ElectricalUnion

9 ms·

91.
by ElectricalUnion 10mo ago
The fact that tools like docker, podman and bubblewrap exist and work points out that the OS supports it, but using the OS APIs directly sucks. Otherwise the only "safe" implementations of such features would need a full software
92.
by ElectricalUnion 11mo ago
It's very rare that you'll be at the exact point where it does make sense to use the "not quite high-power GPU racks". * Lowest short term costs favors "just use the Cloud" solutions, that will often have power
93.
by ElectricalUnion 11mo ago
> Auto-editing them risks breaking zero-trust boundaries and traffic-inspection paths. How are you inspecting zero-trust traffic? Not at the gateway/VPC level, I hope, as naive DPI there will break zero-trust. If it breaks closed as
94.
by ElectricalUnion 11mo ago
That was what P3P was supposed to enforce automatically for you, until Google ruined it for everyone.
95.
by ElectricalUnion 11mo ago
NotebookLM?
96.
by ElectricalUnion 11mo ago
I find that for dev workflows (even outside firefox containers) to not mix up badly, you end up needing to split localhost anyway - so for example, binding to specific IPs inside 127.0.0.1/8 (it's a whole /8, you're usua
97.
by ElectricalUnion 11mo ago
Unless all python dependencies you ever used were available in your distro (and then at that point, you're no longer using pip, you're using dpkg...), this never worked well. What solves this well is PEP 723 and tooling around it.
98.
by ElectricalUnion 11mo ago
I wish this comment was true, but due to a foolish attempt to squish all human charactets to 2 bytes as UCS (that failed and turned into the ugly UTF-16 mess), a disaster called Han Unification was unleashed upon the world, and now out-of-b
99.
by ElectricalUnion 1y ago
> systemd is my hammer having it's own opinions about what nails I hit & where & into what & why. I feel like the exact opposite. systemd has way too many layers of customization. Things can be in /etc/systemd&
100.
by ElectricalUnion 1y ago
I read that message as "Whoever is the poor soul attempting to fix this system that doesn't boot, (because who otherwise inspects early boot messages?) whoever installed this system is running a known-fragile configuration."
101.
by ElectricalUnion 1y ago
So you want Fossil?
102.
by ElectricalUnion 1y ago
Information security's primary focus is the balanced protection of data confidentiality, integrity, and availability, so, not having availability of the things the user wants to do is a failing grade. In this case you can pretend you v
103.
by ElectricalUnion 1y ago
Either you really are secure, or ideally you should not be able to even pretend you are secure. Allowing "pretend it's secure" downgrades the security in all contexts. IMHO they should gradually lock all dynamic code executio
104.
by ElectricalUnion 1y ago
What about wayback? Assuming running X by itself becomes real bad and undesirable, would wayback+Xwayland cover all those "can't Wayland" use cases? What remains (besides better stability and wider availability of wayback) to
105.
by ElectricalUnion 1y ago
subprocess.run, with list args?
106.
by ElectricalUnion 1y ago
> - easy storage management, the "rampant layer violation" of zfs we really need; Except in zfs you have to think if you really want that device in that pool or that vdev. I use btrfs, slow and kinda unsafe, specifically becaus
107.
by ElectricalUnion 1y ago
> Hardware Support: Nvidia users face particular challenges, and many specialized hardware configurations simply don't work reliably. > The XLibre project continues this legacy with active community development. Guess what? Nvidi
108.
by ElectricalUnion 1y ago
Compression Attached Memory Module (CAMM) tries to be a middle-term solution for that, by reducing how crappy your average RAM socket is to latency and signal integrity issues. But, at this point, I can see CAMM delivered memory being reduc
109.
by ElectricalUnion 1y ago
Only if your entire model fits the GPU VRAM. To me this reads like "if you can afford those 256GB VRAM GPUs, you don't need PCIe bandwidth!"
110.
by ElectricalUnion 1y ago
Web Application Description Language is "WSDL for REST".
111.
by ElectricalUnion 1y ago
> I suppose it's possible that an OS could shim the dialog boxes for file selection, open, save, etc... and then transparently provide access to only those files Isn't this the idea behind Flatpak portals? Make your average app
112.
by ElectricalUnion 1y ago
> I know what a UUID (or a String) is. I now know I never know whenever "a UUID" is stored or represented as a GUIDv1 or a UUIDv4/UUIDv7. I know it's supposed to be "just 128 bits", but somehow, I had a bunc
113.
by ElectricalUnion 1y ago
AFAIK, it's the same even on POSIX, when you create a venv, "./bin/python" are symlinks and the pyvenv.cfg has a hardcoded absolute path of the current python interpreter the venv module was using at the time of cre
114.
by ElectricalUnion 1y ago
Funny thing, they used to say that about Hamaz before 7 October 2023.
115.
by ElectricalUnion 1y ago
Do you pull the entire toolchain inside the makefile if it doesn't exist in the host? Or you're just using it as a glorified alias over the (rather arcane) podman container run/docker run calls? Also, how do you solve the pro
116.
by ElectricalUnion 1y ago
> it's interesting to play around with a local model where you can edit the output and then have the model continue it. It's so interesting that there is a whole set of prompt injection attacks called prefilling attacks that at
117.
by ElectricalUnion 1y ago
In a more safe world, the CC HSM would have it's own display and pin entry, to avoid this exact issue. You really can't validate if the terminal is honest. Because as you rightly pointed out, who said the evil merchant or MitM thi
118.
by ElectricalUnion 1y ago
Ok, but those sources or methods will not reproducibly build the artifact that are the weights of DeepSeek R1 671B, that you claimed are "opensource". Because you can't see what they actually used to build it. DeepSeek didn&#
119.
by ElectricalUnion 1y ago
> Connections != Requests DNS lookups != Requests too...
120.
by ElectricalUnion 1y ago
> Nobody can use ChatGPT offline or retrain it, but DeepSeek is fully opensource. Well, you likely can't train DeepSeek yourself either. You most likely: * you philosophically don't have all the training data to train it yourse

More ›