sersi

That's exactly what I've done in the past. We had to be soc2 and pci dss compliant (high volume so couldn't be through saq). I wouldn't say the auditor helped much in improving our security posture but allowed me to justify some changes and improvements that did help a lot.

But wouldn't the type of people that notifes anomalous network activity be exactly the type of people who add a 7 day delay because they're security conscious?

I mean first thing I do in any browser is change the search engine so it's not like it affects me in any way. I don't expect opensource projects to never make deals that give them some money, I just want them to be fully transparent when they do. Waterfox is transparent and clearly states who and how they sell their user data to.

I mean Apple hasn't done itself any favours with Macos Tahoe.

And still a lot of people will give broad permissions to docker container, use network host, not use rootless containers etc... The principle of least privilege is very very rarely applied in my experience.

And what about, it exfiltrated my AWS keys (or insert random valuable thing that sits in .config of your home directory)? Backing up is not going to help you in that case.

I run my AI agent unconstrained in a VM without access to my local network so it can futz with the system however it wants (so far, I've had to rebuild the VM twice from Claude borking it). That works great for software development.

For devops work, etc (like your use case), I much prefer talking to it and letting it guide me into fixing the issue. Mostly because after that I really understand what the issue was and can fix it myself in the future.

I'm actually curious if the windows source code leak of 2004 increased the number of exploits against windows? I'm not sure if it included internet explorer. I remember that windows 2000 was included back then.

I've had some success with installing windows in dosbox-x which has glide support. Faster and more lightweight than pcem/86box

In the US yes. Recently I was in China and was supposed that both lego stores I visited didn't have them. Only available when ordering online.

I've purposefully bought a lot of the old lego technic universal building sets second hand for my son. They come with multiple ideas and the type of design is less finished and more prone to modifications. I want my son to play with legos by creating his own designs, not by following a set and then shelving it

I've been using a VM for claude code (probably would keep doing that as I do like how much control I have over it by doing that) but this is definitely a useful tool, I'll happily use that in the future.

I actually would really love that in a city planner. A game that actually simulates walkable cities versus car centric abominations and would adapt families strategies based on the availability of sidewalks, public transports and incentives.

It was a better linux for the desktop back during the snow leopard day but it's slowly gotten worse at the same time that linux became better. Now the only advantages they have is the hardware. The os is buggy doesn't respect apple's own human interface guidelines and is increasingly locked down. Gone are the days of simbl extensions, customizability and a clean nice coherent stable os with few bugs.

Old Skies was really great, stayed with me a long time

Another great AGS made game is Technobabylon. That and Gemini Rue are my two favourite Wadjet Eyes Games

Having done both, right now I prefer vibe coding with good engineers. Way less handholding. For non-technical managers, outside of prototyping vibe coding produces terrible results

Well you do need to vet dependencies and I wish there was a way to exclude purely vibe coded dependencies that no human reviewed but for well established libraries, I do trust well maintained and designed human developed libraries over AI slop.

Don't get me wrong, I'm not a luddite, I use claude code and cursor but the code generated by either of those is nowhere near what I'd call good maintainable code and I end up having to rewrite/refactor a big portion before it's in any halfway decent state.

That said with the most egregious packages like left-pad etc in nodejs world it was always a better idea to build your own instead of depending on that.

I just decided to create a vm for my claude code with strict network controls so it can't access my own internal network and I limit what exactly gets shared to it.

> This has been going on for years; the right simply refuses to countenance the possibility of legitimate organic opposition, while also being chronically unable to provide any evidence for their claims.

That strategy is also typical of China. Whenever there's a protest (for example the HK protests), it's always financed by western interests. Even volunteers organically organising themselves to help victims of the Tai Po fire were deemed to be western interests trying to discredit China. It's a surprisingly effective tactic.

I just always wonder how we have so many people eating this up when the strategy is so blindingly obvious.

> Who opens an physical encyclopedia nowadays? I know plenty of people who binge wikipedia and learn new things through that. While Wikipedia is not always perfect, it's not like older printed encyclopaedia like Britannica were perfect either.

You have a point with trusting AI, but I'm starting to see people around me realising that LLMs tend to be overconfident even when wrong and verifying the source instead of just trusting. That's the way I use something like perplexity, I use it as an improved search engines and then tend to visit the sources it lists.

> 1. You can think of this as a lighter version of Japanese office culture, but not limited to office... it's kind of everywhere in society.

Having worked in Japan, while there is a strong respect for authority, there's also much less hesitation about asking for clarification. I worked with an Indian offshore team and in a Japanese company and, while there's a lot to dislike in Japanese office culture, this kind of pattern of behaviour doesn't happen.

2 & 3 do make sense though.

I've had mixed result with your advice at the end. I'd say that it worked for about 30% of the offshore engineers I've worked with and indeed I had more success with juniors than with more senior developers.

I really hate the current trend of not having passwords. For example perplexity doesn't have a password, just an email verification to login.

I think that really depends on countries. I went to an engineering school only 15% of applicants out of high school were admitted and of those who were admitted only around 75% graduated.

Western education passing as many fee paying students as possible seems to be very much a UK/US phenomenon but doesn't seem to be the case of European countries where the best schools are public and fees are very low (In France, private engineering schools rank lower)

Sidenote, I appreciate that you allow installing on macos. I hate typing on a phone so having it run on a computer is much better.

I kind of remember 98SE being an improvement. Otherwise agree though

When I was a child in France people were quick to say that trains ran on time in Germany... Well, in my experience there is no developed country with a worse train company than DB. Even Amtrack is still slightly better. In France people complain about the SNCF (especially strikes) but at least outside of strikes the TGV are mostly on time.

I mean I skimmed it earlier but I do plan to read it. That said my pre-established conclusions are based on first hand negative accounts of people who currently still live in China some of which do not speak English so weren't influenced by any "western narrative" (where I also lived for a number of years before moving to HK). Those are not accounts from a well-off diaspora.

EDIT: By the way, it's not that hard either to find books written by Chinese writers not part of the diaspora that are critical of the cultural revolution (Serve the people by Yan Lianke, 3 body problem by Liu Cixin) or the great leap forward (4 books by Yan Lianke). Obviously, writers living in China that have to deal with censorship tend to be less directly critical of it compared to writers from the diaspora but that doesn't stop some criticism to shine through.a

Oh the fact that there has been some positives from the cultural revolution (by having educated people sent to the farm and rural area) doesn't stop the fact that the cultural revolution was a net negative for the country. How many works of arts have been destroyed due to it? How many people suffered? Nothing is ever white or black but it doesn't mean that we can take a small positive outcome and use that to justify atrocities.

To be fair, my father in law who is Chinese and had to exile himself during the cultural revolution would pretty much say the same thing about the Cultural Revolution. Educated people in China who lived through it will certainly criticise the Cultural Revolution (or The Great Leap Forward for that matter) if they are in a situation when they can be honest about it.

So I'm not sure that specific comment would be considered to be a "dominant western narrative" unless you're going to tell me that older (and so who have lived through it) educated people in China who don't speak a word of English have a western mindset because they're educated.