3np

38 ms·

631.
by 3np 2y ago
Looks promising! I think I did managed to wrangle fcitx into some reasonable emoji input in the past but at some point it broke / I lost it and configuring that tool is just an unpredictable mess... Will keep an eye on yours!
632.
by 3np 2y ago
That doesn't sound like industrial espionage? (I'd also love to know)
633.
by 3np 2y ago
If you count Nix and Guix, there's that. Otherwise the classics (Ansible/Puppet/Chef/Saltstack) seem to still hold their positions somewhat. (I don't count Terraform/Pulumi/OpenTofu in this category)
634.
by 3np 2y ago
> But luckily "npm audit" will warn us about 30 "high severity" ReDos "high impact" "vulnerabilities" that can never realistically be triggered and are not really a "vulnerability" in the
635.
by 3np 2y ago
No, it's more than that. Did you read the documentation page linked in the comment you replied to? > But what about after the command has run? If you munge around in node_modules after a successful `npm ci`, that's on you. If y
636.
by 3np 2y ago
You should think of the package metadata as originating from the publisher, not from the registry. Aside from the name, version, and (generated) dist and maintainers fields, I don't think any of it is even supposed to be validated by t
637.
by 3np 2y ago
That would be a clear violation of the npm Unpublish Policy[0]. If all it takes is some spam and pissing people off to walk away from principles, they never meant anything. A proper response needs to not break expectations like this. [0]:
638.
by 3np 2y ago
For situations when you care, go for `npm ci` instead of `npm install`. It will ensure lockfile consistency. https://docs.npmjs.com/cli/v9/commands/npm-ci
639.
by 3np 2y ago
That (and anything else relying on the lockfile) won't take effect for users who install the package from the npm registry, unlike changes in package.json.
640.
by 3np 2y ago
Re 2: How is that "spoofing"..? You just demonstrated the uglier package-manager-independent overrides(npm)/resolutions(yarn) aliternative method. Because for whatever reason they couldn't play nice with each other. npmj
641.
by 3np 2y ago
TigerVNC x0vncserver[0] is just one option for ezpz sharing your existing X session. Couple it with novnc if you want it in the web browser. Currently WebSockets but WebCodecs support looks to be around the corner[1]. > Terrible product
642.
by 3np 2y ago
[Guix/Ansible/Chef/Nix/Puppet] + systemd-networkd + firewalld/nftables. It's not much different than setting up any old load-balancer or reverse proxy on an internal network. Why not Docker? Since routes are ke
643.
by 3np 2y ago
I think they're referring to ProtonMail, not ProtonVPN. Same company, same difference. What makes you believe that they would play one service so significantly differently than the other? https://arstechnica.com/informa
644.
by 3np 2y ago
Got any details, reference, quote, or analysis on the CS claim? AFAICT, the only discriminating factor is lack of solicited third-party security audits. Which I don't think implies being "untrustworthy". https://ww
645.
by 3np 2y ago
~20% of profits, though. Regardless, I found the number staggeringly high.
646.
by 3np 2y ago
I've seen quite a few people do something similar with repurposed PSP controllers since a few years ago. Wouldn't be surprised if there's something more purpose-made available by now, if you search around.
647.
by 3np 2y ago
I believe it when I see it. Have fun LARPing with your "RISC-C SOCs" (if you even run any...).
648.
by 3np 2y ago
You're asking them to prove non-existence? Come on, just drop some references already. From your GP: > I guess I will avoid that chip and favor those without an ARM block then. Luckily there are many. What would your personal top pi
649.
by 3np 2y ago
Where does memory-hard Proof-of-Work fall on this triangle? (In the typical meaning of PoW, as opposed to human attention-work)
650.
by 3np 2y ago
> I would wager that most people would not have considered something like Crowdstrike to be a single point of failure. It is not what you would generally think of. Sure. Most people are not decision-makers for critical IT infrastructure.
651.
by 3np 2y ago
> While I am sure that Delta's IT department was understaffed, this was also a unique situation. If you spent the time to make a well optimized machine for rolling out updates, things were automated, and you expected things to go wr
652.
by 3np 2y ago
You do you. Dozens of people do prefer text-based over the context-switching involved in reaching for pointer interface and clicking that button.
653.
by 3np 2y ago
Just upgraded. Did not encounter the issue in OP so I guess they fixed it. The one hickup I had was that it appears to consider packages from jammy-security (here: libcap2-bin) foreign and won't proceed without downgrading (which is ne
654.
by 3np 2y ago
It works fine if coupled with URL replacement. The custom hostname will be replaced transparantly for you and won't need to make it into gitmodules. # ~/.config/git/config # Only for single user/org [u
655.
by 3np 2y ago
The Apple Magic keyboard still does this I believe? Worst part of an otherwise good keyboard.
656.
by 3np 2y ago
Note: Linux Mint 22 was recently released and is based on Ubuntu 24.04 Noble LTS. Mint does not use year-based versioning like Ubuntu does.
657.
by 3np 2y ago
> The hair trick can be used both by good guys and by bad guys. Duh. Are you implying the existense of opsec-techniques that are only usably by "good guys"...?
658.
by 3np 2y ago
> Agreed the prose was a bit over the top "Epistemic" has become a bit of trigger word for me. More often than not its usage contributes nothing but social signalling.
659.
by 3np 2y ago
> I don't think it's unreasonable for people to expect cloudflare to be policing their own service On the contrary. The tendency of those expectations turning into assumptions is the wider issue.
660.
by 3np 2y ago
And, y'know, use a separate domain for admin email.

More ›