elwebmaster

Yes, having a US "front" is how North Koreans pass the identity verifications at US companies looking for remote workers. I have personally spoken with numerous such individuals. Think about it, if you were a legitimite organization attempting to gain US presence would your first action be to SPAM individuals on Github or to register a business and submit a job post on LinkedIn?

Just got a SPAM email from a Github scraper while reading this thread:

From: james@techglobal.website Quick note – your GitHub profile Hi X,

I came across your profile on GitHub. Given you're based in the US, I thought it might be relevant to reach out.

Profile:

I run a technical team (full-stack, cloud, DevOps) that delivers for clients. We're looking to work with an engineer based in the US on client-facing coordination—discovery, requirements, alignment—while we handle delivery. If that might be relevant, I'd be glad to set up a short call.

Regards, James

If I had to guess, "James" is a North Korean looking to scam US clients, based on my experience with shady actors.

And had the highest proportion of ignorant users.

While it can happen to anyone npm does preselect the users most likely to unknowingly amplify such an attack. Just today I was working on a simple JS script while disconnected from the Internet, Qwen Coder suggested I “npm install glob” which I couldn’t because there was no internet, so I asked for an alternative and sure enough the alternative solution was two lines of vanilla JS. This is just one example but it is the modus operandi of the NPM ecosystem.

Of course, since we live in 1984 already everything is edited as is convenient. For all that technology has given, nobody talks about what it has taken away.

I have never seen a website where I can sign up without a password and using only email and passkey. Is there one? All websites treat passkeys as an “add-on” to the passwords of the last century. Totally backwards thinking.

Why are we still using passwords? Why can’t all login be done with asymmetric keys: your public keys are stored on the server, your private keys on the device. Carry a backup pair on your USB and treat it as a key to your house. Any of them got lost? Just delete the respective public key from the service.

That would be a great idea!

what an ignorant and clueless comment. Guess what? Todays disks are NVMe drives which are orders of magnitude faster than the 5400rpm HDDs of the 90s. Today's swap is 90s RAM.

How about this one:

- patient: wants to maximize care, money no object since it isn't theirs

- medical practice: wants minimize care since money is based on number of patients not care

- insurer (government): wants to minimize money spent on care while maximizing care because money comes from healthy citizens who pay taxes

Congrats on having sold anything at all. This question should get more upvotes.

Already working on this, let's connect if you are interested: https://forms.gle/cxQZg5Q27PsT65d97

Can someone explain the issue with developer registration and how it results the terrible outcomes described in the article. A lot of things have changed for the worse since the beginning of the century but even back in the good old days developers were not anonymous. Every free software I have seen has the name of the developer alongside the copyright. Often it lists multiple contributors as each copyright has to be retained according to the license. I understand sending your ID to Google is more invasive but the anonymity aspect of it is moot. Is Google going to charge developers for this service and hence hinder free software development? Is the issue that younger devs will be unable to complete the verification? And why can’t F-Droid just distribute the binary signed by the developer who has confirmed their identity? Other than that, all concerns expressed in the article are quickly becoming major issues. The web is still open for now but many banks and other institutions have broken websites, forcing you to use their apps or become “unbanked”. Once you download their apps you find out they run only on “certified” OS, forcing you to have Apple or Google owned and controlled software on the hardware you paid for.

“a new paradigm for software development that you must learn or be left behind” that’s a completely inaccurate statement. Nobody is saying that you will be “left behind”. It certainly is a new paradigm but it doesn’t mean the old way of doing things won’t continue to exist. Just like there are still some problems that require code to be written in C or even assembly. Just like there are hand-made goods. The size of the opportunity is a whole different story.

TLDR the chat.tools.autoApprove VSCode setting which enables autonomous agent behavior is now moved to chat.tools.global.autoApprove and is behind a scary warning a la Mac's "I can't run this program" for unsigned binaries. For those who don't know, this setting, AKA "YOLO mode", enables the agent to use its tools without asking for permission every step of the way. It changes your role from "LLM babysitter" to a pilot with auto-pilot on who can sit back and enjoy the flight. Now VSCode will also repeat "Auto approved by setting chat.tools.global.autoApprove" after every tool use in the chat like a parrot that just won't shut the f up.

Same. The zero has only 512MB RAM so I started projects to rebuild the original BB OS for this while also adding Xpra to stream a browser running on a remote server (they all require 1GB+). Then priorities hit and I have not been back on this project since.

This is not Google though.

And you couldn’t just board a plane to Mexico or anywhere down south and get the job done for half the price including said flight? People keep complaining but don’t realize that no place is perfect in this world.

And not every consumer has to feel the pain to know. Many, like myself, have seen others suffer and have made their mind of not buying such a car.

How did you find your first customers?

One topic I am not finding anything about is networking. Can these microsandbox instances listen on ports? How is the port forwarding configured? Can they access the internet or any resources on the host?

There is a difference between applications and hired. Certainly a number larger than 0 do get hired, which in itself is a problem, but the bigger issue is that they are clogging the recruitment pipeline and preventing legitimate candidates from getting an interview. They are also wasting HR time. Ultimately this leads to HR prioritizing direct outreach, referrals and other application methods that are less open to scammers. It’s a lose-lose for everyone except North Korea and the few enablers they have on the ground in the US.

Please make one for North Koreans who will be posting thousands of fake resumes to these jobs. Ultimately the chance of a legitimate candidate getting through are less than the chance of winning the lottery.

I would dare guess the author just doesn’t know there is a perfectly functional Windows native Ollama release. I was doing the same thing until I realized that it makes no sense because I can just install ollama on Windows and then connect to it from within WSL.

It probably has its advantages but until the UX reaches what we get with “docker run” this technology will never achieve its potential. When developing we need to think not only about what is possible but also how people do things currently and how does that compare to what we are proposing in terms of ergonomics. How many commands to get from 0 to hero with incumbent solution? How many with proposed solution? You get the point.

Reply didn’t say that the expert is uneducated, just that their tool is obsolete. Better look at facts the way they are, sugar coating doesn’t serve anyone.

But how will people find out about it? Part of what we lost is the Google of back then when content was king. Can you rank a desktop-only website nowadays?

This doesn’t take long to build with LLM but what I find challenging to make is a beautiful and intuitive form builder. Is there any such open source solution out there? I found this one but IMO it is not usable outside of the dev community without heavy customizing: https://www.npmjs.com/package/react-form-builder2?activeTab=...

Touchscreens in cars should have been illegal to begin with it. How can it be that operating a cellphone is not allowed but operating a “tablet” is a necessity?

Doesn’t look like parody to me, based on the original report in Japanese: https://coda-cj.jp/news/2124/