pkulak

I use Systemd containers in Nix. That’s really cool because I can selectively link in the parts of my desktop that I want it to have access to.

https://github.com/pkulak/opencrow

I feel like this isn't going to be a simple permission popup. Probably along the lines of getting an "unapproved" binary to run, where you have to stop what you're doing and wade through settings, trying to find the right toggle 6 nodes deep in the tree.

Same here. I _think_ I use the TTS stuff? Not sure. I just subscribe to support the project.

Guys, you don't have to use it. That's the _entire_ point. Every comment in here is some version of "But it's still a cloud". Sure. But if the entire thing can be replaced with a Tailscale free account, or a Cloudflare tunnel, or a port forward at your router (in descending order of "should you do it"), is it really the same thing? Hence the name change.

I like a sandbox, but there's arguments for all three. Jai is still my favorite on Linux.

There's something about this take that... irks me. A little bit more every time I hear it, and I've been hearing it a lot. I dislike the implication that anyone who takes more care with their setup than downloading an exe from a website and double clicking it is some kind of chump. They could be prompting the next ticket instead!

Even if taking pride in your tools was a productivity killer (I have my doubts), maybe there's mental value to be gained.

Sure, but some things are too low-level to be skills or extensions. Code mode seems like that to me.

If the market crashes, and I can buy a TB of TPU on the cheap, I can host 4.1 flash myself. :D

It's at least harder! Better chance it'll hit your 5-hour limit before it does. haha

Agreed. Edited. I do feel like I was just following the existing tone set by OP, but no excuse.

Way better isolation, is my guess. Plus, you can use a different kernel this way.

I used to poo-poo when people said that containers aren't a _real_ security boundary, at least for personal stuff, and not a multi-tenant server. But I bet even mid-tier LLMs can break out of LXC/Docker/nspawn at this point.

Yup, same experience here. I used it for one day, spent the next day fixing its lousy code, then went back to 5.6.

EDIT to not be a dick about it: I think the key detail here is the difference in isolation between containers and VMs, and where emulation comes in.

That was 6.1 Astra. And I'm assuming it's being tabled because it still doesn't match Opus 5.5.

This is a decent win though, if it really is better. 6-sol was really no good, at least in my work.

Can I offer up one more possible contributor? Maybe it's cliche, but car dependency. I have family and friends in my own medium-sized city, but the thought of driving all the way over there (20 minutes - 1 hour, totally random), or, even worse, forcing them to drive all the way over here by the invitation, is a bit much. Driving home, even worse. You wanna have some drinks (maybe more than "some", lol), but you gotta drive home.

I know in the 70s folks were just as, if not more car dependent, but it kinda worked back then. I only have real experience in the 90s, but even then, I remember my parents having people over, and I never got the impression they came from very far. Sometimes blocks away. They still drove... but it wasn't the same.

Nope. This is a VM, with containers inside. And the containers weren't "re-implemented", it uses existing systemd containers. That's what I was able to learn by skimming the site for 30 seconds. Did you not even do that? And why even be so condescending to someone else's project?

I did 10-12 years ago. Google was cool back then. I bought them for family when I wanted something cheap that would work and not be a support burden. Plus, it was (kinda) Gentoo based! But yeah, stopped doing that 5-6 years ago. Now I go with old Thinkpads and Bluefin.

I cancelled my codex subscription 2 days ago, but only because I knew I could wire into Luna API pricing. Luna xhigh writes very good code, basically for free.

One is abstraction, one is complexity that _you_ own. Even 100 lines of trad-coded C relies on "hundreds of MB to GB of code from god knows where" in the Linux kernel. The difference is, you can perfectly understand that C, and own it. Then delegate ownership of the rest to Linus. If AI writes 1000 lines of C instead, now there's code no human owns in the world.

Eh, I bet the luddite boards were all loom talk at the end too.

haha, I kid. I... kid. :(

The reason a crib is useful is because the enigma can't route a letter back to itself. So, you can slide the crib along the message until no letters line up, and that's possibly where it is. If your crib is "the", that's not terribly useful, because it could exist anywhere. The longer the better.

I ONLY know this because https://www.youtube.com/watch?v=JsBZOcqZerk, btw.

I've had that looping issue with open models too. But never 4.1. I wonder if it's a model + harness combo? But yeah, one loop issue and I'm done with a model forever.

4.1 consistently surprises me in capability for the price. And I don't think I'm the only one. It's been dominating the leaderboard at OpenRouter, and I just got an email today from Fireworks saying they were _raising_ the price by about 30%. I'll probably switch, because their infra doesn't support being the highest-cost, but it's still telling.

Wow, I'm surprised you are saying GLM 5.3 Flash is more capable. Isn't is like half the price of 4.1 Flash?

Only because we understand everything _except_ how it works.

Is Google still chasing frontier? Seems like they haven't had a "Pro" model in forever. I think a good niche for them would be right where they are now.

Same. I use Luna for research/scout/test subagents, Sol for coordinator, Terra for delegate, and Astra high for review and simplify. Even with Astra in there, it’s fresh context, and I’m consistently amazed by how far I can stretch my $20 subscription with really good results.

Raw isn’t an image though, it’s pre-image. And we have an open raw format already. DNF I think. With pretty decent adoption.

We have to apply some weight to the fact that one is open, one isn't, right?

EDIT: Oh! Of course. AVIF is based on AV1. For some reason I was thinking HEIF the entire time I was reading the article. Man... withdrawn!

Really good read, btw. Very good points.

Same. Have a Kickstarter one that’s been going strong ever since.