octagons

I’ve only seen vague suggestions of what is actually being gated through this verification. Is there a more definitive explanation of what will require the verification?

Either way, the moment I encounter this, I’ll be canceling. It’s a complete deal breaker.

Mehdi is such a wonderful educator! I wish I’d had him as a professor for whatever topic he’d be interested in teaching.

ImHex++. I also can’t help but shill for 010 Editor, a commercial alternative that one might describe as a little less opinionated.

I developed a font with a similar resolution that was not nearly as legible for my Pi Zero with an e-ink screen many years ago. It allowed for similar tooling such as the flipper zero and esp32 marauder projects. I should fire that project up and implement this font…

I’m not a software engineer. Most of my work these days focuses on microcontroller exploitation. I have 15 years of professional experience as a security consultant/contractor.

I mean this genuinely and in good faith in case you didn’t already know it: the term for “non-blank, non-comment…” in programming is usually “Significant Lines Of Code” or SLOC.

I think the author’s intent is well-placed, but it does feel a bit sad that this subject is blog-worthy.

I’ve spent a lifetime teaching myself programming, computers, and engineering. I have no formal education in these disciplines and find that I excel due to the self-taught nature of my background.

I take a very metered approach to AI and use it for autocomplete while still scrutinizing every token (not the AI kind) as well as an augment to my self-pedagogy. It’s great to be able to “query” or get a summary from a set of technical documents on demand.

However, I don’t understand the desire to remove oneself from the process with AI. I simply don’t do anything that won’t teach me something new or improve my existing skills.

There’s more to engineering than simply programming. Both the engineer and the intended user base must also understand the system. The value lost is greater than the sum of all the parts when an LLM produces most or all of the code.

Terry Pratchett wrote an excellent metaphor for this concept: https://terrypratchett.com/explore-discworld/sam-vimes-boots...

> Don't be scared. Fuck around a bit.

Damn good advice.

They’re still in step 2 of their general game plan: embrace, extend, extinguish.

I’ve had a good experience running Arch Linux on my “gaming” PC in the living room. It helps that I’m very comfortable with Linux internals, but I’d say I have no issues or issues that can be fixed with 2-3 clicks about 95% of the time.

My setup is basically Arch Linux, ProtonUp-Qt (to easily install specific versions of Proton, the compatibility layer), Steam, and the proprietary Nvidia drivers/Vulkan. I generally have no issues with Easy Anti-Cheat games like Arc Raiders, but obviously anything that requires secure boot attestation like Arena Breakout Infinite won’t play. I’ve not bothered to try setting up full secure boot as the games that require it aren’t typically in my wheelhouse.

I hope Linux adoption continues for my own, very self-serving, interests. I get the sense that those who primarily use their computer for gaming are the frogs slowly being boiled by Microsoft who continues to back their these customers into uncomfortable, unnecessary corners.

Are there any generally available microcontrollers with this block inside?

“Open source” has a very different meaning when it comes to silicon.

This is the general premise behind Ken Thompson’s “Reflections on Trusting Trust” and I highly recommend you read it if this is something that interests you.

Oddly, “7070” seems to always return a Database Error for me. Other numbers work fine.

Is there evidence that shows a trend in increased violent crime committed using 3D-printed weapons?

I’ve certainly seen projects and models demonstrating the ability to create firearms with the help of a 3D printer, but I’m not aware of anyone using one to commit a crime…

The wording and tone of the emails sent to Adguard reads just like phishing emails with a hint of political SMS spam. Glad to see the people behind there thinking critically and acting rationally despite such language.

I’ve been running an Incus cluster of 3 fairly beefy servers for about a year now. It’s my go-to recommendation for anyone wanting to setup a new virtualized environment.

One of my favorite features is how you can tag different cluster members for different architectures. In the same cluster, I can have traditional dual-socket x86 servers with a dozen DIMM slots as well as Raspberry Pis. The architecture tagging lets me strategize execution of ARM-based container workloads to be only on the Pis, or opt to run them via QEMU on the x86 platforms if that makes more sense in a particular scenario. Since I deal with a lot of embedded firmware, this offers a nice, flexible platform.

Stephen Graeber is also a long time contributor to the LXC project and his reasoning behind this fork and other changes are quite sound. I hope the project sees continued success. Stephen’s business model of offering consulting services for Incus systems also seems quite sound.

Yes, it can do both. The image server will build for both options if possible, so you have to specify “—vm” on the command line creating the domain.

SS7 strikes again!

In my experience, anyone running Wayland is very much used to some number of applications that depend on Xwayland. Does Zathura + MuPDF not work with it?

Either way, if you want to show off a project, just do so…

FYI - the inclusion of UWB (specifically the FiRa consortium secure ranging standard) was not part of the CCC Digital Key specification until v4.0.0, which only left its draft state very recently, at least in terms of automotive security standards.

Toyota moves more slowly than many other brands because of their company culture/philosophy.

To your point about BEVs, Toyota started producing BEV batteries at their plant in North Carolina this year: https://www.toyota.com/usa/operations/map/tbmnc

Wow, this is overall great advice.

I am much later in my career than the audience I assume this is intended for, but I have struggled to mentor junior colleagues on many of the major bullet points here so succinctly.

This should be recommended reading for new college grads entering a more traditional (I.e. non-startup) work environment. Definitely keeping a bookmark of this for that reason.

I was a little disappointed to discover there was only 1 degree of separation between “Benito Mussolini” and “Bread”.

For context: https://blog.jxmo.io/p/there-is-only-one-model

That’s unfortunate. I believed Anthropic was playing the long game and betting on a smaller but more technically proficient userbase.

I guess I’ll be canceling my subscription largely out of principal. I doubt any open-source models are capable of handling my use case as well as Claude (typically focused on getting up to speed with various ISO/IEEE standards for the purpose of security testing) but I’m sure I’ll find a solution.

I share this sentiment - I often get the sense that they struggle to prioritize their development efforts appropriately.

It baffles me that they don’t offer a way of creating my own JetBrains IDE from the pile of features available across their IDEs and other tools. I pay for the “all products pack” and have started to question whether it’s worth it. Even if I am working in an IDE like PyCharm, it’s not much work to also work with a pre-compiled language in the same project. The distinction between the different IDEs grows less so year over year.

I’ve always used huginn[0] for these types of tasks, though the learning curve/implementation is a bit cumbersome for more trivial tasks like the proposed scenario.

[0] https://github.com/huginn/huginn

Check out Smallstep’s step-ca server [0]. It still requires some work, but it allows you to run your own CA and ACME server. I have nothing against just hosting records off of a subdomain and using LE as mentioned, but I personally find it satisfying to host everything myself.

[0] https://smallstep.com/docs/step-ca/

To be clear, I didn’t register anything. I just have a configuration that serves records for a zone like “artichoke.” on my DNS server. Internal hosts are then accessible via https://gitlab.artichoke, for example.

Against much well-informed advice, I use a vanity domain for my internal network at home. Through a combination Smallstep CA, CoreDNS, and Traefik, any services I host in my Docker Swarm cluster automatically are immediately issued a signed SSL certificate, load-balanced, and resolvable. Traefik also allows me to configure authentication for any services that I may not wish to expose without such.

That said, I do recommend the use of the internal. zone for any such setup, as others have commented. This article provides some good reasons why (at least for .local) you should aim to use a standards-compliant internal zone: https://community.veeam.com/blogs-and-podcasts-57/why-using-...