ysleepy

I've used it for some time, it feels very much like it is in maintenance mode.

You manage a PKI and have to distribute the keys yourself, no auth/login etc.

it's much better than wireguard, not requiring O(N) config changes to add a node, and allowing peoxy nodes etc.

iirc key revocation and so on are not easy.

This helped with my S2722QC.

Also: https://www.dell.com/support/kbdoc/en-us/000331897/apple-m-p...

Oddly the notification brief in germany specifies false-high glucose readings, which would explain the urgency of the problem much better.

For high glucose you inject insulin, but if you don't really have high glucose you end up with dangerously low levels leading to coma or death.

https://www.bfarm.de/SharedDocs/Kundeninfos/DE/10/2025/42777...

How about no.

Cloudflare is a cancer interjecting itself into all sorts of communication I'd rather have directly with the other party, like my bank, email, blogs, health providers etc.

Gatekeeping the broader internet from people in poorer countries, people using VPNs etc.

I predict they will be the first pushing DRM blobs instead of html/js and killing the open web.

Still, why endorse and practically make everyone implement an algorithm that only the NSA wants, while there is a superset already standardised.

This is about the known bad actor NSA forcing through their own special version of a crypto building block they might downgrade-attack me to.

I pay like 1% overhead to also do ecc, and the renegotiation to the non-hybrid costs 2x and a round-trip extra. This makes no sense apart from downgrade attacks.

If it turns out ecc is completely broken, we can add the PQ only suite then.

Tell yourself what you want, but this sort of AI positive proclamation will make your project seem less trustworthy to many people.

I choose not to use a vibe coded password manager, rigorous review or not, to protect my entire digital existence, monetary assets and reputation.

It's the pinnacle of safety requirements, memory unsafe language, cryptography, incredibly high stakes.

I have the distinct displeasure having to review LLM output in pull requests and unfailingly they contain code the submitted doesn't fully understand.

It's very easy to do this with LXC containers in Proxmox now, as passing devices to a container is now possible from the UI.

They're fine, but they're incompatible with building fat-jars ro have single file deployment and dead to me because of that. Spring does some ugly jar-in-jar custom classloader stuff which I hate out of principle because it's spring.

Oracle hates that people build fat-jars and refuses to adress the huge benefit of single file deployables.

Nice to see so many researchers calling out this monstrosity.

Thank you.

Wouldn't it be more useful to measure the number of rows the model can process while still hitting 100% accuracy?

A float[] is packed and not a list of pointers in the jvm.

An ArrayList<Float> is a list of pointers though.

Seems like jetbrains angling for an Oracle buy-out.

Why else would they make the users the product.

Would it not have been easier to just mount the destroyed old pool or recovering the dataset from the history ring buffer?

zpool import -D

https://openzfs.github.io/openzfs-docs/man/master/8/zpool-im...

I haven't tried this, but I gather from the blog post that it would have been much simpler as it didn't require any of the encryption stuff.

The 16/256 M4 MacBook Air costs 850€ including 19% vat here in DE, so your numbers are way off or you live somewhere with very unfortunate peicing in the eu.

I've been contemplating archiving news as well.

The threat of large silos which will represent much of current historical record being rewritten is significant.

It is technically easy to accomplish using LLMs.

You are summarily dismissing their social skills.

It is very odd to read a one dimensional take like this, but this is hn, so I am not surprised.

It's not trivial to find it, you need to set it to dGPU only mode via mux switch and then let the LatencyMon test running for more than 120seconds.

(I'm not sure if it lags in igpu pass-through mode)

notebookcheck does report latencymon numbers and even remarks when it says the laptop is not recommended for real time audio:

https://www.notebookcheck.net/The-RTX-5090-Laptop-and-mini-L...

They don't see these extreme values though.

How about allowing users to disable internet access on a per-app basis?

If Apple had user's security in mind, it should be the easiest thing in the world to do. - My local password manager / OTP app doesn't need internet and I want to exclude the possibility of exfiltration.

Love the mitigation tech, but politically Apple is only interested as long as it doesn't hurt their cash cow. Ad tech and app devs with spyware.

A little rambling, I wasn't able to take away anything tangible. I wish them a lot of fun exploring though.

Without a comparison of letting postgres calculate the partition this is just useless.

And who in their right mind would calculate a hash using a static SQL query that isn't even using the pg catalog hashing routine but a reimplementation.

I'm baffled.

Germany installed over 430k of these mini solar setups in 2024 alone. Supermarkets sell them and you can get a 800W package for 200€.

I haven't heard a single anecdote of anything bad happening so far.

They amortize in a few years and are a great project to do with kids.

Benn Jordan has a cool video about a laser microphone he built:

https://youtube.com/watch?v=mEC6PM97IRI

I'd love to see some deeper automated analysis.

For example the XPC endpoints the binary offers and a list of other binaries which reference those.

Maybe the launch modalities, system vs. User session, which paths it reads/writes.

Not sure if all of those things can be staically determined by some tooling, but it would be really helpful.

For glance reading code, a predictable variable name or return keyword is a lot easier imo.

How? Genuine Question, this is something I really want.

macOS yes, but iOS?

If you go that route, GraalPy is there too, so the argument is not as strong as it seems.

That only works for high profile domains, a CA can just issue a cert, log it to CT and if asked claim they got some DNS response from the authoritative server. Then it's a he said she said problem.

Or is DNSSEC required for DV issuance? If it is, then we already rely on a trustworthy TLD.

I'm not saying there isn't some benefit in the implicit key mgmt oversight of CAs, but as an alternative to DV certs, just putting a pubkey in dnssec seems like a low effort win.

It's been a long time since I've done much of this though, so take my gut feeling with a grain of salt.

.com can issue arbitrary certificates right now, they control what DNS info is given to the CAs. So I don't quite see the change apart from people not talking about that threat vector atm.

MediaWiki has one of the worst syntaxes and formalisations out there. I've been trying to render wikipedia pages on and off for more than 10 years and there is no independent parser covering the whole syntax and magic behaviour.

https://www.mediawiki.org/wiki/Alternative_parsers

There is only parsoid, developed for the visual editor and that took pretty much a decade to build with much pain and suffering.

This is not the answer.

The annoying cleanup and wasted coffee seems specific to the espro. Cleaning a normal one is really quick and I don't mind the remainder of fines as they quickly settle at the bottom of the cup.