baobun

You mean with your other sockpuppet account you did?

I see this distinction mentioned from time to time and it doesn't make sense to me. IMO, your actions not being tracable to your identity is privacy. In this framing, anonymity is part of privacy. You desire anonymity because of the privacy it gives you. Which is not to say that anonymity is always required for privacy though it tends to strengthen it.

Similarly, sometimes people say there's a tradeoff between security and privacy, which doesn't make sense since privacy (confidentiality) is one dimension of information security.

If you still disagree, could you attempt at defining privacy and anonymity and how you can prioritize meaningful anonymity without caring about privacy?

NPM show 0 dependents in public packages. The 56k downloads number can easily have been be gamed by automation and therefore not a reliable signal of popularity.

Complaining about GitHub beng down is soo yesterday[0]

[0]: In Finland

> WAIT we think this might not be a real video

> a reverse image search shows that 4chan and youtube had similar videos 5 years ago

> we also found a .pdf with the investigators mentioning a fake video: https://www.justice.gov/epstein/files/DataSet%208/EFTA000299...

https://xcancel.com/notawizard/status/2003226464192463132

---

Original post:

> Warning: extremely disturbing. The DOJ uploaded a 12 second video showing what appears to be Epstein attempting to kill himself. The camera timestamp is the day his body was discovered.

> The DOJ quietly released the footage, but didn't link to the video yet from their main Epstein Files page. https://www.justice.gov/epstein/files/DataSet%208/EFTA000299...

https://xcancel.com/rtwlz/status/2003211685650374823

https://www.jmail.world/drive/EFTA00029924

https://web.archive.org/web/20251222211740/https://www.justi...

> do you believe that Sweden of all countries is under Trump's direct influence re: wind aversion?

It looks increasingly like a US vassal state for every year so that part wouldn't be so surprising.

Besides, the article you posted does not support your claim that Sweden blocked all offshore wind construction. On the contrary it refutes it by mentioning some greenlit offshore wind construction projects.

I think the "you" here is an obvious self-insert by the autor which is fine in my book. It's only about you if you choose to read it that way.

Maybe this post has a narrow intended audience. Not every post has to be targeting all readers. If it's not true for you then it's not, y'know? Absolutely no need to lash out and HN is not a place for venting. Besides I think they're basically writing about themselves. By the upvotes and comments, it looks like some people do relate.

> Manjaro

That's your problem right there. EndeavourOS is also a beginner-friendly Arch derivative but less breaky.

> Wifi to work ootb

I definitely feel you on that one, it's just the luck of the draw sometimes... If you haven't considered it, in some laptops the wifi module is a replacable mPCIe or m2 module and if that's the case, more compatible replacements shouldn't be hard to find for cheap or salvaged from broken laptops.

Thank you! o7

Going to have some more figuring out what's up with spilo - turns out that running that outside of k8s is rare and not much documented. But it's still patroni so this is very helpful.

Someone should tell the author that Robin laying an egg is the source of Batman's smell.

> And it would be so simple to implement: Just some intelligent prompting or even static and dynamic analysis to detect re-occurring patterns in code and execution paths.

So just do it, then? Or are you just as incompentent yourself?

This is a decent video summary that goes a bit deeper than the article.

What Sam Altman doesn't want you to know

https://www.youtube.com/watch?v=l0K4XPu3Qhg

Sure, but maybe you you shouldn't be surprised to be disqualified from that "Best Drive of the Year" award as you do.

Dupe:

https://news.ycombinator.com/item?id=46342428

https://news.ycombinator.com/item?id=46336117

Yo I'm curious if you have any pointers on how you went about this to share? Did you use their provided upgrade script or did you instrument the upgrade yourself "out of band"? rsync?

Currently scratching my head on what the appropriate upgrade procedure is for a non-k8s/operator spilo/patroni cluster for minimal downtime and risk. The script doesn't seem to work for this setup, erroring on mismatching PG_VERSION when attempting. If you don't mind sharing it would be very appreciated.

That would be the lane for turning, yes?

Routers and access points are also typically separate device classes. Yet the market has figured out that most consumers prefer all-in-one devices. Expecting households to run dedicated firewalls besides their AiO wifi-routers is ludicrous.

What firewall do you recommend a typical user couple their ER7212PC (which BTW is already tripling as VPN gateway and cloud-controller) with?

The problem is that TP-link does not give two cents to security in their products.

> And no, I'm not being pedantic

You very much are.

What would make you say such a thing?

PC gaming will be fine even without 8K 120fps raytracing. It will be fine even if limited to iGPUs. Maybe even better off if it means new titles are actually playable on an average new miniPC. More realistically I guess we get an AMD/Intel duopoly looking quite similar instead.

It will probably be a bigger blow to people who want to run LLMs at home.

You don't use actions pulling in unpinned dependencies outside of trusted distro package manager at runtime.

I believe this problem is probably overstated. Can you point us to such an action you are concerned with that has either transitive actions dependency or unlocked npm dependencies where maintainers aren't responsive to addressing PRs to illustrate?

Just don't use actions which pull in arbitrary npm packages without a lockfile.

Don't use such actions. Or fork them and commit add the lockfile yourself, if you're cool with the implied maintenance.

This is the way to do it.

Pin by hash.

Verify that the actions themselves aren't pulling in unpinned dependencies from Actions, NPM, or elsewhere.

Have a CI job or bot create PRs for new versions. Verify those PRs before merging.

If any particular action becomes a recurring chore or risk, consider if you should keep depending on it.

If you do these things, the "we need a package manager" is moot and most if not all of the concerns in that blog post don't affect you.

This is likely the reason behind the recent push of "Trusted Publishing" from NPM. They are trying to make people consider GitHub (and GitLab) in its own higher tier with regards to supply-chain security by decree.

If you rely on "Trusted Publishing" you are assisting Microsoft in making a moat for their CI platform.

Use cryptographic signatures, not implicit trust in a hosted platform.

(e): Community software like act and Forgejo/Gitea Actions have made it a lot easier to run GitHub Actions workflows without involving GitHub and are decreasing the friction of migration.

Now you are talking about value but you asked about cost. They are not the same.

bigyabai is talking about utility from perspective of the owner or a hypothetical buyer, not concerned with the wider community.

"Zuck" works

The internet should very much be considered an untrusted network.

And yet you chose to highlight it, unprompted, in a conversation where it is off-topic.

Besides, military invasion of an independent non-aggressive country is a global concern. Like Russia invading Ukraine was or a hypothetical US invasion of Venezuela would be.