worksonmine

What do you use instead and what makes it more secure?

Great for apps, terrible for people. It's much simpler to sync setups across machines with plain files than databases.

I'm not OP but probably the licensing drama. Gitea is now open core if I remember correctly. Some details are available here[1]. I also used to run Gitea, but I don't any more. The open-source churn is getting tedious and difficult to keep up with.

[1] https://blog.codeberg.org/codeberg-launches-forgejo.html

How portable do you need it to be? I use pass[1] and it is good. Just a shell script wrapper to gpg and the passwords are encrypted files you can backup and sync anyway you want.

[1] https://www.passwordstore.org/

There are more secure alternatives. Are you sure those you listed actually use it on the servers? I would guess that at least Spotify and Netflix uses some other container runtime than Docker on their production servers.

For a long time Docker was helpful and opened exposed ports on the firewall. So you wanted to access your redis ports locally and exposed it on the container? Now everything in there is accessible on the open internet.

I believe they've fixed it but I haven't used Docker in years so I wouldn't know.

I think plugins is the better solution, then you can't pay the browser to get your ads through.

Cool project, but they should really upgrade at least the downloads to https...

This would break so many websites. There are valid uses for the history API, I often do modals/popups as shareable URLs, and using the back button closes it.

There's a (very) big difference between reading weekly and reading a book in the past 12 months. I used to read a book or two in the past 12 months, back then it was on vacation to have something to do while lounging on the beach. Today I read a book every month and it's something I do instead of watching TV. I would not call my younger self a reader.

Interesting choice to change the time of the comment, a deja-vu can be weird enough without staring at a comment with a recent timestamp.

Didn't know about this project, looks useful. Thanks for bringing it to my attention, FAKKU.

Why even use else if with return...

What is the problem with that? How would you write that snippet? It is common in the new functional js landscape, even if it is pass-by-ref.

They are amazing tools, but when people try to give them agency someone has to explain it in simple terms.

It doesn't try to do anything. It doesn't work like that. It regurgitates the most likely tokens found in the training set.

Hey! How can I make this about LLMs?

(Many countries' laws are already available online and included in the dataset they're trained on. The project is very cool for humans though.)

Those are opt-out. The entire discussion is about opt-in.

Depends on your perspective, to me you have them flipped, and enabling them is "opt-in", i.e: "now I would like to see the hidden files please".

But I don't think I misunderstood you. You're telling me I should prefer hidden files to be the default, and I disagree and give my arguments. It's not more complicated than that.

To me rg only follows the same principle as the rest of my tools, fd requires `-H/--hidden`, ls `-a` or `-A` and so on. It is a big reason to why I prefer rg and fd over grep and find. Which brings us back to your first comment:

> You started using it because it had that capability I imagine, not because it is the default.

And if you set `set editing-mode vi` in ~/.inputrc (readline configuration) you'll have it in even more places.

What is it like to be this proud of not learning the tools you use? Do you really think several paragraphs to an agent that may or may not be correct is the "easy" way compared to just checking the manual for the flag you want?

I will never understand people like you.

I use very short aliases with fallbacks to standard tools if ripgrep/fd/bat/... isn't installed. For my use searching files in `.gitignore` is useless 9/10 times, why would I want that to be default?

Or if it came with a short flag that could work too

It does, `-.` for hidden and `-u` for hidden + ignored.

Or just don't install every package on the earth. The only supply-chain attack I've been affected by is xz, and I don't think anyone was safe from that one. Your solution wouldn't have caught it.

Better to enforce good security standards than cripple the ecosystem.

No, because it was default.

You could easily just alias a command with the right flag if the capability was opt-in.

I tried a search to make grep ignore .gitignore because `--exclude=...` got tedious and there was ripgrep to answer my prayers.

Maintaining an alias would be more work than just `rg 'regex' .venv` (which is tab-completed after `.v`) the few times I'm looking for something in there. I like to keep my aliases clean and not have to use rg-all to turn off the setting I turned on. Like in your case, `alias rg='rg -u'`, now how do you turn it off?

Really dislike it defaulting to that ignoring files that are ignored by git.

It's the reason I started using it. Got sick of grep returning results from node_modules etc.

So if I'm developing something I want to use and the community finds it useful but I take no contributions and no feature requests I should have to find another person to deal with?

How do I even know who to trust, and what prevents two people from conspiring together with a long con? Sounds great on the surface but I'm not sure you've thought it through.

And how would that work for single maintainer projects?

You can't in most corporate env machines.

Really? "most" even? What CAN you do if you can't edit files in your own $HOME?

Do something like this to fall back to plain grep. You will somehow have to share these configurations across machines though.

    alias g=grep
    command -v rg 2>&1/dev/null && alias g=rg

It's a nice tool but I really wish the configuration wasn't done in json and loaded from $XDG_CONFIG_HOME.

Regarding this info being exposed to websites is not up to systemd. If for example firefox were to expose this info to websites without my consent I'd support a fork of firefox or stop using firefox.

As long as the info does not leave my computer I feel it is fearmongering to call it mass surveillance.

You have to consider the timing and context of the change. What systemd does here is enabling Firefox to share that data (I'm guessing they'll be the last to comply though, Chrome and Safari will jump on it). If you would choose a fork of Firefox over Firefox exposing your data to websites, why are you so eagerly defending systemd exposing the same data to applications?

I tend to apply the same principles to all and react as soon as possible instead of waiting until it's too late. What use is there even of the field if it only stays on your machine, I assume you remember your own birthday?

I know what an environment variable is, my question is why name them `UV_` instead of `FYN_`? I thought that would've been obvious for exactly the same reason you mention, it should be named for the application they belong to.

Why prefix the settings `UV_CACHE_MAX_SIZE` and `UV_LOCKFILE` with `UV_` if they're new features? Makes no sense.