HN user
For me, this is almost an anti-feature. I still use it for a few sites, but the real killer feature of containers is that it becomes a breeze to use the same service with different accounts & identities, without logging in and out, and no shared state. Pinning a site to a container breaks that.
Yeah, and I invariably add -r to xargs, so as not to execute the command unless results come through the pipeline.
If one is working with whole lines of text, setting the delimiter to newline is often desirable:
xargs -d \\n
As much as I don't like to, I do use Google things on phone, and I've really only ever used secondary profiles to use shady apps with far too broad permissions, such as the kind required to update firmware or get data from wireless/Bluetooth devices.
If you do want a smart phone, but don't want rubbish on it, Graphene is very bare-bones by default. F-Droid and other FOSS-friendly app stores can fill in a lot of gaps, and respect your privacy.
Some apps will simply not run without Play Services, but if you had to use such an app, I believe you could do it in a second profile and have Play Services disabled in your main. Regular apps installed for secondary profiles show as "Not installed for this user" in my main, but Play Services is a bit special.
Have you got a link to anything about hiding parallel accounts? I use GrapheneOS, and don't see anything in the UI about it. Am I looking for the wrong thing? From what I can see, it's the same as stock Android's user switching, which has obvious UI elements about switching session.
I see hidden profiles is an open issue, here: https://github.com/GrapheneOS/os-issue-tracker/issues/5003
Is there some reason you're being a patronising prick? Or do you really not know the definition of spilt horizon?
https://en.wikipedia.org/wiki/Split-horizon_DNS
I could not have been clearer that the private DNS servers I use provide different results from public, for the same names, which is the split. Not all private DNS servers are split horizon, and nothing I wrote implies that that's my understanding. If that's what you've concluded, then you've either failed to comprehend what I've written, or you're a troll.
Mate, what on Earth are you talking about? A private DNS server that can only be hit by clients on an internal network, which differs from public DNS, is split horizon.
Especially when it's caused by identical MAC addresses! https://www.reddit.com/r/pics/comments/l9r17/now_we_know_why...
They are, but they still take time to build, and loans to finance.
Here are two of SA's (which has the most renewable generation): https://en.wikipedia.org/wiki/Hornsdale_Power_Reserve https://web.archive.org/web/20220523164905/https://www.elect...
I wasn't talking about your opinion of it, I was simply using a rhetorical question to point out the nonsensical premise of your response:
Wait…what? You have a fully internal service and you dont have an internal DNS server?
You can't do split horizon without an internal DNS service. By definition it's a non-public service that gives separate results to public.
I thought it was quite effective. I read the whole thing in anticipation, and was still shocked by the graph.
It's one year, from left to right. The termination of the red line is in the middle because it's the middle of the year.
What, indeed. Yes, I have internal DNS servers. They are what handle the split horizons. How would one do split horizon without an internal DNS service?
I consider that an unnecessary leak of private topology, it's not info that needs to be public. IPv6 addresses are not really ever internal, and an exploitable vulnerability in a firewall product leads to the possibility of a directly addressable target. Guessing a v6 address without a name pointing to it is impractical at best.
Yeah, nah. Won't be doing that.
This scene from the prescient Wall•E springs to mind:
Don't use split DNS
So what's your solution when you have a wholly private service that will never have a public v4 address, nor a publicly routable v6? How do clients get the address for a nice domain name without the addresses in public DNS?
I use acme.sh with DNS validation, and use common domains that have both public and private services on subdomains. I use split horizon so private.domain.example resolves only on LAN and VPN, and public.domain.example resolves everywhere, but the address changes depending on the network one is connected to.
It doesn't have to be about ruling, but self-determination is something a great many value quite highly, and think there should be more of. AI controlling all of humanity removes that from the equation entirely. You should be free to live like a cow if you so wish, and it should remain your choice to, or not to. Your choice to should not remove that choice from others.
PNG has comment chunks tEXt, zTXt, and iTXt. You can have a completely normal image whose file is stuffed with as much content as you want. That is less fun, I suppose.
And it'll be one of the two choices that directly contradict each other.
I used to do this but I found it downloads needed language files in the background. So every time it updated, I would clear all the app data, open it again on something innocuous, like a text file, toggle each language I used. Not knowing how long it would take, I'd wait until each seemed to be behaving, then disable network permission. I still don't trust that it doesn't send data off via Play Services.
Now I use Heliboard with the swiping library added. It's not perfect, but has improved, and at least it can give more than three correction options (long–press centre suggestion with ellipsis below).
I really miss Keymonk — two–finger swiping, accurate, and no crap.
But the hero image is an AI homage to cute paper-craft, to remind us that people cannot or will not put in that level of effort any more, so it's okay!
It discusses clearly, and concludes with, lamenting the loss of complex flavour in favour of sweetness. Also mentioned is people's assumption that fruit's inherently healthy, but the sugar increase is changing that. The link between excess sugar and poorer health is assumed knowledge by now. Type II diabetes is on the rise for a reason.
Yes, exploration, discovery. One doesn't stumble across items available on inter-library loan.
I could not count the number of books I picked up and enjoyed, even if only for a short while, whilst I was studying at uni.
Ctrl + Shift + O opens a threaded conversation in a new tab.
Settings > Composition > Use paragraph format… set to unchecked
Search has always worked pretty well for me, with the exception of not searching message bodies in a folder that's set to only download messages on demand. If the folder is set for offline use, the bodies are there and searchable. I use the Quick Filter bar 99% of the time, anyway, it's great.
Still my preferred client.
Anteaters will be more likely, apparently.
https://phys.org/news/2025-07-mammals-evolved-ant-eaters-din...
The utility of $_ is often voided by tab-completion in the subsequent command, at least in bash. You won't know what it contains, which makes it dangerous, unless you first check it in a way that also carries it forwards:
printf %s\\n "$_"
The terms and conditions are simple. Every time you perform any network access, you have to send a copy of the payload and response back to my server. Either that, or you're in breach of my terms.
That's not how contracts work, at all. MS hasn't bought anything from him, nor was he able to require them to agree to anything in order for him to install the OS.
It's an exception that English doesn't need, and it only adds to the difficulty of learning the language. You being used to it doesn't make it good.
I'm going to try and learn English. I'm trying and learn English. I tried and learn English.
vs.
I'm going to try to learn English. I'm trying to learn English. I tried to learn English.
Not quite. Programs normally need to be compiled per system type, and sometimes per system, due to differences in the OSes' versions, APIs and hardware. The idea behind this type of emulator is that you need compile it only once, and the emulator takes care of those differences for you. The Bedrock program would always ‘see’ the same OS and hardware.
The positive of that approach (for users) is that it relies on client-side scripts, so it's possible for privacy tools to target those.