I use mTLS with Caddy to expose some of my services. It is quite manageable, and I only use if for myself and my wife.

We both use Android phones, and I configure access via apps for the services, that use the devices’ certificate store. It seems like the iOS way is to provide the client certificate and password to each app that’s gonna use it. I’m happy we can avoid that.

Big plus side for us is the simplicity of it all, there is no “always on VPN” requirement, and things “just work” with acceptable security.

I also sometimes access the services via Firefox, which is also able to use the device’s certificate store, although I have to keep selecting the same certificate each time.

And don’t stop there!

Add badges to songs (or options to not play them at all) if genAI was used during its creation.

Funny how the “Top Economist” just parroted what Ed Zitron, also quoted on the piece, has been harping on, since… checks notes always.

Edit: Zitron, the name. Not Zitrone, The German word for lemon.

That ough to be one of the laziest genAI slop images for a “Chinese router with a backdoor”.

Damn, it’s bad.

Top reasons I love PCIe NVMe storage:

• no cables
• virtually no additional physical space taken

Sure thing, if I need to add/replace/remove one it is a bigger hassle and probably involves removing the GPU as well, but it is rare for me to need to do that, so I prefer the simplicity of doing away with SATA.

Looks like someone bidding farewell via a military salute? 🫡 o7

Is that channel really his?

Couldn’t (quickly) find a reference to it.

What a choice of words… 🤦 Deliberate? “Better”? How about “worse” instead?

I think that this would be too rational and scientific to cause an irrational market to correct.

I’m leaning more towards a money related confirmation. Maybe an OpenAI or Anthropic internal shared numbers.

Or, one of the four horsemen of the AIpocalypse?

https://github.com/chenxiaolong/BasicSync#permissions

ACCESS_WIFI_STATE, ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION, ACCESS_BACKGROUND_LOCATION, FOREGROUND_SERVICE_LOCATION

Optionally used for stopping Syncthing unless connected to specific Wi-Fi networks.

And location isn’t a permission granted by default on install (unlike Internet access), the user has to approve of it explicitly.

Nice!

https://github.com/kristapsdz/openrsync

This is an implementation of rsync with a BSD (ISC) license. It’s compatible with a modern rsync (3.1.3 is used for testing, but any supporting protocol 27 will do), but accepts only a subset of rsync’s command-line arguments.

But also:

The actual work of porting is matching the security features provided by OpenBSD’s pledge(2) and unveil(2). These are critical elements to the functionality of the system. Without them, your system accepts arbitrary data from the public network.

rsync has specific running modes for the super-user. It also pumps arbitrary data from the network onto your file-system. openrsync is about 10 000 lines of C code: do you trust me not to make mistakes?

Rao’s low revenue word choice matters here. He said “exceeding $5 billion” and not “nearly $6 billion,” not “approaching $6 billion.”

In a filing where Anthropic was trying to impress a federal court with its commercial scale, Rao is expected to use the biggest number he can. “Exceeding $5 billion” tells you his real figure is much closer to $5 billion than to $6.

Look, I have a genAI aversion as much as anyone on this community. But…

Is that what was stated in a federal court arguably true? I think so. Trying to define what someone is “expected” to achieve with a statement and using that as some kind of proof? That’s too rich for my taste.

Why?

Google added that it doesn’t believe its own Gemini models were used, but still has “high confidence” an AI model was part of discovering the vulnerability and weaponizing an exploit.

No, really, why? If Google itself or their models didn’t discover the vulnerability, how would they know genAI was used on the discovery of the vulnerability and weaponization (interestingly, not “creation”) of an exploit?

The headline (as in AI replacing jobs) is as real as the CRAP (Computer Rendered Artificial Picture) it uses.

I think it might be very hard for AI-pilled leadership to back off from their claims and AI mandates and it would not help the hype that they might be banking on/profiting from.

Since they’re using (now expensive) genAI and productivity isn’t improving, because it almost never does, rhen they need to do something to appease stakeholders and offset the cost of using genAI, ofc.

That and keeping employee’s perception of power and self worth down, so they keep working their asses off in the hopes of not being the next in line.

For yt-dlp specifically, there is a stable backport that is fairly up-to-date: https://tracker.debian.org/pkg/yt-dlp

It doesn’t yet have yesterday’s version, but the previous version was made available 3 days after it was released.

Andreas Kling’s ladybird? Don’t wanna touch that with a 10ft pole.

https://hyperborea.org/reviews/software/ladybird-inclusivity/

I have a service that pings the server:

cat <<EOF | sudo tee /etc/systemd/system/ping-smb.service
[Unit]
Description=Blocks until pinging 192.168.1.10 succeeds
After=network-online.target
StartLimitIntervalSec=0

[Service]
Type=oneshot
ExecStart=ping -c1 192.168.1.10
Restart=on-failure
RestartSec=1

[Install]
WantedBy=multi-user.target
EOF

sudo systemctl enable ping-smb.service

And then I make the fstab entry depend on it:

x-systemd.requires=ping-smb.service

Did you check the sample video?

It doesn’t look good. And these shorts are probably cherry picked:

https://youtu.be/p71Wp1FuqTw