mr_mitm

5 ms·

61.
by mr_mitm 2mo ago
It's a zero day in some caching proxy who may not have had that threat model in mind. I guess its primary purpose is caching packages, not restricting internet access. That's a far cry from finding a zero day in a hypervisor or ev
62.
by mr_mitm 2mo ago
I hate the BOM so much. It causes so many subtle issues and I don't even understand why it's needed.
63.
by mr_mitm 2mo ago
Is teens ordering wine a big issue in the US? Bigger than social media?
64.
by mr_mitm 2mo ago
I wish my team would at least use the rebase merge strategy by default to avoid branch graphs looking like the London tube network. Not in 10 years did I have an issue with that (okay, except accidentally rebasing deliberate no-ff merges).
65.
by mr_mitm 3mo ago
I had a gig for a contractor of some banks once. One of the banks was using 5.0.0.0/8 internally. I asked the guy if it doesn't lead to issues. All the time, he said. When they first came in, they just assigned each bank 1.0.0.0&#
66.
by mr_mitm 3mo ago
I take it you aren't programming business CRUD apps? I almost never have to do any math. It would be a delight if I did.
67.
by mr_mitm 3mo ago
Is pangram using knowledge about specific models? Could you throw it off by having several models generate a paragraph each or so?
68.
by mr_mitm 3mo ago
It is also built on the assumption that filenames never contain newlines, which is wrong in general. It's baffling to me that POSIX allows non-printable characters in file names, but here we are. Surely they had a reason for this decis
69.
by mr_mitm 3mo ago
The next known black hole is tens of thousands of light years away. Also, the universe does not seem to be inside a black hole.
70.
by mr_mitm 3mo ago
Note that you can't use these lasers to slow down the probe, which will dramatically limit the things the probe can do at the destination. I'm not even sure what kind of interesting things a probe the size of a smartphone could do
71.
by mr_mitm 3mo ago
My point is that you cannot know that AI generated text is obviously AI generated. It's like the old "hair pieces look awful, I can tell immediately!" - no, you can only tell when they're awful. Maybe you're not as
72.
by mr_mitm 3mo ago
How do you estimate your false negative rate?
73.
by mr_mitm 3mo ago
Maybe the PowerShell folks were onto something when they implemented seven different output streams [1]. But then again most users are utterly confused by this and just dump everything to the information stream when they should be using the
74.
by mr_mitm 3mo ago
And the OS will never background the browser for battery optimization reasons? Genuine question, I'm not an expert on mobile OSs (as you already guessed).
75.
by mr_mitm 3mo ago
Everyone but me!
76.
by mr_mitm 3mo ago
Wireguard by itself also doesn't allow for 2FA or expiring keys. Not as relevant for private use, but some orgs need it for compliance. The idea was always that things like that need to be implemented by an application on top of it, so
77.
by mr_mitm 3mo ago
> You can send notifications with PWAs with Web Push API + Service Worker, same as a regular page. While the app is awake, sure. I'd like notifications to work even if the OS backgrounded the app, and even without a network connecti
78.
by mr_mitm 3mo ago
I'm currently attempting to write a calendar app for personal use, and I wanted to go the route of a self-host PWA. Notifications are a good point. How can I create notifications as a reminder before an event? Alerts are part of the ic
79.
by mr_mitm 3mo ago
Just put your last sentence in your AGENTS.md then
80.
by mr_mitm 3mo ago
I think we're going to have to take this ... offline
81.
by mr_mitm 3mo ago
I've been using slidev recently. How does this compare?
82.
by mr_mitm 3mo ago
Why do you say "probably"? We can measure and quantify the inhomogeneities very precisely, and they're tiny. This isn't a matter of opinion or intuition.
83.
by mr_mitm 3mo ago
In a recovery scenario, you don't have the password or whatever you used to encrypt the key. And again: the whole point E2EE is that you don't have to trust the provider. Open source in general doesn't help you here because y
84.
by mr_mitm 3mo ago
There are plenty of banks in Germany which offer over-the-counter services, if you prefer to do banking as if it's 1999. Most of the time, when people say it's impossible to live without a smartphone, it's actually only impos
85.
by mr_mitm 3mo ago
It does offer TLS. The certificate just doesn't contain `www.catb.org` in its SAN. (But dozens of other host names.)
86.
by mr_mitm 3mo ago
You can use Claude Code with a self hosted model no problem. I don't believe you can switch during a session though.
87.
by mr_mitm 3mo ago
Obviously the rig is not a macbook but indeed a server rack. I'm just saying that we're using this model for local development.
88.
by mr_mitm 3mo ago
Think commercial. My company invested in a local rig since privacy is important to our customers and sometimes I want to use these models on private data.
89.
by mr_mitm 4mo ago
It's not just cost. Many people in Germany claim they get sick or experience neck pain the instant they stand under an AC. I cannot relate at all and I'm very puzzled, but at the same time I don't want to deny their experienc
90.
by mr_mitm 4mo ago
> That is it. No Docker. No CI pipeline. No serverless function. No YAML file with 47 indents. Just SSH and git — two tools you already have. Sigh.

More ›