josteink

As reported by parts of the tech press this last year, Mozilla is seemingly on its way to certain bankruptcy.

I guess we should expect more incidents like this the time to come.

> because the vast majority of devs have no idea that containers are just scripts to set up Linux namespaces.

That’s IMO framing things a bit backwards.

That’s how containers are implemented… today. on Linux. On Windows it’s completely different. On MacOS it’s completely different again.

And what makes you think «namespaces» are a term unique to containers? It’s used throughout tech for a million other platforms too.

Containers however is a well defined concept, regardless of how they are implemented today, and on one platform only.

systemd would probably see more use of their container-platform if they put «container» in the name, that much seems obvious to me.

> One limitation of the current disk image for Rock Pi is that you don’t have a functional TTY.

I believe on systemd-based systems these are service-units you need to enable, and with yocto, possibly install?

    systemctl enable -now getty@tty0 (etc) 

Or something like that. I’ve experienced similar issues while working on a x86 based NAS and also on the RPi when enabling serial-consoles.

> If we had instead simply mirrored everything into a registry at a big cloud provider

You would have had to authenticate to access that repo as well.

> Does breaking out of the container give you root?

You can run unprivileged containers, and in that case, no.

Most systemd-projects have a name which immediately shouts out what it does, so you can easily tell if it is relevant for your needs or not.

systemd-nspawn is probably the only project without such a name, so most people don't know about it, nor what it does, and therefore never looks any more into it.

And that's a shame really, because it's fantastic technology.

OCI is for running prepackaged software in black boxes from the internet, where you have no interest or ownership of the container internals.

Most of my containers are not like that. Well, actually none are.

systemd-nspawn is for running your own containers, with a VM-like usage pattern (ie not immutable), deployed as part of your overall systemd based infrastructure for when the thing you need to manage is "too big" to be deployed as its own systemd-service unit, but you still want to be able "to systemd" it.

This fits my use-case perfectly.

I've used lots of different container-types over the years to replace VMs with lightweight containers, but right now I'm running systemd-nspawn, and I really, really like it.

The way it integrates with systemd, both inside and outside the container makes it a no-brainer for app-isolation when the app in question is a bit too complex for just being a service-unit in itself, and you don't want to lose observability by hiding everything behind some obscure docker wall.

The way everything integrates into systemctl and you can get aggregated stats for your entire machine and all its sub-containers... Amazingly nice.

I just can't imagine any better way of managing containers on a Linux system than this.

Only thing I would complain about is the name. They really could have come up with something a bit more catchy or self-descriptive. This is probably the only systemd type service which does not immediately shout out what its about, so most people are probably not even aware that systemd can manage containers for you.

Which is why enterprises everywhere has software and tooling in place to provide this, for the exact things they do deliver.

I don’t see how anyone can «sell» this information when it’s literally available for free already.

While this may sound exaggerated, I’ve actually on occasion torrented a show because I thought I had to if I wanted to see it, only to later turn out I could have watched on one of the streaming services I’m already paying for.

And that’s just crazy really.

Maybe I’m weird, but to me all the Apple TV+ shows really comes off with the same (to me at least) vibe, like it was made in the same factory, following the same recipe.

It instantly degrades what could/might be art to mere «content» and it’s a huge turn off.

I don’t think I’ve ever finished more than 1 full season of a Apple TV+ show.

That said, I’m not claiming Netflix is any better.

Uh. My Kindle cost me $100 like 8-10 years ago and has literally zero running costs.

What are these figures you are mentioning?

If a Kobo means a monthly fee, I swear I’ll never even consider getting one.

That’s my point. In a unanswered question, there is nothing to predict (ie «learn» or «think» which I never said), so the AI/LLM will predict using a different source which has responded something, correctness or relevancy be damned.

What’s with your tone btw? RTFA? To me that feels quite unwarranted and in violation of the site guidelines.

Chill out, eh?

> Because they were trained on internet arguments, and nobody on the internet has ever admitted they don't know something

Or people’s questions were left unanswered (because nobody knew), and there was nothing for the LLM to learn there.

So I guess LLMs can’t learn the absence of answers?

> Why should it not, one of the design goals of Swift as C, Objective-C and C++ replacement was painless interop with those languages.

This is actually a very good quality. I'm exploiting that for all it's worth in a job project where I'm gradually (file by file) converting a legacy codebase from Objective-C to Swift.

Providing an exit-strategy for Objective-C is good enough reason for me to at least have a basic working knowledge of the language.

> * CNAME pointing to Azure Website/WebApp Instance

Microsoft has made it possible to have your webapps CNAME record be unique to your AzureAD tenant and never to be reused.

This prevents these kinds of attacks.

More info here: https://techcommunity.microsoft.com/blog/azurenetworkingblog...

On the contrary «fact checkers» have rarely had any other function than persisting propaganda for the status quo, which quite often have turned out not to be true.

I say good riddance.

> A subdued man was brutally and gleefully executed in public, on camera

This is clearly misinfornation, intentional or not.

The man died of a drug overdose after swallowing drugs to conceal evidence from the police.

This is clearly stated in the coroners report.

There was no murder or execution. Even BLM was founded on a lie.

> what is still a big puzzle is why police didn't draw weapons during such a violent attack. Usually police, the DC one including, would draw weapons and shoot at the smallest perception of even smallest disobedience

There’s video evidence that police were the first to fire, specifically teargas into a reasonably obedient crowd.

It’s after this happened things started escalating.

> willing to forgive an attempt to overthrow an election

Alternate view: protesting an election they deem to be rigged.

Since 2020, especially after the 2024 election results came in, theres now even more evidence to suggests democrats rigged the election.

If you believe a election to be illegitimately stolen, is it not appropriate to demonstrate against such an crime?

I’m baffled how someone can find this to be anything except the right thing to do.

> they all smack of bad faith

> That said, if people whose entire personality is being anti-trans

Are you talking about protecting women’s rights? That’s pro something, not anti something, right?

So speaking of bad faith… The only one I see acting in bad faith here is you?

Things like this? https://lunduke.locals.com/post/6505039/bluesky-bans-lunduke...

And this: https://x.com/clownworld_/status/1858194893249917377?s=46

And this: https://x.com/immeme0/status/1872482191869132932?s=46

Etc. They seem REALLY ban-happy over there.

My interest for bluesky is practically non-existent as long as they ban people for posting commonly held views and scientific facts.

I’m not going to invest in a platform where fear of banning is a thing from the get go.

Passkeys are free. You do not need to buy them.

They replace passwords, after all.

«Activate login via FaceID». «OK».

Congratulations. You have a passkey.

Was that easy enough?

Why not use both? There are several password managers which supports passkeys.

That’s where I have mine.

> The software industry has zero concept of how much pain and suffering passkeys are going to cause the average person, almost entirely because the average American has an iPhone and a Windows laptop and there's literally nothing built-in to iOS or Windows that will sync passkeys between these two devices

Then you register multiple passkeys for the website, just like you would register several Yubikeys.

It’s a 1-click process, and no HW-token required. Most people will be fine.

I in fact do this with Bitwarden on a daily basis.

It works ok!

> Comparing one guy who was in the hot seat only because of his surname

There exists boatloads of concrete evidence Hunter Biden was guilty of several categories of crimes, related to drugs, corruption, illegal firearms and child prostitutes.

There’s a reason he had to be pardoned by Joe, right? He essentially created a “the full laptop” pardon, complete unprecedented.

Any other person guilty of half these things would be in for life.

You got it backwards. He didn’t get a shit storm due to his last name. He got a free pass due to it.

This was my experience trying to find and instance to join. And as a result I didn't join any.

I'm pretty sure most "normal" people would react in a similar fashion, which kind of makes this a notable catch-22 for wider Mastadon-adaption.