cyounkins

Gotta love the word 'sanction'. It is it's own antonym! "The committee sanctioned the new policy." (approved it) "The committee sanctioned the rogue nation." (penalized it)

Could anyone compare this with Claude Code and aider?

> Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for their content.

It really seems that they did _not_ change the default, since this feature is in private beta.

How does Astral plan on making money?

Why is glibc malloc() not more performant? Are tcmalloc/mimalloc making tradeoffs that maintainers are unwilling to make in glibc?

I don't yet see it in Bedrock in us-east-1 or us-east-2

I switched an agent from Sonnet V2 to o3-mini (default medium mode) and got strangely poor results: only calling 1 tool at a time despite being asked to call multiple, not actually doing any work, and reporting that it did things it didn't

Is there a lighter weight solution that abstracts the interfaces so I can swap GPT4 with Claude, including function calling?

Do you mean that you did the research, or your AI product did the research? How are you assessing whether a death was plausibly murder? So strange that the one example you find is of a car crash (one of the most common ways people die!) and no citation that it was found to be murder.

I ran into this before! https://medium.com/@cyounkins/encrypted-dns-ntp-deadlock-9e3...

I tried a few PFAS-free dental flosses that were horrible. I settled on Reach Waxed - https://www.amazon.com/gp/product/B005IHMXEQ

Interesting that you say you worry about re-creating the cluster from scratch because I've experienced exactly the opposite. Our EKS cluster required so many operations outside CloudFormation to configure access control, add-ons, metrics server, ENABLE_PREFIX_DELEGATION, ENABLE_POD_ENI... It would be a huge risk to rebuild the EKS cluster. And applications hosted there are not independent because of these factors. It makes me very anxious working on the EKS cluster. Yes you can pay an extra $70/month to have a dev cluster, but it will never be equal to prod.

On the other hand, I was able to spin up an entire ECS cluster in a few minutes time with no manual operations and entirely within CloudFormation. ECS costs nothing extra, so creating multiple clusters is very reasonable, though separate clusters would impact packing efficiency. The applications can be fully independent.

> ECS has weird limits on how many containers you can run on one instance

Interesting. With ECS it says for c5.large the task limit is 2 with without trunking, 10 with.

With EKS

    $ ./max-pods-calculator.sh --instance-type c5.large --cni-version 1.12.6
    29
    $ ./max-pods-calculator.sh --instance-type c5.large --cni-version 1.12.6 --cni-prefix-delegation-enabled
    110

I've climbed the mountain of learning the basics of kubernetes / EKS, and I'm thinking we're going to switch to ECS. Kubernetes is way too complicated for our needs. It wants to be in control and is hard to direct with eg CloudFormation. Load balancers are provisioned from the add-on, making it hard to reference them outside kubernetes. Logging on EKS Fargate to Cloudwatch appears broken, despite following the docs. CPU/Memory metrics don't work like they do on EKS EC2, it appears to require ADOT.

I recreated the environment in ECS in 1/10th the time and everything just worked.

Anyone else have experiences with Ruckus APs? I have Unifi right now.

edit:

RUCKUS R760 - $1800 - Wi-Fi 6E 4x4:4

RUCKUS R560 - $950 - Wi-Fi 6E 2x2:2

RUCKUS R750 - $820 - Wi-Fi 6 4x4:4

RUCKUS R650 - $520 - Wi-Fi 6 4x4:4

BBC thinks it is "aerobic and weights"

Yep! The isometric leg extension is more commonly known in the US as a plank. Pictures here: https://www.bbc.com/news/health-66303982

I was surprised to learn that PFAS are in dental floss, used to help in glide between teeth easily. This study linked using such floss and higher blood concentrations of PFAS: https://www.nature.com/articles/s41370-018-0109-y It's not strong enough evidence to suggest we should stop flossing, but they do make plain floss without PFAS, ex: https://www.amazon.com/gp/product/B005IHMXEQ/

How well does OPNsense deal with bufferbloat in a home networking situation? It appears to implement fq_codel for traffic shaping, but not the newer cake algorithm. Test: https://www.waveform.com/tools/bufferbloat

High fructose corn syrup is a very poor example. It is composed of fructose and glucose, both very familiar molecules to our bodies.

I set up an account with the public DNS provider and it doesn't appear to support multiple entries per record type. For example, time.cloudflare.com has two A records but the UI only shows the one.

Right, but unless it's documented how do you know that the DNS entry won't change? They could change infra so it's DNS load-balanced instead of anycast and still at time.cloudflare.com

It wasn't clear but I provided the IP so others could validate it's the same for them and (in the future) that it hasn't changed.

That's great! But I'd want to see it documented - I searched but couldn't find IP addresses, only the domain.

For me time.cloudflare.com = 162.159.200.123

Interesting! Unfortunately due to write endurance many networking devices mount their filesystem read-only. This means they also sometimes lack a log file describing why the device shut down!

If your clock was just reset, how do you know what time it is? How do you trust that your own clock is accurate? How do you know your clock wasn't incorrect before? Usually the answer to all these is NTP.

Cool! I searched but couldn't find any docs - looks like it might have been for ntpjs? What was the process like to get an ASN to do this?

Yeah I guess in general if the security of TLS depends on correct timekeeping (eg a compromised key enables an attacker to use an old cert), then in theory we should secure the time sync protocol. The NIST servers page [1] describes an authenticated+encrypted NTP for VIPs, but I don't know a solution for the layperson.

[1] https://tf.nist.gov/tf-cgi/servers.cgi

Sounds pretty good in theory, but this is for a router and somehow I doubt many ISPs are doing what you describe.

I've written a bit about DNSSEC. Adoption is only around 1-5%, deployment is a footgun [1], and validation currently imposes significant performance penalties [2], although that could be improved.

I've also written about performance of DNS over TLS [3] and found it to be negligible. The TLS setup is only done infrequently.

[1] https://ianix.com/pub/dnssec-outages.html [2] https://cyounkins.medium.com/costs-and-benefits-of-local-dns... [3] https://cyounkins.medium.com/performance-of-dns-over-tls-4f4...

GiveWell! Evidence-based impact.

For ZFS snapshots with restic I don't use the timed snapshots and instead create a new specially named one. There's a code snippet at https://medium.com/@cyounkins/correct-backups-require-filesy...