Many nations have some form of national identification number, especially around taxes. Argentina is no exception.

Their "CUIT" (Clave Única de Identificación Tributaria) and "CUIL" (Código Único de Identificación Laboral) are formatted as "##-########-#".

Now, as datasets often don't store things in their canonical representation, Nick's co-worker was given a task: "given a list of numbers, reformat them to look like CUIT/CUIL. That co-worker went off for five days, and produced this Java function.

public String normalizarCuitCuil(String cuitCuilOrigen){ String valorNormalizado = new String(); if (cuitCuilOrigen == null || "".equals(cuitCuilOrigen) || cuitCuilOrigen.length() < MINIMA_CANTIDAD_ACEPTADA_DE_CARACTERES_PARA_NORMALIZAR){ valorNormalizado = ""; }else{ StringBuilder numerosDelCuitCuil = new StringBuilder(13); cuitCuilOrigen = cuitCuilOrigen.trim(); // Se obtienen solo los números: Matcher buscadorDePatron = patternNumeros.matcher(cuitCuilOrigen); while (buscadorDePatron.find()){ numerosDelCuitCuil.append(buscadorDePatron.group()); } // Se le agregan los guiones: valorNormalizado = numerosDelCuitCuil.toString().substring(0,2) + "-" + numerosDelCuitCuil.toString().substring(2,numerosDelCuitCuil.toString().length()-1) + "-" + numerosDelCuitCuil.toString().substring(numerosDelCuitCuil.toString().length()-1, numerosDelCuitCuil.toString().length()); } return valorNormalizado; }

We start with a basic sanity check that the string exists and is long enough. If it isn't, we return an empty string, which already annoys me, because an empty result is not a good way to communicate "I failed to parse".

But assuming we have data, we construct a string builder and trim whitespace. And already we have a problem: we already validated that the string was long enough, but if the string contained more trailing whitespace than a newline, we're looking at a problem. Now, maybe we can assume the data is good, but the next line implies that we can't rely on that- they create a regex matcher to identify numeric values, and for each numeric value they find, they append it to our StringBuilder. This implies that the string may contain non-numeric values which need to be rejected, which means our length validation was still wrong.

So either the data is clean and we're overvalidating, or the data is dirty and we're validating in the wrong order.

But all of that's a preamble to a terrible abuse of string builders, where they discard all the advantages of using a StringBuilder by calling toString again and again and again. Now, maybe the function caches results or the compiler can optimize it, but the result is a particularly unreadable blob of slicing code.

Now, this is ugly, but at least it works, assuming the input data is good. It definitely should never pass a code review, but it's not the kind of bad code that leaves one waking up in the middle of the night in a cold sweat.

No, what gets me about this is that it took five days to write. And according to Nick, the responsible developer wasn't just slacking off or going to meetings the whole time, they were at their desk poking at their Java IDE and looking confused for all five days.

And of course, because it took so long to write the feature, management didn't want to waste more time on kicking it back via a code review. So voila: it got forced through and released to production since it passed testing.

.comment { border: none; } [Advertisement] Keep all your packages and Docker containers in one place, scan for vulnerabilities, and control who can access different feeds. ProGet installs in minutes and has a powerful free version with a lot of great features that you can upgrade when ready.Learn more.

An anonymous reader quotes a report from Axios: Advanced robots don't necessarily need to look like C3PO from "Star Wars" or George Jetson's maid Rosie, despite all the hype over humanoids from Wall Street and Big Tech. In fact, some of the biggest skeptics about human-shaped robots come from within the robotics industry itself. [...] The most productive -- and profitable -- bots are the ones that can do single tasks cheaply and efficiently. "If you look at where robots are really bringing value in a manufacturing environment, it is combining industrial or collaborative robots with mobility," ABB managing director Ali Raja tells Axios. "I don't see that there are any real practical applications where humanoids are bringing in a lot of value." "The reason we have two legs is because whether Darwin or God or whoever made us, we have to figure out how to traverse an infinite number of things," like climbing a mountain or riding a bike, explains Michael Cicco, CEO of Fanuc America Corp. "When you get into the factory, even if it's a million things, it's still a finite number of things that you need to do." Human-shaped robots are over-engineered solutions to most factory chores that could be better solved by putting a robot arm on a wheeled base, he said. "The thing about humanoids is not that it's a human factor. It's that it's more dynamically stable," counters Melonee Wise, chief product officer at Agility Robotics, which is developing a humanoid robot called Digit. When humans grab something heavy, they can shift their weight for better balance. The same is true for a humanoid, she said. Using a robotic arm on a mobile base to pick up something heavy, "it's like I'm a little teapot and you become very unstable," she said, bending at the waist.

Read more of this story at Slashdot.

SpaceX's Starship Flight 9 successfully launched and reached space -- marking the first reuse of a Super Heavy booster -- but both rocket stages were ultimately lost mid-mission due to a "rapid unscheduled disassembly." SpaceX CEO Elon Musk said in a statement: "Starship made it to the scheduled ship engine cutoff, so big improvement over last flight! Leaks caused loss of main tank pressure during the coast and re-entry phase. Lot of good data to review." Musk said the next three Starship test launches could lift off every three to four weeks in the days ahead. Space.com reports: The mission lifted off from Starbase today at 7:37 p.m. EDT (2337 GMT; 6:37 p.m. local Texas time), sending the 40-story-tall rocket into the Texas sky atop a pillar of flame. It was a milestone launch, marking the first-ever reuse of a Super Heavy booster; this one earned its wings on Flight 7 in January. (SpaceX swapped out just four of its Raptors after that mission, meaning that 29 of the engines that flew today were flight-proven.) "Lessons learned from the first booster refurbishment and subsequent performance in flight will enable faster turnarounds of future reflights as progress is made towards vehicles requiring no hands-on maintenance between launches," the company wrote in a Flight 9 mission preview. The Super Heavy had a somewhat different job to do today; it conducted a variety of experiments on its way back down to Earth. For example, the booster performed a controlled rather than randomized return flip and hit the atmosphere at a different angle. "By increasing the amount of atmospheric drag on the vehicle, a higher angle of attack can result in a lower descent speed, which in turn requires less propellant for the initial landing burn," SpaceX wrote in the mission preview. "Getting real-world data on how the booster is able to control its flight at this higher angle of attack will contribute to improved performance on future vehicles, including the next generation of Super Heavy." These experiments complicated Super Heavy's flight profile compared to previous missions, making another "chopsticks" catch at Starbase a tougher proposition. So, rather than risk damaging the launch tower and other infrastructure, SpaceX decided to bring the booster back for a "hard splashdown" in the Gulf of Mexico on Flight 9. That was the plan, anyway; Super Heavy didn't quite make it that far. The booster broke apart about 6 minutes and 20 seconds into today's flight, just after beginning its landing burn. "Confirmation that the booster did demise," [Dan Huot, of SpaceX's communications team] said during the Flight 9 webcast. Super Heavy's flight ended "before it was able to get through landing burn," he added. Ship, by contrast, improved its performance a bit this time around. It reached space today on a suborbital trajectory that took it eastward over the Atlantic Ocean -- the same basic path the vehicle took on the truncated Flight 7 and Flight 8. But Flight 9 got choppy for Ship after that. The vehicle was supposed to deploy eight dummy versions of SpaceX's Starlink satellites about 18.5 minutes after liftoff, which would have been a landmark first for the Starship program. That didn't happen, however; the payload door couldn't open fully, so SpaceX abandoned the deployment try. Then, about 30 minutes after launch, Ship started to tumble, which was the result of a leak in Ship's fuel-tank systems, according to Huot. "A lot of those [tanks] are used for your attitude control," he said. "And so, at this point, we've essentially lost our attitude control with Starship." As a result, SpaceX nixed a plan to relight one of Ship's Raptor engines in space, a test that was supposed to happen about 38 minutes after launch. And the company gave up hope of a soft splashdown for the vehicle, instead becoming resigned to a breakup over the Indian Ocean during Ship's reentry. The company therefore will not get all the data it wanted about Flight 9. And there was quite a bit to get; for example, SpaceX removed some of Ship's heat-shield tiles to stress-test vulnerable areas, and it also tried out several different tile materials, including one with an active cooling system. But the company plans to bounce back and try again soon, just as it did after Flight 7 and Flight 8. You can watch a recording of the launch on YouTube.

Read more of this story at Slashdot.

unixbhaskar shares a report from Phoronix: The X86_NATIVE_CPU Kconfig build time option has been merged for the Linux 6.16 merge window as an easy means of enforcing "-march=native" compiler behavior on AMD and Intel processors to optimize your kernel build for the local CPU architecture/family of your system. For those wanting to "-march=native" your Linux kernel build on AMD/Intel x86_64 processors, the new CONFIG_X86_NATIVE_CPU option can be easily enabled for setting that compiler option on your local kernel builds. The CONFIG_X86_NATIVE_CPU option is honored if compiling the Linux x86_64 kernel with GCC or LLVM Clang when using Clang 19 or newer due to a compiler bug with the Linux kernel on older compiler versions. In addition to setting the "-march=native" compiler option for the Linux kernel C code, enabling this new Kconfig build option also sets "-Ctarget-cpu=native" for the kernel's Rust code too. "It seems interesting though," comments unixbhaskar. "If the detailed benchmark shows some improvement with the option selected, then distros might start to adopt it for their flavor."

Read more of this story at Slashdot.

Cloudflare CEO Matthew Prince warned that LaLiga's ISP blocking campaign -- intended to stop football piracy -- has caused widespread collateral damage by blocking millions of unrelated websites, including emergency services, in Spain. He called the strategy "bonkers" and expressed fear that lives could be lost due to the overblocking. TorrentFreak reports: Posting to X last week, Prince asked if anyone wanted any general feedback, declaring that he felt "in an especially truthful mood." The first response contained direct questions about the LaLiga controversy, the blame for which LaLiga places squarely on the shoulders of Cloudflare. For the first time since Cloudflare legal action failed to end LaLiga's blocking campaign, Prince weighed in with his assessment of the current situation and where he believes it's inevitably heading. "A huge percentage of the Internet sits behind us, including small businesses and emergency resources in Spain," Prince explained. "The strategy of blocking broadly through ISPs based on IPs is bonkers because so much content, including emergency services content, can be behind any IP. The collateral damage is vast and is hurting Spanish citizens from accessing critical resources," he added. [...] Despite LaLiga's unshakable claims to the contrary, Prince believes that it's not a case of 'if' disaster strikes, it's 'when.' "It's only a matter of time before a Spanish citizen can't access a life-saving emergency resource because the rights holder in a football match refuses to send a limited request to block one resource versus a broad request to block a whole swath of the Internet," Prince warned. "When that unfortunately and inevitably happens and harms lives, I'm confident policy makers and courts in Spain and elsewhere will make the right policy decision. Until then, it'll be up to users to make politicians clear on the risk. I pray no one dies." The suggestion that LaLiga's demands were too broad, doesn't mean that Cloudflare is refusing to help, Prince suggested. On the contrary, there's a process available, LaLiga just needs to use it. "We've always been happy and willing to work with rights holders in conjunction with judicial bodies to protect their content. We have a clear process that works around the world to do that," Prince explained.

Read more of this story at Slashdot.

A German court has sentenced two former Volkswagen executives to prison and handed suspended sentences to two others for their roles in the Dieselgate emissions scandal, marking the conclusion of a nearly four-year fraud trial. Politico reports: The former head of diesel development was sentenced to four and a half years in prison, and the head of drive train electronics to two years and seven months by the court in Braunschweig, German news agency dpa reported. Two others received suspended sentences of 15 months and 10 months. The scandal began in September 2015 when the U.S. Environmental Protection Agency issued a notice of violation. saying that the company had rigged engine control software that let the cars pass emissions tests while they emitted far more pollution in actual driving. The company has paid more than $33 billion in fines and compensation to vehicle owners. Two VW managers received prison sentence in the U.S. The former head of the company's Audi division, Rupert Stadler, was given a suspended sentence of 21 months and a fine of 1.1 million euros ($1.25 million). The sentence is still subject to appeal. Missing from the trial, which lasted almost four years, was former CEO Martin Winterkorn. Proceedings against him have been suspended because of health issues, and it's not clear when he might go on trial. Winterkorn has denied wrongdoing. Further proceedings are open against 31 other suspects in Germany.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: For millions of music fans, the most controversial app ban of the past year was not the brief TikTok outage but the ongoing delisting of Musi from Apple's App Store. Those users are holding out hope that Musi can defeat Apple in court and soon be reinstated. However, rather than coming to any sort of resolution, that court fight has intensified over the past month, with both sides now seeking sanctions, TorrentFreak reported. [...] For Musi, the App Store removal came as an existential threat, prompting a lawsuit after Musi's attempts to work out the dispute with Apple outside of court failed. The music-streaming app has alleged that the Apple ban did not come at YouTube's request but at the request of Apple's apparent music industry friends who allegedly asked Apple to find a way to get the app removed -- prompting Apple to push YouTube to re-open a supposedly resolved complaint. In a court filing, Apple claimed that this "conspiracy theory," as well as other "baseless" claims, were "false and misleading allegations" warranting sanctions. "Discovery thoroughly disproved Musi's baseless conspiracy theory that Apple schemed to eliminate the Musi app from the App Store to benefit 'friends' in the music industry," Apple argued. But Musi fired back over the weekend, calling (PDF) Apple's motion for sanctions "frivolous" and demanding sanctions be ordered instead against Apple for allegedly abusing the sanctions rule as a "tactic of intimidation and harassment." Musi noted that Apple's requested sanctions against Musi "are not appropriate if there is even 'some credible evidence,'" then included internal emails and references to testimony from Apple's own employees that seemingly met this low bar. Most likely, this part of the dispute will not be settled until July 30, when a hearing is scheduled on the motions for sanctions. Apple is seemingly hoping that the court will agree that Musi's complaint misrepresents the facts and is so misleading that the complaint must be struck entirely, perhaps cutting out the heart of Musi's argument. However, Musi pointed out that Apple previously sought sanctions and withdrew that fight, allegedly recognizing that its bid for sanctions was "baseless." To convince the court that this second bid is "equally frivolous," Musi shared receipts, attaching internal communications from Apple employees that Apple allegedly worked hard to keep out of the courtroom.

Read more of this story at Slashdot.

After a year of rumors, Salesforce has officially acquired cloud data management firm Informatica in an $8 billion equity deal. "Under the terms of the deal, Salesforce will pay $25 in cash per share for Informatica's Class A and Class B-1 common stock, adjusting for its prior investment in the company," notes TechCrunch. From the report: Informatica was founded in 1993 and works with more than 5,000 customers across more than 100 countries. The company had a $7.1 billion market cap at the time of publication. This acquisition will help bolster Salesforce's agentic AI ambitions, the company's press release stated, by giving the company more data infrastructure and governance to help its AI agents run more "safely, responsibly, and at scale across the modern enterprise." "Together, we'll supercharge Agentforce, Data Cloud, Tableau, MuleSoft, and Customer 360, enabling autonomous agents to act with intelligence, context, and confidence across every enterprise," Salesforce CEO Marc Benioff said in the press release. "This is a transformational step in delivering enterprise-grade AI that is safe, responsible, and deeply integrated with the world's data."

Read more of this story at Slashdot.

OnePlus is replacing its iconic Alert Slider with a new customizable "Plus Key" on the upcoming OnePlus 13s, which launches the new AI Plus Mind feature that lets users capture and search content found on screen. This update is part of a broader AI push for its devices that includes tools like AI VoiceScribe for call summaries, AI Translation for multi-modal language support, and AI Best Face 2.0 for photo corrections. Engadget reports: What AI Plus Mind does is save relevant content to a dedicated Mind Space, where users can browse various information that they've saved. Users can then search for the detail they want to find using natural language queries. Both the Plus Key and the AI Plus Mind will debut on the OnePlus 13s in Asia. AI Plus Mind will roll out to the rest of the OnePlus 13 Series devices through a future software update, while all future OnePlus phone will come with the new physical key. Notably, the new button and feature bear similarities to Nothing's physical Essential Key that can also save information inside the Essential Space app. Nothing was founded by Carl Pei who co-founded OnePlus.

Read more of this story at Slashdot.

An anonymous reader quotes a report : Washington is joining a growing list of states trying to tear down barriers for consumers who want to repair their electronics rather than buy new ones. Gov. Bob Ferguson last week signed the state's new "Right to Repair" policy, House Bill 1483, into law. It was a yearslong effort to get the law approved. "This is a win for every person in Washington state," said the bill's prime sponsor, Rep. Mia Gregerson, D-SeaTac. In 2021, the Federal Trade Commission reported that consumers with broken electronics don't have much choice but to replace them because repairs require specialized tools, unique parts and inaccessible proprietary software. And those restrictions, the FTC found, disproportionately burden communities of color and low-income communities. Some companies engage in a practice called "parts pairing" that can make replacing parts of a device impossible. Washington's new law would largely outlaw this tactic. Starting Jan. 1, 2026, the law will require manufacturers to make tools, parts and documentation needed for diagnostics and maintenance available to independent repair businesses. The requirement applies to digital electronics, like computers, cellphones and appliances, sold in Washington after July 1, 2021. Manufacturers won't be able to use parts that inhibit repairs. The state attorney general's office could enforce violations of the new law under the Consumer Protection Act.

Read more of this story at Slashdot.

A Qualcomm-commissioned study found that Apple's inaugural C1 modem, debuting in the iPhone 16e, significantly underperformed compared to Qualcomm-powered Android devices in challenging network conditions. The research by Cellular Insights tested devices on T-Mobile's 5G network in New York City, where Android phones achieved download speeds up to 35% faster and upload speeds up to 91% quicker than the iPhone 16e. The performance gap widened when networks were congested or devices operated farther from cell towers -- precisely the scenarios where next-generation modems should excel, according to the report. The iPhone 16e became "noticeably hot to touch and exhibited aggressive screen dimming within just two-minute test intervals" during testing. This study arrives as Apple attempts to reduce its dependence on Qualcomm, which has historically provided modems for the entire iPhone lineup and represents roughly 20% of Qualcomm's revenue.

Read more of this story at Slashdot.

An anonymous reader shares a report: Earlier today, Panasonic announced refreshed models of its long-established Let's Note laptop series. However, for the first time in its history, we have a Let's Note portable that doesn't have a VGA port. According to a report by Nikkei Japan, this is probably the beginning of the end for laptops sporting VGA output, with "other companies to follow suit." A number of factors have precipitated Panasonic's removal of the venerable VGA port. The Nikkei report highlights the strong competition from HDMI, which can simultaneously transmit audio. We also see that the new Panasonic Let's Note CF-SC6 models feature a pair of Thunderbolt 4 ports, which can also be used for video out. That's three separate ports remaining on the Let's Note to drive external displays.

Read more of this story at Slashdot.

Texas Governor Greg Abbott signed an online child safety bill, bucking a lobbying push from big tech companies that included a personal phone call from from Apple CEO Tim Cook. From a report: The measure requires app stores to verify users' ages and secure parental approval before minors can download most apps or make in-app purchases. The bill drew fire from app store operators such as Google and Apple, which has argued that the legislation threatens the privacy of all users. The bill was a big enough priority for Apple that Cook called Abbott to emphasize the company's opposition to it, said a person familiar with their discussion, which was first reported by the Wall Street Journal.

Read more of this story at Slashdot.

Marvel Entertainment and DC Comics have announced their first crossover event since 2003's JLA/Avengers, featuring Deadpool and Batman in dual one-shot publications launching later this year. Deadpool/Batman one-shot launches September 17 and follows Wade Wilson hired for a Gotham City job that puts him against Batman. DC's Batman/Deadpool counterpart launches in November. Both publications will include additional "backup adventures" featuring other character matchups, though creative teams for those remain unannounced. The crossover required extensive coordination between the companies' editorial schedules, which typically plan two to three years in advance.

Read more of this story at Slashdot.

Bloomberg's editorial board warned Tuesday that AI has created an "untenable situation" in higher education where students routinely outsource homework to chatbots while professors struggle to distinguish computer-generated work from human writing. The editorial described a cycle where assignments that once required days of research can now be completed in minutes through AI prompts, leaving students who still do their own work looking inferior to peers who rely on technology. The board said that professors have begun using AI tools themselves to evaluate student assignments, creating what it called a scenario of "computers grading papers written by computers, students and professors idly observing, and parents paying tens of thousands of dollars a year for the privilege." The editorial argued that widespread AI use in coursework undermines the broader educational mission of developing critical thinking skills and character formation, particularly in humanities subjects. Bloomberg's board recommended that colleges establish clearer policies on acceptable AI use, increase in-class assessments including oral exams, and implement stronger honor codes with defined consequences for violations.

Read more of this story at Slashdot.

Multiple readers shared the following report about the executive departures at CISA: Virtually all of the top officials at the Cybersecurity and Infrastructure Security Agency (CISA) have departed the agency or will do so this month, according to an email obtained by Cybersecurity Dive, further widening a growing void in expertise and leadership at the government's lead cyber defense force at a time when tensions with foreign adversaries are escalating. Five of CISA's six operational divisions and six of its 10 regional offices will have lost top leaders by the end of the month, the agency's new deputy director, Madhu Gottumukkala, informed employees in an email on Thursday. [...] The exits of these leaders could undermine the efficiency and strategic clarity of CISA's partnerships with critical infrastructure operators, private security firms, foreign allies, state governments and local emergency managers, experts say.

Read more of this story at Slashdot.

An anonymous reader shares a report: More than 2% of Americans are taking the blockbuster class of GLP-1 drugs for overweight or obesity, up nearly 600% over six years, according to a report from FAIR Health given to Axios first. The data from FAIR Health's repository of over 51 billion commercial healthcare claim records shows the explosion in use of the drugs specifically for weight loss -- roughly half of all users. In all, roughly 4% of Americans were taking GLP-1 drugs in 2024 for either overweight, obesity or Type 2 diabetes (their original approved use). The data shows Novo Nordisk's Ozempic is still by far the most commonly taken GLP-1, followed by Eli Lilly's Mounjaro. The percentage of adults who were prescribed a GLP-1 drug but did not have bariatric surgery increased from 2.5% in 2019 to 11.2% in 2024 while the the percentage of adult patients who had bariatric surgery decreased 41.8%.

Read more of this story at Slashdot.

Researchers are developing techniques to genetically modify cancer-fighting immune cells directly inside patients rather than in expensive laboratory facilities, potentially making CAR-T therapy accessible to far more people. Current CAR-T treatments require removing a patient's T cells, shipping them to specialized facilities for genetic engineering, then returning them weeks later at costs around $500,000 per dose. The new "in vivo" approaches use viral vectors or RNA-loaded nanoparticles to deliver genetic instructions directly to T cells circulating in the bloodstream, which could reduce costs by an order of magnitude. Companies including Capstan Therapeutics, co-founded by Nobel laureates, and AstraZeneca-backed EsoBiotec have launched early human trials. While only about 200 US centers currently offer traditional CAR-T therapy, the approach could make the powerful treatment available on demand like conventional drugs.

Read more of this story at Slashdot.

German sportswear giant Adidas disclosed a data breach after attackers hacked a customer service provider and stole some customers' data. From a report: "adidas recently became aware that an unauthorized external party obtained certain consumer data through a third-party customer service provider," the company said. "We immediately took steps to contain the incident and launched a comprehensive investigation, collaborating with leading information security experts." Adidas added that the stolen information did not include the affected customers' payment-related information or passwords, as the threat actors behind the breach only gained access to contact. The company has also notified the relevant authorities regarding this security incident and will alert those affected by the data breach.

Read more of this story at Slashdot.

More than 50 years after its debut, Uno has achieved unprecedented popularity among adults, but its resurgence is creating problems and confusions as players disagree on fundamental rules. WSJ, in a fun story [non-paywalled source]: Think politics divides? Try mixing competitors with different views on stacking "action" cards, or getting everyone to agree on the true power of the Wild card. And nobody can seem to decide whether staples of the game of their youth -- like mandating players yell "Uno!" when they have one card left -- are socially acceptable at a bar with strangers. Mattel has responded by actively settling rule debates on social media, definitively stating that stacking Draw 2 cards is prohibited, while simultaneously embracing the game's divisive nature through marketing campaigns. The company's "Show 'Em No Mercy" variant, featuring more aggressive rules, became the second-best-selling card game in the United States last year according to research firm Circana, trailing only classic Uno itself.

Read more of this story at Slashdot.