pieter

I was willing to gloss over the AI usage because I really like the Bun DX. I used Bun in Shell scripts and small prototypes before and decided to use it for something bigger.

But then in a week or so of use, tons of issues appeared. Use-after-free bugs when a client disconnects (both in Zig and the Rust port, funnily enough) which will kill Bun. Unimplemented feature which just return “0” always. Many backpressure bugs which means something like “return new Response(fs.createReadStream(bigFile))” will greedily read and OOM your box.

All of these have been reported, robobun has made fixes of various quality, but none of this has been addressed. Some of them have been reported for months.

I’d prefer Bun to work on stability rather than fancy features like image processing or threads.

Any details on what changed in the -002 models?

I’d really like libraries to put the language they’re for in the description.

Especially anything AI-related seems to just assume everybody uses Python.

Note that this really isn’t anything except the agreement to send messages separated by 2 new lines. The SSE object in browsers is old and quirky; for example, it only supports GET requests, which means you’ll hit path length limits if you use it for something like LLM completion with large prompts.

Luckily since there’s nothing special about the browser support, you can very easily replace it with custom implementations. https://www.npmjs.com/package/@microsoft/fetch-event-source for example offers mostly the same API, but does offer POST requests and a bunch of other goodies.

Location: Berlin, Germany

Remote: Yes

Willing to relocate: Maybe to NL or else in EU

Technologies: Node, Typescript, AWS, Lambda, Serverless, React, etc.

Résumé/CV: send email :)

LinkedIn: https://www.linkedin.com/in/pieterdebie/

Email: hirehn@purelymail.com

I'm currently working as a senior software engineer (SDE3) in Amazon AWS, working on distributed services built on top of AWS, both frontend and backend.

What I would love is something that can give alternative tube sizes.

My bike uses 22x3 tubes, which are unusual and hard to come by. However, there have been reports of 20x4 bike tubes or 18x3 motorcycle tubes also fitting.

A website that recommends more widely available or cheaper “this will also fit” tubes would be amazing.

Anyone know how this compares to Framer?

Not being able to transfer BTC out of MtGox

I doubt domain length will really make any difference, gzip compression should take care of a longer domain name.

All these faster speeds won't do anything really for heavily populated areas. The most important thing is total available bandwidth (bytes/sec/hz), and it's unclear how better that will get. LTE itself doesn't improve a lot over 3G techniques, the thing that's making LTE faster in saturated conditions right now is that there's just more bandwidth compared to 3G.

Off shore wind power is about 25% of the wind power capacity of Denmark, the rest are 'normal' wind turbines. However, they'll contribute more to the total energy output. Off-shore wind turbines generate about 35-50% of their maximum capacity on average, compared to 20-30% of normal wind turbines.

Biggest thing I'm missing in the FF Aurora builds is a console in the Inspector / Debugger panes. Having to switch to the console pane all the time gets annoying quickly.

This still doesn't explain why the MRI implementation is accidentally threadsafe. Why doesn't the interpreter switch threads after reading the value from the hash but before storing the updated value?

Not really -- the directory server can just direct a user to connect to a MITM server. There's no need to control the entire network, you only need access to Skype's servers.

Skype has always relied on a central authentication server, which means that anyone with control of that server would be able to MITM any conversation. The recent changes of ownership and centralization of the service have nothing to do with this. Presumably the US government has been able to tap into any Skype conversation they want for a long time.

With $3 / month, $30 / year isn't 20% off, it's 16⅔% off.

This instance was announced at RE:invent 2 months ago, and is now available. You can try one out for $0.34 / hour with spot instances.

This is pretty cool. Anyone know what the retrieval pricing is? With Glacier you can limit the amount you pay by retrieving really slowly, but I'm not sure that works with the S3 frontend.

Note that you don't need to 'enable' the Meta key in Terminal on OS X.

By default, option does what it does in other programs, allowing you to type alternative characters. If you'd still like to keep that behaviour, you can send meta by pressing escape first -- Meta-b becomes escape, then b.

That link also requires me to log in

Hmm, too bad you need a Facebook account to read this. Anyone have a version cached somewhere?

The checkmark he's talking about is only used to bypass the password verification on your mac -- there's no password or passphrase sent to Apple at any point.

What happens when a user tries to log in without Apple ID is the mac sends a request to Apple: "Is this password valid for this apple id?". If Apple replies positively, the login request is accepted and the user is allowed access to the system.

See how this doesn't work for Filevault? Since Filevault encrypts the encryption key with the users' password, and the password itself isn't known to Apple, this checkbox can't be used to decrypt the drive.

The main vulnerability here is that it can allow access to a Filevault-enabled system that still has the decryption key in memory -- as is the case by default for any mac that goes to sleep. Either the checkbox shouldn't disappear if you enable filevault, or they should make the decision to disable AppleID-based authentication when Filevault is enabled (which is probably what they tried to do).

If you want your system to really be secure, you need to disable the RAM-based sleep, so that the RAM contents are written to your Filevaulted disk before shutting down completely.

I'd be careful with these; it means you can't plug in an untrusted power supply anymore.

Just imagine one of these cables also acting as a USB keyboard, which brings up a new terminal, adds an SSH authorized key and closes the terminal window without you even seeing it.

You could use it just for the syncing aspect, but still prefer Safari.

Anyone know where I can find the interface/ip limits per instance type?

Blizzard is pretty strict with the anti-cheating checks, which may be part of this. It's also very annoying that you can't run Diablo 3 on OS X if you have Filevault enabled, for example.

Doesn't look like that from the bug report; there the locale is set first, then the class is defined and then looked up.

That still doesn't make sense. If 'i' is not the lowercase equivalent of 'I', then the lowercasing should just result in another letter, right? The only thing that could cause the bug is if it uses two different ways of lowercasing (perhaps one when registering the class, and another way when looking up the class).

The mapping between uppercase and lowercase can be completely arbitrary, and as long as it's used consistently you shouldn't get these kind of bugs.

It would probably help a lot if they would develop Android in the open instead of dumping all changes once they release the OS.

So how does this work? Shouldn't it have a Thunderbolt controller on there somewhere too?