enkrs
Emails comming legitimeley from [email protected] with the text below. Go and decypher which part is Meta template and which is creative use of user supplied text...
Your Meta's Page may be at risk due to unusual
activity is not part of or affiliated with
Meta. Only approve requests and invitations from
people and businesses that you know and trust.
Meta will never ask for passwords, payment
information or personal details in an email. You've
received a partner request. Partners are other
businesses that you work with on Facebook. Partner
sharing lets you give access to your business assets,
but not to your business portfolio. This request is
from:
Your Page is under restriction review Contact Meta
Support: [email protected] Protect yourself
from fraud: Verify the identity of the requester by
contacting the business using official contact information.I run a Gitea server (since long before the fork, constantly updated) that handles issues, pull requests, signed commits, CI/CD, actions, and even serves my containers and packages. It's been amazing.
Of course Forgejo can do the same. For those who’ve followed both projects closely — which fork would you say has come out ahead? Codeberg being Forgejo's SaaS offering likely gives them more resources, but I also wonder if that means their priorities lean more toward SaaS than self-hosting.
Of course there are going to be discussions what is real programming (like I'm sure there were discussions what is "real" accounting with the onset of a calculator)
The moment we stop treating LLMs like people and see them as big calculators, it all clicks.
I used pass for a while but couldn’t see what threat model it actually solves:
If you let GPG agent cache your key, any script (e.g. an npm post-install) can just run `pass ls` or `pass my/secrets` and dump all your credentials. At that point it’s basically just full-disk encryption with extra steps—might as well keep everything in ~/passwords.txt.
If you don’t cache the key, you’re forced to type your long GPG password every single time you need a secret.
I tried a YubiKey for on-demand unlocking, but the integration is clunky and plugging it in constantly is a pain if you need passwords multiple times per hour.
I eventually switched to Bitwarden.
But I'm having hard time imagining those "anywhere" machine scenarios. Strangers machines that you trust enough to connect to your servers, and are able to install putty or your preferred ssh client of choice on? Better just have SSH on your own phone and laptop.
Just today I was working on my ESP32 MicroPython project, and I used Microdot for the first time (together with picocss and htmx). The documentation was sparse in places, but the source code was so niceley commented and easy to navigate that I figured everything out.
To do CSS properly, you need to name classes, you need to come up with CSS cascades that work.
Being programmers we would love to categorize and name things all day long. Ever heard how we over-engineer things because of the DRY principle?
But we would love to name classes and do CSS properly only theoretically. In practice, we run out of time making CSS with nothing to show a week into the task except a CSS kitchen sink demo. By the time we're done, the scope of some component has grown in a way we did not expect and is hard to represent without markup change.
Tailwind on the other hand removes the task of thinking how to name the thing we're making. A appbutton appbutton--state-user-notallowed or a touchbutton touchbutton--disabled? In Tailwind it's just a a blue-600 rounded rectangle. Scope changed? No problem, now it's a green-400 shadow special rectangle, without checking where else it was or will be used or coming up with a new name for this special rectangle.
It's just faster. Not strictly better.
The reception on this is mostly neutral or negative from management. When you identify these guys, turns out they have great hardware or programming skills, but no integration or architecture concepts. The existing system (ERP, MES) owners also like to put a lot of red-tape around anything unconventional connecting to their systems.
Managers also are held accountable for the project, even if the costs are low. They prefer to spend a lot and have a consultancy to blame on failure, then their internal employee project they selected.
What consultants do is they help the company navigate within it's own bureaucracy and processes. Even to implement the Raspberry solution.
This allows site owners get statistics on page views/uniques/bounces without unique identifier cookies or javascript injections.
I’m all for blocking any abusive tracking methods, but this looks to me like creative website statistics that works for single domain. What’s the harm by measuring that?
I use Firefox on iOS for the password and tab sync integration, and am supper happy that it’s using the WebKit framework. I care about the iOS experience more than some video codec support.
You can even put the wireguard private IP addresses on your DNS servers. As mentioned elsewhere DNS records are not publicly enumerable like letsencrypt certs.
A side benefit is you can now access your internal network from your laptop or phone.
Remember when people said they’d never use an phone that needs to be charged every 2 days? Now we all charge our phones every day. Habbits change with technology.
Non-targeted ads do not mean viagra ads. Non-targeted ads still have the context of the website/app I'm using.
Non-targeted ads mean that I can get ads about specific hardware when I browse my hobby forums; I can get ads about some interesting SaaS when I browse my work related news sites. I don't get anything that's targeting some calculated personality quirks of mine to the highest ad bidder.
I would not say “That’s clearly a pose, framing and likeness done by Goldsmith“. The source photo for the work was just another photo of Prince.
To me that is fair use
SDR on the other hand can change the modulation programmatically without changing the components and topology. Very handy in space if a new modulation standard gets adopted by some goverment agency.
Or the first case when some shared credentials get compromised probably from an infected computer and now you need to find which of the 80 laptops is the infected one.
Or the first time employee converts his laptop into a wifi access point for the office girl upstairs and unknowingly lets her inside your companies private network.
Of course, there are workarounds and better practices for every example. You can solve it without admin access to laptops and network request logging. But company property is not anonymous either with or without full admin access - so why jump trough the hoops to not have it?