pheggs

4 ms·

31.
by pheggs 6mo ago
I have switched my small swiss business (10 people) to linux (servers and desktops) and away from microsoft around 2020. I am extemely happy about the choice. Theres small friction here and there with clients that rely on certain software,
32.
by pheggs 6mo ago
that may be true, but not being able to access hobbyist sites still feels like "being locked out" of something. My ISP provides /48 IPv6 addresses for free, and I already run a couple sites only on IPv6 - because an IPv4 woul
33.
by pheggs 6mo ago
while it looks like its slowing down, I am pretty sure it will speed up once IPv4 get even more expensive, sites start to be hosted on IPv6 only and become inaccessible to some users that dont have IPv4. Thats surely going to put pressure o
34.
by pheggs 6mo ago
you can pull directly from huggingface with llama.cpp, and it also has a decent web chat included
35.
by pheggs 6mo ago
I was already pretty happy with svn to be honest, I dont see myself switching away from the industry standard today for no substantial reason. in my opinion git was only able to change the standard thanks to github and a popular author (i l
36.
by pheggs 7mo ago
they try really hard to make developers like them, and I dont know why but it triggers alarm bells in my head. I dont want to become dependent on a single company for the rest of my career
37.
by pheggs 8mo ago
Fair, you see the perspective from someone writing the software and it makes sense. But when I see it though the lenses of someone choosing software to run, I would rather choose a C program with potential memory bugs than a rust program wi
38.
by pheggs 8mo ago
> But the thing is these DO get exploited in the wild we see that again and again in high value targets like operating systems. Yes but so do supply chain attacks. I mean we both know there's never a way to be absolutely secure and
39.
by pheggs 8mo ago
Yeah I am not saying don't use rust. But the average amount of dependencies used by a dependency makes a big difference in my opinion. The reality is, most people will use wast amounts of dependencies - especially in vibe coded environ
40.
by pheggs 8mo ago
I would argue that almost all major rust projects use dependencies. Checking the dependencies for vulnerabilities might be just as difficult as checking C code for memory safety, maybe even worse, because dependencies have dependencies and
41.
by pheggs 8mo ago
I know it's a sensitive topic for a lot of people, but as I said, I love rust. I don't know a lot of rust projects though that don't use any dependencies. In my humble opinion, disregarding the risks of such supply chain atta
42.
by pheggs 8mo ago
true, but rusts success in creating an easy to use dependency manager is the curse. In general rust software seems to use a larger amount of dependencies than c/c++ due to that, where each is at risk of becoming an attack vector. my pr
43.
by pheggs 8mo ago
yes, the average amount of dependencies used per dependency appears to be much larger in rust and thats what I meant and is worrying me. In theory C can be written in a memory safe manner, and in theory rust can be used without large junks
44.
by pheggs 8mo ago
thats good, but it wont eliminate the risk
45.
by pheggs 8mo ago
I love rust but honestly I am more scared about supply chain attacks through cargo than memory corruption bugs. The reason being that supply chain attacks are probably way cheaper to pull off than finding these bugs
46.
by pheggs 9mo ago
Free speech for the individuals is needed, in terms of people should not be punished for what they say. But social media platforms owned by foreign countries is a danger for any democracy. There's a reason the US wants to capture Tikto
47.
by pheggs 9mo ago
out of curiosity, would you like to share why you think it's an email protocol problem? Because I see that more as an email client problem
48.
by pheggs 9mo ago
well that's fair, but sounds more like a email client issue than an actual issue with gpg/pgp. My client shows pretty clearly when it gets encrypted. But maybe I am oblivious.
49.
by pheggs 9mo ago
I tried to find something in the article that bothered me, but I don’t find it very convincing. Points like "someone can forward your email unencrypted after they decrypt it" are just... well, yeah - that can happen no matter what
50.
by pheggs 10mo ago
You could be right. I try to abstain from making any predictions, because I see the world is such a complicated mess where even stupid decisions could get a positive outcome due to unforeseeable events. (a new pandemic? a war breaks out? so
51.
by pheggs 10mo ago
it could very well be that it backfires. I guess time will tell. A lot of his actions seem to be trimmed into this direction, and it's not a new one. He left the paris climate agreement quite a while back as far as I remember. blocking
52.
by pheggs 10mo ago
there are at least two reasons trump is pushing for oil: 1) the US has lots of oil reserves, which would lose lots of value if everybody was using renewables 2) oil is the main driver for dollar demand, as oil is paid in dollar, allowing th
53.
by pheggs 11mo ago
employee of Confluent. I think that shouldn't matter but I still have a lot to disagree with the article. feels like overengineering has become the standard for some people, and I quite dislike it personally.
54.
by pheggs 1y ago
I am quite convinced a lot of open source is not open for ideology reasons but rather are a result of competition and the market itself. When the competition publishes its software for no price, the next way to make it even better is by imp
55.
by pheggs 1y ago
I genuinely don't like the concept of the keyboard interaction in helix and kakoune, selecting things to modify them. I don't know what it is, but it somehow just feels much less satisfactory to me personally compared to the vim w
56.
by pheggs 1y ago
I voted no in this, but I was on the fence. In my experience people are smarter than they get credit for and the decisions made in these votes are often quite good. There was more to consider than privacy, it's also about the fact that
57.
by pheggs 1y ago
Unfortunately they also passed a law for age checks in order "to protect children", which is supposed to block porn unless you show your E-ID. While a referendum was initialized it sadly didn't gain enough media attention to
58.
by pheggs 1y ago
> This is the status quo for ordering alcohol online, or if you want to open a bank account. I just ordered alcohol yesterday and they only checked it up on delivery. There's no obligation to check it online. > The new E-ID based
59.
by pheggs 1y ago
It's a bit better than that, you really have to get access to the disclosure because the hash also contains a salt. But it's a needless risk
60.
by pheggs 1y ago
Because they did advertise it in a way to make people believe they could still do their things online without an E-ID, which will not be the case. It's not optional online.

More ›