andreashaerter

Yes, ~30 Minutes ago (~18:00 UTC):

  Internal error: Usage credits are required for this model.: {
    "errorKind": "rate_limit"
  }

[Edit] Update from https://status.claude.com/

We are aware of an issue preventing users from selecting Claude Fable 5 within Claude.ai, Claude Code, and other surfaces, and are working to resolve this issue. Jul 17, 2026 - 18:36 UTC

BUT:

1. For generic TLDs like .com/net/org/.<all kind of new ones>, the rules mostly come from ICANN, the registry, and the registrar.

2. For country-code TLDs like .de/io/to/io/ai/ly, the rules come from that ccTLD's own registry. Best example AFAIK: .ly domains must not contain obscene contents contrary to Libyan law or Islamic morality (which was a driver for bit.ly's domain change)

So ccTLDs are not simply "generic TLD rules plus country rules." They are their own category with their own policies. Trademark violations are one way to lose a domain, but not the only one. The risk is MUCH higher when using a country TLD.

On topic when draw.io (diagrams.net) realized that, from https://www.drawio.com/blog/move-diagrams-net/#io-domains

    There are two major problems with .io domains:

    The first is that the islands which should own the domain suffix, don't, thanks to a wonderful piece of modern day British Imperialism. If you ever feel the need to donate to us, please give it to a more worthy cause.

    Secondly, there was a security issue with the .io domain. In 2017, a researcher managed to take control of four of the seven authoritative name servers for the .io domain. We accept that mistakes can happen, strong processes limit the chances of them happening, but they still can.

Thoughts and reviews about Passbolt? TOTP handling seems a bit off, extensions are not mostly read-only (OK for me). But the "share a single secret" access control seems nice:

https://www.passbolt.com/pricing/pro

https://www.passbolt.com/vs/bitwarden/overview

https://www.passbolt.com/docs/hosting/install/

PHP backend (IMHO a downside): https://github.com/passbolt/passbolt_api. But There appears to be a significant amount of auditing behind Passbolt's security claims, assuming the information on https://www.passbolt.com/security is accurate.

What we need in the small business space is a tier of services where small businesses can self host using their own on-premise, vertically scalable infrastructure (ie: 1 server). In most cases they can tolerate some downtime and, even if they don't want to, a lack of resources usually means they don't have a choice (ex: they're not running HA network connections).

I think the same: Small service businesses care most about Time To Recovery (TTR) when doing services. As long as they communicate at least by phone and the website is up, they usually tolerate downtime when they know when their backoffice services are back online.

This is classic Business Continuity Management, 5-10 questions usually make clear what must work in every case when and what has to be available for supporting this process. Example: I got a customer which prints all logistics / distribution labels in batches. They can still work where money comes in (=shipping stuff) for quite a long time (4h min, 8h max) if the next batch of labels cannot be printed / some system is going down needed to support shipping. So no need for expensive HA around legacy software, but enough time for a good process to get back online with the latest backup on replacement hardware which is already there on-site.

The thing is: HA is FAR more expensive and complicated than e.g. getting another stand-by server as fast replacement, maintain the hypervisor on this second server e.g. every six month and test restoring backups on it once a month (best: automated: IMPI boot, restore without VM networks, testing, shutdown). Same with a firewall; two used Enterprise Servers + Proxmox VE Subscription, OPNSense + 2 x N150 Hardware and two consumer WANs (e.g. Cable and VDSL) is really not that expensive if only the WAN is a bit more complicated from the POV of a SME admin because of failover. Classi VLANs+ACL and services like surveillance as needed...

Businesses with <10-20 employees are often viewed as not being worth the effort of having as a customer, so they end up with self-serve, unsupported, non-discounted, over priced, trash subscriptions. By the time they grow enough to be a valuable customer their only experience with some products is misery.

Exactly. This is why I do SME IT since ever, no matter for which $BigCorp I've done consulting and DevOps. I automate them. I consult them. My company (plug: https://foundata.com) does it for a few bugs per month (Hypervisor, Groupware (Calendar, Mail) Firewalling, VPN, Directory Services, Jitsi/OpenCloud/BBB) if they understand that they finance the high quality of the managed services ON THEIR HARDWARE with all other customers and we do not work per-hour but per-service + we run Open Source also for other reasons than "no or fewer licensing costs".

And I like it even this does not make you rich. Because I REALLY share your concerns ("owning all the small businesses of certain types; family doctors, dentists, optometrists, vets" -> I don't know where you are from, but it is the very same here in Germany... example: https://www.ndr.de/fernsehen/sendungen/panorama3/Spekulanten...)

if you have a choice

I just read:

If I had learned one thing from my past life was that if you see the signs of an abusive relationship, you have the option to walk out, and you don't, all that follows is your own fault.

so... :)

Is there a reason for OCI images? It is just a binary? I have all used versions in ~/.local/bin/

  ~/.local/bin/hugo0.145.0
  ~/.local/bin/hugo0.148.0
  ~/.local/bin/hugo0.149.0
  ~/.local/bin/hugo0.150.0
  [...]

Can't agree, even though I was also hit by breaking changes from time to time with my own templates. Because this has a BIG upside: I am very happy with Hugo and how they love to solve problems in detail and think through features to the end. Because of these frequent re-factorings and sometimes (!) breaking changes, it gets more elegant every year.

And this is really not a production problem. As stated in the comments before, just don't upgrade if you don't want to / have no time yet. It is a self-contained static site generator without external dependencies. It won't break. And the security of an old Hugo binary is mostly a non-issue if you do not load remote content.

And, if you have some time: Their changes are really well documented. The changelogs are really good.

The main problem is sticking with an unmaintained template of a third party which breaks when you finally want to upgrade and don't want to fork / don't know when a an template update comes along. But that's the reason I write my own. It was worth the effort.

The

Low maintenance[...]A single Docker container, using SQLite as database. Automated migrations, zero breaking changes.

sounds nice. How does this compare to Linkwarden or Karakeep (formerly Hoarder) in terms of features? A comparison would be useful.

This is useless from my point of view until there is licensing information (I found none, correct me if I'm wrong). And https://iconsroom.com/pricing is producing an "Collection not found" error.

You still have a linkedin?

Sadly, LinkedIn has replaced email for initial contact after fairs or in-person client meetings. New real-world contacts look you up on LinkedIn and then use it to ask for things like your email address or mobile number. Because of this, I'm even verified :-(.

Even though I use LinkedIn basically the same way Internet Explorer was used in 2009 (purely as a Firefox or Chrome downloader but not for browsing). LinkedIn is my initial contact details exchange, but not the platform to communicate.

Isn't that just all ai slop?

It is. I basically get zero useful input. Just biased, shallow rubbish. If there is valuable content it is usually cross-posted from authors who also run blogs I already follow.

Edit: Spelling, grammar, style

You can verify yourself using company email address

LinkedIn does not support smaller companies; it appears to rely on some kind of whitelist or known-enterprise system. This option is simply not available for at least 90% of users.

Hey, cool :-). I've used Zulip for a bit and really enjoyed it.

We're planning to roll it out at our company (foundata) in Q4, so you’ll get at least a few bucks from us. I'll also happily recommend it to our customers. As an OSS company and service provider, I can very much relate to the lack of marketing budget and the constant SEO spam.

I keep wondering why Zulip is so often left out of reviews and tooling comparisons. For me it ticks a lot of important boxes, yet it barely gets mentioned. Is there a downside I'm missing, or is it just under the radar?

The concept that every message belongs to a topic and the async communication focus makes so much sense to me. I read conversations, not timelines.

It's mostly tradition rather than a hard requirement. Go has long supported vanity import paths: https://pkg.go.dev/cmd/go#hdr-Remote_import_paths

For example, we use Hugo to provide independent Go package URLs even though the code is hosted on GitHub. That makes migrating away from GitHub trivial if we ever choose to do so (Repo: https://github.com/foundata/hugo-theme-govanity; Example: https://golang.foundata.com/hugo-theme-dev/). Usage works as expected:

  go get golang.foundata.com/hugo-theme-dev

I've been using ThinkPads with Linux since the T410, T420, T430, T480s, and several others. For me, they've consistently delivered an "everything works out of the box" experience with Ubuntu and/or Fedora, including things like SmartCard readers. I'm currently on a Lenovo X13 Gen 6 (AMD), and the only component that required any tinkering was the 5G WWAN due to FCC unlock issues (see: https://github.com/lenovo/lenovo-wwan-unlock/issues/68 ).

One thing many people don't realize is that some Lenovo models can be ordered with Fedora pre-installed. That's a pretty strong signal for Linux compatibility.

I've been watching Framework for years, and among my Linux-using colleagues we have ThinkPads, Frameworks, and Tuxedo machines, so comparisons are easy. I really want to like Framework, but recurring firmware issues, noise (!!), and the lack of built-in 4G/5G antennas have pushed me toward Lenovo every time. That said, I do like the modular idea. I even use a small USB-C adapter permanently to protect the port from wear, almost all docking/monitor issues I've seen over the years came down to worn cables or ports. In that sense, Framework's modules are genuinely appealing.

I don't get the mostly black/white "Self-host" vs. "Mega-Corp" discussions as there is a middle ground: smaller managed service providers (even: per-service).

You don't have to self-host everything in your basement, and you don't have to hand your entire digital life to Google or Apple either. Mail, CalDAV/CardDAV, Immich, Nextcloud, OpenCloud, OpenTalk, web hosting, Kubernetes, simple VMs.. whatever ... fully managed, run by local or independent providers or by the company behind projects, without Big Tech lock-in. If chosen wisely, you can migrate, take over, or bring it in-house when you want. Just spend a few bucks and do some company research. Same as you would when choosing craftsmen, lawyers or something else.

For example, that's actually how we operate as a company for some of our customers and even a few single persons: we provide SaaS AND setup documentation. Customers can transparently take over at any time. We even help separate domains, credentials, and administration from us. Convenience without captivity. I am sure there are hundreds of shops like ours, providing comparable services for people in their wider neighborhood.

All of the self-hosted solutions are also just way less smooth to use than the built-in integration iCloud or Google Drive gives with devices.

The built-in integrations (iCloud, Google Drive) are smooth right up until you’re locked out or forced into changes you can't control. Obviously.

There is a middle ground though: managed service providers (per-service). You don't have to self-host everything in your basement, and you don't have to hand your entire digital life to Google or Apple either.

But: the Omada gear is awesome. I threw away all of Ubiquity stuff and can operate without cloud.

never heard Bremen.

Really? For me it is always Berlin, Frankfurt, Bremen, Dortmund Nordstadt.

Just search for "Bremen Rocker Kriminalität" or "Organisierte Kriminalität Bremen" and you will find tons of thing about starting in the early 00-years.

Wow. How could I not know but needed this since ages. Thank you!

Even though I use Tailwind CSS for larger projects, there are smaller, self-contained cases where Pico CSS is a perfect fit. Their "Usage scenarios" page describes it spot on:

https://picocss.com/docs/usage-scenarios

I discovered Pico CSS just last week, and it turned out to be exactly what I needed for a small Hugo theme (govanity, vanity URLs for Go modules/packages with Hugo: https://github.com/foundata/hugo-theme-govanity). From discovering Pico, reading the docs, and integrating it, I was done in about two hours.

One thing that's surprisingly easy to overlook in between: CSS variables: https://picocss.com/docs/css-variables and Colors: https://picocss.com/docs/colors

I can't say whether those claims are true. But even if they were, it feels selective. Every major AI company trained on oceans of data they didn't create or own. The whole field was built on "borrowing" IP, open-source code, academic papers, datasets, art, text, you name it.

Drawing the line only now... saying this is where copying stops being okay doesn't seem very fair. No AI company is really in a position to whine about it from my POV (ignoring any lawyer POV). Cue the world's smallest violin

There is a reason why all artists and risk-affine people leave as fast as they can.

You have to live in a different country. There are tons of right-wing media. And I see neither "people leaving as fast as they can" nor a "missing debate and argument culture," aside from the fact that not everything one says will be liked. This is true for both the left and the right.

It even goes so far that one should not openly express contemptuous or hateful statements (which are punishable), or participate in efforts to abolish the state itself while serving in government (which is the problem with some AfD members).

The fact that our freedom of expression is grounded here is not a restriction of dominance but rather its protection. We have learned from history.

However, I understand that we have serious problems in our country. I also think that public administration is in decline (even though it keeps hiring more staff), and everything is simply solved by throwing money at it... money that Germany still has for now. This can also affect democracy. Nevertheless, much of this, in my view, is a "zeitgeist" of general dissatisfaction. As in „The Matrix“, where people disliked the simulation when it was made into a paradise and they refused it :-D. Because de-facto, most normal people life quite comfortably in Germany. Especially in comparison.

„Yes, it's octopodes. I insist on the correct plural. Which is probably why my social life has some issues.“ :D

Trademark action incoming in 3, 2, 1, ... and deservedly so. They even copied their graphic language. "Claudia" closely resembles "Claude," especially in the software/AI space.

* IR: https://register.dpma.de/DPMAregister/marke/registerIR?AKZ=1...

* EU: https://register.dpma.de/DPMAregister/marke/registerHABM?AKZ...

Edit: And the "getAsterisk" organization at https://github.com/getAsterisk/claudia and https://asterisk.so/ which is NOT about https://www.asterisk.org/. PSA: The real Asterisk has class 42: https://register.dpma.de/DPMAregister/marke/registerIR?AKZ=9... - Oh boy. What next? Call the next project TheRealMircosoftGoogle? Why not? Lol.

Same for me. Big nope.

Investing quite a lot of time to figure out hosting LLMs locally in comparable quality without investing too much money (as smaller environments will never have a large budget for this).

What am I missing?

The core of the article. OpenAI is currently retaining all the chat data indefinitely - even for plus/pro users as s a result of a court order. Please read: https://openai.com/index/response-to-nyt-data-demands/

CNAMEs. I do this for everything. Example:

1. Your main domain is important.example.com with provider A. No DNS API token for security.

2. Your throwaway domain in a dedicated account with DNS API is example.net with provider B and a DNS API token in your ACME client

3. You create

_acme-challenge.important.example.com not as TXT via API but permanent as CNAME to

_acme-challenge.example.net or

_acme-challenge.important.example.com.example.net

4. Your ACME client writes the challenge responses for important.example.com into a TXT at the unimportant _acme-challenge.example.net and has only API access to provider B. If this gets hacked and example.net lost you change the CNAMES and use a new domain whatever.tld as CNAME target.

acme.sh supports this (see https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...; this also works for wildcards as described there), most ACME clients do.

I also wrote an acme.sh Ansible role supporting this: https://github.com/foundata/ansible-collection-acmesh/tree/m.... Example values:

  [...]

  # certificate: "foo.example.com" with an additional "bar.example.com" SAN

  - domains:

    - name: "foo.example.com"

      challenge:  # parameters depend on type

        type: "dns"

        dns_provider: "dns_hetzner"

        # CNAME _acme-challenge.foo.example.com => _acme-challenge.foo.example.com.example.net

        challenge_alias: "foo.example.com.example.net"

    - name: "bar.example.com"

      challenge:

        type: "dns"

        dns_provider: "dns_inwx"

        # CNAME _acme-challenge.bar.example.com => _acme-challenge.example.net

        challenge_alias: "example.net"

  [...]

Default for copyleft licenses for open source or life with the consequences.

Licenses like the GNU Affero General Public License (AGPL) might prevent some corporations from using an open-source project because they do not want to release the source code of their own modifications to it. Sadly, corporate compliance often prohibits the usage of copyleft projects altogether, even if nobody plans to modify anything. Especially the legal departments of large “enterprizy” organizations often prefer software with licenses like MIT as they want it simple and “risk”-free.

But who cares? If these corporate users do not contribute back, there is simply not benefit in having them as users.

Except you do not care about open source community but about hypergrowth. This seems not to be true for this case, but the impression comes to mind that many start-ups use open source not because of freedom but as an argument for adoption in the enterprise ecosystem. They avoid choosing (A)GPLv3 licenses to facilitate easier corporate adoption without generating enough revenue, while being funded by venture capital and without getting contributions back by organization who could easily afford giving back something. Then, after being adopted, they complain.

There’s a reason why Linux (GPL licensed) is still around, growing, and making money for so many while companies behind widespread open source projects often fail financially and burning insane amounts of money. It might work out for individuals and owners when getting bought, but it hurts users and ecosystems who relied on something.