ImJasonH

Fun easter egg: the barcode on the cover (the one on the left at least) is for the book's ISBN.

https://www.nola.com/news/hurricane/weather-satellite-goes-1... explains a bit more what this is, and what this means.

The main NOAA satellite for tracking Atlantic, Gulf Coast hurricanes is out until further notice

GOES-19 is the main instrument used to identify tropical waves as they strengthen and move over the Atlantic, Caribbean and Gulf of Mexico, providing real-time tracking for forecasting.

Already been done https://grit-scm.com/

I fell down a YouTube hole and watched all of these Derail Valley playthroughs: https://youtu.be/JSONttyEJ4o

Highly recommend if you like having something interesting on in the background.

Relatedly, I vibecoded this a few days ago for fun: https://imjasonh.github.io/kubescheduler-the-game/

It was fun.

Unfortunately due to the limitations of a valid image ref you can't include creds like that.

You can fork the registry and include your own creds in the backend when it pulls the repo though.

AFAIK people only begrudgingly pay for Docker and it does way waaay more.

I have yet to receive any commercial interest in any of these tools :)

You absolutely can just build things and put them on base images without building or pulling the base image at any point. This is a central feature of ko, a simple container build tool for most Go applications: https://ko.build

(I am a maintainer)

I love seeing folks learn that container images are just fancy tar files and JSON and are therefore buildable by normal tools.

Along my own journey of demystification I made a few toy container image registries over the years that generated and served container images from nothing but the URL itself:

https://ko.kontain.me builds a go application on demand and serves it atop a minimal base image

https://apko.kontain.me builds a base image containing packages listed in the URL, again on demand.

The latest addition, https://git.kontain.me serves an image with the specified git repo already checked out in the image.

None of these should be used for anything serious but they were fun to make and play with. :)

random.kontain.me has been uncharacteristically useful in debugging image caching scenarios.

What's NASA :)

I'm really interested to see what folks can do with animated Gaussian splats: https://youtu.be/X8yRlA7jqEQ?si=dXeHa03jO7MTBNLA

The filesize of a 3d animated splat is seemingly very small, and the method enables ~arbitrary FPS. But it seems the setup required to record it is still huge and expensive, which limits its usefulness.

Even with that there are some interesting use cases, eg. I'd love to be able to watch concerts this way, and freely move around the stage and crowd from any angle.

In the US we have the Super Bowl Flush: https://medium.com/nycwater/the-big-flush-on-super-bowl-sund...

Can you create it?

The first time I'd heard of this was via https://github.com/jonjohnsonjr/dagdotdev/blob/main/internal... which powers https://oci.dag.dev to let you browse OCI images (e.g., https://oci.dag.dev/fs/ubuntu@sha256:b40150c1c2717d324cdb172...)

Reminds me of: https://www.youtube.com/watch?v=fqYyxvM85zU

I did not get that impression from these docs or from a brief look through the gh CLI codebase. Can you point to evidence that makes you believe this is used to collect metrics about requests to other services?

Do people think that GitHub isn't already collecting and aggregating all the requests sent to their servers, which is after all the entire point of the gh CLI?

If you don't want your requests tracked, you're going to have to opt out of a lot more than this one setting.

Why would OpenAI have bought stars for openai-fm I wonder?

On this topic, there was a great episode of a little-known podcast about Python cryptography and OpenSSL that was really eye opening: https://securitycryptographywhatever.buzzsprout.com/1822302/...

:)

It's pretty easy to write your own. I made this one a while ago: https://github.com/chainguard-dev/crow-registry

The leaked source code is fake? Or it's the real code that they leaked purposefully to generate buzz?

Either way I'm not sure I believe it's worth the effort. People have been talking about Claude Code plenty without having to resort to tricks.

Occam's Razor etc etc

tl;dr debug.ReadBuildInfo has basically everything you need

That is an interesting fact indeed!

https://macdailynews.com/2012/06/12/rush-limbaugh-okay-apple...

npm has a feed of package changes you can poll if you're interested.

GitHub has a firehose of events and there's a public BigQuery dataset built from that, with some lag.

It's unclear to me from this post, or Red Hat's announcement[0] what makes it an enterprise build, aside from offering some support SLA.

Are there any material differences between this and the free OSS Podman Desktop[1] released 4 years ago?

0: https://www.redhat.com/en/blog/introducing-red-hat-build-pod... 1: https://podman-desktop.io/

Thanks for giving it a shot, and for the kind words.

I didn't focus much on the realism of the environment, and spent most of my tokens making the drone "feel" right -- responsive but a little sluggish, physical, controllable, etc.

If I spend more time on it I'd probably work on making the skier a little better, since that's what you end up spending the most time looking at. It's basically a placeholder now, and it shows.

But you're right, making the rest of the peripheral view more realistic would also probably have a big impact.

Maybe I'll set up a workflow to deploy PRs to preview environments and encourage folks to send PRs to work on these things. In the meantime, feel free to fork it and make whatever changes you think would make it more fun!

Both Claude Code and Codex use sandbox-exec with Seatbelt to sandbox execution:

- https://developers.openai.com/codex/security/#os-level-sandb...

- https://code.claude.com/docs/en/sandboxing

I haven't experienced that (that I know of), do you have an example handy?

Here's a Go mod proxy-proxy that lets you specify a cooldown, so you never get deps newer than N days/weeks/etc

https://github.com/imjasonh/go-cooldown

It's not running anymore but you get the idea. It should be very easy to deploy anywhere you want.

Govulncheck is one of the Go ecosystem's best features, and that's saying something!

I made a GitHub action that alerts if a PR adds a vulnerable call, which I think pairs nicely with the advice to only actually fix vulnerable calls.

https://github.com/imjasonh/govulncheck-action

You can also just run the stock tool in your GHA, but I liked being able to get annotations and comments in the PR.

Incidentally, the repo has dependabot enabled with auto-merge for those PRs, which is IMO the best you can do for JS codebases.