st3fan

If you are a business dealing with with anything remotely sensitive then this is not so easy and you are basically forced to do business with a big player.

I vendor all my Go dependencies all the time for every project. It is the way.

Great when a company goes out of business and the domains are dangling. Next one to scoop it up takes over source code that others new depend on. We've seen this many times already in other ecosystems. It is a very bad situation.

It is bad advice to move your packages under your own domain. You will never be as good as Microsoft to keep paying for the domain. There are no guarantees in life but I do guarantee you that when you go out of business, that domain is the last thing you will think about.

"At some point, I had so many AI agents working, that the focus change was too much for me. There were tasks I could have done in 20 minutes easily, that took 5 minutes of an AI agent, and then 2 days for me to review. Because there were so many other things."

This is a personal time management problem. Not a tool problem.

THere is a lot of temptation to do many things at the same time. For some people this works. For others it doesn't. This is not a tool problem. You simply need to fit the tools in a way that matches your personal workflow.

I can do at most two things at the same time. A friend reads a book when Claude works on a task. We're all different.

"When you take a draft PR written by AI and have to work on it yourself, you realize to what degree you didn’t know what it was doing. You start questioning if you need this and that, and ultimately discard everything and start over."

This means you need more practice to master the tools.

I'm not saying every PR will be perfect but if you get unwanted slop and you care deeply about that then you need to up your prompting game.

Alternatively you can disable AI features and ... nothing to see, keep browsing.

I don’t understand what you are complaining about. Do you think there is an actual bug?

Final parts cost (with WA tax): $54092 (+$816 UPS)

See https://sunkcost.ai/

Huh I brew installed it and got a working tunnel in like 15 seconds.

Fire up the coding agents. This is a solvable problem.

We found the Rockstar driver!

the top comment .. "i prefer linux"

If you are on GitHub then you can also disable issues and only allow pulls from contributors (you). Then you still develop “in the open” but don’t take contributions.

Why is this not available for Linux?

AI Content

Give this a try https://infosec.exchange/@st3fan/117000352530023032

Only those that you shared the public link for?

Same. I really want to file a proper bug report for this but I haven't been able to really dig into the details and the last thing I want is a "ghostty is a cpu hog" kind of report without useful info on how to debug that.

"LLM-assisted code review won't be a huge disruptor" is quite the prediction. Because it already is in a very big way. The take on LLMs seems incredibly out of date and out of touch with reality. (Which of course, has moved/advanced very fast the past months/year)

Sounds like you have some new material to teach for Vibecademy.

Why not Templ? Does it do something different or better?

My ARM64 experiment started in 2020 with the MacBook Air M1 and I have not looked back. ARM on the desktop or your lap is possible.

I call BS on that story

Browsers are also a continuous finger printing target.

It is opt-in on iOS for Applications. Applications have to declare upfront what sites they will communicate with.

It is called app transport security. if you don't set it up your app boots in a sandbox with no network.

Settings -> Privacy Security -> App Privacy Report

Unfortunately 1 - as a _user_ you cannot opt-in or out. I wish Apple would take the next step and let us select which sites an app is not allowed to communicate with. Or ideally even globally for all apps.

Unfortunately 2 - the list of sites the app wants to communicate with is not clearly communicated upfront like before you install.

Unfortunately 3 - the list can also contain wildcard domains

Small steps - they really need to push this to the next phase IMO.

On iOS those are collected and sent to the developer via the OS so you would still get them via Xcode. Sentry would obviously not work.

For 350 USD, and note that this is without a case, storage and power, you can also buy a N100 or N150 mini pc.

The Pi was supposed to be cheap. What happened.

There is no excuse. GitHub runs a great program on HackerOne and it should just have been submitted there.

Also note that the person who found this was pissed because they had a difficult experience with submitting a bug for VSCode THREE YEARS AGO through MSRC which is _completely different_ than the GitHub H1 program and no doubt much more challenging with a different experience.

There is really no excuse for this irresponsible disclosure. They could have at least tried instead of holding a grudge for three years.

Loud fans and 4 hours of battery life?