691 karma · joined April 18, 2023
Element (the matrix client) used to not strip geolocation metadata for the longest time. I don't know if they fixed that yet.
XMLDSig is notoriously difficult to implement correctly and securely, I hope this doesn't backfire.
I assume the answer is no because this is clearly clickbait AI slop but who knows.
(Or perhaps even COM)
Unix domain socket authentication is stronger and doesn't require storing cookies on the client side.
> what the hell is your threat model here? The attacker is just going to ptrace firefox and read all the secrets anyway.
Which is why you can (and people do, e.g. flatpak) run applications where ptrace or global filesystem access is blocked. Which is why portals exist and why there shouldn't be a "get all secrets via dbus" escape hatch.
> I _want_ other programs to be able to read secrets (e.g. keyring administrators, .netrc-style shared secrets, etc.)
Then don't use it? Secure defaults matter for most users.
> Do you hate a{sv}? If you propose JSON as alternative, you are going to make me laugh.
Find the *kwargs here: https://wayland.app/protocols/xdg-shell
Etc. etc. This isn't the 90s anymore.
> we started rolling out an increase to our buffer size to 1MB, the default limit allowed by Next.js applications.
Why is the Next.js limit 1 MB? It's not enough for uploading user generated content (photographs, scanned invoices), but a 1 MB request body for even multiple JSON API calls is ridiculous. There frameworks need to at least provide some pushback to unoptimized development, even if it's just a lower default request body limit. Otherwise all web applications will become as slow as the MS office suite or reddit.
Yes? Because of actual engineering mind you and not rolling the dice until the lucky number comes up.
https://reproducibility.nixos.social/evaluations/2/2d293cbfa...
Also:
> The US led a sharp rebound, driven by a surge in IPO filings and strong post-listing returns following the Federal Reserve’s rate cut.
Interesting, I tried it with the chatbot widget on my city government's page, and it worked as well.
I wonder if someone has already made an openrouter-esque service that can connect claude code to this network of chat widgets. There are enough of them to spread your messages out over to cover an entire claude pro subscription easily.
Nice that it's built-in, Claude Code needs an MCP for this at least.
> User Feedback: Intuitively integrate feedback across surfaces and artifacts to guide and refine the agent’s work.
I wish they'd just let me edit the implementation plan directly instead of me having to explain the corrections. Claude Code has the same weakness. Explaining the corrections is slower than editing the plan manually, and it still keeps the incorrect text in context as well.
> An Agent-First Experience: Manage multiple agents at the same time
Sounds nice in theory but I assume you can run multiple agents for 5 minutes or so and then you're out of credits.
As a claude code user I'm not really sold on this product.
xorg-server is gone from the linux desktop. Gnome and KDE use wayland shells by default, and that's what users get when they download a Debian/Ubuntu/Fedora/whatever ISO.