maverwa

With big enterprises, at least the one my account hangs on, the process of replacing the supplier would take months just to get through all the enterprise hoops. Not sure if anyone wants to get on that. I would assume buying Microsoft is somewhat simpler than buying some startup not yet on the holy list of divine supplies. Said enterprise just this year managed to bulk buy JetBrains licenses for everyone that then got suspended. For everyone. Twice. With 30days between cases. So I may be cynic but that’s earned!

That’s timing the cache, that’s old stuff by know. As I understand, this writes a relatively large file („Gigabytes“) using this OPFS api, which is different from the „localStorage“ api. This seems to use actual filesystem storage on the client, instead of living completely in memory (which may be reasonable given the size of files supported). This allows to actually time SSD IOPS latency by doing random reads.

Collected enough of these samples, together with the information of what else runs on the host, put that in the ML-Blender and the result will be able to tell you, with some accuracy, from a given set of samples, what’s running on the host.

I am sure i misunderstood some things because there are so many caches and unknowns in that setup that I struggle to understand how there could be any correlation, but that’s my understanding so far.

The reason stated in the article seems sound to me: if it’s broken ins safari/ff but works in chrome, users conclude that the browser is the problem and switch to chrome.

Where do you see the lack of respect? The author wanted to learn how gzip works and chose to implement it in a language they like to do so. As a learning tool, not because the world needs another gzip decompressor.

True! Technically even 9.99% would be three nines!

If I understand the description of this „telemetry“ in fyns „MANIFESTO.md“ correctly, it does not make outbound connections you did not asked for. It sets the user agent http header to something that identifies your OS, CPU, python version and if you are running in Ci when communicating to the package registry. It does not send any of that to astral, not ist any of that highly personal.

Sure, it should not be there by default, especially OS & CPU imho. But it’s not really what I’d call „invasive telemetry“.

With CRTs I would think that the problem may be that they do not see a full picture at all. Because the full screen is never lit all at once? Don’t know how persistence of vision works in this case…

Except if you need WSLg, because then you can add RDP issue to all your Wayland issues, and, not infrequently, also xwayland issues! You can have all the fun!

Mend is not a competitor, renovate is the software, mend is the company.

They are tools that automatically check your repo for dependencies and create PRs when there are updates. It supports a wide range of package managers and other places dependencies may be specified.

Dependabot is another solution which is more „GitHub-native“ maybe.

Maybe worth mentioning that this „1.50€ compensation“ rule only matters if you use the „Deutschland-Ticket“ which is a fixed price ticket for a whole month, unlimited travel on the Regio lines (short distance trains, i.e. non IC)

If you bought a regular route ticket you get 25% and more than an hour delay, and 50% at more than two hours. Not sure how it is with other multi-use tickets.

This, combined with the certain delays CAN make traveling by train quite affordable… /s

https://www.bahn.de/service/informationen-buchung/fahrgastre...

The difference being that while people have a good intuition on one may spend their vacation and what one would talk about, it’s not so easy to extrapolate for other things. Sure, everybody knows that media talks more about homicides and terrorism than the thousands of people dying or „old age“-kind of things, but it’s not always easy to keep in mind on how far apart these numbers are.

I think „manipulation“ may be to strong of a word here, since it assumes intent to manipulate, which is not necessarily to focus on „out of the ordinary“ events. But I think nonetheless that this infographic is interesting and important, because it reminds us that these biases exist and how big they are.

Thank you for HACK. I love it!

if you are in the business of buying parts, assembling them, and selling the assembly under your brand (as tuxedo and others like them are), then Apple is a indeed not an option. Their chips might be the best, but you still can only get them in Apple devices, in the specs Apple provides and with no official support for any OS beside macOS / iOS.

from my first tests it does fine with german, at least for the gastly "handwritten" font the restaurant menu I used for the test uses.

or - if feasible - extend the existing crate instead of creating a new one.

its easy as in "simple to implement and execute" but not cheap, because it may require scanning large amounts of memory. You have to visit every list entry.

Whats trivial for a very small list, may be a no-go for gigabyte-sized lists.

I am somewhat surprised (and happy) germany is not in on it already. There are already (afaik voluntary) block lists ISPs are applying, but I am surprised its not breaking things on a similar scale to italy and spain, an that the DFB isn't already piping /dev/urandom-domains into it...

To add some context: man kernel_lockdown[1] reads "Unencrypted hibernation/suspend to swap are disallowed as the kernel image is saved to a medium that can then be accessed.". And to my understanding there is currently no way to tell a (mainline) kernel that allows "encrypted hibernate", i.e. no way to tell the kernel that its hibernation disk is "secure".

So its not a direct "linux prevents hibernate on secure boot", its "linux recommends kernel_lockdown when secure booting", "kernel_lockdown prevents hibernate with unencrypted swap" and "theres no well to make the kernel believe the hibernation disk is encrypted", but the result is the same.

You can "just" run secure boot without lockdown. Its a cmdline, you can just omit it. You can run custom patch sets that add cmdline options so the kernel allows hibernation in lockdown (if you pinky-promise the swap is encrypted).

But neither of these are easily accessible to the average user.

1: https://manpages.debian.org/bullseye/manpages/kernel_lockdow...

Thanks, I did not knew that. My understanding was that keeping the memory alive for suspend-to-idle was the main issue here. But that also might be something a vertically integrated Apple Silicon can win vs. that x86 madness there every day.

And to be sure, I do not claim that there is nothing to gain in s2idle. I bet theres still a lot of headroom to safe energy. Its just that it would be easy to safe a lot of power if s2disk "just worked".

Some of the issues have been addressed. For example, iirc, there was a bug where pulling out the power plug while the lid was closed would trigger the device to wake up.

Some other issues remain. Largest I am aware of is independent from the hardware, but an issue with suspend-to-disk & kernel lockdown, which prevents deep sleep.

The complaint about power usage in suspend is especially sad because it’s pretty much a common problem for Linux on laptops. Not sure if that’s what applies here, but the numbers about match what I see with my Framework. Basically: if you want to use secure boot you usually also want kernel lockdown mode, and you cannot hibernate a lockdowned kernel. At least not without out-of-tree patches.

IMHO that’s a giant issue. If you can’t hibernate (aka suspend to disk) you will never be able to get that power consumption low. And telling people to not run secure boot or lockdown is not really a good answer either. Especially since the default installer already sets those things up. I get that „Linux on laptops“ is not a priority big enough to get a proper fix for that. And that it’s not an easy issue to fix. But the current state is really really sad.

I won’t complain about anyone investing into wine/proton. GOG/CDPR just seem less willing or less capable of spending that money. Valve is essentially printing money. From sales, but also from other, morally less likeable sources like gambling. It’s nice to see them spending at least a tiny part of this in ways that serve the greater good (besides their own business).

Same point: it’s not good, but that’s reality for you.

As someone who’s using steam daily for probably 50-75% of their lifetime now: I don’t love them, but it’s the lesser evil for sure.

Sure, if GOG had even 20% of steams catalog and useability, it be no. 1 without question. But since we‘re sadly limited to this one reality, there is no alternative.

XBOX GamePass is a trap I expect to spring every day, Uplay and EA Origin are just a splash screen I see when starting a game in steam, and I almost forgot the epic store exists, despite their “free game” Marketing campaign.

It’s not perfect, it’s anti-consumer way to often, and it’s for sure a monopoly’s, but steam is still my favorite poison And yes, if they decide to disable me account and cut me off my pile of shame I will have an impact.

But owning games does not seem to be an option generally. Exceptions exist, ofc.

That sounds like the most reasonable judgement coming out of a Hamburg court I’ve heard of yet (selection bias applies, of course)

Combining both is also pretty common in my experience. People frist do an apprenticeship, then, for example because their employment situation changed, they go to university. There are ways for a apprenticeship to qualifiy one to go for university.

In 2024, according to the "Bundesinstituts für Berufsbildung" 486,700 people started their apprenticeship [0]. In the same period (2024-2025) 490,304 people started their first semester at university/college, according to the "Statistisches Bundesamt" [1].

So you are right, theres more new students than apprentices, but its not by a lot.

[0] https://www.bibb.de/de/201811.php [1]: https://www.destatis.de/DE/Themen/Gesellschaft-Umwelt/Bildun...

I think one should also keep in mind that the linked study covers a 12 year period (2010 to 2022) which includes the covid years.

But that should probably bias the number in the opposite direction, if at all. The 1% should have had better chances to survive covid.

In theory there are two options: either the article is sources according to Wikipedias guidelines, in which case Wikipedia is not the problem, the source may be. If the article is not correctly sourced and makes up things that defame one, the article must be fixed. Although in reality, things are rarely that black or white.

you are right, I totally read that wrong. Confirmation bias strikes again!

my first guess would be: server honors X-Forwarded-For where it should not?

Edit: looks like thats it: https://github.com/jart/cosmopolitan/blob/master/net/turfwar...

So basically someone is running a script iterates over the whole ipv4 range and calls the claim endpoint with each single adress in the X-Forwared-For http header once.

I am unsure if this really would work legally, let alone stopping a licensor from demanding money from you in the first place. Does is really matter where the image is served from? If its displayed on your website, does it really matter if its client side JS or static HTML that renders the img tag? I think neither does it matter if you load the image from your own server or from a remote (the original OpenGraph source).