winterqt

DNS, too. I imagine they weren't using their ISP's DNS server, as that could cut out needing a bunch of this data, but then I wonder what data they did get from whatever DNS provider...

Obligatory "what is deterministic simulation testing" link to https://youtu.be/4fFDFbi3toc

Is "pnpm installs the other package managers" what you're talking about, or something else? That doesn't quite read like removing corepack support to me, though I might be missing something obvious.

Good to see the maintainers don't care enough to take the time to write a release blogpost themselves. sigh

This is arguably missing the "how" from the title -- can someone fix?

What’s the sigh to, out of curiosity, just because this makes revocation hard?

Interesting, it’s still live!

> `absorb` assigns the changes based on whichever previous commit most recently touched those files, which sometimes doesn't actually correspond to which commit should own these particular changes.

I’m pretty sure `jj absorb` (and its predecessors, `git-absorb` [0] and `hg absorb`) are smarter than this, instead looking at the actual diffs.

[0]: https://github.com/tummychow/git-absorb

It’s possible this is just a Nest limitation? It appears that all the data is there to construct a diff with context, and I’d hope the CLI would do so…

Comments here seem to be talking like they've used this model for longer than a few hours -- is this true, or are y'all just sharing your initial thoughts?

> Codex switched to paid API tokens only.

They’re still doing subscriptions: https://developers.openai.com/codex/pricing

As in, participants would copy output from one LLM as a question to another?

In my limited time using it, I’ve never seen it ask for permission to read files from within the working directory, what cases have you run into where it does? Was it trying to run a read-only shell command or something?

(This is a response to a different devlog entry on the same page, not TFA.)

> I think OpenBSD actually does support static libc though.

How does that work, with syscalls being unable to be called except from the system’s libc? I’d be a bit surprised if any binary’s embedded libc would support this model.

Won’t IDEA automatically index/execute some Gradle code when possible? As soon as you execute an arbitrary binary/script from the project directory, the isolation of the JVM doesn’t matter.

Looks like some were automod and some just went into modqueue, only one was actually removed by mods.

Supposedly the ARM ThinkPads are alright on Linux.

rubygems.org will still be operated by Ruby Central, though, so you still have to trust them. Given the state of affairs, this is less than ideal, but it’s probably a better outcome than nothing changing.

Is changing your password to at least stop {some of, all} the 2FA requests not helping?

See https://news.ycombinator.com/item?id=45171576.

Thank you for the swift and candid response, this has to suck. :/

> The author appears to have deleted most of the compromised package before losing access to his account. At the time of writing, the package simple-swizzle is still compromised.

Is this quote from TFA incorrect, since npm hasn’t yanked anything yet?

This isn’t the same website as https://news.ycombinator.com/item?id=44560662 — clearly a different product with the same name, though it seems the signup button doesn’t even do anything?

This reminds me of a kind of similar academic(?) project that at the very least had a custom C compiler alongside a custom OS… I can’t remember what it is offhand though.

Is there a reason you didn’t explicitly pull in mkdocs as a dependency in that invocation? I guess uv will expose it/let you run it anyways due to the fact that it’s required by everything else you did specify.

Do you mean gail.com?

> Tunneling through a single external node defeats the purpose of hosting k8s in home server.

How so? You can just rent a cheap server to tunnel through, while having the benefits of your home machine(s) for compute.

> Maybe the external ingress node can be a load balancer controlled by the k8 cluster. But then you still have to communicate with the home server and it has no exposed ip address

Do you mean that you wouldn’t be able to access the K8s control plane endpoint then (which you could if configured properly)? Or something else?

From point 1: how does the function returned from model.update confirm to (tea.Model, tea.Cmd)? Is that a typo?

Graphene also has a way to sandbox Play Services, and may even allow Google Wallet using that, making it so that they don't have to dual boot.