trulyme

I mean, of course? Especially, why would I put ssh keys and similar in the container?

This still doesn't mean that one can install just any package, but it does make it much more difficult for it to do much harm. Breaking out of a container is not as trivial as it once was. That said, it is not a perfect solution, so I'd be happy to hear of better ones. Any suggestions?

Given what a dumpster fire npm ecosystem is security wise, it's best to run the whole build chain in a container anyway, at least for frontend apps. This way you also don't care about the chosen package manager or node.js version - you can just set it as you wish in the Dockerfile. It does take more disk space though, but to me it's a nice compromise.

Genuinly curious: do people in US report tips on their tax forms? (forgive my ignorance - tips are much less common around where I live)

Not a fan of Zoom myself, just - it seems to be used quite a lot around me. For me Jitsi is king for video conferencing.

Sorry about Jira. :)

There seem to be quite a few Europes around. The one I live in uses mostly Zoom, with some Teams, Skype, Slack and even Jitsi thrown in the mix.

Yeah, Teams is the worst of them in every dimension.

Lync is getting killed? Nice! Can we please take care of Teams next?

OSS actually sometimes does that - here is what we do, and hey, someone else is doing something similar.

True. It is just evidence that sometimes modern medicine doesn't have any superiority over quack medicines either.

The data is incoming, no worries.

Is there something like Oculus but... Well, in control of the user? Or at least less FB-y?

Me too. Had to go back to Windows at $JOB recently and find the experience... unpleasant, to put it mildly. I guess once you get used to a certain way it's difficult to change it. Hoping to get rid of Windows again soon. Can't imagine using W11, from what I've seen.

Heh, MS Teams... I wonder if the UX team is the same as for SharePoint. They both suck in a similar way - fortunatelly I can mostly avoid them both.

Or maybe they don't want to waste their time for users who can't even be bothered to type a few keys?

GUI is a great concept, but at some point, for more advanced operations, terminal simply makes more sense.

I am still hoping someone picks up development of uMatrix. NoScript is great, but just too tiresome to use on the modern web, while uMatrix has this genius UI where you can pick the allowed parts of the page easily and save the rules for later if needed. Highly recommend it, though it is sadly no longer supported. For now it works. :-/

Sorry if I wasn't clear enough, I was talking about query params in the URL, not request body.

This limit is often on client side though, so it pays to chech how this particular API does it.

Thank you for the clarification!

Whoa. Is that an import/export opportunity here? In EU the prices of both are comparable.

> The number of new meltdowns per decade rounds to zero, to five significant figures.

That's a weird metric (one meltdown is quite a catastrophe) and the calculation seems suspicious too. Between Chernobile and Fukushima I don't see how this could be correct.

I do find your other points more convincing, though with some "citation needed" wrt. coal.

Why only POST? Query params can be "hidden" in a similar way too, is there a reason GET requests are not vulnerable? Url length limit maybe?

Besides, why commit credit card fraud when there are so many scam options available in the crypto world. :)

>... Ford Pinto scale...

Link for curious: https://philosophia.uncg.edu/phi361-matteson/module-1-why-do...

And if not opensource, business model and price?

If somebody clones the repo they can even rewrite history. But that is not the same as them being able to claim the ownership of a commit in the original repo.

Well, yes, but maybe they should? It doesn't seem like a huge feature...

Off-topic: when reading the wikipedia articles that talk about "hot topics", if you want to see a less biased version, it pays to check edit history. In this case the page was last changed in November 2021 [0], before a set of changes occured starting at 21st Feb 2022. So... Be careful to at least notice the propaganda when it is happening.

(I don't have a proof of course, ymmv, and all that...)

[0] https://en.m.wikipedia.org/w/index.php?title=Foundations_of_...

It seems that Europe should make it a top priority to cut the supply of gas from Russia.

WSL2, afaik, runs modified Linux kernel (maintained by MS) on a modified Hyper-V. I would hardly call that a VM in traditional sense because it might introduce differences in behavior. However it is true that WSL2 uses virtualization technologies, so in that sense it is a VM. But calling it "a real Linux in a VM" is a stretch imho.

Ugh. Locales should be used for (user faced) input / output, never for saving data internally or for exporting it.

Well, there are some exceptions, like actually caring about the original datetime, but they are rare.

> I only have an Ubuntu 20 install via WSL2 here to test, and using the default compilers there (clang 10 and gcc 9.3), things look pretty nice:

WSL2 is not that bad, but installing a real Linux in a VM takes about 10 minutes, so this seems a weird thing to say.