HackerTrans
TopNewTrendsCommentsPastAskShowJobs

pzmarzly

1,463 karmajoined vor 7 Jahren
meet.hn/city/ie-Dublin

Socials: - github.com/pzmarzly

---

Submissions

[untitled]

1 points·by pzmarzly·letzten Monat·0 comments

Google Discover's headline rewrites strike again

theverge.com
13 points·by pzmarzly·vor 2 Monaten·0 comments

Toward fast, containerized, user-space filesystems

lwn.net
5 points·by pzmarzly·vor 8 Monaten·0 comments

comments

pzmarzly
·gestern·discuss
22B transactions a year mean an average of ~700 QPS for the NPCI switch. Of course the traffic is not uniform, it probably peaks at many times that number, but that still doesn't sound that bad - for comparison, a quick Google tells me Nasdaq TotalView ITCH feed peaks at 100k+ QPS at market open.
pzmarzly
·vor 4 Tagen·discuss
I hope they introduce some sort of public read-only view that an admin can enable. Discord has https://www.answeroverflow.com/ and https://www.linen.dev/
pzmarzly
·vor 19 Tagen·discuss
That would enable private repos on https://tangled.org/ , right?
pzmarzly
·letzten Monat·discuss
> The range of things that can run an http server is much bigger than tftp

Don't go too crazy though, these UEFI HTTP clients are not well behaved. For example, last time I checked, EDK required the URL to end with ".efi", instead of checking Content-Type header.
pzmarzly
·vor 2 Monaten·discuss
That doesn't mean it's a bad idea, Building-Integrated Photovoltaics are its own market of products. But you have many much cheaper options there, at least in Europe. For example https://solroof.eu/en/discover-solroof/what-is-solroof/ or https://metsolar.eu/products/bipv-roof/
pzmarzly
·vor 2 Monaten·discuss
Does anyone know what changed in iOS 16.5 that made Google stop requiring the app? To me it seems to correlate with Private Access Tokens, aka remote attestation by Apple. https://developer.apple.com/videos/play/wwdc2022/10077/
pzmarzly
·vor 2 Monaten·discuss
TIL, and they look great indeed. Shame they are all sold out except for <= 0.3m lengths. https://global.lttstore.com/products/ltt-truespec-cable-usb-...
pzmarzly
·vor 3 Monaten·discuss
IIRC a few years ago I saw some store asking for 6 or 8 digit BLIK codes, I guess the latter was how they were planning to expand from supporting just Poland to supporting whole EU. But that effort seems to have died out.
pzmarzly
·vor 3 Monaten·discuss
https://tangled.org/ supports many jj features, but they seem to only offer public repos.
pzmarzly
·vor 3 Monaten·discuss
Jujutsu equivalents, if anyone is curious:

What Changes the Most

    jj log --no-graph -r 'ancestors(trunk()) & committer_date(after:"1 year ago")' \
      -T 'self.diff().files().map(|f| f.path() ++ "\n").join("")' \
      | sort | uniq -c | sort -nr | head -20
Who Built This

    jj log --no-graph -r 'ancestors(trunk()) & ~merges()' \
      -T 'self.author().name() ++ "\n"' \
      | sort | uniq -c | sort -nr
Where Do Bugs Cluster

    jj log --no-graph -r 'ancestors(trunk()) & description(regex:"(?i)fix|bug|broken")' \
      -T 'self.diff().files().map(|f| f.path() ++ "\n").join("")' \
      | sort | uniq -c | sort -nr | head -20
Is This Project Accelerating or Dying

    jj log --no-graph -r 'ancestors(trunk())' \
      -T 'self.committer().timestamp().format("%Y-%m") ++ "\n"' \
      | sort | uniq -c
How Often Is the Team Firefighting

    jj log --no-graph \
      -r 'ancestors(trunk()) & committer_date(after:"1 year ago") & description(regex:"(?i)revert|hotfix|emergency|rollback")'
Much more verbose, closer to programming than shell scripting. But less flags to remember.
pzmarzly
·vor 3 Monaten·discuss
I guess one way to protect yourself from this would be to use another IAM solution for SSO login to Google Workspace, but is there any reasonable choice for small businesses other than Entra ID or Okta?
pzmarzly
·vor 4 Monaten·discuss
You will run into problems if destination drive has different sector size than your VM, as GPT header won't be aligned.

QEMU defaults to 512B sectors, which isn't true for many NVMe drives. There are some flags to change that. https://unix.stackexchange.com/a/722450

I think it should be possible to make an image with many headers at different locations, so that it works on all types of disks at once, but I don't think any tools do it for you by default.
pzmarzly
·vor 4 Monaten·discuss
I haven't tested it, but this should be slightly simpler, and work better for subsequent review iterations (reviewing what changed once PR is updated):

    jj new main -m review
    jj new -m pr
    jj git fetch
    jj restore --from=big-change@origin .
Then keep squashing from `pr` to `review` as described in the article. When the PR gets a new version, rerun the last 2 commands.
pzmarzly
·vor 4 Monaten·discuss
The article should have also emphasized that GitHub's issues trigger is just as dangerous as the infamous pull_request_target. The latter is well known as a possible footgun, with general rule being that once user input enters the workflow, all bets are off and you should treat it as potentially compromised code. Meanwhile issues looks innocent at first glance, while having the exact same flaw.

EDIT: And if you think "well, how else could it work": I think GitHub Actions simply do too much. Before GHA, you would use e.g. Travis for CI, and Zapier for issue automation. Zapier doesn't need to run arbitrary binaries for every single action, so compromising a workflow there is much harder. And even if you somehow do, it may turn out it was only authorized to manage issues, and not (checks notes) write to build cache.
pzmarzly
·vor 5 Monaten·discuss
From website's FAQ:

Acme is currently available in the United States (including Hawaii, Alaska, and Puerto Rico) and Canada.
pzmarzly
·vor 5 Monaten·discuss
Decentralized or direct P2P micropayments are unlikely to work, true. But why are there so few attempts at centralized micropayments providers? The only success stories I see in the space are GitHub Sponsors and LiberaPay, where their entire thing is aggregating payments together (so you have 1 big card transaction a month per user, not 20 small ones) and doing KYC procedures with donation receivers (once GitHub, or rather Stripe, says you are legit, you can take money from any GitHub user).
pzmarzly
·vor 5 Monaten·discuss
I was once blown away by iPhone 8 editing capabilities. The keyboard seemed to work OK (minus swipe-to-type, but that wasn't great on Android either), and using 3D Touch to move cursor and select text was the most pleasant text editing experience, even better than on the desktop (arrow keys and vim hjkl).

And then it was all removed in a software update.
pzmarzly
·vor 5 Monaten·discuss
It needs world-writtable /opt/homebrew, so I guess a Linux equivalent would be Nix (which IIUC requires writable /nix).

For something that only uses your home folder, I recommend checking out mise https://mise.jdx.dev/
pzmarzly
·vor 5 Monaten·discuss
Looking at internal/commands/install.go, it only installs new packages, but doesn't uninstall removed ones. That's the biggest benefit of Brew bundle gone.

BTW how much of it is vibe coded?
pzmarzly
·vor 6 Monaten·discuss
Fair. My bash scripts only broke 3 times over the years:

- when ls started quoting filenames with spaces (add -N)

- when perl stopped being installed by default in CentOS and AlmaLinux (had to add dnf install -y perl)

- when egrep alias disappeared (use grep -E)