samhclark · HackerTrans

vor 45 Minutendiscuss

Secretive (and the similar built-in functionality [1]) both allow you to require TouchID too. I found an okay balance using two SSH keys: one for commit signing (w/o TouchID) and one for everything else (requires TouchID, or PIN on Linux)

So, the actions that I really don't want the agent to take (establishing an SSH connection, pushing to a git remote) always require my manual intervention.

[1] https://gist.github.com/arianvp/5f59f1783e3eaf1a2d4cd8e952bb...

samhclark

vor 22 Tagendiscuss

I think that's why I like prerelease (and sealed, generally) the most of any format. For day 1 prerelease, a lot of the players are reading the cards for the first time. For sealed later on, even if you know the meta for that set, it's more about playing the best deck with the cards you've got. Knowing the meta doesn't change your pool. (As opposed to draft, where if you don't know the meta you might inadvertently pass excellent cards and miss signposts other players will catch)

samhclark

vor 29 Tagendiscuss

Personally, I'm pretty excited for this commit which fixes the slow WiFi I've had with the combination of my ISP's modem/router and my laptop.

https://github.com/torvalds/linux/commit/711a9c018ad252b2807...

Hope it gets to Fedora soon!

samhclark

vor 2 Monatendiscuss

Agreed with everyone else. Scrcpy is amazing and is so easy to use.

samhclark

vor 3 Monatendiscuss

I think we agree? I can't tell if you meant this as additional support for what I wrote or as a rebuttal.

Regardless, yeah, I don't think that's wrong or misleading. I only meant to say that because there are exceptions now, there might also be more exceptions in the future. Which, to me, means it's important to evaluate each new local DC individually.

And your point about setting my priors is exactly what I'm saying, too.

samhclark

vor 3 Monatendiscuss

Agreed.

I think my takeaway from the water usage deep dive was about the scale of the numbers and a better intuition about water usage, but also that you really need to consider each data center uniquely. He'll say in broad strokes that data centers are fine, and then mention the few exceptions (in the infrasound article, that's the xAI DC). That's fine for the moment when he wrote the article, but if I'm evaluating a proposed data center in my local area, I don't know what bucket it falls in. Is it the exception or the norm? Still, because I read that deep dive, I feel better equipped to make that evaluation.

samhclark

vor 3 Monatendiscuss

In my opinion, this was a great debunking of Benn Jordan's infrasound videos.

When I first saw his videos, they didn't quite sit right with me. I was reminded of the arguments people made about WiFi and 5G. But I couldn't put my finger on the flaws in the logic, or the specifics of it. I also didn't feel like I had the time to dig in and research all his claims myself, so I just kinda left them feeling skeptical.

Reading this article felt great. Admittedly, it confirmed my biases so I tried spot checking it here and there. What little I did check seemed right and I trust Andy Masley's previous reporting.

I only have two criticisms of the article. First, the few cheap digs he took at Jordan (e.g. the CO2 emissions from his long drive) which I agree with but are unrelated to the overall argument. Second, some of the paragraphs had a strong "written by AI" tone. Maybe they were, maybe they weren't, but that made me trust those specific paragraphs slightly less.

samhclark

vor 3 Monatendiscuss

This is a very cool project and I'm happy to see it getting traction here. I stumbled upon it when I was looking to build something similar and surveying the state of the art...then I realized you built _exactly_ what I wanted!

Thank you, great work!

samhclark

vor 3 Monatendiscuss

Do you have any more info you could add about that topic, or a direction to point me? As far as I know, (systemd-)pcrphase is for measured boot, but I'm not sure how that interacts with signing keys.

As someone who stores my SSH keys in my TPM, and has struggled with picking the right PCR values for Secure Boot in the past, I'm interested in learning more.

samhclark

vor 4 Monatendiscuss

It isn't necessarily smaller. See https://github.com/PegorK/f32

samhclark

vor 4 Monatendiscuss

>Google Messages - for most of the last 8 months RCS was broken on GrapheneOS, but it's back now and Google messages is still the only option for messaging with family members on iOS.

I'm glad to hear that's finally fixed. That was my only pain point with GrapheneOS, but it got so bad I bought an iPhone when the 17's came out.

If the deal with Motorola helps GrapheneOS get better integration with the carriers, get a heads up about RCS changes ahead of time, get help fixing it, I'd happily switch back. I loved using GrapheneOS and iOS frustrates me daily.

samhclark

vor 4 Monatendiscuss

That's so frustrating with Claude. If I need to widely search the web or if I need it to read a specific URL I pasted, I always turn to ChatGPT. Claude seems to hit a lot more roadblocks while trying to navigate the web.

samhclark

vor 5 Monatendiscuss

Personally, I've really enjoyed using bootc for both my personal laptop and my NAS.

I really like the NAS use case because I can build the ZFS kmods for that specific version of Fedora CoreOS in CI/CD. If there's any compatibility failure, then my NAS doesn't get an update and I get the CI/CD failed email. No downtime because of some kernel incompatibility.

For the laptop though, I feel like there's a better way that I haven't found. Some way not to require CI/CD, to build the next image and switch to it all locally. I haven't gone down that path yet, but it looks kinda like that Option 2 the author described. Maybe it's really just that easy.

I've really been enjoying this space.

samhclark

vor 5 Monatendiscuss

This makes sense to me. I guess I'll start hunting for the equivalent of `govulncheck` for Rust/Cargo.

Separately, I love the idea of the `geomys/sandboxed-step` action, but I've got such an aversion to use anyone else's actions, besides the first-party `actions/*` ones. I'll give sandboxed-step a look, sounds like it would be a nice thing to keep in my toolbox.

samhclark

vor 5 Monatendiscuss

Depends on your workflow, I guess. I don't need to handle that case you noted and we delete the branch on remote after it's merged. So, it's good enough for me to delete my local branch if the upstream branch is gone. This is the alias I use for that, which I picked up from HN.

    # ~/.gitconfig
    [alias]
        gone = ! "git fetch -p && git for-each-ref --format '%(refname:short) %(upstream:track)' | awk '$2 == \"[gone]\" {print $1}' | xargs -r git branch -D"

Then you just `git gone` every once in a while, when you're between features.

samhclark

vor 5 Monatendiscuss

You don't get a blue bubble for using RCS. That's still reserved for iMessage exclusively. (At least, on iOS 26 in the US on T-Mobile)

samhclark

vor 6 Monatendiscuss

Yeah, this is closer to what I do, too. I was surprised not to see a Containerfile in the linked github repo in the article (https://github.com/lthms/tinkerbell)

I found working with normal `dnf` and normal config files much easier than dealing with Ignition and Butane. Plus, working with your image in CI/CD instead of locally fixed my ZFS instability. When Fedora kernel updates, but ZFS doesn't support that version yet, now it fails in GitHub Actions and the container is never built, so there's no botched update that my NAS mistakenly picks up.

samhclark

vor 8 Monatendiscuss

I can confirm that the Odroid H4 Plus also supports in-band ECC. If I remember right, Memtest86 showed different stats when I ran it with in-band ECC enabled/disabled though I didn't have a good way to test that an error was actually corrected.

samhclark

vor 9 Monatendiscuss

I went to a b-sides yesterday (so: small, local, cybersecurity-focused) where someone described their feelings toward GenAI as "praying for Star Trek, but planning for Terminator." Someone else described AGI as a short term inevitability.

Not many others addressed it directly. The vibe I got from offhand remarks was that people felt it was a thing being forced upon them that they are resistant to use.

samhclark

vor 10 Monatendiscuss

Thanks for the reply, appreciate it.

Both of your answers sound workable for me!

Even if I couldn't restore the whole profile from backup while traveling (which seems natural), at least it's still possible to restore some data. Which should be enough in the short term.

And that's perfect that I could manage it from a different Mac. That totally works for me. I worried there would be something which prevented that. I'm imagining a parent using this for parental controls, but then the kid disabling it at a friend's house who has a Mac. Works better for my scenario though!

comments