rollcat

> Do you really want half your testosterone-fueled 18-28 year old males unable to attract a mate? There'll be continuous fighting to kill of the excess males.

This is nonsense. Non-monogamy is relinquishing exclusivity. If a man can have multiple women, but a woman can't have multiple men, it's just a different form of oppression.

Monogamy is possessiveness, and possessiveness is what drives violence.

Unfortunately they only support M1/M2 (last time I checked - hardstuck). It would be a great choice to repurpose existing hardware, but I wouldn't go shopping for Asahi specifically.

One reason Google was a big hit was because (while all the competition was doubling down on big iron), they ran their search on commodity hardware, and compensated in software/networking.

I don't think Macs would be a great platform for running a k8s cluster, but the power efficiency alone makes them a curious alternative to explore.

I'm browsing for something to replace my M1 mini, possibly a non-Mac. With Tahoe around the corner, running a Mac headless seems to be the best option to cope with the redesign.

It's a test run. They will relax those conditions first chance they get.

This is the problem with being the biggest in X. Facebook desperately tried to branch out: phones, video, VR... Eventually the only thing that worked was buying other social media companies.

Google is in the same position, yes they have Android, GCP, Gmail/work suite, etc but even all of that combined couldn't sustain the moloch.

Is it still democratic if the elected representatives are trying to subvert democracy?

Austrian companies also seem to be both overrepresented and the entire top ~30 of the pile. I like Noctua bit I smell bias.

> [...] I can just whip up a website and use javascript plus websockets/webrtc to implement encrypted chat?

HTTPS relies on centralised authority. It's right there in the name: Certificate Authority.

Tell me, Mr. Anderson, what good is a phone call when you are unable to speak?

> It is illegal to fail to disclose a password for any data for any reason [...].

So it's also illegal to not know the password?

I've forgotten my own debit card PIN or phone unlock code on a couple occasions.

> (including random data)

Encrypted data is indistinguishable from random data. The only hint is the presence of metadata (GPG armor, bootloader password prompt, etc).

This law is catch-all BS designed to persecute people for no other reason.

Phrasing the question is half the battle.

"Do you want to be spied on by your government?"

Yes is yes, no is no, anything more comes from evil.

Try styrofoam, a couple layers of soft packaging wrap, thick cloth, etc.

My other hack is WOL + auto-suspend for my NAS. Wakes up for backup jobs, goes back to sleep when done (and there are no SSH sessions left open). Very hacky but works flawlessly. (Usually.)

It's a spaceship from Warframe.

NB story spoilers. <https://wiki.warframe.com/w/Murex>

Where can I get professional-grade toothpicks?

I've read the headline and my first thought was, "they're overdue on tackling fraud", but perhaps it should be clarified.

Then you get the reverse. I just upgraded to macOS Sonoma (yes I'm always one major version behind with Apple stuff...), and I was annoyed as heck when I had to click through "Look what's new in Calendar!", "Look what's new in Reminders!", "Look what's new in StripClubs!"... I need to use my software right now, I will not read this. Then I will forget it ever popped up, and will not read it in the future either.

It has nothing to do with the ISA and everything to do with the system architecture. Look up PC-98.

Also: PC being a "standard" is a lie; ACPI is a horror.

The FSF has always been pretty clear on this: you use a linker (static or dynamic) = it applies; you don't = it doesn't. They even wrote LGPL with this distinction in mind, and introduced exceptions to yacc (bison) to accommodate non-free software.

In case of binary releases, you can request the sources of the relevant subcomponent (e.g. the kernel). The component boundaries are pretty clear wrt Linux: Torvalds has made it quite clear early on, that the kernel's GPL2 does not apply to anything in the user space.

Here also, the important distinction between GPL 2 & 3: with GPL3, it would be a breach of the license to ship code on a device that does not allow the end user to update that code. Which has effectively pushed everyone away from GPL3-licensed software.

IMHO the move to GPL3 has likely caused more harm than good to the FOSS ecosystem; in some alternative universe, GPL3 never happened, most of Android's userspace is GPL2, and we get the source for everything. In both universes we still don't get to deploy changes to devices we own, so IMHO the GPL3 won us nothing.

Which is odd. Windows was able to browse ZIPs like normal folders since... 98? XP? Can't remember now.

IMHO KDE delegates too much core functionality to apps. On macOS, I can press "space" while having a file selected and I get an instant preview. This sort of thing must not be delegated.

> What appeals to me about linux is the hackability and configurability.

Innovation happens on stable foundations, not thru rug pulls.

Yes, you have the freedom to make your system unbootable. When Debian first tried to introduce systemd, I've replaced PID 1 with runit, wrote my own init scripts & service definitions, and it ran like this quite well, until... the next stable release smashed me in the face.

It's absurd how hackable the Linux distros are. It's also absurd to do this to your workhorse setup.

> Can a game work where all you do is scroll?

Yes. MVP: <https://sc.rollc.at/>

This.

At $PAST_DAYJOB we've adopted Docker "only" around 2016, and importantly, we've used it almost identically to how we used to deploy "plain" uWSGI or Apache apps: a bunch of VMs, run some Ansible roles, pull the code (now image), restart, done.

The time to move to k8s is when you have a k8s-sized problem. [Looks at Github: 760 releases, 3866 contributors.] Yeah, not now.

> [...] python notable for their giant reliance on libs.

I object. You can get a full-blown web app rolling with Django alone. Here's it's list of external dependencies, including transitive: asgiref, sqlparse, tzdata. (I guess you can also count jQuery, if you're using the _builtin_ admin interface.)

The standard library is slowly swallowing the most important libraries & tools in the ecosystem, such as json or venv. What was once a giant yield-hack to get green threads / async, is now a part of the language. The language itself is conservative in what new features it accepts, 20yro Python code still reads like Python.

Sure, I've worked on a Django codebase with 130 transitive dependencies. But it's 7yro and powers an entire business. A "hello world" app in Express has 150, for Vue it's 550.

This. Ada Lovelace wrote programs for Babbage's analytical engine long before anyone succeeded at constructing one.

Shout out to @NotJustBikes in general. Infrastructure should be built for humans first. This benefits cars as well: more accessible for walking / cycling / public transport = less congested for when you do need a car.

"Whoever was on the cacert list that ships with your browser" has signed "I claim to be Acme Widgets Inc. and I own microsoft.com".

> The solution is to tie a package to an identity using a certificate.

Identity on the Internet is a lie. Nobody knows you're a dog.

The solution is to make security easy and accessible, so that the user can't be confused into doing the insecure thing.

> the actual solution is to avoid dependencies whenever possible, so that you can review them when they change.

If you're publishing your software: you can't "not" depend on some essential service like source hosting or library index.

> You ARE reviewing them, right?

Werkzeug is 20kloc and is considered "bare bones" of Python's server-side HTTP. If you're going to write a complex Python web app using raw WSGI, you're just going to repeat their every mistake.

While at it: review Python itself, GCC, glibc, maybe Linux, your CPU? Society depends on trust.

@everyone in the industry, everywhere:

Urgency is poison.

Please, please put a foot in the door whenever you see anyone trying to push this kind of sh*t on your users. Make one month's advance notice the golden standard.

I see this pattern in scam mail (including physical) all the time: stamp an unreasonably short notice and expect the mark to panic. This scam works - and this is why legit companies that try this "in good faith" should be shamed for doing it.

Actual alerts: just notify. Take immediate, preventive, but non-destructive action, and help the user figure out how to right it - on their own terms.

> God forbid, OpenBSD

What exactly is your problem with OpenBSD? Shaming it completely out of context is kinda mean - they're the upstream for OpenSSH and LibreSSL.