redrove

6 ms·

1. 31.▲
   by redrove 5mo ago

   curl | bash and pentesting go well together
2. 32.▲
   by redrove 5mo ago

   I’m immediately suspicious of cheap chinese crap like this. $35 for a projector should cause you to raise at least one eyebrow. Also, as always with “IoT” type devices, they’re best kept in an isolated VLAN with no internet access.
3. 33.▲
   by redrove 5mo ago

   What coding plans are you using that let you use those models specifically and not pay per token? Which provider?
4. 34.▲
   by redrove 5mo ago

   So this is basically vCluster[0] but Rancher branded? [0] https://github.com/loft-sh/vcluster
5. 35.▲
   by redrove 5mo ago

   cool!
6. 36.▲
   by redrove 5mo ago

   Nothing, but he got to plug his vibe coded startup that he advertises in the about section.
7. 37.▲
   by redrove 5mo ago

   It’s 128b dense model. Good luck getting more than 3t/s out of a mac. It doesn’t matter if it fits or not.
8. 38.▲
   by redrove 5mo ago

   Yes I'm on ChatGPT Pro (OAuth) and I'm trying to use gpt-5.5-xhigh. That was the issue, 5.4 works just fine. Support for service: priority (GPT /fast mode) would also be cool!
9. 39.▲
   by redrove 5mo ago

   I keep trying to use dirac-cli with codex and it won't work: Error: Codex API error: Codex API request failed: 400. Any ideas?
10. 40.▲
    by redrove 6mo ago

    So an Obsidian plugin? Got it.
11. 41.▲
    by redrove 6mo ago

    This is very well put. Thanks for the comment.
12. 42.▲
    by redrove 6mo ago

    It seems to be 160GB at mixed FP4+FP8 precision, FYI. Full FP8 is 250GB+. (B)F16 at around double I would assume.
13. 43.▲
    by redrove 6mo ago

    Gift link: https://economist.com/finance-and-economics/2026/04/21/globa...
14. 44.▲
    by redrove 6mo ago

    I underscored using xhigh + fast mode when saying it’s so much better. Now with Opus 4.7 of course the “burden” of adjusting reasoning effort has been taken away from you even at the API level. In my experience people don’t change the think
15. 45.▲
    by redrove 6mo ago

    I’ve been using Codex Pro since they lobotomized Opus 4.6. Codex is so much better, GPT 5.4 xhigh fast is definitely the smartest and fastest model available. For a while there I had both Opus 4.6 and Codex access and I frequently pitted th
16. 46.▲
    by redrove 6mo ago

    Yes. You could also look at the README.md.
17. 47.▲
    by redrove 6mo ago

    https://omlx.ai/
18. 48.▲
    by redrove 6mo ago

    There is virtually no reason to use Ollama over LM Studio or the myriad of other alternatives. Ollama is slower and they started out as a shameless llama.cpp ripoff without giving credit and now they “ported” it to Go which means they’re ju
19. 49.▲
    by redrove 6mo ago

    Not necessarily; I would very much like to use those features on a Linux server. Currently the Anthropic implementation forces a desktop (or worse, a laptop) to be turned on instead of working headless as far as I understand it. I’ll give c
20. 50.▲
    by redrove 6mo ago

    I disagree. I think a sharp drop in memory requirements of at least an order of magnitude will cause demand to adjust accordingly.
21. 51.▲
    by redrove 7mo ago

    I just deployed it to test it out and this is FALSE. I was able to create Virtual Keys on the free version with no issues. Please do a double take on the facts, you might falsely deter people.
22. 52.▲
    by redrove 7mo ago

    > Rent a VPS in another country and set up your own personal VPN server on it, and no one will be able to block you. (machine translation) How would this ever work with a whitelist? did you even read the post?
23. 53.▲
    by redrove 7mo ago

    How did PYPI_PUBLISH lead to a full GH account takeover?
24. 54.▲
    by redrove 7mo ago

    >I am unable to understand how it compromised your account itself from the exploit at trivvy being used in CI/CD as well. Token in CI could've been way too broad.
25. 55.▲
    by redrove 7mo ago

    >1. Looks like this originated from the trivvy used in our ci/cd Were you not aware of this in the short time frame that it happened in? How come credentials were not rotated to mitigate the trivy compromise?
26. 56.▲
    by redrove 7mo ago

    Bifrost is the only real alternative I'm aware of https://github.com/maximhq/bifrost
27. 57.▲
    by redrove 7mo ago

    First line of defense is the git host and artifact host scrape the malware clean (in this case GitHub and Pypi). Domains might get added to a list for things like 1.1.1.2 but as you can imagine that has much smaller coverage, not everyone u
28. 58.▲
    by redrove 7mo ago

    There’s a NixOS MCP, it’s pretty good
29. 59.▲
    by redrove 7mo ago

    Not to mention the non-idempotent python + bash + ssh hell of Ansible, or awful DSLs such as Salt, Puppet, Chef, etc.
30. 60.▲
    by redrove 7mo ago

    Same. I have a full homelab and multiple macs, can’t say I’ve written a line of real Nix code by hand. If you’re itching to try Nix, now is the time.