actualwitch

8 ms·

61.
Show HN: Experiment ▴ LLM UI for developers with tool use visualization(github.com)
9 points by actualwitch 2y ago|2 comments
62.
by actualwitch 2y ago
> unusually large and alarming number of dead replies If you search previous discussions on this site that in any way touch on lgbt/trans topic in the slightest, you will find it is not unusual at all. The only surprising thing abou
63.
by actualwitch 2y ago
https://news.ycombinator.com/newsguidelines.html Please don't post comments saying that HN is turning into Reddit. It's a semi-noob illusion, as old as the hills.
64.
by actualwitch 2y ago
You don't have to lose backend/frontend logic colocation when you shed next.js, just implement your own ssr which is mostly trivial. You don't have to use server components either, you just have to guarantee that node imports
65.
by actualwitch 2y ago
I haven't commonly experienced issues that would cause my router to lose access to ntp for extended periods of time, and in such cases you can just reset using physical button. Of course, TOTP should be optional to use so I am not too
66.
by actualwitch 2y ago
Completely forgot that localhost is a special case for secure contexts... Yeah that would either just not work at all or require some tomfoolery with dynamic subdomains which I would not be comfortable with. TOTP would be the go-to then, I
67.
by actualwitch 2y ago
Yes, what you describe (or storing ssh key on yubikey) would be a more secure setup. I like the web ui though, so having that be available from any device including phone in a reasonably secure way would be great IMO. You can do pretty much
68.
by actualwitch 2y ago
Ooh, nice! It's great to hear.
69.
by actualwitch 2y ago
I give a shit what language the thing is written in. Right now it's c for uhttpd + lua for luci. I would prefer to cut as much of both as possible from firmware of devices on my network. Not only that, trying to write decent modern UI
70.
by actualwitch 2y ago
So that infected tv/iot device doesn't bruteforce your router's admin account. I know you could set it up so it stops listening on 0.0.0.0 and firewall exists, but having 2fa on web ui and removing ssh should bring good enoug
71.
by actualwitch 2y ago
I am surprised (hardware tokens based) luci 2fa is not on the list, I would think it is table stakes at this point.
72.
by actualwitch 2y ago
This right here is the reason code of conduct exists: so that everyone agrees on what kind of behavior is out of line before starting to work on the project.
73.
by actualwitch 2y ago
I was recently watching a talk about uv by one of the developers. One thing he said has really stayed with me after the talk - having tooling that works near-instantaneously unlocks whole new category of experiences. Inspired by that I gave
74.
by actualwitch 2y ago
Asking for emails allows you to target people who are more likely to engage with your marketing, while people who find this annoying would probably be more critical of the product and in general are more picky. In the end they still give yo
75.
by actualwitch 2y ago
Swift didn't save apple from rce's in blastdoor.
76.
by actualwitch 2y ago
[flagged]
77.
by actualwitch 2y ago
> What happens when this "AI" is used to sway an election? What do you mean "when"? It's already happening. https://apnews.com/article/trump-taylor-swift-fake-endorseme...
78.
by actualwitch 2y ago
A solid chunk of python is just wrappers around C/C++, most tensor frameworks included.
79.
by actualwitch 2y ago
> If you want to put yourself in my shoes: imagine you're getting shit done with TypeScript every day, and some C programmers come along and complain that it's missing the bare minimum of tools: strace, valgrind and gdb. How do
80.
by actualwitch 2y ago
"I think Windows 8 is a catastrophe for everyone in the PC space. I think we’ll lose some of the top-tier PC/OEMs, who will exit the market. I think margins will be destroyed for a bunch of people. If that’s true, then it will be
81.
by actualwitch 2y ago
Have you heard about codepush? Apps are routinely ignoring this requirement and apple does literally nothing, as recently discussed on hn: https://news.ycombinator.com/item?id=41146779
82.
by actualwitch 2y ago
> valve does contribute to gaming on Linux They only do it because they are painfully aware their rent-seeking behavior is entirely at whims of ms/apple and they want to have some moat.
83.
by actualwitch 3y ago
Should we make a petition for apple to make lockdown-like mode that disables speculative execution? I'll sign up for that.
84.
by actualwitch 3y ago
> Scanning Apple's release notes or security update disclosures for the update doesn't reveal any smoking guns Wait what? So 10 screens of bangers like "An app may be able to execute arbitrary code with kernel privileges&q
85.
by actualwitch 3y ago
They should have definitely done a more thorough due diligence before partnering with them.
86.
by actualwitch 3y ago
> Microsoft and Google are more private than Mozilla Having used an app firewall, I have determined this to be false.
87.
by actualwitch 3y ago
Apparently it is also the same service that Mozilla Monitor uses, as per ToS. Big yikes. https://www.mozilla.org/en-US/about/legal/terms/subscription...
88.
by actualwitch 3y ago
"Funniest" part is that this page also tries to establish a webrtc connection which i know because my firewall told me browser tried to connect via nat-stun port to some server. Webrtc is a common way to fingerprint vpn users beca
89.
About the security content of macOS Sonoma 14.4(support.apple.com)
2 points by actualwitch 3y ago|0 comments
90.
by actualwitch 3y ago
> Since when has HN turned into Reddit? That has been happening for a while, but people are not talking about it because it's explicitly against hn guidelines. Gee, I wonder why.

More ›