rietta

I have wondered about this as well. To what extent am I influenced by the LLM output. It is a load bearing question for sure. ;-p

Clearly, but of all the ways to manage authorized keys on a fleet of endpoints was this particular methodology the only or best? Were there other ways to activate and deactivate keys without introducing the same complexity and brittleness. Clearly the ACL methodology provided a false sense of security in this instance in the presence of this bug.

It worked in 2008 - 18 years ago. I have other options now like said cloudflare tunnel.

I am fairly glad I have stuck with stock OpenSSH that ships with Linux. This incident proves I am glad with that choice.

Over the decades, I have maintained remote access through port forwarding on my router - at one point in 2008 I put SSH on port 80 so I could access it from the restricted wifi network at the hospital my grandmother was at. I have also used openvpn. I have also used cloudflare tunnels. But in the end, I always connect to hardened openssh with key only authentication.

They don’t want to be behind Google and Bing which all these businesses already let index.

Cancer is the enemy! I am so sorry to learn of Eric's passing. Sometimes you don't have as much time as you think. We all should do so well as to document everything for our spouses and loved ones. I had a friend who died from cancer and we never truly unraveled all of his accounts for his widow. Live has moved on but stuff including precious memories were lost as cloud accounts were shuttered. Also do not underestimate how many organizations will not transfer accounts to the surviving spouse.

I actually spoke up about this at a local chamber meeting today during my 30 second elevator pitch. I decided to give a brief cybersecurity awareness month pitch about having backups for your 2FA and to be wary of passkeys because you will be locked out on device changes.

I think they are a trap. A usability nightmare. So, I acquiesce to a passkey to a site while on my iPhone and now I cannot log onto it from my work desktop in Firefox. An older person sets it up on his or her Google account, gets a new phone (iPhone to Android) or Android to iPhone doesn't matter and loses access. We know that Google won't help a regular consumer with anything.

Syncing may be a thing in theory but the friction is huge.

Neat! I am behind the times. My last major Visual C++ work was version 6.0 when I was a teenager. Then went to Georgia Tech which was 100% into Unix. Then my career never converged back into C/C++ work on any platform.

It's been a long time since I have tried to do Windows work in C/C++. Is this Win32 the actual Win32 API of yesteryear or something else. I thought CMoke was a Unix tooling.

There is Boost in C++. It is very mature and honestly modern C++ has a lot of extremely powerful stdlib functionality and classes that will still be orders of magnitude more performant that the vast majority of the web app languages we use today. See https://www.boost.org/

Importantly this change as well as the court ruling that lead to it are not based on a Second Amendment claim.

This was a taxing authority case.

However, as more of these items are purchased and kept, they can will become “in common use by Americans for lawful purposes,” which will enhance a second amendment element in the future.

I am not a lawyer.

Most interesting for most people, in States where there is no specific NFA law, one can now buy a firearm suppressor (which softens the report but does not make it whisper quiet) just like any other firearm. Same normal form. Not paying a $200 excise tax and submitting fingerprints and other NFA mandates to the Federal government prior to purchase.

The NFA is a tax and has been upheld under Congresses taxing authority. When the tax became zero and no revenue was collected, a Federal Court ruled that Congress had no authority to run the registration and prior approval apparatus that was used to prove tax compliance. Lot's of complicated stuff about injunctions applying only to plaintiffs and orgs, but the DOJ did not appeal, and now the ATF has said they are making this uniform. This does not change state laws that under State statute make it a crime to have such items or to have such items that are not registered.

I am not a lawyer, but I am generally interested in firearms and firearms law.

A reasonably good source is Mark Smith on YouTube. He is an attorney.

Hope this helps.

I am extremely sorry to hear of Ms. Hamilton's passing. I will be sure to tell my daughters in the morning. I told them a bit about her. They found the life size cardboard cutout at the Computer History Museum in Roswell, GA, very interesting. They love the Apollo section of the exhibit.

Maybe I am slow here and everyone is using Claude with credits at max use. But isn't Claude Teams like $25/month per developer for ordinary use? What the heck of these guys doing that makes it get that phenomenally expensive for their use cases? These are presumably well capable engineers who started to use this as an aid right not just throw Fable at everything and loop to the max?

My 6 and 4 year old kids love this movie on DVD! Of course when we watch it the studio doesn’t get a new ping. So thank you for the work on this classic.

I did not previously know about this closure or the auction. However, I am super sad to learn this was a Chapter 11 bankruptcy and not just an intentional retirement.

I do not know, but my best guess would be an improved post processing algorithm was introduced.

Which sucks when you are for instance trying to let the professional circle know about an upcoming meetup that has a registration link.

Congratulations!

Yeah, in part my issue is recruiters are completely unaligned with my interests. Anytime I have ever replied that I am available for a corp-to-corp consulting contract the contact dies. They are only about placing people in full time employment, which has been an anathema to me because to do that I would have to turn my back on all my current clients and leave them high and dry. Growing the business has always been the better path for me.

I have not run a controlled study, but I have shared topics here on this website that made it to the front page quickly and had a lively comment section and on LinkedIn the same was had very limited impression numbers. I did an experiment with an ATLRUG announcement where I did not include the URL and the numbers were slightly higher than one that did, but still not great. I have connections on the platform with relevant interests but its not showing it to them.

One thing that has always hurt me is I have never once in my career been on the traditional job market. I was self employed as a teenager and have always just kept growing and pivoting and growing. I have never sought or taken a job via the normal market. LinkedIn has always been a bit of a odd place for that mode of work.

Oh! Does that play on words bring back memories. Along with Pen Island!

Slightly off topic. I've had exactly one consulting engagement come from LinkedIn, back in 2013. Someone met with a VC, was told they needed a Ruby on Rails developer, found me, and it was off to the races. That was it. No lead since, in any format. I paid for Premium for a while and eventually stopped.

I have connections, and friends occasionally like a comment when I share something. I'm convinced LinkedIn demotes anything that links off-platform, even in the comments. That makes it really hard to share a good blog post.

Honestly, I get more engagement on Facebook. My mom and in-person friends find what I do slightly interesting, at least when the algorithm decides to show it. Same story there, though. Links to a blog get buried compared to native content.

I had this exact conversation with a barber on the UPC campus in Barcelona in 2005 (if my memory is right). My reply to his assertion was to ask if he ever considered how large US states are compared to EU countries. People do travel within the USA alone and with their families all the time. Just this week mine crossed three states for a beach vacation and the returned home. International travel is not unheard of but not the same distance scale. If I recall he said something like he had not thought of it that way. I do not recall if we were talking in Spanish or English anymore after 21 years.

We used to call those checks!

I’m still terrified how normal people are going to navigate being locked out of their email account because their device that was their passkey is no longer accessible and there’s no backup solution to restore access.

I’ve similar issues even in a lower level with LastPass where it won’t even let you enter your two factor if it doesn’t recognize where you’re coming from but then you have to be connected to your email, but your email password is stored in LastPass. There is a real possibility of being locked out at all devices at the same time and not being able to get in to the first one.

I remember when open source software, and Linux in particular, was the threat to the world according to Microsoft execs.

That does seem strange. So he has been experimenting seeking something. I have kept the same LTS installations sometimes until the bitter end of the support cycle.

What should we call them then? I certainly used the term code gate to refer to a code review process prior to the mainstream use of LLMs.

Neat!

I had switched some projects to SeaweedFS's Docker image. It worked well. This is good to know there is a successor open source project that would require no code changes to use. Will evaluate.