matltc

Agree that it should be observed before assumed. Would a software-defined radio and a packet capturing mechanism be sufficient?

Or just rm the nic

Can confirm, not arrested but threatened with litigation/employer contacted for responsible disclosure of unsanitized user input allowing arbitrary access to protected data of presumably any user. Just a url query param value flipped from true to false. Incrementing int user id too, so enumeration is trivial and the response payload was json so no need to do anything.

It is amazing what a casual observer with a background in web dev will see if they just open devtools. It has instilled a deep aversion in me to give any service any of my data that I care about protecting.

I stumbled upon this neural net compressor by Bellard that beats gzip on compression benchmarks

https://bellard.org/nncp/

If you found this interesting, and especially if you write Ruby, I cannot recommend Metaprogramming Ruby highly enough. Fundamentally changed the way I think about programming, and opened my mind to what is possible when one frees themselves from dogmatic, generic best practices. It covers these topics in great detail, and uses examples from ActiveRecord and many other gems' implementations of them.

Are you a Tabby or a Dennis?

Looks like jetbrains

I don't ship code I don't understand. I fully review every line if it's going to prod.

My dumb little utils in ~/.local/bin? Those get merged after a quick functional test without my having read a single line of it. Still, the skill I maintain for such a job directs agents to write such throwaway scripts in anything but shellscript because I might want to extend some day and fuck shellscript

Interested to know how they handle ordering changes. Sounds like with that many changes, you're bound to hit lots of conflicts.

InconsolataGo is all that is needed

Typing formulas in Excel

It's too bad spaces won, tabs is just correct I think, since one can configure the tabstop to use any indent size they would like. I'm quite tired of reading 2-space indent. Seems everything has moved this way now except python. I'm even seeing C with it, which is especially jarring. I think the languages that use braces for indentation particularly need 4. Python needs it least, and I can read Ruby because its blocks are delimited by words and it's bad style to write long methods

That's where the runtime type validation happens

Did not know this. Was looking at htop yesterday scratching my head as to why there was over a GB in swap with ram <0.25 capacity. Had been teeing logs there pretty heavily

Same with healthcare ime. I'm more on the human services side, but I was reversing their apis since pre llm days when I was a relative novice. Many don't even minify, so you can step thru the frontend src in devtools.

And yes, if frontends are any indication, just seeing tip of the shit-berg

There are some days I just hit a raw debugger in AuthForRealThisTime() under a three-paragraph jsdoc written by bot which is itself under the commented-out Auth() function. So many questions arise, and I can burn hours rabbit-holing the stack

People love a good crossover?

You can prob just identify some outbound reqs with like ss -tulpn then use those to set up a Wireshark packet filter and wire as needed to automate. Not sure how but I bet you could set up a hook to listen for any such reqs being made and then start the capture

Thanks for this goldmine of ideas!

My weekly limit __on a Pro sub__ has not gone over 50% since before the pre-Fable promos, but usage has been pretty much the same from my point of view. Maybe I am holding it right? Anyone else getting this?

As such, I do not need to even reach for Haiku, and 4.5 was so inaccurate that it often cost more to do so in the past. Sonnet 5.5/low has been good for this kind of thing, and i didn't even touch thinking tokens or any of that. Opus 5.5 low for questions/repros, medium for implementation, basically never reaching for anything above that anymore. 5.5 has been great, so I'll try Haiku, but don't see myself going out of my way to integrate it.

Can set for whole lan at gateway by pointing its DNS server to their ipv4/6 addrs.

If you're in stock isp land like me (for now, wip), be sure to cover all your bases, because they quietly hand you over to ipv6 if you just have 4 set. Can verify with eg. resolvectl query doubleclick.net

But yeah definitely do it at device level too. For me on android, simple as settings>private DNS>put ipv4

Just starting out with homelab stuff but my use case is quite narrow: I want to replace my stock isp gateway with an opnsense router/firewall. Grabbed a pro desk 600 g2 for $80 shipped, an i350 nic with 4 Ethernet ports for $30, and that should do it.

Not sure what else I would want given I don't care about media stuff. I guess maybe a box to run containers in and maybe something to self-host my dumb web apps.

British in here putting downies on our ignorance of their retail concern

Couldn't pay me to use this junk.

Trying to think of a number that I would consider it, and honestly $1k/month wouldn't convince me unless

- I have root on device

- device is on its own vlan, fully segmented

- !(SIM || 5G antenna)

- no google/apple id authenticated on device

- terminate agreement at any time without cost

I'm probably forgetting/not aware of ten things I should consider.

Authored by Paul Halmos. He wrote Finite-Dimensional Vector Spaces, which was assigned textbook for my Linear Algebra course. A humbling read for me, coming from calc 3 and thinking I was hot shit. Stripped me of any illusions of becoming a mathematician.

I feel seen. I used to think rms was just a crank, but maybe he was right all along: I increasingly treat any closed-source software (and even some open-source--vscode for instance) as hostile and untrusted.

Hah I'm doing this with some models of that same era judging by the CPU you cited. I had frankensteined one laptop from like the best parts out of three I had from that era, got xubuntu on it, running fine-ish but the Wi-Fi antenna ran through the on-board display chassis, which was destroyed. Took off the top clamshell, was gonna put ether in it and use as a desktop, but oops! The clip holding ethernet cable fell out during disassembly! No prob, pop it back open, oops! One of the screws holding the mobo is stripped! (Also, wife goes into labor while everything disassembled) No sweat, get something from ace to extract. I think I ended up throwing it back together and not testing?

Forgot about it for a couple years, wanted to put opnsense on it and see if I could replace stock equipment leased from ISP, nope. No display.

Fun to a point but probably should just spring for a used thinclient at this point, but prices are scary and I hate letting all this hw go to waste

> enough ... to intervene over Taiwan

Probably not. My guess is the Pentagon's calculation would be that the cost to intervene would be unacceptable and could not be sustained anyway; many reports say the US would deplete their ammo stocks for such a conflict in like a week, and that was _before_ the blunder in Iran

> Better ... than none?

For sure. But doesn't solve the problem of "how do I survive if the power grid goes down for over a year?" Best solution is to get out of USA prior to that event. I don't think any amount of prep will significantly change your outcome in that scenario if you remain in the US.

What makes you say that? The cost to China to invade will still be incredible with zero US intervention. Wsj had an article last December <https://www.wsj.com/world/china/how-china-chinese-invasion-t...> on what this might look like

So like a month of food and water? If the big electrical grid pop happens <https://www.nytimes.com/2026/08/18/magazine/national-blackou...>, we're looking at years, which no storage solution can accommodate. So while this is sensible for most outages, doesn't do much for this event, which becomes quite possible if (1) China moves on Taiwan and (2) USA intervenes on behalf of Taiwan. I would expect that China would activate their dormant ICS and telco access in such a circumstance to knock the US out of the conflict basically immediately

I suppose this could be true with the rest of CRINK since they are all capable cyber adversaries, but China is on another level in terms of capability and it's their best lever with little cost. I suppose they have to calculate whether the US would bring out the nukes in such a circumstance

This is one thing that has really hit me: I have a question and I always default to Gemini flash or haiku instead of finding quality writing on a subject. So I get the same tinned bullet-point format every time, and my knowledge has become wider, but can only be so deep--only so many things can fit in one's head at any time--so I pay the opportunity cost of finding something that I enjoy sinking my teeth into.

I think about my favorite bands, or games, etc. the ones I cherish most are those hidden gems that I either stumbled upon during some rabbit hole or as a recommendation from a friend. How do I get that now? I can ask Claude, I guess.

If you do try to go down rabbit holes with AI, you get a deluge of information, but it is basically like what Google has become, minus the ads: aggregates the most easily accessible data, blends it up and distills it to some slurry that might kind of be coherent, and which will definitely sound authoritative, but... Is it?

And, of course, then what happens to the hidden gems that have a very low (whatever the equivalent of) PageRank but maybe because they're not highly optimized, ultra-processed and generally agreeable or popular. The channels through which one could readily receive information are all being flooded out/absorbed. Maybe I should try Kagi, or get into irc and build that rss graph.

Two's complement just had a great episode on this topic. None of us have absorbed the costs of the tradeoff we are all making by using these things, much like we didn't for using social media, or the slide into the techno-corporate surveillance state that happened after the patriot act. We are paying those costs and I am certainly feeling them more than ever recently.

I love goooooold