf{Proposition 15.8.}$ Let $G$ be a compact Lie group and $T$ a maximal torus. Then $N(T)$ is a closed subgroup of $G$. The connected component $N(T)^◦$ of the identity in $N(T)$ is $T$ itself. The quotient $N(T)/T$ is a finite group. $\textit{Proof.}$ We have a homomorphism $N(T)\to\operatorname{Aut}(T)$ in which the action is by conjugation. By Proposition 15.7, $\operatorname{Aut(T)}\cong\mathrm{GL}(r,\Bbb Z)$ is discrete, so any connected group of automorphisms must act trivially. Thus, if $n\in N(T)^{\circ}, n$ commutes with $T$ . If $N(T)^{\circ}\neq T$, then it contains a one-parameter subgroup $\Bbb R\ni t\to n(t)$, and the closure of the group generated by $T$ and $n(t)$ is a closed commutative subgroup strictly larger than $T$. By Theorem 15.2, it is a torus, contradicting the maximality of $T$. It follows that $T=N(T)^{\circ}$. The quotient group $N(T)/T$ is both discrete and compact and hence finite. I do not know how to justify the claim that if $N(T)^{\circ}\neq T$, then it contains a one-parameter subgroup $\Bbb R\ni t\to n(t)$ such that the closure of the group generated by $T$ and $n(t)$ is a closed commutative subgroup strictly larger than $T$ without invoking Cartan's closed-subgroup theorem. Here is my attempt: We first prove the claim that if $G$ is a connected Lie group that contains the Lie subgroup $H$ such that their dimensions are equal, then $H=G$. Since their dimensions are equal, the differential of the inclusion is invertible everywhere. By the Inverse Function Theorem, the inclusion is a local diffeomorphism. Thus $H$ is an open subgroup of $G$. It is well known that every open subgroup is clopen. Hence $H$ is a clopen subgroup containing the identity. This implies $H$ contains the connected component of the identity which is precisely $G$ as $G$ is connected. Then we prove that $N(T)$ is a closed subgroup. Pick a generator $t$ of $T$. The statement follows if we can prove that $N(T)$ is the inverse image of $T$ under the continuous map $g\to gtg^{−1}$. Clearly, if $g\in N(T)$, then $g$ is in the inverse image. Conversely, assume $g$ is in the inverse image. By closure of group operations and closure, the torus $T$ contains $gTg^{-1}$. Since $T$ is connected and conjugation is a diffeomorphism which preserves dimension, by our claim in the previous paragraph, we have $gTg^{-1}=T$. Hence $g\in N(T)$. By Cartan's closed-subgroup theorem, the closed subgroup $N(T)$ is a Lie subgroup of $G$. Now we argue that $N(T)$ is a Lie group. It is well-known that the connected component of a topological group is a subgroup of the group. In particular, $N(T)^{\circ}$ is a subgroup of $N(T)$. Since $N(T)$ is a Lie group, it is locally path-connected. Thus the connected component $N(T)^{\circ}$ is open in $N(T)$ and thereby a Lie subgroup of $N(T)$. Finally, we construct a one-parameter subgroup $\Bbb R\ni t\to n(t)$ contained in $N(T)^{\circ}$ such that the closure of the group generated by $T$ and $n(t)$ is a closed commutative subgroup strictly larger than $T$. Since $N(T)^{\circ}$ is connected, the strict inclusion $T\subsetneq N(T)^{\circ}$ induces the strict inclusion of lie algebras $\mathfrak{t}\subsetneq\mathfrak{n}$. Otherwise, our claim in the first paragraph would imply $T=N(T)^{\circ}$. Pick some $X\in\mathfrak{n}\setminus\mathfrak{t}$. Define $n(t)=\exp(tX)$ for $t\in\Bbb R$. Since $X\notin\mathfrak{t}$, we have $n(t)\notin T$. It is straightforward to verify that the group generated by $T$ and $n(t)$ is abelian. By continuity of group operations, it follows that the closure of the group is a closed abelian subgroup. Moreover, it is strictly larger than $T$ since it contains $n(t)$. I was wondering if anyone knows how to justify the claim without Cartan's closed-subgroup theorem. The reason as to why I believe it might be possible is because the author has mentioned this theorem earlier in $\textit{remark 7.2.}$ on p.45 and only proves of an abelian subgroup in Theorem 15.2 on p.105-106, just before proving Proposition 15.8, which seems to suggest we do not need the closed-subgroup theorem for general groups. It should be noted that $N(T)^{\circ}$ need not be abelian (consider, for example, $G=\mathrm{SU}(2)$), so we could not invoke the abelian case of the closed-subgroup theorem to claim that $N(T)$ is a Lie subgroup.

Two CVEs against the same identity provider, filed six months apart. CVE-2023-48228 and CVE-2024-23647, both against authentik, describe the same failure: the server accepted PKCE in one request and its absence in the next. RFC 7636 had been published nine years before the first advisory. PKCE binds an authorization code to a secret the client generates before the flow starts. Authorization servers that accept flows without code_challenge downgrade clients to the pre-PKCE threat model. The same applies when they accept token exchanges without code_verifier after a challenge was registered. RFC 9700 mandates enforcement at both endpoints. Most servers ship with enforcement disabled. PKCE Binds the Code to a Verifier the Server Never Sees in the Authorization Request The security model of PKCE depends on one fact. The code_verifier is never transmitted in the authorization request, so intercepting that request does not yield the secret needed to exchange the code. RFC 7636 §4.1 requires the client to generate a code_verifier of 43 to 128 characters of high-entropy cryptographic random data. RFC 7636 §4.2 defines code_challenge = BASE64URL(SHA256(code_verifier)), with S256 required for all conforming servers. The client sends code_challenge in the authorization request; the server stores the challenge alongside the issued code. In the token exchange, the client sends code_verifier. The server computes SHA256(verifier) and compares it to the stored challenge; a mismatch returns invalid_grant. The server sees the challenge in step 1 and the verifier in step 2, never both at the same time. The Downgrade Path: Strip code_challenge Before It Reaches the Server A server that treats code_challenge as optional validates the verifier only when the parameter is present. An attacker who removes the parameter before the request arrives gets an unbound authorization code, exchangeable without a verifier. The attack has five steps. The victim initiates an OAuth flow from a public client: a SPA or mobile app. The attacker intercepts the outbound authorization request via HTTP MITM, browser extension, or malicious redirect handler. The attacker removes code_challenge and code_challenge_method from the request. The server, without enforcement, accepts a standard non-PKCE request and issues a code with no verifier binding. The attacker captures the code via redirect and exchanges it at the token endpoint without any code_verifier. CVE-2023-48228 (authentik < 2023.10.4 and < 2023.8.5, CVSS 7.5): the token endpoint validated code_verifier only when provided. Omitting it in the token exchange succeeded even when the flow had started with code_challenge. Network vector, no privileges required. CVE-2024-23647 (authentik <= 2023.10.6 and <= 2023.8.6, CVSS 6.5): the authorization endpoint did not reject requests missing code_challenge. An attacker could deliver a phishing link with the flow already stripped of PKCE; the server issued an unbound code without error. Same codebase, six months after the first CVE. CVE-2026-48717 (OpenAM through 16.0.6, CVSS 6.5): enforcement of code_verifier was gated on a realm-wide setting called codeVerifierEnforced, disabled by default. Every new installation accepted token exchanges without a verifier. Public Clients Cannot Fall Back: PKCE Is Their Only Code Binding Confidential clients authenticate at the token endpoint with a client secret. SPAs and native apps have no secret to present at that endpoint. PKCE is the only mechanism that binds the authorization code to the client that started the flow. RFC 7636 §1 describes the original threat model: the OS allows multiple apps to register the same custom URI scheme. A malicious app on the same device intercepts the redirect before the legitimate app handles it, capturing the code. Without PKCE, the code is redeemable by any recipient. In SPAs, the authorization code arrives in the redirect URL. Referer headers propagate that URL to analytics scripts, CDN, and ad networks loaded immediately after the redirect. With a server that does not enforce PKCE, stripping the PKCE parameters removes the protection before the request reaches the AS. Five CVEs, Four Codebases, Same Root Cause RFC 9700 §2.1.1 sets three MUST-level requirements. Servers MUST support PKCE and MUST enforce the correct code_verifier at the token endpoint when a code_challenge was in the authorization request. They MUST also mitigate PKCE downgrade attacks. RFC 9700 §4.8.2 adds the reverse: the server MUST reject token requests containing code_verifier when no code_challenge was in the authorization request. Five CVEs from 2023 to 2026, across four independent codebases, share the same pattern: enforcement conditional on parameter presence, not mandatory. CVE-2023-48228 (authentik, CVSS 7.5): token endpoint validated the verifier only when provided. CVE-2024-23647 (authentik, CVSS 6.5): authorization endpoint did not reject missing code_challenge; same codebase, six months later. CVE-2026-48717 (OpenAM, CVSS 6.5): enforcement gated on a realm-wide setting that ships disabled. CVE-2026-41213 (@node-oauth/oauth2-server): the server accepted code_verifier shorter than 43 characters, the RFC 7636 §4.1 minimum; short verifiers are brute-forceable. CVE-2026-67336 (better-auth): the plain method was accepted by default. With plain, code_verifier and code_challenge are identical in cleartext; any interceptor of the authorization request captures the verifier without computation. None of these are cryptographic errors: all are enforcement logic failures. Detection Requires Testing Both Enforcement Points Verifying that a server meets RFC 9700 requires three independent tests. The presence of code_challenge_methods_supported: S256 in AS discovery metadata confirms the server can validate PKCE, not that flows without code_challenge are rejected. First test: send an authorization request for a public client without code_challenge. An RFC 9700-compliant server must reject it; acceptance confirms downgrade is possible. Second test: complete a normal PKCE authorization, then exchange the code without code_verifier. The server must return invalid_grant. This is the exact failure mode of CVE-2023-48228: a successful token response indicates the token endpoint does not enforce. Third test: exchange a non-PKCE code with code_verifier included in the request. RFC 9700 §4.8.2 requires rejection. Failure here enables the verifier injection variant, where the attacker inserts a verifier into a non-PKCE exchange to confuse the server's validation logic. Most automated scanners test only one of these three points; all three must pass. The Fix Is Server-Side Enforcement at the Authorization Request Telling client developers to use PKCE does not close the downgrade gap if the server continues accepting authorization requests without code_challenge. Enforcement must happen at the server, where the request arrives. In Keycloak, "PKCE Code Challenge Method" per client must be set to S256, not "none". With S256, the server rejects authorization requests without code_challenge for that client. In Spring Authorization Server, RegisteredClient.Builder.requireProofKey(true) produces the same effect. For authentik, upgrading to 2023.10.7 or later (or 2023.8.7 in the 2023.8.x branch) fixes both CVEs described above. The MAGO Intel tool (intel.mago.team) tests all three enforcement points during OAuth security assessments and reports which RFC 9700 §2.1.1 or §4.8.2 requirement the server fails. RFC 9700 is eight years after RFC 7636. Servers that shipped PKCE support without PKCE enforcement have had every version since then to add the second half. The code_challenge_methods_supported field in AS metadata confirms the server can validate PKCE, not that it does. The test that matters is sending a token exchange without code_verifier after a PKCE-initiated flow and confirming the server returns invalid_grant. If it returns a token instead, the client's PKCE protection does nothing.

Photo by Kristin Hardwick from StockSnap I don’t want to be productive. Okay, that’s a lie, I’d actually love to be productive. If I could, I’d wake up early every morning, have a balanced breakfast, always show up early, have a spotless room, and somehow manage to get 8 hours of sleep every night. But that’s just not who I am, and that is not bad thing. In our culture, I’ve noticed the obsession with rushing through life, just for the sake of becoming the best at something. College students in particular are under an immense amount of pressure to pass all their classes, work multiple jobs, get that internship that will propel them into a career field that, at the ripe age of nineteen, they may not even be sure they want to pursue yet. As a nineteen year old college student myself, I have absolutely no interest in rushing through these next few years. Instead, I want my college experience to be full of stories, embarrassing memories, and spontaneous adventures. I don’t want to be remembered for being “the best” at something. I want to be recognized for having a million weird interests, or making people laugh, or wearing cool outfits. When did Everything become self-Improvement? Alex Frank / Spoon As a society, we tend to preoccupy ourselves with optimizing every moment of our lives, including our hobbies. We don’t just cook, we cook with the intention of learning a new skill. We don’t just run, we run because it’s improving our health. And this mentality becomes more important than the hobby itself. When you find yourself preoccupied with mastering a specific recipe, or successfully completing a mile under a certain amount of minutes, it can suck all the joy out of the activity. Cooking could be chopping things up, throwing them in a pot, and potentially discovering your next favorite meal. Running could be a chance to clear your mind and take in the beauty and imperfections of the world around you. What you’re doing instead, is simply justifying the ways you spend your time, rather than just saying “because I enjoy it”. Of course, this mindset likely stems from the content we see on social media. When you open up instagram, you are bombarded by the success and accomplishments of people your own age, maybe even younger, and it makes you feel like you’re falling behind. Then, just like that, productivity is now a fad, and we see TikToks that begin with “spend a productive day with me” and “5 AM morning routine” and “Do a room reset with me.” The irony here is that the viewers are actually procrastinating by watching someone else perform productivity, which to me is kind of amusing. Like seriously? You’re laying in bed watching a 22 year old organize her fridge and telling yourself the you’re “getting motivated”?? Another great example is people monetizing their hobbies. Think about all those young adults starting jewelry businesses, or photography companies, or doing people’s nails, because if you’re good at something, why not make money off it, right? This can absolutely work for a while. I know many people who have started fairly successful small and local businesses doing something they love, and I think that’s incredible, but how long will it stay that way? This summer, I offered my coworkers some of my homemade cake pops, and I was quite surprised by how many people asked me “how much are they?” I immediately reassured them that they were free, and that it was my joy to share with everybody. After trying them, I was told by multiple coworkers that I should start a baking business, and I definitely considered the idea, but one of my biggest fears in venturing forward with that idea is that baking will become something I no longer enjoy, and it will just be about the money. Burnout is productivity’s biggest enemy, and it can also rob you of joy as well. Therefore, I will continue baking for family, friends, and for myself, whenever the desire strikes me, completely free of charge. And again, there’s nothing wrong with turning a passion into a career, but not every hobby needs to become a side hustle. What boggles my mind the most is that even rest has become productive. I’m always hearing about these glamorized versions of rest like “self care” and “digital detox” that can make it feel like even something as simple as relaxing is something that needs to be done correctly. I’m going to hold your hand when I say this, but it’s okay to be lazy every now and then. There’s no need to justify your own exhaustion by turning it into “30 minutes of intentional rest”, just take a nap, or flop down on the floor, take your time, daydream a little, you will be okay. I think the root cause of productivity culture has nothing to do with loving accomplishment, but rather stems from this fear of wasting time that a lot of us have. We all know that life is not infinite, and someday, we will all inevitably run out of time, and that scares us. So when you’re watching tv, or hanging out with friends, or doomscrolling, you suddenly get hit with this wave of guilt that you’re wasting your life away. But what if I told you that time doesn’t have to produce something to have value? Some of the best parts of life are inherently inefficient. Talking to a friend for 3 hours on FaceTime, getting coffee and wandering around afterward, listening to that one album on repeat, sitting outside, going down a fascinating internet rabbit hole, or trying something new and finding out you’re terrible at it. None of these things will make you smarter, richer, or more employable, but they certainly will make your life more enjoyable. Maybe that’s why I want to be interesting rather than just productive. The most interesting people I’ve met aren’t usually the ones who optimize every moment of their lives, they’re the people who are funny, kind, and curious enough to end up in situations that end up becoming the best stories in the future. Being interesting requires uselessness Anna Schultz / Her Campus First, a little disclaimer: this is not me telling you to stop pursing meaningful goals. When I use the term useless, I means anything that does not have an obvious practical benefit. Things like rewatching a favorite movie over and over again, having a niche collection, or learning obscure facts about a random topic. None of these things are necessarily useful, but they absolutely give you personality. When I think about my friends and what makes each of them interesting, their major, gpa, or number of internships are never the first things I think about. Instead, I think about how one of my friends owns multiple unusual pets, or another friend who posts the most hilarious videos on her close friends story that serve no purpose other than making people laugh, or someone I knew in high school who could name any note after hearing it once on the piano. These people are memorable because of their specificity, not their accomplishments. Your little quirks are what make you interesting. You may find yourself wondering, How do I obtain little quirks like this? And a lot of it just comes from curiosity. If everything you do must be practical or useful, you’re naturally going to eliminate a lot of opportunities before you even try them. Instead, shift your mindset into trying new things because you’re curious about them. Try pottery! Attempt to learn your favorite song on the guitar! Go to that party! Even if these things all end up being something you never want to do again, at least you had the experience. Not everything you try needs to become a skill or routine. College is a great time to embrace uselessness. We’re young adults, still figuring out how to exist independently, with a lot of external pressure to have our whole lives figured out. Because of this, a lot of students miss the opportunities around campus to truly explore different parts of themselves. I highly encourage you to try and build a portion of your college experience around yourself, not your career. Take a random elective just because you think it sounds cool, attend campus events, join a club that has nothing to do with your major. You might not gain anything for your resume, but you absolutely will gain a new friend, a new hobby, or a new memory! College is more than career preparation Photo by Zen Chung from Pexels As someone who has been through freshman year of college, and has worked with hundreds of incoming freshman this past summer as an orientation leader, I can confidently tell you, the pressure starts immediately. Freshmen students, some of whom haven’t even experienced their high school graduation yet, come to campus for Orientation, and are immediately bombarded with information about tuition, class scheduling, networking, career planning, and it can be really overwhelming. Even now, I get asked what my major is every time I meet someone new on campus, and I tell them, and the question that always follows is “what do you plan on doing with that?” and to be completely honest, I still have yet to make up my mind. Oftentimes, college can even make extracurriculars feel like resume entries. In high school, you joined clubs for fun, in college, you going clubs for leadership experience. There’s nothing wrong with this mindset, but it definitely makes college feel like one giant job interview. Like I mentioned earlier, it’s completely okay to explore opportunities irrelevant to your major. Just because you’re a biology major doesn’t mean you can’t join the theatre club, or take a poetry class, or play a sport. Don’t feel the need to justify everything you take part in with how it will benefit your career, just do what makes you happy! Besides, having interests outside your field of expertise will make you a more well-rounded individual, which could absolutely benefit you professionally in the long run. One piece of advice I have especially for new college students is to give yourself permission to be a beginner. College is an excellent opportunity to try something new surrounded by people who are also still figuring things out. Don’t let the people in the room who have been working at a particular skill for years scare you away from trying it. Instead, take the opportunity to get to know them, they probably have some valuable advice for you. And most importantly, don’t expect to ever be like them, because you don’t need to be, that’s a part of the point. You are allowed to be bad at something without turning it into a growth opportunity. Another thing college students tend to do is turn making memories into just another productivity metric. This is especially relevant today with everything being posted to social media, it makes having fun become competitive. You open instagram and see what all your peers did over the weekend, and suddenly you find yourself worried that you don’t go out enough, or that you don’t have enough friends. It’s so easy to get caught up in having the “college experience” that it creates this paradox that even your spontaneity needs to be optimized. But the truth is, the true college experience doesn’t look like a movie, it’s going to get food with a friend after class, walking around campus at sunset, or laughing so hard that your stomach hurts. Ordinary moments create the greatest memories. All of this being said, I do understand the obsession with career preparation in a college setting. Your career is important, your grades are important, your resume is important, but at the end of the day, you are a person before a professional. You’re allowed to spend these years exploring things simply for your own enjoyment. These things may not help you land your dream internship, but they absolutely will play a role in creating a future you can’t wait to wake up to. Let yourself have lore Unsplash We need to start letting ourselves have lore. I’m serious. That weird job you had, the obscure interest you have, the stranger met once, got to know really well, and then never saw again. All of this is your lore. It doesn’t have to be impressive, just amusing, unconventional, and unexpected. One of my favorite questions to ask people is “what is something about you that most people wouldn’t expect?” because it gives them the opportunity to share something beyond the surface level questions like major, hometown, or favorite color. I also notice when someone seems hesitant to answer that question, and that could be for one of two reasons, the first being that they may not be comfortable sharing, which is totally fine, but the other reason is because they genuinely draw a blank when it comes to identifying something about themselves that is remotely interesting. The second one can be fixed, and the easiest way to do that is to simply stop questioning whether something is worth doing. Don’t ask “Is this useful?” ask “Would this make a good story?” Now obviously this doesn’t apply to every decision you make, I’m not telling you to start making poor financial decisions or something of that nature just to develop lore. Think harmless things, like dyeing your hair, introducing yourself to someone new, or going on a spontaneous road trip. You never know what stories you might be able to tell in the future. But what if you regret it? Failure and regret are part of the lore. We often think experiences only count if they went well. But some of the greatest stories start with “this was a terrible idea”. You tried something and failed, you got lost, you embarrassed yourself. Sure, it wasn’t the best feeling at the moment, but someday you can look back, laugh it off, and reflect on how that experience made you a more interesting person. Because let’s be honest, a perfectly executed life with no mistakes whatsoever would not make a very interesting story. Sometimes, you may not want to share your story with everybody, and there’s nothing wrong with that. Your lore does not need to become content. There’s no need to present photographic evidence, or repeat what happened in detail to everyone you meet if it doesn’t feel right. Some memories just belong to you and the people who were there, and that’s beautiful. So why do I want to be interesting instead of productive? Because productivity is just something that can be measured, but being interesting is something that will be remembered. Your resume might tell potential employers where you graduated from, what work experience you have, or what you have accomplished, but your experiences will tell people who you were as a person while you were achieving all these things. I still want to be successful. I hope that while I am in college and beyond, I will have many accomplishments I am proud of, and I have a stable and fulfilling career, and I recognize that it takes work to have those things. What I don’t want is for my work to be the only evidence that I was here. I want to have spontaneous adventures, niche hobbies, and the ability to look back on my college years and know I lived them not trying to be the best, but trying to be myself. Check out similar articles: The Pressure To Be Perfectly Productive: https://www.hercampus.com/school/sbu/the-pressure-to-be-perfectly-productive Returning To My Interests: https://www.hercampus.com/school/george-mason-university/returning-to-my-interests <p>The post I Want to Be Interesting, Not Just Productive first appeared on Her Campus.</p>

"The activities of the participants chronicled in the Epstein files are so much worse."

Watch out! I think Disney is making a comeback with their movies that they are officially working on! Now, I have never been to D23, but I plan to attend in the future, and I always stay up to date with all of the social media posts that Disney makes as they announce their upcoming projects. Let me tell you, at 1 a.m., Disney had my heart exploding, making me truly feel like I was a little girl again. Disney is working their butts off with all of the new movies coming out, especially when it comes to the sequels and live-action retellings of the stories we grew to love so much. Now, I know a lot of people want Disney to make more original movies, and I do agree, but I think they have been doing well with the most recent sequels like Inside Out 2 and Zootopia 2, along with their live-action remakes like Cruella and The Little Mermaid (2023), so I’m not annoyed with these announcements. I’m more than thrilled about what we are going to get from Disney in the next few years and I believe that we all have to get hyped up for when all of these movies come out! Coco 2 How could I not start off with the movie I’m most excited for? We are finally going back to the Land of the Dead with Coco 2 finally coming out! Let me tell you, when they first announced Coco 2 was coming out, I was going crazy because I’ve been wanting a sequel for years. I know that a lot of people keep saying that Coco doesn’t need a sequel, but I honestly think it should have one because there are a lot of questions that weren’t answered in the first movie. Having a second part means we could have a lot of our questions answered and learn more about the Rivera family. I think Coco 2 is one Disney movie that deserves a sequel right now because we get more representation of Latino culture in these movies. As a Latina, getting a Coco 2 means so much to me, especially since part one has a special place in my heart. This is definitely the movie that I am most excited about, even though Disney is making us wait until 2029 to see it. View this post on Instagram Zootopia 3 Now, we knew this one was coming, but not so soon! Zootopia 3 is now officially in the works and they are ready to have the birds shine in this movie. In Zootopia 2, it was very obvious that we were going to get part three with the end credit scene showing a bird feather. It makes sense to go in that direction because when you really watch the first two movies, you actually notice that there are no birds on site. So, this means that we are going to get even more backstory when it comes to how Zootopia came to be the place that we know and love today. I see where this is going and think Judy and Nick will be searching for the truth about the birds, but I know Disney isn’t going to use the same exact story as Zootopia 2, so I can’t wait to see how Disney is going to pull off this next plot for the Zootopia franchise. Fans are also excited to see how the relationship between Judy and Nick is going to grow in the next part — maybe even romantically — but I guess we’ll have to wait and see. @advwitheli Omg ZOOTOPIA 3 is coming!!! #d23 #d23creators ♬ original sound – advwitheli Lilo & Stitch 2 I don’t know about everyone else, but I think this announcement is what really got me so hype for the future of Disney. It was already announced last year that we were getting a live-action Lilo & Stitch 2. However, a lot of people were questioning how they were going to make the next part with all the changes they made to the first live-action Lilo & Stitch movie. At D23, we finally got some answers, showing that Angel is making her big-screen debut! This is so exciting to all of the Angel fans out there since she’s only made appearances in the TV series. After this announcement, I’ve just been thinking about all of the things that could happen in the movie and how much bigger and better it may be compared to part one. I’m really rooting for Lilo & Stitch 2 and hoping that this movie is going to be a big success, and that everyone will enjoy it and give it no hate, because this movie seems like it’s going to be an amazing adventure! View this post on Instagram Frozen 3 Frozen 3 has been confirmed since 2023, but we are finally getting a better look at what we can expect from this highly anticipated movie. D23 actually gave us a little clip from the movie and it has caused fans to come up with amazing ideas and thoughts about what the movie could entail. We see that Anna and Kristoff are officially going to get married and Anna looks so stunning with her wedding dress. However, their wedding may not go as planned with Elsa finding a crystal that opens up to another world. As the gang is exploring the new world, they run into the new villain of the movie, who people are saying is supposed to be the evil ice queen that was originally developed for the first Frozen movie. This is a smart move for Disney since a lot of fans did like the idea of Elsa being evil despite loving the story we got for the first movie. Not to mention, Olaf is getting a love interest and there could be a possibility that this new villain created her to mess with our heroes. I guess we have to wait and see since we have one more year to go until it gets released. In the meantime, we will definitely be getting a lot more updates and content with Frozen 3 that I, and many others, are looking forward to! @collie_2026 Frozen 3 Trailer with a Mysterious Villain D23 Announcement Disney #frozen #trending #viral #fyp #movie ♬ original sound – Sarah – Collie Incredibles 3 I have to give the Incredibles franchise its praise because I feel like a lot of people are the least happy with an Incredibles 3 movie happening. We already had the news a while back that this movie was happening and didn’t get that much information. However, we now know a little more about the plot of the movie. Since the first Incredibles movie was about Mr. Incredible and the second movie about Elastigirl, it only makes sense that the third movie would be focused on the kids. All we know is that the kids want to prove themselves to be true superheroes just like their parents, so they start sneaking out at night to fight crime. I do like the concept of giving each of the characters their own story and spotlight with each new movie. However, I’m not thrilled that the kids are the same age as they were in the last movie. I don’t understand why Disney makes it so difficult to have characters grow up, but I guess we have to wait and see what’s going to happen with Incredibles 3 and if they can pull off the kids’ story in this one. @benchlandia Ahhh! The kids? YES! @Disney D23 #d23 #d23creators ♬ original sound – Benchlandia Tangled Last but not least, is the live-action remake that has everyone buzzing on social media. Live-action Tangled is officially coming out on March 31, 2028, and we got an official first look from Disney, rather than getting many different behind-the-scenes posts. We finally get to see how Rapunzel looks in the movie, which I think is amazing and very accurate to the original cartoon. I think Disney is getting really good with having the main characters look unique, but very accurate to their original outfits. We also get our first look of Mother Gothel, and I believe Kathryn Hahn is going to slay in the role. And how can we not get a first look of Tangled without having lanterns float around the D23 audience? Having that moment with the audience truly did seem so magical, and I believe that this is going to be one of the best live-action remakes Disney is going to make. I have high expectations with this movie and expect all of the scenes from the original to be in the live-action. So, Disney, don’t get me and all the fans out there mad with scenes you might be considering taking out because I’m expecting a lot with this one. @thecinematicuniverse AHHHHHHHHHH #TANGLED #d23 #d23creators #thecinematicuniverse ♬ original sound – TCU Disney did not disappoint with D23 this year and I know I’m not the only one thinking that. They are really stepping up their game when it comes to expanding a lot of their beloved franchises and making the live-actions bigger and better. All of the movies that I mentioned, along with The Princess Diaries 3, Avengers: Doomsday, and even Bluey, for those who have little siblings, are some anticipated films that people have been wanting to see. However, some movies such as Ice Age: Boiling 6 aren’t really necessary and don’t need to happen. Because some of the movies that were announced haven’t gotten people excited, the topic of people not wanting sequels or live-action movies keeps coming up. I won’t lie, I do want Disney to make more new and original movies and I feel like we could be getting that soon. However, if you know me, you know that I do enjoy a lot of the sequels and live-actions that Disney makes. Don’t get me wrong, not all of them are the best (don’t get me started with Toy Story 4), but most of them are really good. I think of it as expanding and learning more about the stories that we love. It’s also a way to add more to the story with ideas people are having and I love to see if I have a thought about a movie that Disney brings to life. So, I am going to enjoy these movies when they come out, along with more Disney movie announcements in the future, and I hope many people are just as excited as I am. Thank you, Disney, for making me feel like a little girl again and exploding my heart! I can’t wait to see what Disney has in store for us next year at D23! <p>The post Once Upon A D23: D23 Brought The Magic And Made Disney Fans’ Hearts Explode first appeared on Her Campus.</p>

On Aug. 25, 2026, Tim Curry passed away in his Los Angeles home at the age of 80. Despite suffering a stroke in 2012 that left him partially paralyzed, Curry kept his witty nature and gratitude for every role he so thoroughly and thoughtfully tackled and executed throughout his nearly 60-year acting career. Published in October 2025, Curry’s autobiography, Vagabond, recaps his career, his personal life, his struggle with family and community, and his relationship with becoming something other than himself. A quote from the novel reads: “And my own way was to sprinkle a bit of mischief onto even my most villainous roles, just as I brought a little mischief into my encounters with my mother: doing whatever I could to make the darkness sparkle.” Looking over his discography, there is a consistent, enticing air of evil. “I think writers have so much more fun writing villains than they do heroes. Heroes are boring,” Curry told The Academy while recapping his most iconic roles just six months ago. It seems like Curry would agree with those writers — the majority of his roles were evildoers, or they at least had a similar mischievous streak to them. What he portrayed so well in each role was a specific kind of anger that comes from a place of vulnerability. When asked by Ben Mankiewicz at CBS how he so convincingly played these villains, Curry stated: “I know anger and how it feels … and how to project it, I guess.” Much of that anger was “channelled,” as Curry phrased it, from his experiences with his mother, who did not want for him the flamboyant, invigorating life of an actor. After the death of his father, Curry was sent to boarding school around the age of 12. Despite his mother’s strictness, Curry’s love for theater and performance only blossomed at school while performing in various school productions. He would go on to earn a degree in English and Drama from the University of Birmingham. The thing that excited Tim Curry the most about being an actor was “the freedom of being somebody else,” though once he had obtained the desired experience of fame and supposed glory, he came to despise it. Curry, in an interview with CBS Sunday Morning from 2025, called himself a purist when it came to his craft. “I wanted to disappear into characters, and I didn’t want an audience to say ‘Oh, thank God, here he is.’” His rise to fame was not entirely conventional, nor was he immediately a household name. Curry became a cult icon for his 1975 role in The Rocky Horror Picture Show as the infamous Frank-N-Furter. Rocky Horror, which is currently running on Broadway until February 2026, gives the audiences who see it a different kind of power within the show. On the surface, the audience is welcomed to participate with various “callouts” that long-time fans have memorized, creating comedic interjections that keep the actors and new audience members on their toes. Looking deeper, Rocky Horror welcomed any and all kinds of weird. Curry struts on screen in sparkles and platform heels in a way that looks natural to his character — in a way that inspires others to be their most natural, authentic selves, regardless of the judgement of others. In a way, Curry pushed society’s boundaries so that others could find themselves within new societal parameters and continue to push those parameters themselves. “He had a lot of power, Frank,” Curry said to CBS. “He gave a lot of teenagers permission to be different, and I’m very happy that he did have that power.” Thousands of actors, whether they’re professionals or simply those who have the passion, audition and perform in productions of Rocky Horror across the country — still, 50 years after the movie’s release — and create their own weird, beautiful world on stage, just as Curry did. Throughout his career, Tim Curry made over 240 roles his own. From London theaters in Hair and Rocky Horror to movies — animated or other — like Annie (1982), Home Alone 2, It (1990), and Clue, Curry’s spark as a performer was and will always be felt by new and forever fans alike. <p>The post Remembering Tim Curry: Making The Darkness Sparkle first appeared on Her Campus.</p>

Six missions are scheduled to launch from launch sites across the globe this week. After SpaceX flew its last planned Falcon 9 Starlink mission from Florida, the veteran medium-lift rocket is expected to lower its launch cadence from the triple-digit pace achieved in the middle of this decade. All future Falcon 9 Starlink launches are planned to fly from California, including this week’s missions. Internationally, Rocket Lab is flying an increasing number of Electron small-satellite launches each year. Electron’s next mission will start the week off from the Mahia Peninsula in New Zealand. Missions are also scheduled to launch from China, India, and Norway. Pallas-1 | Demo Flight This week features the debut flight of Pallas-1, Galactic Energy’s medium-lift rocket, developed on the heels of its operational Gushenxing-1, also known as Ceres-1, a small-satellite launcher. Pallas-1’s demonstration flight is scheduled for Tuesday, Sept. 1, at 02:00 UTC from the Pallas-1 Launch Pad at the Jiuquan Satellite Launch Center. Pallas-1, also known as Zhishenxing-1, will take a southward trajectory suitable for payloads using a Sun-synchronous orbit. The two-stage rocket, powered by seven company-developed Welkin rocket engines in the first stage, stands over 49 m tall and is over three meters in diameter. Like the Falcon 9, Pallas-1 uses kerosene and liquid oxygen as propellants. Also like the Falcon 9, Pallas-1 will use grid fins and landing legs to enable landing and recovery for reuse, though no landing appears to be scheduled for this flight. Pallas-1 is capable of carrying up to 5,000 kg to a 400 km low-Earth orbit, or 3,000 kg to a 700 km Sun-synchronous orbit, a smaller payload capacity than the Falcon 9. Pallas-1 is the latest in a series of partially reusable Chinese rockets to fly, while Galactic Energy is also developing the Pallas-1B, which will use three cores like the Falcon Heavy to deploy up to 17,500 kg to low-Earth orbit. A StriX synthetic aperture radar imaging satellite in Synspective’s facilities. (Credit: Synspective) Electron | Owl Around The World The next scheduled launch of the week is Rocket Lab’s “Owl Around The World” mission for the Japanese company Synspective. Electron will launch from the company’s private spaceport at the Mahia Peninsula in New Zealand on Tuesday, Sept. 1, at 11:30 UTC. There are backup launch opportunities as far out as Sept. 14. “Owl Around The World” will launch eastward from Launch Complex-1 (LC-1), lofting the StriX-9 satellite into a mid-latitude 575 km circular orbit inclined 38 degrees to the equator. The 100 kg synthetic aperture radar Earth observation satellite, the 11th launched by Rocket Lab, is capable of observing at a resolution of one to three kilometers and a swath width of 10 to 30 km. Synspective has flown exclusively with Rocket Lab and has an additional 16 flights booked with the company up to 2030. This flight is the 15th Electron launch of 2026 as Rocket Lab is on pace to exceed 20 missions this year. Starlink satellites before deployment in orbit. (Credit: SpaceX) Falcon 9 | Starlink Group 15-23 The first Starlink flight of the week, like all future Starlink v2 Mini missions, is scheduled to launch from Space Launch Complex 4E (SLC-4E) at Vandenberg Space Force Base (VSFB) on Wednesday, Sept. 2, at 12:46 AM PDT (07:46 UTC). The launch window lasts until 4:46 AM PDT (11:46 UTC). Booster B1063, on its 35th mission, will take a southeast trajectory, flying 27 Starlink v2 Mini satellites to a low-Earth orbit inclined 70.01 degrees to the equator. The booster, which is the current west coast-based flight leader, will land on Of Course I Still Love You in the Pacific for the 675th Falcon 9 recovery attempt. The veteran booster started its career with the Sentinel-6A Michael Freilich mission and has also launched the DART, Transporter 7, Iridium-9 & OneWeb #19, Tranche 0B, NROL-113, NROL-167, NROL-149, NAOS, and 25 Starlink missions. This flight will be the 102nd Falcon 9 mission of 2026 if schedules hold. GSLV F16 launches with the joint NASA/ISRO NISAR mission. (Credit: ISRO) GSLV Mk II | EOS-05 (GISAT-1A) The Indian Space Research Organization (ISRO), after a rocky start to 2026 with January’s EOS-N1 PSLV-DL failure, is returning to launch operations with only its second flight of the year. GSLV Mk II F17 is scheduled to fly from the Second Launch Pad at the Satish Dhawan Space Centre on Thursday, Sept. 3, at 21:25 UTC. The rocket will follow an eastward trajectory, placing the 2,367 kg EOS-05 satellite into a geostationary transfer orbit. The three-stage, 49.13 m-tall GSLV Mk II uses a solid-rocket motor for its core stage, four hypergolic liquid-fueled strap-on boosters, and a hypergolic liquid-fueled second stage. A cryogenic upper (third) stage using liquid oxygen and liquid hydrogen as propellants is also used. The EOS-05, also known as the GISAT-1A, is an imaging satellite designed to observe the entire Indian landmass every 30 minutes at a resolution of 42 m in visible and near-infrared light. A notable EOS-05 application is providing rapid imagery during disasters such as this week’s glacier-collapse-induced flash flood in the Himalayas. EOS-05 is a replacement for the EOS-03, also known as GISAT-1, a satellite lost during a GSLV Mk II launch failure in August 2021. This flight is the 19th overall mission of the GSLV Mk I and II series. Isar Aerospace’s Spectrum rocket awaits its maiden launch on the pad at Andøya Spaceport. (Credit: Isar Aerospace, Brady Kenniston for NSF) Spectrum | Onward and Upward Isar Aerospace’s long-delayed “Onward and Upward” flight of its Spectrum small satellite launcher is now set for Friday, Sept. 4, at 20:00 UTC from the Orbital Launch Pad at the Andoya Rocket Range in Norway. The launch window lasts for 60 minutes, ending at 21:00 UTC. After Spectrum’s first flight last year, which ended in failure, Isar Aerospace investigated the cause and modified the vehicle. “Onward and Upward” was initially scheduled to launch in January 2026, but the flight was delayed due to a pressurization valve issue. This flight was also attempted in March, April, and June but was postponed due to various issues. Once “Onward and Upward” lifts off, the rocket will take a northwest trajectory suitable for payloads using a Sun-synchronous orbit. Spectrum is capable of 700 kg to a Sun-synchronous orbit or 1,000 kg to a low-Earth orbit; for this flight, “Onward and Upward” is carrying five CubeSats and one non-separable experiment. The five CubeSats are TU Berlin’s CyBEEsat, the University of Maribor’s TriSat-S, EnduroSat’s Platform 6, NTNU’s FramSat-1, and TU Wien Space Team’s SpaceTeamSat1. Dcubed is providing the “Let It Go” experiment, which will remain with the second stage. This flight will mark Spectrum’s second launch. Isar Aerospace, based in Ottobrunn, Germany, and its Spectrum rocket received a European Launcher Challenge contract from the European Space Agency (ESA) worth roughly $229 million this month. Spectrum currently has eight missions scheduled beyond this flight. Starlink Group 17-35 launching on board F9 B1103-1 from VSFB on April 6. (Credit: SpaceX) Falcon 9 | Starlink Group 15-24 The last flight of the week, Starlink Group 15-24, is scheduled for Sunday, Sept. 6, at 3:59 AM PDT (10:59 UTC) from SLC-4E at VSFB. The launch window lasts until 7:59 AM PDT (14:59 UTC), and the flight will take a southeast trajectory used by all Group 15 flights with recovery on Of Course I Still Love You. Flying for the 19th time, booster B1088 started its career with the NROL-126 mission, which also carried Starlink satellites, along with 13 dedicated Starlink flights. The booster has also flown the Transporter 12, SPHEREx & PUNCH, NROL-57, and USSF-366 missions to date. This flight will be the 103rd launch of the Falcon 9 this year. SpaceX will begin launching Starlink v3 satellites using Starship in the near future, and VSFB will host a greater share of Falcon 9 launches as a result. The Falcon 9 launch rate peaked last year and is expected to decline from this year onward. (Lead image: Falcon 9 launches from Florida. Credit: Julia Bergeron for NSF) The post Launch Preview: Array of international launches planned this week appeared first on NASASpaceFlight.com.

Posted by Mike Hammett via NANOG on Sep 05*nods* This particular service is delivered in Equinix CH1, so not a good facility to play chicken at. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP ----- Original Message ----- From: "Gary Sparkes" <gary () kisaracorporation com> To: "North American Network Operators Group" <nanog () lists nanog org> Cc: "Mike Hammett" <nanog () ics-il net>...

Former senior immigration official and moneyman accused of taking $960K in bribes for citizenship favors, prosecutors say

Some regard LSU coach Lane Kiffin as an agent of chaos. The better explanation is that he's a garden-variety troll.At halftime of Saturday night's weather-delayed game against Clemson, Kiffin was interviewed by ESPN's Holly Rowe. After the interview ended, Kiffin started to walk away before circling back to the microphone and saying, "Imagine if we had pro players."It was a hilarious reference to the elephant that has resided in the room for the past several weeks. Kiffin has been trying to add players who should have been eligible for another season, and who pursued NFL careers until their right to one more college season was recognized by the courts. It has sparked outcries from many that "professional" players should be excluded from college football — which ignores the reality that college players are now professional players.Without the two players that LSU decided not to add to the roster for the opening game, given the possibility that the SEC could retaliate by kicking them out of the conference, Kiffin and company are still manhandling Clemson.

Hello, fellow version-bumping enthusiasts, sleep-deprived Rustaceans, and accidental software archaeologists who just found out that bumpversion is a thing 👋! So there I was, staring at my terminal at 2AM, trying to release version 0.1.0 of something. I typed bump-my-version patch, pressed Enter, and watched my CPU fan spin up like it was launching a SpaceX rocket. One Second later, one second, it bumped a number. One tiny number. 0.1.0 → 0.1.1. I sat there in silence for a moment. Then I did what any rational developer would do: I rewrote it. In Rust. From scratch. With Python and Node.js bindings. And a CLI. And no_std support. And gix for pure-Rust git operations. The result? bump2version 0.2.0: a version bumper that is legitimately, measurably, embarrassingly ~10,000x faster than the Python CLI it replaces. 🤔 Wait, What Even Is bump2version? Glad you asked. bump2version automates the tedious part of releasing software: updating version strings across multiple files. You know, the part where you manually grep through Cargo.toml, package.json, pyproject.toml, CHANGELOG.md, and your README, change 1.2.3 to 1.2.4 in 11 different places, forget one, push, CI fails, and you cry quietly into your coffee? Yeah. That part. bump2version does all of that for you: Parses version strings using a fully configurable regex (defaults to semver major.minor.patch). Bumps any component you ask it to: major, minor, patch, or custom cyclic stages like alpha → beta → stable. Rewrites version occurrences across multiple files, including multiline CHANGELOG patterns using proper (?ms) DOTALL + MULTILINE semantics. Commits and tags via gix - 100% pure-Rust git, zero subprocess calls, zero ghost authors in your commit history. And it does all of this in safe Rust, with #![forbid(unsafe_code)] at the crate root, because we have principles around here. Or at least we pretend to. # .bumpversion.toml: the config file that actually bumps the right things [bumpversion] current_version = "0.2.0" commit = true tag = true [bumpversion:file:Cargo.toml] search = 'version = "{current_version}"' replace = 'version = "{new_version}"' [bumpversion:file:CHANGELOG.md] search = "## {current_version}\n Release notes line 1" replace = "## {new_version}\n Release notes line 1" One config file. Multiple files updated. One git commit. One tag. Done. 🦀 Rust, Python, and Node.js: A Love Triangle Here's the fun part: bump2version isn't just a Rust crate. It's three tools pretending to be one in a trench coat. As a Rust crate: [dependencies] bump2version = "0.2.0" use bump2version::{config::BumpConfig, version::{parse_version, bump_version, serialize_version}}; fn main() { let cfg = BumpConfig::default(); let v = parse_version("1.2.3", &cfg).unwrap(); let v2 = bump_version(&v, "patch", &cfg).unwrap(); println!("{}", serialize_version(&v2, &cfg)); // 1.2.4 } As a Python package: pip install bump-rs from bump_rs import bump_version, BumpConfig print(bump_version("1.2.3", "patch")) # "1.2.4" print(bump_version("1.2.3", "minor")) # "1.3.0" print(bump_version("1.2.3", "major")) # "2.0.0" As a Node.js add-on: npm install bump2version const { bumpVersion, applyFileChange } = require("bump2version"); console.log(bumpVersion("1.2.3", "patch")); // '1.2.4' console.log(bumpVersion("1.2.3", "minor")); // '1.3.0' One Rust core. Three ecosystems. Zero Python subprocesses. Ferris the crab is now a polyglot, and honestly? Good for them. 🦀 🕵️ The Mossad Agents Who Architected This Let me be transparent about one thing: I did not architect the full system design for this project alone. No, I had help. Specifically, I reached out to some very professional consultants. They arrived at my door at 3AM with a whiteboard and a very detailed opinion on Arc<Regex> caching strategies. Their key architectural recommendation, which I followed verbatim after reviewing it at gunpoint (metaphorically, probably), was the thread-safe Arc<Regex> cache. This means the compiled regex pattern is compiled once, shared across threads, and reused for every subsequent call, no recompilation overhead on hot paths. The result: version bumping in ~57 microseconds from Python land. Not 57 milliseconds. Not 57 seconds. 57 microseconds. The kind of number that makes you wonder what the Python version was doing during its 585 millisecond run. 🔥 The Numbers That Made Me Cackle Maniacally Okay. Let's talk benchmarks. Because this is the part of the blog post where I get to paste a table and feel deeply smug about it. These are real numbers, measured on x86-64 Linux (CPython 3.12, 3-sigma filtered timeit): Version Bumping: Full Round-Trip (Parse + Bump + Serialize) Library patch minor major bump-rs (Rust, Arc<Regex> cache) ~57 µs ~54 µs ~53 µs bump-my-version (Python library) ~79 µs ~95 µs ~72 µs Pure Python (re.compile + int()) ~3.6 µs ~2.2 µs ~2.2 µs bump-my-version CLI (subprocess) ~585 ms ~585 ms ~585 ms The headline result: bump-rs is ~10,000× faster than the bump-my-version CLI. Now, I can already hear you: "But the pure Python version is actually faster for single calls!" Yes. You're right. The ~50 µs PyO3 FFI overhead means that if you're bumping exactly one version string in isolation on a warm Python interpreter, pure re.compile + int() will smoke us. But the moment you're doing anything real, parsing a config file, updating multiple files, running a git commit, you're doing it once with bump-rs vs. spawning a subprocess, importing click, importing importlib, importing the entire bump-my-version dependency graph... and waiting 585 milliseconds. Every. Single. Time. File Search/Replace Library Single-line Multiline CHANGELOG bump-rs (Rust, cached) ~65 µs ~104 µs Pure Python re.sub ~1.7 µs ~1.3 µs For file I/O work, thread safety, and pipeline operations, bump-rs wins. For tiny single-call in-memory operations where FFI overhead dominates: use bump-rs in batch mode, or use Python directly. We believe in honesty here. 🤖 Abusing Claude to Achieve the 10,000x Speed-Up Here's a confession. A deeply personal one. One that my legal team has strongly advised me not to make public. I abused Claude. Not in the normal way where you ask it to generate boilerplate. No no no. I pushed it to its absolute limits. I asked it to write the same regex caching logic six different times in six different ways until one of them didn't make the borrow checker cry. I had it architecting FFI boundary semantics at 4AM. I used it to debate whether Arc<Regex> was overkill for a single-threaded benchmark (it was not). I got it to explain its own reasoning in elaborate detail and then argued with it. Anthropic noticed. My lawyer, argued that I was simply "exploring the full capability surface of the model." The judge was unmoved. The Anthropic lawyers were also unmoved, but in a different direction. The verdict is still pending. The Arc<Regex> cache, however, is production-ready. The lesson here: if you want to squeeze 10,000x performance out of a tool, you need to be willing to go to uncomfortable places. Dark places. Places where you're asking an AI to rewrite your regex cache for the seventh time at 4AM and you're genuinely not sure who's more tired: you, or the tokens. Turns out: the tokens don't get tired. That's why Rust wins. 🐴 And Then the Borrow Checker Got Stuck There is a moment in every Rust developer's life where you write something that you know is correct, you've proven it in your head using mathematical induction and also vibes, and the borrow checker looks you dead in the eyes and says: "No." No explanation. No suggestion. Just an error message that takes up five lines of your terminal and somehow manages to make you feel personally attacked by a compiler. That happened. Multiple times. Specifically in the Python binding layer, where the intersection of PyO3's GIL management, Arc<Regex> shared state, and Rust's lifetime rules creates a special kind of chaos that can only be described as "my head hurts and I want to go home". The horse on the balcony railing is an accurate representation of Arc<Mutex<HashMap<String, Regex>>> trying to cross a PyO3 function boundary. It got there. It works. But the stuck moment before it worked? That was real. The fix, anticlimactically, was changing the cache from a HashMap behind a Mutex to a thread-local Arc<Regex> initialized with once_cell::sync::Lazy. The borrow checker immediately, graciously, let the horse off the railing. There's a metaphor in there somewhere. I choose not to examine it too closely. 🛠️ Getting Started Let's get practical. Here's how to use bump2version in your project right now: CLI Usage cargo install bump2version --features rust-binary bump2version --bump patch # 0.2.0 → 0.2.1 bump2version --bump minor # 0.2.0 → 0.3.0 bump2version --bump major # 0.2.0 → 1.0.0 Useful flags: Option What it does --config-file Specify config file path --current-version Override detected current version --bump Which part: major, minor, patch --dry-run / -n Simulate without touching any file --commit / --tag Auto-commit and tag after bumping Python pip install bump-rs from bump_rs import bump_version, apply_file_change, BumpConfig # Custom parse/serialize for 2-component versions cfg = BumpConfig(parse=r"(?P<major>\d+)\.(?P<minor>\d+)", serialize="{major}.{minor}") print(bump_version("2.0", "minor", config=cfg)) # "2.1" Node.js npm install bump2version import { bumpVersion, applyFileChange } from "bump2version"; const next = bumpVersion("1.2.3", "minor"); // "1.3.0" no_std Embedding bump2version = { version = "0.2.0", default-features = false } The core modules (config, version, files, error) compile on no_std + alloc. Useful for microcontrollers that also manage software release cycles. You know. If that's your situation. 🔒 The Safety Contract bump2version enforces #![forbid(unsafe_code)] at the crate root. Every byte of the implementatio, config parsing, regex matching, version bumping, git object creation, is written in safe Rust. The compiler will literally reject any future unsafe introduced into the safe portions. The only unsafe in the entire codebase is in the Node.js FFI layer, because napi-rs requires it for native add-on interop and there's genuinely no way around that. If we could have avoided it, we would have. We tried. The borrow checker nodded approvingly at our effort, then still said no. 🔭 What's Coming in Future Releases bump2version 0.2.0 is out the door, but the roadmap is full: Workspace-aware bumping: Update all crates in a Cargo workspace atomically in a single pass. Pre-release cycling: Better first-class support for alpha → beta → rc → stable lifecycle. Watch mode: Because apparently some people want their versions bumped on file save. (I won't judge. I wa

Summarize and humanize this content to 2000 words in 6 paragraphs in EnglishElections in Saxony-Anhalt, in the country’s east, could result in an outright majority for the Alternative for Germany party.

Posted by Owen DeLong via NANOG on Sep 05Yes. It’s exactly that easy. Since the NH is only used to resolve a port and (possibly) a MAC address, having IPv6 NLRI on an IPv4 route is no problem. Of course that only applies to routes where the NLRI is the adjacent advertising router. Owen

The Goa Staff Selection Commission (GSSC) has released the Goa SSC Recruitment 2026 Notification (Advertisement No. 3 of Year 2026) on 4th September 2026 on the official website. A total of 215 vacancies have been announced for various Group ‘C’ posts across different Government Departments of Goa, including Desktop Publishing Operator, Lower Division Clerk/Recovery Clerk, Data Entry Operator, and Junior Assistant. Goa SSC Group C Recruitment 2026; LDC, DEO, Junior Assistant & More Vacancies Online Form The online application portal will be made available on the Commission’s website by 11th September 2026, and the last date for submission of the online application is 2nd October 2026. Candidates should check the post-wise vacancy, reservation details, and other instructions before applying. Goa SSC Recruitment 2026: Overview Key details of the recruitment can be found in the notification. ParticularDetailsOrganisationGoa Staff Selection Commission (GSSC)Recruitment NameGoa SSC Recruitment 2026Advertisement NumberAdvertisement No. 3 of Year 2026Post TypeGroup ‘C’Total Vacancies215Application ModeOnline OnlyApplication Portal Available From11th Sep 2026Last Date to Apply2nd Oct 2026Exam DateTo be announced laterOfficial Websitegssc.goa.gov.in Goa SSC Vacancy 2026 A total of 215 vacancies have been released through the Goa SSC Recruitment 2026 across four posts. PostVacanciesDesktop Publishing Operator03Lower Division Clerk/Recovery Clerk197Data Entry Operator02Junior Assistant13Total215 Also Read: Goa SSC Category Wise Vacancy 2026 Candidates applying for these posts are required to check the category-wise vacancy break-up before submitting the online application. PostURSTSCOBCEWSTotalDesktop Publishing Operator03––––03Lower Division Clerk/Recovery Clerk10925044415197Data Entry Operator02––––02Junior Assistant0702–04–13 Goa SSC Notification 2026 Out The Goa Staff Selection Commission notification 2026 has been released for 215 Group ‘C’ vacancies under Advertisement No. 3 of Year 2026, dated 04.09.2026. The recruitment covers posts of Desktop Publishing Operator, Lower Division Clerk/Recovery Clerk, Data Entry Operator, and Junior Assistant across various Government Departments of Goa. This is a brief advertisement; candidates must refer to the detailed advertisement, to be uploaded on the Commission’s website by 11th September 2026, for complete eligibility criteria, pay scale, qualifications, and other requirements before applying. Goa SSC Notification 2026 PDF: Click to Download Important Dates EventDateNotification Release Date04.09.2026Online Application Portal Available From11.09.2026Last Date for Online Application Submission02.10.2026Detailed Advertisement UploadBy 11.09.2026 on Commission’s websiteDate of ExaminationTo be intimated later through website & local daily Goa SSC Apply Online 2026 The Goa SSC Recruitment 2026 online application portal will be made available on the Commission’s website, https://gssc.goa.gov.in, by 11th September 2026. Eligible candidates can submit their applications online until 2nd October 2026. Only online applications will be accepted; applications submitted through any other mode will not be entertained, and no correspondence in this regard will be considered. Goa SSC 2026 Apply Online: Direct Link Active How to Apply for Goa SSC Recruitment 2026? Candidates can apply for the Goa SSC Recruitment 2026 through the official website. Follow the steps below to complete the application form correctly. Visit the official Goa SSC website: gssc.goa.gov.in. Carefully read the detailed advertisement and the “Instructions” available on the Commission’s website before filling the application. Click on the relevant link for Goa SSC Recruitment 2026 (Advertisement No. 3 of 2026). Complete the online registration using the required details. Fill in personal, educational, and category-wise details. Upload photograph, signature, and required supporting documents. Check all details carefully before submitting the form. Submit the application and download the completed form for future reference. Also Read: Delhi High Court SPA & PA Recruitment 2026 Notification Out for 150 Vacancies, Apply Online for Senior Personal Assistant & Personal Assistant Documents Required for Goa SSC Application Form 2026 Candidates must keep the following documents ready while filling out the online application, as per the instructions and detailed advertisement to be issued by the Commission. Recent passport-size photograph Scanned signature Educational qualification mark sheets and certificates Caste/category certificate, wherever applicable EWS certificate, wherever applicable PwD certificate, wherever applicable Ex-Servicemen certificate, wherever applicable Sportsmen/Sportspersons certificate, wherever applicable Valid ID proof Goa SSC Selection Process 2026 The exact scheme of examination for each post will be specified in the detailed advertisement. In general, selection for Goa SSC Group ‘C’ posts is made through a written examination/skill test, as intimated by the Commission through its website and publication in a local daily newspaper. FAQs Ques: How many Goa SSC Vacancy 2026 has been announced? Ans: A total of 215 vacancies have been announced under Goa SSC Recruitment 2026, across Desktop Publishing Operator, Lower Division Clerk/Recovery Clerk, Data Entry Operator, and Junior Assistant posts. Ques: When does the Goa SSC application process start? Ans: The online application portal will be made available on the Commission’s website by 11th September 2026. Ques: When is the last date to apply for Goa SSC 2026? Ans: The last date to apply online is 2nd October 2026. Ques: How many vacancies have been released for the Lower Division Clerk/Recovery Clerk post? Ans: A total of 197 vacancies have been announced for the Lower Division Clerk/Recovery Clerk post, the highest among all posts in this recruitment. Ques: Is there any reservation for Ex-Servicemen and PwD candidates in this recruitment? Ans: Yes. Out of the 197 Lower Division Clerk/Recovery Clerk vacancies, 23 are reserved for PwD, 17 for Ex-Servicemen, and 1 for Meritorious Sportsmen/Sportspersons. Out of the 13 Junior Assistant vacancies, 1 is reserved for PwD and 3 for Ex-Servicemen. Ques: Will the exact number of vacancies remain the same as mentioned in this notice? Ans: No. The vacancies indicated in this brief advertisement are tentative; the exact number of vacancies will be mentioned in the detailed advertisement. <p>The post Goa SSC Group C Recruitment 2026; LDC, DEO, Junior Assistant & More Vacancies Online Form first appeared on Karmasandhan.</p>

Summarize and humanize this content to 2000 words in 6 paragraphs in English NEWYou can now listen to Fox News articles! A California pizza shop allegedly had far more than pies on the menu, with a man accused of using the Round Table Pizza restaurant to sell massive quantities of meth.Kawal Preet Singh, a 50-year-old Indian national living illegally in the United States, was indicted Thursday on federal drug and firearm charges after authorities allegedly uncovered more than 40 pounds of methamphetamine, three guns and over $10,000 in cash.Federal prosecutors say Singh operated the Round Table Pizza restaurant in Dinuba, a Tulare County city about 30 miles southeast of Fresno, and used the business to distribute large quantities of methamphetamine.CALIFORNIA SUSPECT’S ALLEGED $30K METH STASH SEIZED AFTER HE LEFT BACKPACK IN RIDESHARE: POLICE Singh pleaded not guilty during his arraignment Thursday. He is not in custody, according to The Fresno Bee.The Dinuba restaurant is listed as permanently closed on Google.”The employee involved in the reported incident had worked at this location for approximately one and a half months,” the company told GV Wire.Erin Mandzik, senior director of corporate communications for FAT Brands, Round Table Pizza’s parent company, told The Fresno Bee that the restaurant was independently owned and operated.Mandzik said the local owners had no knowledge of the alleged illegal activity before it came to light and were fully cooperating with authorities, according to the newspaper.Fox News Digital reached out to Round Table Pizza seeking additional information about Singh’s role, the restaurant’s ownership and the decision to permanently close the location.FEDS SEIZE MOUNTAIN OF FENTANYL FROM ‘OPEN-AIR DRUG MARKET’ IN MASSIVE CRACKDOWN TARGETING GANG CREWS Federal agents searched Singh’s home and the restaurant Aug. 18 as part of an investigation into Indian organized crime in California’s Central Valley, according to the U.S. Attorney’s Office for the Eastern District of California.Investigators allegedly found approximately 13.8 kilograms, or more than 30 pounds, of suspected methamphetamine at Singh’s home, The Fresno Bee reported.CBP OFFICERS SEIZE OVER $2.8M IN COCAINE AND METH IN BACK-TO-BACK BUSTS AT CALIFORNIA PORT OF ENTRY Another roughly 4.9 kilograms, or nearly 11 pounds, was allegedly packed into five clear plastic bags inside Singh’s Hyundai Sonata parked at the restaurant, according to the newspaper.Agents also seized a semiautomatic handgun and $11,800 in cash, the outlet reported.NEVADA MAN FUNNELED 140 GUNS TO VIOLENT MEXICAN DRUG CARTELS, INCLUDING POWERFUL ‘MILITARY-STYLE’ RIFLES: DOJPhotographs released by the Justice Department showed two handguns allegedly seized during the investigation, including one with a teal-colored frame. Another image showed clear plastic bags containing a crystalline substance authorities identified as methamphetamine.A federal grand jury charged Singh with distribution of methamphetamine, possession with intent to distribute methamphetamine and possession of a firearm in furtherance of a drug trafficking crime.MEXICAN MAFIA TURNED AMERICAN NEIGHBORHOODS INTO ‘GANGSTA’S PARADISE’ WITH MURDERS, KIDNAPPINGS, DRUGS: FEDS The investigation reportedly began with a May tip about a suspected narcotics trafficker operating in Fresno and distributing controlled substances.Investigators later received information about a trafficker known as “Camy,” who was described as a Sikh Indian man involved in long-haul trucking, according to court documents cited by The Fresno Bee.BORDER AGENTS UNCOVER $20M COCAINE STASH HIDDEN BENEATH TRUCK FLOORBOARDS IN MASSIVE BUST”The information identified the narcotics trafficker as ‘Camy’ and described him as a Sikh Indian male involved in long-haul trucking,” an FBI affidavit said, according to the outlet. “The suspect worked with a network of other Sikh Indian truck drivers to transport narcotics.”Investigators developed evidence indicating that a network of truck drivers transported hundreds of kilograms of cocaine from Mexico into the United States for an unidentified Mexican cartel, The Fresno Bee reported. Singh has not been charged with a cocaine-related crime.The Central Valley High Intensity Drug Trafficking Area Task Force later identified Singh as a subject of the investigation, federal prosecutors said.Search warrants signed Aug. 13 covered Singh, his home and the Dinuba restaurant, according to The Fresno Bee. Five days later, agents allegedly watched Singh leave the restaurant and drive to his home before searching both properties.Singh allegedly told investigators he had not sold methamphetamine for approximately two months and claimed he was storing the drugs for a friend, according to the outlet.CLICK HERE TO DOWNLOAD THE FOX NEWS APPSingh faces at least 10 years in federal prison if convicted of the drug charges. The firearm count could add at least five more years behind bars.Prosecutors emphasized that the charges are allegations and that Singh is presumed innocent unless proven guilty.Singh’s next federal court hearing is scheduled for Nov. 4.

Posted by Shawn L via NANOG on Sep 05It seems like they're stepping up their sales -- We were just assigned a "new rep" though we've never done business with them. He started sending meeting requests, which we declined. Then he would call and actually yell at people because "we had a meeting and we're all waiting for you to join". Do they really think that this will help them get customers? Even if I was inclined to buy from them, I would...

It’s a brand new era for long-running BBC show