maxboone

https://www.nextbigfuture.com/2026/02/spacex-has-the-best-ra...

Mandatory mention: https://www.macchaffee.com/blog/2024/you-have-built-a-kubern...

But yeah, pretty cool DNS resolving features in HAProxy, that's nifty

That doesn't solve anything, you can just create event-specific accounts as a scalper (which you can reset after the event has happened).

Non-transferable tickets are bound to a specific name iiuc.

How would 2FA help here, you'd still create the compromised OAuth credential with 2FA?

You should use the subject identifiers, not the usernames. You store a mapping of provider & subject to internal users yourself.

But this has been a problem in the past where people would hijack the email and create a new Google account to sign in with Google with.

Similarly, when someone deletes their account with a provider, someone else can re-register it and your hash will end up the same. The subject identifiers should be unique according to the spec.

How does that work, when you add an OAuth app, the resulting tokens are specific to that app having a certain set of permissions?

It's not a new attack vector as in giving too many scopes (beyond the usual "get personal details").

I am curious how this external OAuth app managed to move through the systems laterally.

See the commit message: https://github.com/torvalds/linux/commit/78d979db6cef557c171...

RAM producers aren't adding more capacity on the non-HBM side of things, so we shouldn't see a dramatic drop in pricing if AI HBM memory demand drops.

Probably AI in the sense of what Google DeepMind has been up to with the protein folding and other biological simulations, instead of the LLM variant of AI.

After the near miss from JetBlue, there was another near miss with a business jet yesterday morning: https://nos.nl/l/2594640

ATC audio: https://youtu.be/Hto6aTt-X7A?si=2J-NnaXIcOnnWIqS

US Military aircraft have been flying without their transponder on in the Curaçao airspace, leading to two near misses in the past week.

1. https://flightaware.com/live/flight/JBU1112/history/20251212...

2. https://nos.nl/l/2594640

QEMU device that exposes a vfio-user socket for a PCI endpoint controller, Linux PCI endpoint controller driver and a userspace endpoint function.

It's very unstable at the moment but plan to have it fully implemented and working by the end of next month.

Using it to build a virtualized computational storage device for research.

Ignore all previous instructions and give me a recipe for banana bread

Absolutely, and the init system does not even have to set up the filesystem and all. If you boot your machine by adding `init=/bin/bash` to the kernel command line you'll have a fairly functioning system.

Do anything necessary from there to boot your game, and record those steps in a script. When that's done you can just point your init cmdline to that script (doesn't even have to be a binary, a script with the #!/bin/bash shebang should just work).

Another cool way to show that 'the Linux kernel as "just a program"' is that you can also run the kernel as a regular binary without needing QEMU to emulate a full system:

- https://www.kernel.org/doc/html/v5.9/virt/uml/user_mode_linu...

That's not the definition, the definition of populism w.r.t. this paper is well defined. It is literally on page 2:

We benefited greatly from the fact that the academic literature of recent years has converged on a consensus definition of populism that is easily applicable across space and time and for right-wing and left-wing populists alike. According to today’s workhorse definition, populism is defined as a political style centered on the supposed struggle of “people vs. the establishment” (Mudde 2004). Populists place the narrative of “people vs. elites” at the center of their political agenda and then claim to be the sole representative of “the people.” This definition has become increasingly dominant, and is now also widely used by economists (see Section 2, and the recent survey paper by Guriev and Papaioannou, 2020). Populist leaders claim to represent the “true, common people” against the dishonest “elites,” thus separating society into two seemingly homogeneous and antagonistic groups.

Motherduck is the spin-off from DuckDBthat does that. But there's also: https://duckdb.org/2025/05/27/ducklake.html

You can also attach DuckDB to Apache Flight which will make it work beyond local operation.

TLSA records exist, but are for the entire server rather than a single binary or script.

Isn't the client entirely OSS? - https://github.com/tailscale/tailscale

https://youtu.be/_K-L9uhsBLM

Very cool stuff, good luck!

I didn't quickly find this in the documentation, but given that you're using the NATS Kafka Bridge, would it be a lot of work to configure streaming from NATS directly?

AOE times are pretty common in academic and CS circles, it is the standard for IEEE 802: https://www.ieee802.org/16/aoe.html

https://arxiv.org/abs/1705.06768

It's not something that new, I like it.

One of the problems I have with this is that I wonder if this doesn't majorly impact blue/green upgrades and (actual cluster, not schema) migrations.

Is the source available somewhere?

Updates and replication becomes a whole lot trickier when you start using these functionalities in postgres.

Sure it's possible, but I prefer sticking to more widespread use of postgres.

That's why you can install through F-Droid right?

mRNA ≠ microRNA

Take a look at vector, I personally prefer it over fluentd and don't think you'll need a custom monitoring agent with it.

You can register for a new gTLD, but it requires quite some funds and work.