This is apparently the case in the whole industry and its ridiculous.

Ultrasonic cleaner. Cleans all the stuff that’s hard to get to usually. Also great for glasses.

Yeah you use buttplug.io and hook it up to your CI/CD pipeline.

Mark Wahlberg is a racist that once tried to beat a Vietnamese person to death while shouting “I hate the Vietnamese” and other racist shit in the past.

Just a heads up that gcore is Russian, uses Russian repos for their VMS and is generally super unreliable.

Calling something “vibe coded” feels similar to calling something “woke”. Its used for everything so it lost all meaning.

If I start writing a function name and the coding assistant suggests exactly, character by character, the function signature I would have typed, is that vibecoding? If I ask an agent to check out my classes and create me a json schema from that, what about that? What if I ask it to write me some database connection stuff, boilerplate that is basically directly copy pasted from docs?

The presence of a cursorrules file signifies… Nothing. Most projects now have a prompt file to store general context, like styling etc. Most programmers use coding assistants. The use of coding assistants does not, in of itself, mean bad quality. Obviously you have to hide it because people get irrationally angry about it.

The blind AI hate does not help. LLMs can be useful. Is it stupid to have an LLM write an email so the other side can use an LLM to summarize it? Yes. Is LLM slop annoying? Yes. That does not mean that everything is bad. If you check out the Developer-sphere, people who have tried coding assistants for a couple years now, the consensus is “overhyped but definitely useful”.

Example, read this comment section: https://news.ycombinator.com/item?id=44836879

I believe its the authors first book. It gets significantly better.

Fairphone

Its not guaranteed. They may keep a copy of the original post around.

You can also hang yourself from an ash tree!

I understand this, but this is inconsistent behavior. You now use 22 inside your network and something else outside. Whenever you create inconsistent behavior, everyone using it has to have an awareness of all these inconsistent behaviors.

Also, it is hard to troubleshoot because the tool most admins would want to use (netstat) will not give you useful information to understand the situation.

If you have a drink that creates a nice tingling sensation in some people and make other people go crazy, the only sane thing to do is to take that drink off the market.

I’m not sure LLMs can do this. The reason is context poisoning. There would need to be an overseer system of some kind.

If you change it, definitely change it on the server so it shows up in netstat and is consistent.

The idea behind keys is always, that keys can be rotated. Vast majority of websites to that, you send the password once, then you get a rotating token for auth.

Most people don’t do that, but you can sign ssh keys with pki and use that as auth.

Cryptographically speaking, getting your PW onto a system means you have to copy the hash over. Hashing is not encryption. With keys, you are copying over the public key, which is not secret. Especially managing many SSH keys, you can just store them in a repo no problem, really shouldn’t do that with password hashes.

This is mostly nonsense.

• Why block outgoing? Its just going to cause issues for most people. If you’re going to do that, do it centrally (hw firewall)
• Why allow http and NTP incoming, when there is no http / NTP server running.
• If there is http server running no mention of https://ssl-config.mozilla.org/ and modsecurity
• If you’re using ufw anyway why not go with applications instead of ports?
• In a modern distro, the defaults are usually sane (maybe except TCP), most of the stuff in the SSH config is already default.
• Why change the SSH port of a home server, which most likely is not reachable from the outside anyway?
• Actually potentially impactful stuff like disabling services you don’t need, such as cups, is not mentioned
• unattended-upgrades not mentioned
• SELinux / AppArmor not mentioned
• LKRG not mentioned https://lkrg.org/
• Fail2ban not mentioned

Don’t just copy random config from the internet, as annoying as it is, read the docs.

They are not that big - cursory search shows that would be around 8-10% of their gross revenue.

It’s not better than nothing - it’s worse than nothing. It is actively harmful, feeding psychosis, and your chat history will be sold at some point.

Try this, instead of asking “I am thinking xyz”, ask " my friend thinks xyz, and I believe it to be wrong". And marvel at how it will tell you the exact opposite.

I think NAT is one reason why the internet is so centralized. If everyone had a static IP you could do all sorts of decentralized cool stuff.

Every person and institution saying that is what enables fascism.