akdev1l

For port checking I use `curl -v telnet://host:port`

0 days exist and they are exploited in the wild sometimes

An ad-blocker /is/ security software. You don’t have to take it from me, you can read from the Cybersecurity and Infrastructure Security Agency

> AT-A-GLANCE RECOMMENDATIONS

> Standardize and Secure Web Browsers

> Deploy Advertisement Blocking Software

> Isolate Web Browsers from Operating Systems

> Implement Protective Domain Name System Technologies

Literally their second recommendation on this pamphlet about securing web browsers: https://www.cisa.gov/sites/default/files/publications/Capaci...

Moreover you don’t even need a 0-day to fall for phishing. All you need is to be a little tired or somehow not paying attention (inb4 “it will never happen to ME, I am too smart for that”)

Not safe, before even knowing if a site has the content you want you can be redirected to malware through ad networks

not even joking

don’t worry bro in 6 months it will replace all devs

just 6 months more and like $200B in capex and we’ll be there, trust the process

Before there was some understanding that at least they wrote and understood their own garbage code

Now it is not true. Someone can spend a few minutes generating a non-sense change and push for review. I will have to spend a non-trivial amount of time to even know it’s non-sense.

This problem is already impacting projects like curl who just recently closed their bug bounty because of low-effort AI generated PRs

Disagree entirely.

If you state “in 6 months AI will not require that much knowledge to be effective” every year and it hasn’t happened yet then every time it has been stated has been false up to this point.

In 6 months we can come back to this thread and determine the truth value for the premise. I would guess it will be false as it has been historically so far.

I mean yeah, fuck Rovio or whatever

I also use AI to give me small examples and snippets, this way it works okay for me

However this still takes away from me in the sense that working with people who are using AI to output garbage frustrates me and still negatively impacts the whole craft for me

People have been saying this for multiple years in a row now.

I’m not worried about being a good dev or not but these AI things thoroughly take away from the thing I enjoy doing to the point I’d consider leaving the industry entirely

I don’t want to wrangle LLMs into hallucinating correct things or whatever, I don’t find that enjoyable at all

No Debian is stable as in “it shall not change”.

There are times where there are known bugs in Debian which are purposely not fixed but instead documented and worked around. That’s part of the stability promise. The behaviour shall not change which sometimes includes “bug as a feature”

I like Apple Arcade because it has non-shittified versions of classic games

Like Angry Birds, the official version is fucked up to the gills with ads

Isn’t VLC French also?

Seems the applications can call mlockall() to do this

and you still need to mount volumes and add all sorts of holes in the sandbox for applications to work correctly and/or be useful

try to run gimp inside a container for example, you’ll have to give access to your ~/Pictures or whatever for it to be useful

Compared to some photo editing applications on android/iOS which can work without having filesystem access by getting the file through the OS file picker

If a sandbox is optional then it is not really a good sandbox

naturally even flatpak on Linux suffers from this as legacy software simply doesn’t have a concept of permission models and this cannot be bolted on after the fact

find -print0 will print the files with null bytes as separators

xargs -0 will use a null byte as separator for each argument

printf 'a\0b\0c\0' | xargs -tI{} echo “file -> {}"

note that one should use -print0 and -0 for safety

not sure about B2 but AWS S3 SDK not assuming that people will do any tuning makes total sense

cuz in my experience no one is doing that tbh

They update the roms while keeping everything provided by Qualcomm the same

so basically the kernel is frozen even if the android version is updated

Companies can already do that. This is how redhat works in its entirety.

This has nothing to do with the base distribution

> I am still surprised most Linux Distros haven't changed their package managers to allow for selling of proprietary solutions directly, fully opt-in by default of course.

Why would a bunch of volunteers put a ton of effort to create infrastructure so people (corporations, really) can make money?

Flathub is making inroads into having paid apps but they’re explicitly not a distribution really

You can just use process substitution

cat <(secret-print my-secret)

I mean in such case it is equivalent to like `do-something | llm “summarize the thing”`

Personally I see “prompt scripting” as strictly worse than code

cannot even modify some part of the prompt without being sure that there won’t be random side effects

And from what I’ve seen these prompts can(and do tend to) grow into possibly hundreds of lines as they become more specific and people try to “patch” the edge cases.

It ends up being like code but strictly worse.

> Carefully test your markdown scripts interactively first

How does it help?

You run it once, the thing is not deterministic so the next time it could shoot you on the foot.

iirc M1 just cannot do multiple displays at all :-(

A modern M4 should tho

> can be more stable than relying on a distro's fixed release cycles

Stability for a distro means “doesn’t change” not “doesn’t crash”.

Debian/ubuntu are stable because they freeze versions so you can even create scripts to work around bugs and stuff and be sure that it will keep working throughout that entire release.

Arch Linux is not stable because you get updates every day or whatever. Maybe you had some script or patch to work around a bug and tomorrow it won’t work anymore.

This does not say _anything_ about crashing or bugs, except that if you find a bug/crash on a stable system then it is likely you can rely on this behaviour.

inb4 it’s actually an intern maintaining a 3000+ line markdown file

Amazon and BlackBerry both tried the whole “you can upload your same APK to our AppStore approach”.

And well, when’s the last time you used the Amazon android AppStore?

BlackBerry has been out of the phone business for years now.

They basically sold the brand to TCL iirc