visualphoenix

Good luck to them! I recently had the misfortune of fighting Copilot on a Github PR and it made me want to never contribute to the project again.

Very cool! I’ve been building something similar with a k8 focus for home serving as well! Excited to check it out.

Thanks again for listening to the feedback and making these improvements! Especially the 302 redirect bit.

Would love to know if you’ve tested the hybrid migration mode against artifactory yet. Would be very very cool to have a way to run both of these side by side while evaluating the cutover. Maybe with a way to re-sync the artifactory db changes over periodically.

Can this do 302 redirect to s3? One neat feature of artifactory edge is that the asset download can skip hitting the edge peer and go straight to s3.

Would be cool if this also could support the existing artifactory s3 backend format so you could just point this at your existing artifactory s3 bucket and migrate your db over to this.

Congrats on launching!

Seems to be nfs v3 [0] - curious to test it out - the only userspace nfsv4 implementation I’m aware of is in buildbarn (golang) [1]. The example of their nfs v3 implementation disables locking. Still pretty cool to see all the ways the rust ecosystem is empowering stuff like this.

I’m kinda surprised someone hasn’t integrated the buildbarn nfs v4 stuff into docker/podman - the virtiofs stuff is pretty bad on osx and the buildbarn nfs 4.0 stuff is a big improvement over nfs v3.

Anyhow I digress. Can’t wait to take it for a spin.

[0] https://github.com/Barre/zerofs_nfsserve

[1] https://github.com/buildbarn/bb-remote-execution/tree/master...

It’s not just the UK implementing age verification actively. 5 EU member states [0] are actively participating: Denmark, Greece, Spain, France [1], and Italy.

Canada and Australia are jumping in [2] [3].

[0] https://ec.europa.eu/commission/presscorner/detail/en/ip_25_...

[1] https://www.twobirds.com/en/insights/2024/france/la-loi-sren...

[2] https://facia.ai/news/canada-proposes-age-checks-for-online-...

[3] https://www.abc.net.au/news/2025-07-11/age-verification-sear...

Fun fact: the standing turrets are vehicles without wheels

In addition to some other things, I was responsible for all vehicle simulation in Army of Two. This article is a good starting point. I was glad they mentioned implementing Pacejka’s tire model and the transmission differential in the article - those help a lot. Aside from that, I was surprised (not surprised) how important an anti-roll bar physics sim and suspension sim helped make driving feel “fun”.

That’s the most important follow up. Without it, you’ll notice that the driving feels icy - I see it in the demo video. Most folks who fail to do the anti-roll bar and suspension wind up with cars that easily flip on turns - so they make the tires slip or they play with the surface friction, which makes the driving experience worse.

Git-crypt is a dead product with numerous unresolved issues and drawbacks.

Newer versions of git cause git to crash when invoking git-crypt[0].

It doesn’t scale with users: Off-boarding a key is a commit in git. Since it is trivially easy to rewind a git repo before the revocation commit and then decrypt with the revoked key, this means you need to rotate every key under management when any revoke is performed.

It provides the illusion of asymmetric key encryption, but your asymmetric key wraps a shared symmetric key used to encrypt the entire repository. This also means a user could roll the repository back before a key was revoked and steal the symmetric key used to protect the repository and then use that key to decrypt the repository any time in the future.

It doesn’t scale with the number of files under management. As a result of how it’s implemented, every invocation is a separate process launch. This means every file triggers an asymmetric unwrap of the symmetric key. If you’re protecting your GPG key with hardware keyfob, decrypting the repository will take a long time.

This product seemed like a cool idea for a while but it’s implementation leave much to be desired and has not stood the test of time…

Password-store[1] does a better job than git-crypt for single user git based gpg encrypted password management.

For multi-user git repo encryption I prefer Mozilla SOPS[2], especially when coupled with something like AWS KMS…

But then you might consider stepping up to something like Hashicorp Vault[3] or Infisical[4].

[0] https://github.com/AGWA/git-crypt/issues/273

[1] https://www.passwordstore.org/

[2] https://github.com/getsops/sops

[3] https://www.vaultproject.io/

[4] https://infisical.com/

Cash is not necessarily an option. Did you know there is no federal requirement for a business to accept cash?

Sharing a VPC between accounts with AWS RAM incurs no network costs between the accounts and greatly simplifies AWS networking. Additionally you can share and re-use security groups from the shared vpc across account boundaries.

I agree with your assessment of walking out of a grocery store with two bags costing ~$200. I went to Canada to see the eclipse and was absolutely shocked how cheap it was to go to the grocery store. Not only was the currency conversion in my favor, the prices were reasonable and aligned to what I remember from pre-pandemic times. $200 Canadian had a completely full cart. Americans are absolutely being price-gouged.

Still reading the handbook but this reminds me of Talos Linux[0] - which is also a pure golang k8s focused linux distro.

[0] https://www.talos.dev/

Wish this had a caching feature… Setting up squid as a https caching forward proxy in docker is a pain.

Oh look… now we get a name collision for an intermediate representation [0]. That won’t make it difficult for searching at all… Like, this is cool and power to them, but I wish they had a different abbreviation.

[0] https://www.x.org/wiki/Events/XDC2014/XDC2014AbbotNIR/

If the remote host is trusted, you just forward the gpg-agent over ssh to your remote host.

My dad’s ex-partner tells his version of a story about it: https://m.youtube.com/watch?v=lmFgeFh2nlw

Tldr: band was mourning cliff’s death and giving newsted grief.

Lars is an incredible drummer.

Might sound incredible, but I have no reason to doubt my source: my father mixed AJFA.

If it’s true that Flemming Rasmussen hand edited every beat of the drum track, that explains the statistics and consistency.

While I’m unsure if this was true of Master of Puppets, I recall hearing an anecdote about And Justice For All…

When the engineers first rewound the master tapes for Justice they thought the tape was being shredded because the tape machine was making a very strange noise. When they stopped to take a look, they saw thousands and thousands of tiny tape edits. Apparently that was key to how Flemming Rasmussen got the drums so locked in. Hand editing and splicing every beat.

The sound the engineers heard that they thought was the tape shredding was the sound of all of those hand edits flying over the tape head.

Cool story! Feeding context back into the 0 shot is the hotness. I’ve had a lot of success with that.

Curious what other (easier) ways you found to accomplish the same effect?

I used https://eshop.macsales.com/item/Addonics/ADSAIDE/ to upgrade some Glyph drives to ssd when connected to a g5 audio rig a few years ago

Yup. That’s how networking basically worked for Army of Two. We only sent controller input over the network. Everything else was deterministic.

Isn’t the situation of preserving local file modifications covered in the Debian handbook[0]? You simply drop a config for apt to not overwrite files you’ve changed…

  /etc/apt/apt.conf.d/local

  DPkg::options { "--force-confdef"; "--force-confold"; }

This one? http://textadventures.co.uk/games/view/emrhyy7pp0c8bjkjeuhs-...

In the past I’ve used a certificate authority for ssh setup as one nice way to stop the proliferation of ssh keys. The other route is to use one hardware key fob with a gpg identity on it and use that as your global method of access.

Same. Imho it’s the best solution we have right now.

This is what I do as well. Yubikey configured as a smartcard running gpg-agent with enable-ssh-support.

Is there a benefit to using ssh-agent in this way instead of using gpg-agent as an ssh provider?