bornfreddy

> The key: proxy_ssl_verify off — the new server’s SSL cert is valid for the domain, not for the IP address. Disabling verification here is fine because we control both ends.

Yeah - no, it's not. They made the MitM attack possible with this change. The exposure was limited to those 5 minutes, but it should have been a known risk.

Also not certain how they could check the apps on the new server with the read-only database, while it was a replica?

Still, nice to hear it succeeded, the reasons sound very familiar.

By continuously testing competitors and local LLMs? The reason for rising prices is that they (Anthropic) probably realized that they have reached a ceiling of what LLMs are capable of, and while it's a lot, it is still not a big moat and it's definitely not intelligence.

Is there a way one can do DTP using LLMs? InDesign only integrates image generating, if I'm not mistaken. .

Or use mc (midnight commander).

This is actually where LLMs could be in advantage. Any code which is not clean (i.e. could be obfuscated) will trigger alarms and deeper inspection. It is much more difficult to create a good "underhanded" exploit that LLM will miss than it is to do the same for humans, imho.

Trivial? Ha! Way to say that you never tried it. Either that, or that you don't care for things like push notifications. Yes, most of the things work, but not nearly all of them.

So in webmail, when you upload an image / file to attach it to an email, you expect it to be renamed? I don't.

Have you tried moving on from Google, and preferably not to Apple?

+1 for Netguard, it is awesome. A bit clumsy UI, but indispensible.

Yeah, there are lots of pages that don't show the (google) map if you don't have google services enabled on your android phone. Not sure if this is something that could be solved on browser level though? I'm quite certain that these pages still work on iphones...

True. Sidenote: they are still however push notifications provider, so good luck getting rid of them completely (unless you're fine with not getting the notifications). MicroG is awesome wrt. that as you can turn it on/off as you wish, and it just works. GrapheneOS however only supports Google services in sandbox, but the notifications work sporadically IME (maybe because I keep turning them off and on... not sure). So... Pick your poison.

Plus, if/when you start caring about HA, it will be easier.

Also use fail2ban. If nothing else to decrease the amount of junk in logs.

You mean switch Windows by Microsoft for ChromeOS by Google? Weird suggestion.

As for "security" and "antimalware" solutions being ready, I don't think there is much difference between the OSs there. Windows is no candyland either.

As always, they will need competent people in the right places to pull this through. Tech is just an enabler.

Motivation matters.

Maybe I misunderstood, but isn't that what they did? Here is the max. power you can draw from the grid, feel free to be more efficient or to produce your own electricity.

> ...my primary line of defence is AdGuard Home. By handling privacy at the DNS level...

To each their own, I guess, but that would be a hard pass from me. One example from mobile: FF on android keeps trying to connect to its various services (like firefox.settings.services.mozilla.net). For privacy reasons, I use NetGuard to block this and other similar domains. But there is a gotcha: there are sites (like seekingalpha.com) who refuse to load if access to these same domains is blocked - even on a completely different browser! With NetGuard I can still visit those sites in the secondary browser while blocking Mozilla tracking. With DNS blocking I wouldn't be able to do that.

Strong disagree on this stance. You want to use the software? Cool, pay for it. Need access to source? It's on github, go nuts. Want to change it? Sure, feel free, but whoever uses it should pay the original developer. You can even charge extra for your modifications. Don't like the terms? Too bad - feel free to rewrite from scratch.

FOSS simply isn't sustainable if you want to make a living out of it. It protects a lot of user freedoms - even those that don't actually matter to users that much - at the expense of the rights of developers. There are a lot of ways that developers could be paid and users would still be protected (have access to source and the right to modify). The only ones benefitting from the current situation are BigTech.

/rant

That's just stupid. Take 10 people, each enters the data independently, compare their versions and select the most common of each character. With 1 second per character they would finish in an hour, coffee break included. They just didn't want to bother.

I only have 3 points against LLMs: they lack reason and they can't count.

Yes. It would be three times as much if they used ChatGPT.

Good question. I would guess no - but it could help you build one. Am I mistaken?

Which ones, if you don't mind sharing?

Then I would say they judged the situation correctly when they decided to raise prices.

That said: competition will soon kick in.

Nice! Nit: on mobile (ff if it matters) swiping down for some time makes the edges very grainy.

Except it isn't (anymore)? Timestamp + reader mode worked though.

Edit: it is black if logged in, gray if logged out. Weird.

A friend gave out an email gmail@hisname.com (he owns the domain). He says it's incredible how many people "corrected" him, and how persistent some of them were. :-)

> But for the past two months our agents have been working on an even more ambitious project: rebuilding the WordPress open source project from the ground up.

> no WordPress code was used to create EmDash

Hm. Do you think those agents were trained on WP code?

> Having a public address doesn't worry me. At home I have a firewall at the edge. It is set to block everything incoming.

Concern is privacy, not security. Publicly addressable machine is a bit worse for security (IoT anyone?), but it is a lot worse for privacy.

IPv6 vs. 4 is like Python 3 vs. 2, just worse.