codedokode

> I mostly want to note that swap files can complicate hibernate.

Only in Linux - Windows has no problem with swap in a file. Swap partition is an awful idea because you cannot easily resize it.

Zram is also a bad idea, when it is filled, the system starts swapping to a disk, and old pages nobody needs are kept in RAM forever. Zswap is better in this aspect - old pages are pushed to the disk and newer ones kept in memory. But Linux distributions use zram by default.

Also, it seems that many distributions now place /tmp in RAM (tmpfs). Whoever made such decision is not very bright. When you place a large file in /tmp (for example, viewing a large compressed archive which is automatically unpacked into a temporary location), it fills the memory and the systems locks up completely, including mouse and GUI - because bright people developing Linux cannot think of reserving resources for desktop environment to prevent exactly this situation. Why reserve memory for GUI? Obviously files placed into /tmp are more important. Who needs GUI nowadays when you can easily connect over SSH from another machine and kill the misbehaving program.

If you are making a Linux distribution, do not place /tmp into memory. Or at least check how much RAM user has, and add a limit on tmpfs after which files are pushed onto the disk. Also, do reserve memory for window manager with high priority.

> We are likely to see LLMs integrated into every part of computing as infrastructure, not just as a product, in the next year or two.

Of course, for collecting better telemetry using local AI for analyzing video from camera and audio from a microphone.

The problem with those free OS is that they usually work on top models which cost like 4 ordinary smartphones. It is experimental software that doesn't work perfectly, and it makes no sense to pay that much for it. So with high prices they are push away potential users.

Also, I would like no DRM, no serial id, no support for device verification, no trusted environments, re-programmable IMEI, no locked bootloaders, no proprietary code and no telemetry in any form or shape.

For another comparison, Moscow Central Diameters system (electric trains traveling from Moscow to nearby small towns) has 4 lines, 137 stations, 188 miles total length. It uses united fare payment system with buses and subway and transfer from a train to the subway is free of charge. Fare is about $1-$3 depending on the route. To be fair, it goes through Moscow at a slow speed and takes an eternity to get anywhere, and its range is limited [1].

Moscow subway [2] has 17 lines and 309 stations. In newer cars, 2 USB-A sockets are available near every seat, ready for robots.

[1] https://en.wikipedia.org/wiki/Moscow_Central_Diameters

[2] https://en.wikipedia.org/wiki/Moscow_Metro

There are other LLMs including open-weight ones. They cannot put your ID into the image.

Yes if you search anything in Google, you typically get sites that have a cookie panel, ask to allow notifications, show "Login With Google" popover taking the keyboard focus, and lot of ads before you can even read the content. No wonder people do not want to use Google anymore.

What about asking LLM to re-draw the image from scratch? Or pass through AI editor?

How can you prove that the photo is taken by real person and not brought by men in black suits and signed by Apple?

Yes? What other answer could be there?

This is another reminder that commercial companies will always rat you out and betray.

What if the manufacturer charged no markup on RAM price, wouldn't it make "illegal upgrading" pointless because they couldn't compete on price? The manufacturer buys RAM in bulk and has better pricing.

Probably because in Finland you are provided housing and money even if you don't work.

Is being 9th in (nominal) GDP rating now is mentioned as "even"? 90% of the world is behind Russia.

Interesting, I read about excavations in beginning of 20th century on Wiki:

> In protest of the government's increasing restrictions, Carter and his associates stopped work in February 1924, beginning a legal dispute that lasted until January 1925. Under the agreement that resolved the dispute, the artefacts from the tomb would not be divided between the government and the dig's sponsors, as had been standard practice on previous Egyptological digs.

Why they did have a rule that private persons can take away the artifacts? It would be better not to dig anything.

Is it much different from Apple and Google who trick user into agreeing and upload all user's data into a US cloud for convenient LE access?

Also, as I understood, this is a feature to allow server-side indexing of the project. But of course I wouldn't run this, and I generally wouldn't run any IDE or AI tools without a sandbox.

Sadly this plague of silent auto-updates is spreading to Linux. For example, browser plugins in Firefox on Linux can silently auto-update without user consent and without any checks and can be used as backdoors. Furthermore, the auto-updates are not using a package manager; firmware also seem to quietly update and also is not using a package manager.

You should use a sandbox. It is dumb to run any proprietary software without a sandbox, especially LLM-powered.

As I remember, you are also supposed to turn the wheels so that even if a car starts rolling, it won't be able to go staight.

But we didn't sue or blame anyone for this.

Who are those people having lot of time to re-read their old message history? I assume most people only read last several messages in a chat. This matches the real life conversations which are not stored anywhere. However, police will definitely be happy to discover that your many years messaging history is intact.

I would rather want a feature, like Telegram has, where you can set auto-delete of all messages older than N days.

I am ok with Electron if it is needed for Matrix. Also, Telegram has a C++ desktop client.

Also, I would not advise to add proprietary repositories as you grant them root access to your system which is against security practices such as the principle of minimum privileges and defence-in-depth.

How does PIN help against this? Also, my packets are already routed through malicious actors - ISPs, luckily most of them are encrypted.

> TikTok in August agreed to settle three U.S. lawsuits brought by young people who accuse social media companies of designing their platforms to be addictive and harming their mental health.

I am so happy I do not live in US where an idiot harms themself and non-idiot has to pay them.

Because 99% of adult people have other things to do than manually build content filters.

Yes, but it might go to an internal system, and internal bank systems are protected relatively well compared to mobile apps. And you don't have to do a selfie.

Not necesary, it might be an internal system. And no selfie. For example, in Russia it probably would be illegal to send personal and biometric data abroad. But of course in the West the rules might be different and it is ok to send citizens' data to shady foreign companies.

Also I am surprised people do not see the different between isolated internal "old school" systems built on owned servers located at the bank property and modern vibe-coded microservices in kubernetes in a rented cloud with the widest attack surface possible.

It definitely can be stopped. For example, China sells cars internally at cheaper prices, but they are locked to prevent using them outside the country. However, there are people who can hack and unlock them allowing operating in any country. But maybe it would be illegal in the West, I don't know. Removing the modem is an easier task.

Some banks, I assume, allow showing the documents in person and without a selfie.

You do not need to compromise anything, you can put any address in the "from" field. Email has no universal verification for sender address.

This is a reminder about what happens to people happily uploading their passport and selfies into the app. Do not do it if you do not want to end up in a Russian underground forums.

A pocket thief will bring the phone to a friend with a laptop and black market software. If the phone has no theft protection, they will factory reset it; if it has, they will use paid software to remove protection. I have not used that software and do not know if it is actual now, but Internet search shows that older phones are completely unlockable.

Just to give an example, here is publicly available information: https://github.com/youngrichu/frp-freedom/blob/main/FRP%20By...

Good thing is that some of the aforementioned exploits can be used to work around locked bootloader and liberate the phone.

Do not rely on any security in Android. It has lot of mistakes, poorly coded high privilege vendor software, so it would be dumb to use it for anything valuable.

> More specifically, another commenter in this thread says it's to make sure the user is aware of the configuration of a VPN which, if done maliciously, funnels all your traffic toa a hostile place.

I do not see how PIN protects the user, especially if user had PIN before installing a malicious VPN. Also, isn't Google Play supposed to check every application for malicious functionality?