theK

Maybe in some cases. In my experience maintenance often comes with exploratory work, the kind of where one needs to invest time, not to think about how your own side should work but in dissecting how a dependency or a target platform works in order to identify specific quirks that come and go with the passage of versions. I have seen significant acceleration in these kinds of workloads. This doesn't mean it makes maintenance free like some claim. It just makes it about 70% less of a burden

> another company and volunteers pay for maintenance

That is and has been a very good argument. One thing I do notice though is that, with the emergence of agentic automatic maintenance workflows, that same maintenance surface seems to start shrinking right now.

I agree. But I do have to admit that at least in the narrow scope of high level security compromises I draw a blank when it comes to apple. If I missed a headline of apple getting seriously owned then that leniency towards Apple is completely misplaced. If there really wasn't then I guess "look it works" line of argumentation probably is a powerful framing.

Im not an expert in legislature but I attemted to provide the most recent and hopefully directly recognizable entry point to 100+ years of continuous legislature. Sarbanes Oxley is more or less a refinement of all its predecessors.

Is this the point where most tech people accept that anything a closed source Software company says about security is effectively a "Trust me bro" as long as it is not backed up by independent verification?

We love to talk rubbish about finance bros but that industry has had independent auditing as part of its DNA for a century[1]

[1]: https://en.wikipedia.org/wiki/Sarbanes%E2%80%93Oxley_Act

Man, 90s hope was really peak!

So whats the going rate nowadays for running your own apps in your own device? 100$ a year?

I know a bunch of people that would use iPhones if iPhones had first class private backup options (the de-iclouding, like the de-googling of androids). Having root on the device would make this an option.

Fair point. The megacorps probably are able to outspend pretty much any grassroots mmovement bar maybe a government led one.

Which country does this vote happen in?

Last I heard even EU policy was ways off of that target.

Also: EU policy is very shcceptible to political tides. Sure now we love to scream sovereignty from the rooftops but that is guaranteed to change eventually.

Isn't this the perfect classical capitalist advertisement? Every number goes up.

- code? up - build budget? Up - developer output? Up - developer oprrational costs? Waaay up!

Why is this Bad? Every one involved profits somehow.

Accurate but manageable. Just like a pm works with properties an engineer also does. The Product person wants to deliver the right product properties so they model their process around identifying the ones they want and then creating the right framework to get them. On the engineering side its the same thing. Define what you want, give agents an environment they can succeed in, iterate.

That is correct. I think the alleged "dumbess" comes most from voting for the people that won't do the things you mentioned in your second paragraph.

But as I always say, it is not a property exclusive to US citizens. currently it looks like there is a drinking contest on which country will do the most ridiculous election result. The US started it but Germany said "halt meine Leberwurscht" and whent straigt to the top.

Well, to be fair we Europeans kinda topped that by doing everything right and then in months killing all regulations that drove those things. #TechnologyOpenness

> The way these past few years have shown the absolute precarity of fossil fuel systems

I agree with you but wasn't the primary takeaway of these past years that there is so much corruption anywhere even remotely related to burnable fuel that one needs not one but two actual wars (key to the fossil rich world) to provide a somewhat level playing field?

> to record the nature of the world around you for the future

That's cool.

> The future needs it, kinda.

Agreed but we seem to be in the minority seeing that most people nowadays seem to be speed running to make Asimov's Foundation into a documentary.

Never heard of DNTLS, thanks for sharing. I skimmed the Website and am a bit uncertain what the ai angle is. Shouldnt naming be, well, just naming?

> CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked.

You are right, its over.

On a more serious note. Yes and no. The kernel is secure. It is probably the most scrutinized piece of software in existence. LLMs will find things but most probably they just will help contributors fix bugs.

I think it can safely be argued that (only) good UX but also great marketing are the reason of that.

I never understood the issue with DNS-01. if you have a process that you trust to maintain a zone's TLS identity what is the big deal about letting it control a record in that zone?

> Json as a common language for human in visualization has been around for a while

Plant, Mermaid, Graphviz are all declarative textual representations designed for human authoring, JSON is made for tools. Its not a criticism just a statement that if interop across agent and human was intended this is not the simplest option.

Yeah, there are definitely valid contexts for hosting chat like this. E2EE has the benefit of not needing to trust the host, which I personally like but I can see this being fine or even wanted for lots of cases.

> requiring them to explicitly make visual decisions that are supposed to be handled by a good compiler

Isnt graphviz there for the same reason?

Edit: I see it is using JSON as the declaration language, I am OK with llms being "good at json" but a syntax also consumable by humans it is not!

So encrypted at rest but no E2EE, did I read that right?

> for years

Don't know about that. I did a ddg search "using docker compose (v2) plugin with podman" I do get some tutorials but they all are from 2026. This also aligns with my experience from late 2024 where you where typical advised to use `podman compose` or the compose script.

The CLI plugin or the script? Last time I checked the podman CLI did not support docker CLI plugins and the script is EOL since years.

I spent about a week last year trying to move from docker+compose plugin to a podman hosted variant. It has issues on multiple stages of the lifecycle as I mentioned in my original comment. Mac users lose fs events, a lot of compose.yml features are flaky (post start events), buggy (reset and import), or just not implemented (don't remember the exact features).

If you use podman and have no issues that is awesome but your use case is probably quite narrow, you are most probably on a non fedora based Linux and keep compose usage to a minimum.

Last time I checked podman compose was only a superficial docker compose equivalent. Also stuff like inotify seems to randomly break a lot on the podman side.

I'd love to be able to recommend people use podman but not having a good docker compose compatibility and missing inotify on volumes makes the DX just too problematic.

Don't requirements like online server based verification and advancing crypto make it almost impossible to pirate these games?

I don't know how this works nowadays but when I got taught to write (the pencil and paper kind) and specifically when I got taught syntax, it was "if you want to introduce a clause that explains or expands upon something that precedes it, you draw a small horizontal line" no mention of special chars, Unicode or whatsoever. So why is it so special other than being authors fancy?