presto8

Does virt-install automatically download the ISOs? When I try it, I get the following message:

    $ virt-install --name alma9 --memory 1536 --vcpus 1 --disk path=$PWD/alma9.img,size=20 --cdrom alma9.iso --unattended
    ERROR    Validating install media 'alma9.iso' failed: Must specify storage creation parameters for non-existent path '/home/foo/alma9.iso'.

man configuration.nix

Then use the search function of the pager.

Check out marginalia[1]. Whenever you press M-x, it will pop up a buffer showing all the commands (with most recent ones on top) along with their keybindings and a brief description of what they do.

Embark[2] is also cool. It will show all the possible commands relevant to where the cursor is at that moment. I bind it to C-c a.

[1] https://github.com/minad/marginalia [2] https://github.com/oantolin/embark

The video adds a lot of extra stuff beyond what is in the NY Times video: There is an interview with one of the test takers; a description of three possible correct answers (1, 3, or 4, depending on the perspective); a video demonstration of several ways to compute it; and an interesting discussion about sidereal time.

Not that you were implying otherwise, but in this case I feel the video adds quite a bit more material and a more complete story beyond the NY Times piece. In reading the NY Times piece, I would leave with the conclusion that the correct answer was not one of the options. After watching the video, I would leave with the conclusion that the question was ambiguously written leading to multiple possible answers, one of which was there, but two other valid answers were not there.

The guy interviewed in the video said he answered "3", but then later when asked, said he got an 800 (perfect score). So he must have answered every other question correctly!

WPA2 uses AES-CCMP-128 which is not efficient (or even feasible) for high data rates as it cannot be parallelized. WPA3 uses GCMP-128 or GCMP-256, which (in the case of 256-bit) is stronger security and also can achieve gigabit level speeds or higher due to being able to parallelize the encryption.

WPA2 is susceptible to offline-dictionary attack and the cost is quite low (less than $10), especially with cloud computing. WPA3 is resistant to offline dictionary attack.

If an adversary knows the WPA2 passphrase, the adversary can eavesdrop on connections between the AP device and the station device. In comparison, in WPA3, even if an adversary knows the passphrase, the adversary will not be able to decrypt communications between the AP and the station device. The adversary is still able to gain access to the network, but the attack surface area has been reduced.

WPA3 uses HMAC-SHA256 for key derivation, whereas WPA2 uses HMAC-SHA1. NIST and other cryptography agencies have recommended against the use of SHA1 in cryptographic systems due to known weaknesses.

WPA3 has many advantages over WPA2. In addition, most of the implementation for WPA3 is in software and also available as open source.

I do something similar, but I use a bash script with rofi to display a menu of available profiles. I then bind a hotkey (Super-Shift-P for Profiles) that launches the script.

I use Firefox for my daily driver, but for profiles I use librewolf. This makes it easier to keep things separated when using the window manager to switch between windows of the same class (which I bind to Super-`).

#!/usr/bin/env bash

  BROWSER="librewolf"
  
  typeset -A menu
  # empty value means value is the same as the key
  menu["personal"]=""
  menu["banking"]=""
  
  rofi_args=(
      -p "$BROWSER profile"
      -dmenu
      -i         # case-insensitive
      -font "Hack 20"
  )
  
  if selection=$(printf "%s\n" "${!menu[@]}" | sort -u | rofi "${rofi_args[@]}"); then
      profile=${menu[$selection]}
      profile=${profile:-$selection}
      nohup "$BROWSER" -P "$profile" &>/dev/null &
  fi

Mercedes is taking legal liability for all actions of the car while it is in L3 autonomous mode, which Mercedes calls "Drive Pilot." That feels like more than a marketing gimmick, especially since no other automakers have assumed liability like this (that I know of). I am in stop-and-go traffic on the highway all the time during rush hour, it would still be beneficial to just read a book or work on my laptop while the car drives, even in that limited circumstance.

I interpreted this to mean that stations would stop offering full-service entirely, and thus they are not charging more for it since it doesn't exist.

It may be a point worthy of discussion: Probably in the "old days", government agencies would pay for ads in print newspapers or magazines or for radio ads. Similarly, if the government (except for members of Congress) send mail via US Postal Service, the government has to pay the postage.

So it's not a totally crazy question to ask if a government agency should have to pay a fee to use a private service like Twitter.

Presumably the government agency would have to do a cost/benefit analysis on running their own service versus paying to outsource it.

Exactly what I do. I use an old Mac Mini with an attached 5 TB USB drive. This provides a mirror of the iCloud data. For versioning, add a separate drive and use Time Machine. This provides versioning. For offsite backup, B2 or other backup provider.

Thanks for the recommendation, I'll check out Flowx.

A while back I installed quite a few weather apps on Android, at the time, I felt wX and QuickWeather (from F-Droid) were the best. Maybe Flowx will be even better :-)

My ordering based on personal experience would be:

AWD + Winter > AWD + All-Season > FWD + Winter > FWD + All-Season

There are plenty of videos[1] showing the above. I guess it should come as no surprise that it comes down to the vehicle, the tires, the conditions, and the driver.

At least for me driving in the PNW (temps usually not too much below freezing), Kumho Crugens (all-season) on my AWD SUV are way superior to Michelin X-Ice (winter) on my FWD minivan. Braking is longer on snow and ice with all-seasons, so I leave 8 car lengths of distance minimum when following other cars. The SUV has superior ESC and traction control that way out perform the minivan.

Several times in my FWD minivan with winter tires, I have been unable to go uphill on icy roads and had to put on chains. Whereas the AWD has no issues at all.

[1] https://www.youtube.com/watch?v=bRYHlb61_9Q

It is great to see immutable distributions becoming more popular. One thing that Ubuntu does very well however is the 5-year standard support for LTS releases (up to 10 years available via extended support).

I wasn't able to find any information on VanillaOS's support roadmap. Since the project's goal is to have stability of the underlying OS, it would be great if VanillaOS had an LTS-like support plan in mind.

This is a useful addition to Tailscale. But if one is going to manage public keys anyway, just use Nebula at that point?

You bring up good points: ideally, there would be no need to remember a passphrase at all! Especially since the passphrase has to be long and unwieldy in order to be resistant to offline dictionary attack.

The thing I worry about is that the security of the passphrase is only as secure as the mechanism guarding it. If it's written on a piece of paper, then how is the paper secured? It could be put in a vault, but then the vault itself is a conspicuous target for thieves. Hiding the paper somewhere is probably pretty reasonable, but if it's too well hidden, it could get forgotten or accidentally thrown out over time.

I use a YubiKey as well as an ultimate backup, and it has a PIN code mechanism that will lock after a few incorrect attempts, so that is a reasonable tradeoff for security and usability I feel.

I wonder if the best solution is to have a distributed copy of a recovery passphrase to friends and family. Then separately have a distributed copy of the vault itself (in my case, it's GPG-protected Password Store). This must have been an area of study already, I need to do some research!

This is a really great user experience. One thing I wonder about is if people start logging in without their password all the time, will they slowly forget what their password is over time?

Partly to force memory reinforcement, I set the password cache time of gpg-agent on my machine to 24 hours maximum. Thus I have to enter my password once a day, which helps me to remember it; but it isn't overly burdensome.

Although maybe if one always has

The linked paper says, "Compared to no reinfection, reinfection contributed additional risks of death [...], hospitalization [...] and sequelae [...]".

I need to read the full paper when I have more time, but it does not seem to be dealing with symptoms? And the sequelae seem most troubling since those could take a long time to manifest.

Same here, happy pCloud user (unlimited plan) for 2 years now. I didn't get the encryption, but it goes on sale from time to time for $75 lifetime.

I encrypt all my files locally before sending so the encryption doesn't matter for me.

I use rclone with --transfers 32 (for smaller files) and it seems to work fine without throttling.

100 people own 1 share each of a company at $1.00 a share: 100 shares times $1.00 = $100 market cap. Then a new person wants to buy a share from one of the existing owners. The existing owner wants $1.10. Now the stock is worth $1.10 and the value of all 100 shares is $110. The person who sold their 1 share made 10 cents profit, but the remaining $9.90 of new market capitalization was created out of thin air and doesn't exist until those owners are able to sell their shares on the market.

It looks like what happened is employees got a fixed number of RSUs. Their pay letter assigned a hypothetical value to those shares based on an incorrect stock price. So Amazon is probably not changing anything in the raise itself but rather correcting the hypothetical future value of the RSUs.

My pleasure! Ping me if you run into any issues. I also exported my TOTP keys from Authy and have them working from pass as well (using the pass otp plugin).

Sorry, I can't remember exactly how I imported the key, but what I did was generate new SSH ed25519 keypair, uploaded the public key as a deploy key to github, and then I think I copied the private key to iCloud and then accessed it that way.

I didn't find the sync that hard with pass and iOS (I'm sure Android has something equivalent): Set up a private git repo somewhere and configure passforios to pull from it. I have been running it for a few months now and it's smooth. This assumes you are on Linux or Mac.

This is great advice. The problem is that it is hard to have the discipline to do this month after month.

KeePass looks nice. Currently I'm using pass but I will investigate KeyPass either as a recommendation for others or possible alternative to my current solution.

I set up pass (on Linux and Mac, using brew) with two GPG keypairs, a soft keypair and a YubiKey. The YubiKey goes in a physical safe along with instructions for next of kin (and as an ultimate backup for me). YubiKey is protected with PIN.

For daily use, use the soft GPG key and gpg-agent to cache it. PassFF on Firefox (or see github passforios for iOS) or command-line tools (easily can build hooks with dmenu/rofi as well).

pass stores the gpg-encrypted passwords in a Git repository. Set up a private remote repository and push to it for offsite backup. There is some leakage of info as the names of the sites become the filename, e.g., ycombinator.gpg. This can be mitigated with some plugins like tomb, but then PassFF and passforios won't work.

I just tried it on my account (private browsing window) and confirmed that 5 digits of my phone number were revealed.

To add another anecdote: I use ZFS on NixOS for all of my partitions, including an encrypted boot partition. It has been rock solid for me.

In addition to band steering (which is moving between bands on the same AP), there is also Wi-Fi EasyMesh[1] which allows multiple APs to coordinate with each other (over wired or wireless backhaul) to steer STAs (clients) between APs. However, the Ubiquiti AP is not certified for EasyMesh[2].

[1] https://www.wi-fi.org/discover-wi-fi/wi-fi-easymesh

[2] https://www.wi-fi.org/content/search-page?keys=ubiquiti

Thunderbird 91 has threaded views in individual accounts. It is a little hard to enable the view though: In the header bar directly above the list of messages, there is a little "thread step" icon on the left by default, that must be clicked to enable thread view. This is next to the star icon, the paperclip, Subject, etc. Unlike the other header items, clicking the "thread" icon does not sort by threads, instead it toggles the thread view on and off.