therealmarv

maybe they also use 8 stages and several months for their security fix process. Just to be sure... ;)

why not? If you don't like it don't click it. Is not that the main purpose of the web that everybody can publish a web site?

Your apps and browser don't trust them. Why should your CLI. It's easy and warranted for Apple and look how much cash and engineers they have.

Apple should publish a hotfix now. Work on a better solution in the long-term. They just don't care about security for developers is my take (it's like a niche group for them?)

Mozilla or not does not matter here.

I'm also very reluctant to switch and will not switch anytime soon. I have small compact tabs which I color code dynamically with iTerm2 and also custom profiles with custom keyboard keys overrides by program and directory. So the "harness" around the terminal is more feature rich with iTerm2.

These kind of features are not available in Ghostty in this form.

And about backups in iTerm2: Just do an export and maybe also a backup of your profiles. So that works.

I also do not care about a "super fast" terminal... my iTerm2 is fast enough for 99% of use cases for me.

it's okay but I wish it would be optional. Why force it on me when I don't want it? E.g. with disk space...

Hmm, I remember when Ars Technica macOS reviews were the gold standard. This one isn't bad, but I miss having more in-depth information about the improvements.

In my opinion, the details here complement the Ars Technica article nicely:

https://www.macstories.net/stories/macos-27-the-macstories-r...

On my short tests: This model is amazing and the speed makes it feel like another sort of AI.

But it's bad at code reviews (maybe it's the harness agy cli?). Could not get it to same quality level on reviews like Opus, GPT 5.6, Grok. Even tried special code review skills but no luck.

This should be standard on ALL Firefox on all systems. Why is not that? Ads are a kind of security threat for a long time.

Brave is doing it, Firefox can do it too. And maybe I can recommend that kind of browser to the average Joe again.

These days, root is mostly flagged via indirect indicators rather than detecting the root binary itself. For instance, detecting custom ROMs is a common clue. Does anyone remember the suhide days? ;)

wait for it... I can see a future were every wallet, payment etc. app will block devices which are on custom ROMs and do not pass strong hardware integrity with blessing from Google.

I've read once that there are paid app testing labs which test if an app has root and custom ROM detection and when they don't have that it's a minus point on the report.

He said 2 years ago they are okay nowadays (they were not in the past).

source: https://diginomica.com/kubecon-china-33-and-third-linux-long...

Maybe I'm stubborn, but even in the age of AI, I still use multiple git clones/directories of the same project, e.g.:

  ~/dev/projectx
  ~/dev/projectx2
  ~/dev/projectx3
  ~/dev/projectx4

very rarely use more than 4–5 per project. Maybe I'm just avoiding wrapping my head around worktrees and actually trying them out.

Benefits: These clones act as semi-permanent directories:

- Helps with caching for heavy Docker usage (think of repeated parallel unit, e2e tests)

- I've color-coded my terminal tabs for each clone so I can instantly tell where I am at a glance (kinda like tab groups just with colors)

Maybe if for some reason I need double digits clones of a project I will be more forced to use git worktrees because then it will be annoying to remember in which directory a branch clone lives.

I just wonder how they handle full Google's certification for hardware integrity + Google Play Store with GrapheneOS. They contradict on this part on the normal GrapheneOS mod and I don't see a way how they will not on Motorola phones.

Banking apps (e.g. Revolut) block GrapheneOS actively and many other apps too.

But it will be interesting times once they are out!

Do you mind sharing your master's thesis? oO

Would be interesting to read it (and no judgement!)

I use Brave. I want Chromium under the hood.

Firefox on mobile is not good, tried it many times. I also don't trust Firefox Mobile security as much as I trust Brave/Chromium on Android.

In Germany the Dell XPS 13 2026 is 56% more expensive (over 1000 Euros) than the MacBook Neo (below 700). So the claim does not hold World wide, maybe only in US on local prices.

Would be great to know if I can uninstall docker on Mac and just install https://github.com/containers/podman/releases and be good to go with my docker compose files ?!

I have the feeling the docker company is communicating a lot with Apple because virtualisation got better and better over the years. I wonder if podman would be a speed downgrade here?

that parameter cannot be set by a package, you only can set it

As if supply chain attacks could have been prevented by 2fa or passkeys always.

You want delays by x days because supply chain attacks get caught very often within 1-2 days. And if you really really want to make an exception for a zero day then that's no problem and you can still quick patch by exclusion of that rule. They don't contradict in a unsolvable problem. You want both, you get both.

There was once a 2.5" SSD Mushkin Source 16TB SATA drive. At its cheapest it was ~1700 USD (or 1500 EUR). That was mid 2023 (like 3 years ago!).

Nowadays it feels like that this time and price region is like decades away in the future. I was hoping I can store more data in future on modern tech like SSDs and not less.

Meanwhile I'm still dreaming about any consumer and affordable 32TB or even 16TB portable SSD. Innovation and market for consumers are going backwards.

Funny thing is that one of the best you can get is the Crucial (Micron) 8TB one but even that one gets more expensive. I have the feeling it will be gone completely soon.

That's a trend which is more and more common nowadays.

I wish the industry would adopt more zero knowledge methods in this regards. They are existing and mathematically proven but it seems there is no real adoption.

- OpenAI wants my passport when topping up 100 USD

- Bolt wanted recently my passport number to use their service

- Anthropic seems wants to have passports for new users too

- Soon age restriction in OS or on websites

I wished there would be a law (in Europe and/or US) to minify or forbid this kind of identity verification.

I want to support the companies to not allow misuse of their platforms, at the same time my full passport photo is not their concern, especially in B2B business in my opinion.

I saw some non-technical people automating or creating small great tools with it which they need for their profession. These people are not programmers.

I think everybody who has basic understanding of programming and deployment better should stick to some AI coding agent like Claude Code, Codex, OpenCode etc etc.

I don't think I'm missing out by not using OpenClaw & Co.

And in modern times: everybody, including big companies trust the AI APIs from

Google, Microsoft, OpenAI, Anthropic etc. etc.

sure... the contracts saying often there is no saving or learning from the AI API usage. But it's at the end like a "trust me bro" promise.

There is a saying on the internet:

The generation that refused cookies is now giving AI permission to read their emails, scan their local files, and manage their bank accounts.

It seems many have given up...

Settled with SeaweedFS for replacing minio and getting a good chunk of S3 feature parity. I wonder about the problems OP is posting about. Never seen that behaviour but usually only having a bunch of smaller files.

but even that one looks kinda outdated when looking at latest M5 Max laptops.

The better distros have it (ZRAM) enabled by default for desktops (I think PopOS and Fedora). In my personal experience every desktop Linux should use memory compression (except you have an absurd amount of RAM) because it helps so much, especially with everything related to browser and/or electron usage!

Windows and macOS have it enabled by default for many years (even if it works a little different there).

reminds me: Ever used Gemini API on Google Vertex Cloud API? The usage will show up like 24-48 hours later in the dashboard. So when you use Gemini's API on their Cloud me as Workspace admin cannot even track my own usage in near realtime there. Which makes me think that even Google cannot track it in realtime.

that's actually a good idea. Thanks, was not thinking about such a workaround!