CGamesPlay

8 ms·

61.
by CGamesPlay 5mo ago
Can you cite this? It's not YAML execution syntax, surely Github doesn't do it, the only vector I can see is if you put it unquoted into a shell script inside of a GHA yaml.
62.
by CGamesPlay 5mo ago
That doesn't feel like a repetition at all? You said that the first time there was "traffic loss but without the extra google money", but that this time there's no extra google money either way.
63.
by CGamesPlay 5mo ago
Things on my workstation that the container does not have access to: browser cookies, 1Password cli, SSH keys (even if I allow the SSH agent socket), cargo publish tokens (unless it’s a rust project), npm tokens (unless it’s an npm project)
64.
by CGamesPlay 5mo ago
Which has been around for 22 years now!
65.
by CGamesPlay 5mo ago
Given Anthropic's existing track record of producing terrible hallucinated inaccurate documentation in Claude Code, I'm very curious how Bun will handle this as it continues development. Anthropic probably doesn't care about
66.
by CGamesPlay 5mo ago
How do you think the GitLab employees felt about it?
67.
by CGamesPlay 5mo ago
I'm also switching back to Obsidian after a few-year stint on Anytype, and the Notebook Navigator plugin is the only one I have installed. This is (I assume) a UI-only plugin, which shouldn't need access to external network or pro
68.
by CGamesPlay 5mo ago
Proc title is very easily forged (without root even). Obviously a real privileged process could modify the kernel and do whatever it wants, but if I were trying to detect this I would start with /proc/$id/exe.
69.
by CGamesPlay 5mo ago
Would certainly be interesting to learn more about. A simple check: allowlist of known "processes that run as root". Any new process shows up, something happened.
70.
by CGamesPlay 5mo ago
Honestly I'm not really thinking about the boss-programmer relationship, but rather the programmer-agent relationship. At best, you get what fnordpiglet is talking about, where it's a symbiotic relationship. On the other side of t
71.
by CGamesPlay 5mo ago
Exactly this. We need to be more precise than blanket statements like "agentic coding is a trap" and start figuring out what a "tasteful" application of agentic coding looks like. ChatGPT is destroying liberal arts curri
72.
by CGamesPlay 5mo ago
I've built this twice before. The main problem that I hit is that the AI agents suck at the process lifecycle management: leaving processes alive, starting the same daemon multiple times, etc. From a brief glance over the code I like t
73.
by CGamesPlay 5mo ago
Many countries, this is often called a golden visa (term predates the current US president).
74.
by CGamesPlay 5mo ago
That's fair (although it doesn't have anything to do with getting "real root" in a userns in that case). I guess one approach would be something like modifying the host's logrotate binary and waiting for it to trigg
75.
by CGamesPlay 5mo ago
> if your model is that linux is just about single-user desktops, this local exploit isn't too bad. For example, if you have passwordless sudo, you've already got a widely known LPE vulnerability lurking on your system.
76.
by CGamesPlay 5mo ago
It's worth pointing out that you cannot, definitionally, get "real UID 0" in a "rootless" container, because then it wouldn't be a rootless container. This is relevant because this exploit doesn't claim to
77.
by CGamesPlay 5mo ago
Kubernetes 1.33 switches to user namespaces enabled by default, which I imagine is the same underlying mechanism that rootless Podman uses. `hostUsers: false` is the way to ensure that root in the pod is root on the host. It's trivial
78.
by CGamesPlay 5mo ago
It doesn’t? You could easily install the tracker on the client app, no need to do it server side. In fact I bet the app in question (Flo) was doing the upload to Meta client-side.
79.
by CGamesPlay 6mo ago
Claude Code doesn't have an option to use Opus 4.6 any more for me. It was great, but I guess now I have to use it half as much or upgrade my subscription again.
80.
by CGamesPlay 6mo ago
Didn't know that! I tried it and it doesn't work for me, sadly. Test case: `seq 1 100 | bat --pager=builtin` Result: immediate exit, no output printed at all. https://github.com/sharkdp/bat/issues/10
81.
by CGamesPlay 6mo ago
Realistically, I will be reviewing a diff, see a hunk I don’t like, change it, and want to see the change back in less. So saving my scroll offset would accomplish my goal. I guess I should add that I want to be able to quit as well? Like I
82.
by CGamesPlay 6mo ago
Bat just uses less internally. And it deliberately breaks less’ handling of ^C, annoyingly.
83.
by CGamesPlay 6mo ago
Is there a name for this style of writing? Where it's composed exclusively of simple sentences. Short and punchy. Paragraphs with just a single sentence. I know it's associated with LLM writing. This article probably wasn't w
84.
by CGamesPlay 6mo ago
I am definitely waiting for a "modern less replacement" in the same vein as fd, sd, fzf, and the rest of the under-20yo cli crew. I get that "less" is reasonably maintained still. I think the killer feature for me would
85.
by CGamesPlay 6mo ago
I made a fun marimo notebook to try and derive these myself. I structured each cell in order based on the diagram at the end of the paper. It uses Sympy to determine if the function is correct or not. https://gist.github.com&#x2F
86.
by CGamesPlay 6mo ago
That cuts it by about 90%. But as others have said, the default US plug doesn't ship with a ground pin (though the extended cord does IIRC).
87.
by CGamesPlay 6mo ago
Oh is that why it happens? Was wondering why the spot directly under my wrist was pitted into a sawblade. I also filed it, though just enough to remove the pitting, nothing like the OP did. It's easy for me to feel the mains frequenc
88.
by CGamesPlay 6mo ago
Can you clarify what exactly you mean? Skills are markdown files, so they definitely can't call APIs or CLIs. Are you saying that a skill can tell the agent to use curl to call web APIs? Or something different?
89.
by CGamesPlay 6mo ago
The packages that are actually compromised are yanked, but I assume you're talking about a scenario more like log4shell. In that case, you can just disable the config to install the update, then re-enable in 7 days. Given that compromi
90.
by CGamesPlay 6mo ago
What are you doing with ! that requires this? Some alternatives I can think of depending on the use case are ^Z or :term.

More ›