conradev

8 ms·

61.
by conradev 10mo ago
I think all containers share the same netns in a pod. You restrict the pod to only the Wireguard peer IP, and have a (NET_ADMIN) sidecar container create an interface (tun/kernel wg) and update the routing tables for the netns. Then
62.
by conradev 10mo ago
Tor does this the right way on Linux. You make a separate user namespace with access only to the WireGuard network adapter and run the program inside of that. You want the kernel involved if you want any sort of guarantee: https:/&#x2
63.
by conradev 10mo ago
Prompt engineering (communicating with models?) is a foundational skill. Skills, tools, MCPs, etc. are all built on prompts. My take is that the overlap is strongest with engineering management. If you can learn how to manage a team of huma
64.
by conradev 10mo ago
The team includes recently retired, Chinese-born former ASML engineers and scientists — prime recruitment targets because they possess sensitive technical knowledge but face fewer professional constraints after leaving the company, the
65.
by conradev 10mo ago
I would very much love that. I like `jq` itself as a standard, even though I don't know how well it maps. Areas where I'd want to use Lite³: - Microcontrollers. I find myself reaching for https://github.com/siara-c
66.
by conradev 10mo ago
That second point is huge – Rkyv does have limited support for in-place mutation, but it is quite limited! If you added support for running jq natively, that would be very cool. Lite³ brings the B-trees, jq brings the query parser and bytec
67.
by conradev 10mo ago
Apple deploys LPDDR5X for the energy efficiency and cost (lower is better), whereas NVIDIA will always prefer GDDR and HBM for performance and cost (higher is better).
68.
by conradev 10mo ago
This is super cool! I've always liked Rkyv ( https://rkyv.org ) but it requires Rust which can be a big lift for a small project. I see this supports binary data (`lite3_val_bytes`) which is great!
69.
by conradev 10mo ago
The determinism depends on the architecture of the model! Symbolica is working on more deterministic/quicker models: https://www.symbolica.ai I also wish it was that easy, but compiler determinism is hard, too: https:&#x
70.
by conradev 10mo ago
I used to hand roll the assembly, but now I delegate that work to my agent, clang. I occasionally override clang or give it hints, but it usually gets it right most of the time. clang doesn't "understand" the hints because
71.
by conradev 10mo ago
It is thought up to 35 turbines were present on the site of xAI’s existing data center, generating 422MW of power. That is a few square miles of solar panels, which I don't think is quicker to install than the 35 turbines. htt
72.
by conradev 10mo ago
I find the granular nature of dependency sharing in NixOS to be really nice. In particular, I like systemd as my hypervisor. With systemd I can still isolate and lock down processes, but they can still, for example, share memory pages of `g
73.
by conradev 10mo ago
I have found Nix and NixOS to be able to absorb any amount of complexity I throw at it with grace. If a Docker image truly is the best way to use a bit of functionality (like Home Assistant), then I will just configure NixOS to run it in po
74.
by conradev 10mo ago
The signing is definitely about control, as is all things with Apple, but there are security benefits. It's a pretty standard flow for dev tools to ad-hoc (self) sign binaries on macOS (either shelling out to codesign, or using a cross
75.
by conradev 10mo ago
my setup is SO deterministic and repeatable that it hurts sometimes
76.
by conradev 10mo ago
This is my favorite use of CLI AI coding tools: updating my nix config. I can just ask my computer to configure services for me!
77.
by conradev 10mo ago
and as with most things in Hack Club... it's open source :) https://github.com/hackclub/hcb/issues/12314
78.
by conradev 10mo ago
I do not speak for the 'club, but I believe it was resolved: https://news.ycombinator.com/item?id=45292042
79.
by conradev 10mo ago
Best Buy sells PC parts and accessories nationally in their stores, even though the selection is not great. I walked into a Central Computers the other day and was flabbergasted. I had never seen a Threadripper PRO or a 10G switch in a stor
80.
by conradev 10mo ago
serde is a pull parser and it would take significant modification to convert it into an incremental push parser without blocking a thread.
81.
by conradev 10mo ago
I would second Recurse Center. I've heard universally great things!
82.
by conradev 10mo ago
Hack Club builds software, so the students naturally built a banking product to scale their fiscal sponsorship: https://hackclub.com/fiscal-sponsorship/ I was working with Hack Club students on an experimental VPN clie
83.
by conradev 10mo ago
Yep: https://en.wikipedia.org/wiki/Monotype_Imaging#Consolidation... Fontworks’ team, type inventory, IP, technology, and services will join global type specialist Monotype–Monotype’s first acquisition in Japan.
84.
by conradev 10mo ago
My understanding of this design is that you can write the logic separately from the decision to "do I/O immediately" versus "tell me when the I/O is done" You can write a parser thats outputs a DOM and run it o
85.
by conradev 10mo ago
They claim that streaming over WiFi to a single mobile device is 37W: Because phones are extremely energy efficient, data transmission accounts for nearly all the electricity consumption when streaming through 4G, especially at higher r
86.
by conradev 10mo ago
Your computer might use more energy displaying the results to you than the server does generating them. Especially in Chrome :) The server shares resources!
87.
by conradev 10mo ago
I believe it is MIT-licensed code from three.js: https://github.com/mrdoob/three.js/blob/55b4bbb7ef7e29b214b9...
88.
by conradev 10mo ago
This is super cool! I didn’t know I was looking for exactly this, but I am
89.
by conradev 10mo ago
I run Codex in a sandbox locked to the directory it is working in.
90.
by conradev 10mo ago
Yes! The DoD uses the military to test novel vaccines with service members. That is part of the “some workers” because you’re being deployed worldwide to new situations. Historically, though, I believe the DoD started it because of the thre

More ›