airhangerf15

GLM-5.x and Kimi 3.x are good open weight models. In theory one could run them locally if the prices of the DGX/Halos ever come back down (you use to be able to run them on ~$20k worth of hardware, but now it looks like you need $40k worth of hardware after all the recent price jumps. Gorgon Halo and newer memory offloading techniques might change that).

With OpenCode you can run /model and just select whatever your provider offers. I always recommend not using prompts. Create an AGENT.md with your project rules, then create a plan/01-initial-requirements.md. Write an entire requirements spec. Commit those. Then tell the LLM "Read AGENT.md for project rules and run plan/01-initial-requirements.md".

That way you can commit that output on a branch, jump back to the original commit, and run the plan again with a different model. You can do that multiple times and compare the output on all the branches. Some models might give you better UI, some better structure. You can just keep the one you like most, or ask a model to combine certain aspects of each branch into your final.

Your terminology is a bit wrong. "Claude Code" has no "weights." It's a harness. It contacts Anthropic servers and runs their closed weight models.

The harness provides a means for the LLM to write file output and run tools (commands) to test output. Alternative harnesses including things like OpenCode.

You can point OpenCode to your Anthropic account, but only if you have API usage (there are ways around this, but if Anthropic detects it you could get banned). Anthropic locks their subscription plans to THEIR harness and no others.

Most harnesses like OpenCode, Cursor, Pi, Hermes, etc. have settings to tie into a bunch of different providers (although they'll always try to promote their own by default, because they have to fund their own harness development of course).

I recommend OpenCode + OpenRouter. OpenRouter has a bunch of models and their web interface shows where those models are run (AWS Bedrock, xAI, Anthropic, etc.) and what data they collect from your prompts (although this is kinda a 'trust me bro' status as a provider could be lying about collecting data).

Sorry DKMS. nvidia distributes closed source .o files and most distributes have dkms packages to build those for each kernel.

> Would you prefer if Linux allowed local users to replace the kernel and/or its modules without root? What kind of faux-outrage is this?

On any Linux distribution, which managed packages update themselves? zero. Crowdstrike should provide package repositories so admins can pull in updates at their regular cadence.

At a minimum, the package should NEVER update its own binaries located in /usr/bin or /opt. If it need to pull updates, those should go in /var. Crowdstrike could have made the core binaries a shim where they load a second stage from /var.

I'm still surprised people use CrowdStrike. I guess there are no real alternatives. I know companies are getting CrowdStrike alerts for this very issue, but it still just seems like a MASSIVE attack surface.

Back when I was in DevOps, the Linux Falcon Sensor was an absolutely disaster. They recompiled it for EVERY kernel release of every supported distribution (they had never heard of DPMS apparently), the service ran as root, it UPDATED ITS OWN BINARIES as root! It broke nearly ever Linux design philosophy.

I know newer version use eBPF and don't have the stupid kernel lock-in issue, but I still don't trust it.

VS Code extensions have always been terrible from a security perspective. This seems like it's a supply chain attack? Makes me think of Solar Winds from a few years ago.

It doesn't appear that the Claude Code harness itself was compromised, was it? or Cursor if you use Anthropic models via Cursor's API itself?

Lately I've been using a script that mounts my current working directory in a container and I put all my build tools in a Dockerfile. I also map the harness config (~/.config/opencode or whatever) to a named volume to minimize the chance a harness could grab other things off my host. I can't use it if I ask the LLMs for docker work since they need the docker socket and then all bets are off (it could just mount your root volume somewhere). I sure I could use a full QEMU VM or some other type of isolation for such devops tasks, but I haven't really looked into it yet. Guess I should.

Pleroma

I understand the frustration. I've been in this industry for over a quarter century myself. The proliferation of advanced computing in the palm of your hand with a fancy touchscreen slapped onto it in 2007 seemed like Star Trek magic at the time, but it quickly turned into dystopian tracking before anyone knew it. Now that compute was out of the realm of the enthusiast with the general public okay with locked down devices; with have access to your own hardware now called "jailbreaking," things quickly spiraled to a technocratic state we're moving towards.

LLMs should actually be the level to oppose such things allowing for rapid reverse engineering of closed systems and custom bespoke software, but it's all dependent on "cloud" architecture, and OpenAI/Anthropic could ban you at any time for any reason. Independent models like Kimi 3 and GLM-5 should hedge that situation, but compute hardware required to run such models (e.g. 4x DGX units) use to sell for <$20k, but have now been pushed to nearly $40k. Enthusiasts can no long affordably buy the hardware that was so prevalent that made the modern compute era possible.

I feel your frustration with your "strike" which is an unplanned vacation. It's won't amount to much and hopefully you won't lose your job. Organizing anything at scale will be impossible, because every large at-scale protest you see is organized by the state or massive private interests. They're all psychological operations, yes even the famous 9 minute clip. When you really dig into all of it, the vast majority of people in this world are in the global control net of the new technocratic religion, and they believe everything they see from a major news site on social media, Google or the TV screen.

Reads kinda dumb, weird and painful.

> Note: Some people write the text, then format it with Claude. In my opinion this isn’t AI slop, whereas AI-generated text that’s manually formatted (also very common) would be AI slop.

I hate it when people do this. I had a manager that fed all our stories through Opus 4.x a year ago and they could easily turn from well defined human-readable requirements to a massive mess of every possible error condition and HTTP code.

When you write, you are communicating one human to another. You are organizing your thoughts. The fact that all of us CAN read and write is only a few centuries old. 1,000 years ago, literacy rates were very low (I've never found a good number on this. Most papers claim it was 2% ~ 5%. I think it was probably closer to 10%, and more than just merchants who needed to track inventor. But a lot of those wax tables and old paper has probably all disintegrated).

I have a feeling the author AI-assisted this. I'd rather read something real, grammar mistakes and all. I realize it may matter less and less as more people start adopting the speaking patterns of their favorite models. "That's a great idea..." and "You're absolutely right to push back on that..."

Generative text use to be really painful for me to read. As I use it more in code, I'm getting more use to it, and I'm not sure if I entirely like it, even when it's helpful.

Must we market every single vulnerability? The php2shell page has a comic book back story and silly anime girl dancing video.

This one has ... some naked adult pretending to be a pet?!

There's already yt-dlp and a billion frontend for it. Use something you can run yourself, not some web crap/

Pretty neat. I've been using Traefik in front of all my services. I don't have anything really beyond standard rate limiting. Might look into this.

> To close the gap for Linux, we are rebuilding our Linux anti-cheat implementation into EAC Linux v2. We will bring the level of protection much closer to par with Windows, in the very near-term, using existing Linux features including signed kernel, signed kernel modules, and secure boot with attestation.

Wow, that sounds absolutely terrible. Are they requiring kernel level modules or just requiring that, in order to play Fortnight, you have to use the distro's kernel, have it be signed by them and have secure boot enabled?

I mean, I don't play any of their shit and I build and sign my own kernel on Gentoo, so I guess it doesn't matter to me. But it feels just as bad as systemd.

I guess we're getting to Linux enshitification territory.

Feels like you've put no effort in. You can find this person and ask. There are more details. There are clues. There is a reason the site is setup the way it is. The original has more details.