baobun

8 ms·

91.
by baobun 10mo ago
You mean with your other sockpuppet account you did?
92.
by baobun 10mo ago
I see this distinction mentioned from time to time and it doesn't make sense to me. IMO, your actions not being tracable to your identity is privacy. In this framing, anonymity is part of privacy. You desire anonymity because of the
93.
by baobun 10mo ago
NPM show 0 dependents in public packages. The 56k downloads number can easily have been be gamed by automation and therefore not a reliable signal of popularity.
94.
by baobun 10mo ago
Complaining about GitHub beng down is soo yesterday[0] [0]: In Finland
95.
by baobun 10mo ago
> WAIT we think this might not be a real video > a reverse image search shows that 4chan and youtube had similar videos 5 years ago > we also found a .pdf with the investigators mentioning a fake video: https://www.justi
96.
by baobun 10mo ago
> do you believe that Sweden of all countries is under Trump's direct influence re: wind aversion? It looks increasingly like a US vassal state for every year so that part wouldn't be so surprising. Besides, the article you pos
97.
by baobun 10mo ago
I think the "you" here is an obvious self-insert by the autor which is fine in my book. It's only about you if you choose to read it that way.
98.
by baobun 10mo ago
Maybe this post has a narrow intended audience. Not every post has to be targeting all readers. If it's not true for you then it's not, y'know? Absolutely no need to lash out and HN is not a place for venting. Besides I think
99.
by baobun 10mo ago
> Manjaro That's your problem right there. EndeavourOS is also a beginner-friendly Arch derivative but less breaky. > Wifi to work ootb I definitely feel you on that one, it's just the luck of the draw sometimes... If you ha
100.
by baobun 10mo ago
Thank you! o7 Going to have some more figuring out what's up with spilo - turns out that running that outside of k8s is rare and not much documented. But it's still patroni so this is very helpful.
101.
by baobun 10mo ago
Someone should tell the author that Robin laying an egg is the source of Batman's smell.
102.
by baobun 10mo ago
> And it would be so simple to implement: Just some intelligent prompting or even static and dynamic analysis to detect re-occurring patterns in code and execution paths. So just do it, then? Or are you just as incompentent yourself?
103.
by baobun 10mo ago
This is a decent video summary that goes a bit deeper than the article. What Sam Altman doesn't want you to know https://www.youtube.com/watch?v=l0K4XPu3Qhg
104.
by baobun 10mo ago
Sure, but maybe you you shouldn't be surprised to be disqualified from that "Best Drive of the Year" award as you do.
105.
by baobun 10mo ago
Dupe: https://news.ycombinator.com/item?id=46342428 https://news.ycombinator.com/item?id=46336117
106.
Why tech billionaires are quietly bankrolling Europe's far-right [video](youtube.com)
9 points by baobun 10mo ago|0 comments
107.
by baobun 10mo ago
Yo I'm curious if you have any pointers on how you went about this to share? Did you use their provided upgrade script or did you instrument the upgrade yourself "out of band"? rsync? Currently scratching my head on what the
108.
by baobun 10mo ago
That would be the lane for turning, yes?
109.
by baobun 10mo ago
Routers and access points are also typically separate device classes. Yet the market has figured out that most consumers prefer all-in-one devices. Expecting households to run dedicated firewalls besides their AiO wifi-routers is ludicrous.
110.
by baobun 10mo ago
What would make you say such a thing?
111.
by baobun 10mo ago
PC gaming will be fine even without 8K 120fps raytracing. It will be fine even if limited to iGPUs. Maybe even better off if it means new titles are actually playable on an average new miniPC. More realistically I guess we get an AMD/I
112.
by baobun 10mo ago
You don't use actions pulling in unpinned dependencies outside of trusted distro package manager at runtime. I believe this problem is probably overstated. Can you point us to such an action you are concerned with that has either trans
113.
by baobun 10mo ago
Just don't use actions which pull in arbitrary npm packages without a lockfile.
114.
by baobun 10mo ago
Don't use such actions. Or fork them and commit add the lockfile yourself, if you're cool with the implied maintenance.
115.
by baobun 10mo ago
This is the way to do it. Pin by hash. Verify that the actions themselves aren't pulling in unpinned dependencies from Actions, NPM, or elsewhere. Have a CI job or bot create PRs for new versions. Verify those PRs before merging. If an
116.
by baobun 10mo ago
This is likely the reason behind the recent push of "Trusted Publishing" from NPM. They are trying to make people consider GitHub (and GitLab) in its own higher tier with regards to supply-chain security by decree. If you rely on
117.
by baobun 10mo ago
(e): Community software like act and Forgejo/Gitea Actions have made it a lot easier to run GitHub Actions workflows without involving GitHub and are decreasing the friction of migration.
118.
by baobun 10mo ago
Now you are talking about value but you asked about cost. They are not the same. bigyabai is talking about utility from perspective of the owner or a hypothetical buyer, not concerned with the wider community.
119.
by baobun 10mo ago
"Zuck" works
120.
by baobun 10mo ago
The internet should very much be considered an untrusted network.

More ›