ikurei

It still happens, problems that are solved still happen when people don't take care to apply the solution. Diseases that were solved problems happen again when people stop taking the vaccines.

You can avoid SQL injection by just coding the same features with a bit of care. You loose nothing. Mistakes can always happen, but it's not even tricky to prevent SQL injection.

Right now the only way to avoid Prompt injection is to not let your agents see user input at all. A very wide range of features that we'd like to implement are unsafe and there isn't a way to prevent this reliably.

I guess we'll need to get used to control the agent's permissions very tightly, and taylor them per-conversation. The agent I speak to for customer support must only have access to my data, and not because of instructions in the system prompt, these will need to be hard limits.

Jumped to GrapheneOS a few months ago. Works great. The keyboard was bad but you should install FUTO, as some other comments recommend.

My only issue with it has been a few apps not working correctly, and not the ones I expected. I did my research before hand and knew that my banking apps would work, thinking those would be the main challenge.

Turns out the bike-sharing system in my city, Madrid, won't work. I ended up installing Google Play services (that run sandboxed in Graphene, but still wanted to avoid), and it works sometimes, but mostly doesn't. I use these bikes a few times a week, so this is a major hassle, and I end up carrying my ancient iPhone with me sometimes just for this.

This and Trade Republic have been my only two problems. Happy otherwise, but do your research before switching, and don't assume only the apps you expect to be problematic will be.

It's an interesting idea, kudos.

Sadly, this will always be a game of cat and mouse. I wonder if it was ever avoidable for the internet to become a hundred of such games at once, between advertisers and ad blockers, trackers and browsers, hackers and developers, search engines and SEO experts...

If your concept took off, someone will make a program that inputs the LLMs text like a human would. It might still take some time (if it isn't possible to hack the timing records client-side), you'd probably have to get busy detecting multiple connections from the same IP, and then they'd work around it...

Qwen 3.7 Max: > During my local testing before the full eval harness it was the only non-GPT model that was able to complete the task, was not able to reproduce in the longer runs.

Doesn't that sound like may be the harness was the problem?

It could just alias sudo on your ~/.bashrc. No need to replace the actual file on /usr/bin/sudo or wherever you have it. I would only need to be able to run arbitrary code as you.

I so wanted to love the Steam Deck, but it's a device with a 7 inch screen that occupies a massive volume on your bag. Unless you know you're going to play a fair ammount, it's not worth carrying around.

It's a fantastic console, but a mediocre general purpose computer.

I have one, and I love it! I don't use it as much as I thought I would, but it brings joy everytime. If you have a need for an extremely portable, not very powerful device on your life, this might be it.

I agree with the complaint about the trackpad, but the keyboard has been just fine for me. Just a bit small, of course. I also find the screen perfectly acceptable for what I use this thing for: youtube, taking notes, writing emails, small bouts of coding and ssh'ing into servers.

My main complaint is related to battery management. May be it's becaused I'm used to Macbooks, but it drives me nuts to go pick the Minibook up and find that it has no power, because I haven't used it in a couple of days and I put it to sleep. I haven't measured, but the power use on sleep is noticeable, and I suspect the leakage while hibernating might be significant too.

I don't really like the laptop form factor. Laptops are the perfect solution for only one use case: using them on your lap. On a table, I'd rather have the computer be just a tablet, to add a bluetooth keyboard and mouse. At my desk, with bigger screens, I'd like the computer to disappear into a small puck or box, like a Mac Mini. With the Minibook, being so small, the form factor makes sense again. It's so portable, so easy to take with me to a coffee shop or on a trip, it's worth it.

A tablet with a keyboard might be a more practical solution, although generally more expensive, but I appreciate that my Minibook runs Linux so well, so I don't have to even think about Apple or Google telling me how to use my computer.

I haven't heard about this, could you please share more info, some reference on that Claude Code intentional bug?

I had a couple of eye-opening conversations about this the last time I was in San Sebastian. Not everyone there loves Mondragon as much as we think, some see it as a closed club that makes it arbitrarily hard to get a job with them depending on your connections. I met some workers unhappy of their hiring practices and I think their starting working conditions. No idea if they were fair or just resentful.

I still admire Mondragon and wish there were more companies like it, but now I try to remind myself that most characterizations from the outside are surely lacking in nuance.

1 in every 10 people in public spaces.

1 in every 10 people may have a cat alergy, but the % of folks with an allergy as severe as yours has to be much lower. I know plenty of people with cat allergies who can spend entire evenings in my cat-inhabited with only very minor discomfort. The person with the most serious allergy to them I know is miles away from your symptoms.

I think you are exaggerating the severity of the issue, but I'm sorry you have this terrible allergy to something as common as cats, that sucks.

Although I agree with other commenters that your command can't compare to all of bat's features, many of which I appreciate... thank you for sharing this tip, I didn't know about `highlight` and I can't install `bat` at work.

This will live in my .bashrc for a long time:

    cat() {
      if [[ -t 1 ]]; then
        command cat "$@" | highlight --force -O xterm256
      else
        # plain cat to pipe into other things
        command cat "$@"
      fi
    }

Webapps are rewritten because a developer wanted to use the new shiny, or someone was convinced that everything will be better with the newer frameworks everyone is using. Also, it often goes hand in hand with giving it a more modern look-and-feel.

But the point is not whether webapps are rewritten, but whether they have to be rewritten. I know some old enterprise webapps made with PHP about 10 years ago that are still working fine.

You do have to worry about security issues, and the occasional deprecation of an API, but there is no reason why a web-based service should need to be rewritten just to keep working. Is that true for mobile and desktop apps?

It's not that you _need_ sympathy, or that football deserves or needs your sympathy like it's a good cause.

It's just generally good to try to understand others instead of distancing yourself from them. I find F1, jazz, finance, and so many other things to be really boring and uninteresting, but I try to get the people who like those and connect with them. F1 people and jazz people are often more interesting than their interests; I haven't gotten there with finance yet. The world is more interesting this way, but you're under no obligation.

In a just world LaLiga would get sued into the ground for disabling a public utility on a level equivallent to an international cyberattack.

In a just world LaLiga and FIFA would've been sued into the ground like five scandals ago, but I don't think gtowey was suggesting you try to empathise with them, but with people who like football.

In many football stadiums throughout Spain, chants like "Vaya puta mierda de Liga" and "Corrupción en la Federación" are heard almost every game. It's not the whole of the football world that wants to censor the internet, it's the league and the interests of a few corporations (including, sadly, clubs).

Football piracy is on the rise, because watching football has become extremely expensive in the last few years, even if you just want to watch your teams games. I know many people who used to pay for it; now most of them, including law-abiding citizens who wouldn't normally pirate, are learning how to do it.

The main thing keeping me from trying out Omarchy is the pain of setting up multiple displays. I haven't tried Hyprland, but whenever I've tried a non-mainstream desktop/wm in Linux that was the worst, especially if your setup changes often (as in, you have a laptop and move around and plug it in different places).

May be that just means I'm not enough of a tinkerer for these setups.

Is it a hard problem to remember more than one configuration and link them to the displays connected to your computer? Or is it just that Omarchy users really don't mind editing monitor.conf[1] often?

[1] https://learn.omacom.io/books/2/pages/86

This changes, not only over time, but also from region to region.

A close friend of mine travels to China often, and they use Mullvad because of my recommendation. Last year it worked great for them, but earlier this year they went back to China, and it really didn't work.

What I found most interesting is that they had different results in different places. Apparently, in the business areas of Shanghai and Beijing, were they had meetings and events, they could get Whatsapp and Slack messages; when they went back to the hotel, in a residential area where there were almost no offices or tourists, it didn't. In Chongqing even less stuff worked.

I was very skeptical of this when they told me, but they could replicate this consistently over a couple of weeks. It wasn't related to hotel Wifi (that's a different can of worms), this was on mobile data.

Everything worked when they switched to using https://letsvpn.world, at the recommendation of some chinese colleagues of them.

This was with a basic Mullvad install on iOS and Mac, they're not technical enough to harden their VPN connection further; may be they could've easily obfuscated it more and it would've worked.

Having to use a monospaced font is a pretty big drawback. To me, it means I wouldn't use this for a product that wasn't intended for a techie programmer audience.

Not that it isn't a really cool project! I'm only saying it has clear drawbacks.

5 companies in a city is probably great, but this is 5 companies globally.

Where I live there's only 2 companies really, and I'm guessing in almost every market it'll be 1 to 3.

I think they meant that XOR avoids the overflow risk, whereas doing the sum of the array to figure out which number could cause an overflow.

Please consider the level of retardation this comment requires, it's impressive.

This is not how we have civilized discussions. To say this just because you disagree with someone about the security of an OS...

Hope the mods see this.

Also, it's a status symbol, you can't just _not_ upgrade.

This is a huge part of the change we need. I felt proud in a way to show off that I was still using an iPhone 8 until a couple of years ago, and I admire some (techy) people I know still using a phone from that time.

Is pride a healthy, wholesome motivator? May be not, but we're human.

Not disagreeing with you, but I also wanna make a small effort towards being less cynical.

Not knowing much about Nevada or Las Vegas politics, I'm sure the political environment in Spain, and specially in Barcelona, is very different. 60k trees in however many years (we don't know if they were mosty planted in the last 5) might be all that they could get, and this PR note is their attempt at bringing more attention and try to muster support for more.

That private company that planted 1 million trees is a massive corporation with tens of thousands of employees in Spain. I'd bet their budget, even for marketing stunts, is bigger than Clark County's.

Also, marketing stunts are not /just/ marketing stunts. Companies, specially huge ones, contain multitudes. I'm sure many of the folks pushing for this actually cared about planting trees.

and as far as heat goes, well, one could either pay a little extra in electric for that — or they could have the Amish deliver their scrap wood from their sawmills to burn in a wood stove, very cheaply.

I use both Linux and Mac, and in my experience Mac's handling of multi-monitor setups and, specially, of them changing, is only slightly better than Linux's.

For most situations you do not need to do anything difficult to plug any number of monitors to a Linux computer with a modern, full-featured distro, other than arranging them. Mac does a better job of remembering your setup and adapting to a monitor disappearing, but it's not that much better.

I'm still not sure I understand why the author needed this tool, may be because they have more than one computer plugged into the same monitor?

Probably not it, but it reminds me of some websites that have been described as "brutalist". See: https://web.archive.org/web/20250404083913/https://brutalist...

I've seen a couple of this kinds of setups online and I'm intrigued, as I'm just done with the laptop form factor, but I don't think this is it.

I see the appeal of the XR glasses for immersion and monitor real state, but if you wanted to be outside and went to a coffee shop... I woudldn't cover my eyes and immerse myself totally on the computer; for starters, I wouldn't feel safe. Also, I don't think anyone would also wear headphones with that in a public place, so I hope you don't get a particularly chatty group on the next table over...

There's many situations where I want to look at a display but I don't want to cover my eyes.

On the other hand, this kind of on-the-go-but-with-a-desktop-pc only works with glasses. Some have tried it with a portable display and it seems like way too much fussiness to set up and carry.

I doubt this guy actually ditched his laptop. He did an experiment for content (nothing wrong with that) and I reckon he'll be back on a laptop sooner rather than later.

I just got auth working with JWT through total vibecoding, using Claude+RooCode. Other bits of the app I needed a couple of tries, but auth worked immediately. I guess these models have seen express + node + JWT a million times.

I don't have access to the precise prompt, but I told it something like "only implement basic authentication based on JWT, using just email + password.", then asked it to add a simple registration form, then the password reset flow... step by step, but with little guidance.

At every prompt I review the changes on git, and commit.

That's a good point. I didn't mean to demean React developers: I've been one for years and I can't say I optimized everything I could've.

The blame for not caring enough about performance and UX is on the whole industry. That does include developers, but not just them.

I don't think that is fundamentally broken. React is just not the right technology for a single button, and it's not trying to be.

If you tried to use photolitography (the technology used to print the circuits in microprocessors) to do tattoos... well it could probably work, but it would be highly inefficient and expensive and bad.

React is for complex web applications, and it I don't think it's a very valid criticism to say that it is bad for a different use case. To some extent, the React community may have over-promoted React as the final web-dev framework, but that's also a mistake.

In any case, kudos on creating Nue, looks really cool, I'll keep an eye on it ;)

I'm not happy about how bloated most React sites are, and I've mostly stopped using it unless clients specifically request it after years of it being my main framework, but...

The issue is that these huge frameworks have made the web a horrible slow mess.

I don't think this is accurate. Most bloat in the web is caused by:

a) developers don't taking any time to optimize, lazy load, cache, minimize dependencies...

(This is partly on React, or may be on the culture around React that has made all of this normal and acceptable.)

b) the 300 tracking scripts every site has to try to squeeze as much revenue as possible

(I remember being shocked, some years ago, when I saw a site with 50 trackers. May be it was The Verge? Or some newspaper? Now I don't even bat an eye when the number is in the hundreds.)

React sites can be extremely fast if the developer cares, and the bloat it introduces is rarely relevant. The OP article describes a button as 78K, but that's because it's loading the whole of react for just a button.

If your page has hundreds of buttons, you don't bring 78K hundreds of times, and so complex sites built with React are not that inefficient.

As a Devops engineer, do you have stats on how much of that slowness is the framework or the actual app code?