HackerLangs
TopNewTrendsCommentsPastAskShowJobs

arianvanp

4,124 karmajoined قبل 13 سنة
Stalk me: http://arianvp.me

Submissions

Native Secure Enclave backed SSH keys on macOS

gist.github.com
459 points·by arianvanp·قبل 8 أشهر·192 comments

comments

arianvanp
·قبل 3 أيام·discuss
Permanent Residency -- not citizenship.

Residency is purely about taxes, health insurance and right to work. You e.g. don't get voting rights in national elections.

EU citizens automatically get permanent residency in any EU country regardless of language.

E.g. I'm a permanent resident in Germany as a Dutchie.

(However I did end up picking up German and speak it now. But never had to do a language test)
arianvanp
·قبل 19 يومًا·discuss
I'm so done with no-content slop articles on HN.
arianvanp
·قبل 22 يومًا·discuss
Euhm what the hell are you on about. This is a fixed output derivation. The output per definition is reproducible. It either returns a value that matches the hash or it fails.

The whole point is that it allows introducing controlled side effects as long as the output is reproducible.

Bur you're extremely annoying to talk to so I'm not gonna continue engaging. Probably an LLM
arianvanp
·قبل 22 يومًا·discuss
Your second example i dont understand what you're getting at.

This is just a mechanism for the builder to inject credentials during fetch time. The derivation is still content addressed (it's a fixed output derivation).

The derivation isn't even marked as impure or whatever. There is just an environment variable that gets injected by the builder into the build env so you can authenticate.

This is required to talk to hugging face

What are you on about?

Or do you mean that the cas address of HF should directly be addreessable in nix itself?
arianvanp
·قبل 23 يومًا·discuss
Yes Apple Pay relies on security through obscurity even today. See the Veritasium recently made a video about it https://youtu.be/PPJ6NJkmDAo?is=iUuJ0W9xUHF_6gTU
arianvanp
·قبل 23 يومًا·discuss
If you follow the kernel mailing list container breakout exploits are currently a weekly occurrence
arianvanp
·قبل 23 يومًا·discuss
The litmus test here is whether they support https://blog.cloudflare.com/introducing-pay-per-crawl/ out of the box or not

They do not.
arianvanp
·قبل 25 يومًا·discuss
Are you able to do any form of highly available loadbalancing with this?
arianvanp
·الشهر الماضي·discuss
Zed downloads random binaries on startup without any permissions prompts. No thanks.
arianvanp
·الشهر الماضي·discuss
Given they use nx my bet is on developer laptop compromise through the nx vscode extension that also compromised GitHub engineer's laptop
arianvanp
·الشهر الماضي·discuss
Yeh... This month has been especially tough. I'm both a customer of cirrus labs (now bought up by OpenAI) and garnix (now bought up by Shopify) and I'm scared that whatever competitor I switch to is also just gonna get bought out.

Now I have two CI providers to replace by the end of the Quarter

Sigh
arianvanp
·الشهر الماضي·discuss
I only realized that dutch people are handful communicators when moving abroad. Apparently I do it unconsciously all the time.

For example we gesture when something tastes good and I don't even say "tastes good" out loud i just wave my hand next to my cheek. But quickly learnt that people think you're crazy in the head instead of complimenting the chef.

https://youtube.com/shorts/5a9Md32gSQg?is=fJ9BYQEt-CpEUE-g
arianvanp
·قبل شهرين·discuss
This will be great for my homelab. Currently I have some hacky scripts to update he.net records whenever my ISP sends me a new ipv6 prefix but I'd prefer to reuse existing tooling.

Looking into switching today :D
arianvanp
·قبل شهرين·discuss
I've tried and it's okay with Virtual desktop but the resolution is like on the uncanny line of fine and not good enough.

The quest being much lighter makes it nice though (but you should buy a third party headstrap that doesn't suck)
arianvanp
·قبل شهرين·discuss
Was inspiring to meet you at NixCon. Thanks for all your energy and advocacy! You'll always be welcome in our open source community.
arianvanp
·قبل شهرين·discuss
A more general metric that is useful to watch for is pressure stall information for CPU, IO and Memory.

https://docs.kernel.org/accounting/psi.html

I made a Prometheus exporter for it:

https://github.com/arianvp/cgroup-exporter
arianvanp
·قبل شهرين·discuss
Ah yeh Zed. The editor that downloads random binaries for LSPs unprompted without asking me. That's not gonna end badly.

The only way I found out is because I run NixOS and it downloaded a dynamically linked binary that failed to start up and it spat out an error
arianvanp
·قبل شهرين·discuss
Why do we do all these efforts making our build systems hermetic and we end up just using a global mutable cache across branches where the caller picks the key? Failure of industry as a whole. Actually insane.
arianvanp
·قبل شهرين·discuss
The irony of this being a Twitter post with pictures of html rendering instead of an interactive html page is not lost on me.

Arguing for html on a platform with less rich semantics than markdown is just ultimately funny
arianvanp
·قبل شهرين·discuss
Yes, updates were delivered using a flash drive.

> PVC backing

Yeh. But wire's storage is based on Cassandra which handles replication of storage. So you could deploy it on local nvme drives as well using a local storage CSI.

That's also how the wire.com cloud is/was run. Large Cassandra cluster on top of EC2 Instance Store as opposed to EBS.