Spivak

10 ms·

181.
by Spivak 9mo ago
I mean I'm currently getting "expensive" medical care and the doctors are still all using AI scribes. I wouldn't assume there would be a gap in anything other than perception. I imagine doctors that cater to the fuck you
182.
by Spivak 9mo ago
In some ways it might be a good thing that shorthand signals of quality are being destroyed because it forces all of us to meaningfully engage with the work. No more LGTM +1 when every PR looks good.
183.
by Spivak 9mo ago
https://0pointer.net/blog/authenticated-boot-and-disk-encryp... You. The money quote about the current state of Linux security: > In fact, right now, your data is probably more secure if stored on current ChromeOS,
184.
by Spivak 9mo ago
I think https://0pointer.net/blog/authenticated-boot-and-disk-encryp... is a much better explanation of the motivation behind this straight from the horse's mouth. It does a really good job of motivating the need
185.
by Spivak 9mo ago
Which is crazy because Outlook the actual application has got to be one of the worst email clients in existence. The only email client that I've dealt with that had more problems was the one guy who insisted on still using pine.
186.
by Spivak 9mo ago
I can't speak to the default install but Thinkpads have what I would consider perfect hardware support. Absolutely everything works, fingerprint reader, tpm, nvidia card, and all.
187.
by Spivak 9mo ago
Look I get that, but the parent was talking about there being just no alternative to 365 when it seems like nearly every product in the suite has plenty of competitors. It does seem like you can put your money where your mouth is in this ca
188.
by Spivak 9mo ago
Genuinely, what's the sell of Microsoft 365? I get MS Word, Excel whatever lock in but what is their cloud actually adding that can't be substituted? Email, chat, video calling, and file storage? All products that have plenty of c
189.
by Spivak 9mo ago
Is there a term for when a problem has been solved for so long it falls out of living memory creating a natural breeding ground for people to question why the solution is even necessary, come up with nothing because the problem is so long g
190.
by Spivak 9mo ago
This is such a lazy take and ignores that this is the only system that has the property of not losing data when users forget their passwords and lose (or likely never write down) their recovery key. That's it. That's the whole thi
191.
by Spivak 9mo ago
There is no other way for this to work that won't result in an absolutely massive number of people losing their data permanently who had no idea their drive was encrypted. Well there is, leave BitLocker disabled by default and the driv
192.
by Spivak 9mo ago
Yeah, people are sleeping on Podman who is now genuinely leading the space now that docker-engine is all but in maintenance mode. Quadlets are amazing and greatly simplify the deployment and management of containers. The systemd integration
193.
by Spivak 9mo ago
I forget what combination of settings does it but my Windows start menu now only searches the two start menu folders. It's perfect, completely deterministic, instant. Trying to turn the app launcher into the magic "accio <anyth
194.
by Spivak 9mo ago
Yes literal dollars I can spend anywhere. It can even be deposited into my bank. For doing nothing at all except paying my normal expenses via my 2% cash back card I get $400-800 annually. I know I could probably min-max this into more by j
195.
by Spivak 9mo ago
I think the difference is I was buying pre-cut fruit for $7 every week so I spent two days and now my fruit magically cuts itself forever. He turned an ongoing expense into a one time expense. And bonus he likely had fun doing the labor.
196.
by Spivak 9mo ago
> I wonder what went wrong with our society. Predators. https://maggieappleton.com/cozy-web
197.
by Spivak 9mo ago
Turn fireball off. Keep NAT on, internal addresses are still not reachable. You are protected against firewall misconfigurations as well as the outside world. Defense in depth. NAT in its customary usage is a bit of a historical accident th
198.
by Spivak 9mo ago
Hardest to attack: fcab:cdef:1234:5678:9abc:def0:1234:5678 The whole point is that your devices on the inside of your network can't be routed to at all.
199.
by Spivak 9mo ago
HN apparently can't fathom that people pay for Verizon because the service is good. I get Verizon free through work and sorry it's noticeably faster than Visible. The discount plans aren't actually the same but cheaper. If yo
200.
by Spivak 9mo ago
With NAT your device does not have a publicly routable address. Attackers have no way of contacting you at all. Without NAT you have a publicly routable address and attackers can try reaching out to your device. You rely entirely on your de
201.
by Spivak 9mo ago
Have we finally tricked devs and companies into writing good documentation by making it into an AI thing? This has got to be the dream scenario for technical writers and historians who have a hard time getting the business to invest into th
202.
by Spivak 9mo ago
I use a ThinkPad with Linux as my daily driver and a MBP at work. I love my ThinkPad dearly-but it goes 0/4 up against the MBP. The best thing I've done for my in practice battery life on Linux is enable aggressive suspend to hibe
203.
by Spivak 9mo ago
Looks like you don't want your AI vendor to also be an advertiser. The divide between AI companies on different sides of the line is about to be stark in terms of experience. The same can be said for your search vendor I suppose. And
204.
by Spivak 9mo ago
It's not about the access, it's about the completeness. Imagine this paradigm takes off (I hope it does!), everyone has their own PDS and finally owns their data. Social apps link into their PDS to publish and share data exactly a
205.
by Spivak 9mo ago
And that frustration makes sense in the context of the article. Devs don't care about any of that stuff because they're customer facing, it's a distraction from their primary responsibility. It would be like asking an Amazon
206.
by Spivak 9mo ago
I feel like a lot of companies need to check compliance boxes. We apply CIS benchmarks as part of getting our SOC 2. They're not required explicitly but they're easy to apply and auditors accept it without any fanfare. I haven&#x2
207.
by Spivak 9mo ago
Huh? I have this permission in Firefox right now. It looks like Safari handles this with the OS local network permission. True I did assume machines are single user, I haven't seen a shared computer in ages. Doing local development I h
208.
by Spivak 9mo ago
This doesn't actually seem that bad to me? Browsers don't let random pages on the internet hit localhost without prompting you anymore so it's not like a random website could RCE you unless you're running an old browser—
209.
by Spivak 9mo ago
These playbooks apply the CIS benchmarks, very very useful for compliance. I use them at $dayjob to build our base AMIs. As for whether they actually harden your servers, that's up for you to decide if you think that CIS actually helps
210.
by Spivak 9mo ago
The merit metric is just different than you expect it to be. The university wants students who rise to the top of their school. The state champions all move on to the regional tournament even if 2nd and 3rd place in Illinois are better than

More ›