A limitation with this setup is you can't let your agent/Linux user run containers with docker. Adding a user to the `docker` group effectively grants the user full root privileges [1], so the secure way is to setup…
You just made me realize why I've always considered 'chore' the most ambiguous type. In addition to being loosely defined ("transparent change with zero functionnal impact"?), this one is indeed a word related to…
Some alternative forge are built with decentralization in mind: - forgejo [1] is working on ForgeFed [2], an extension of ActivityPub (the protocol made popular by Mastodon) - tangled is built on top of ATproto (the…
And to go one step further, for achieving a profile-per-firefox-window workflow, I suggest to have a look at the underrated extension Sticky Window Containers [0] While far from being perfect, I find it good enough for…
How did you disable adaptive thinking for your experiment? In the documentation of claude code [0] it says: > Opus 4.7 always uses adaptive reasoning. The fixed thinking budget mode and…
The part about permissions with settings.json [0] is laughable. Are we really supposed to list all potential variations of harmful commands? In addition to the `Bash(cat ./.env)`, we would also need to add `Bash(cat…
The webcomics is awful. It feels off, the characters look very fake, unsettling in the way they communicate. The prompt is shown bellow the image, but for me the result looks closer to a prompt "Create lifeless…
Because the strategy of changing brand after a scandal works so well, it's good to add some precision here, for those who may not know: Facebook changed its name to Meta after a huge public backlash, the Cambridge…
> This is why I avoid using non-official actions where possible and always set a version for the action. Those are good practices. I would add that pinning the version (tag) is not enough, as we learnt with the…
> which GitHub goes to extents to document GitHub Actions policies as applying to `uses:` clauses If it were phrased like this then you would be right. The docs would give a false sense of security, would be misleading.…
That's what I understood as well. Also, the author mentions: > The installation succeeded, but the system would panic during boot. *Bhyve is more of a niche thing and not among the hypervisors supported by NetBSD*,…
The author wrote another blog post "Geoblocking the UK with Debian & Nginx"[0]. It's a short tutorial to do exactly as the title says, so it looks like the author did apply this configuration and intentionally want to…
With aider and Gemini Pro 2.5 at least I constantly have to fight against it to keep it focused on a small task. It keeps editing other parts of the file, doing small "improvements" and "optimizations" and commenting…
Regarding A, I found this blogpost from 2020 interesting to get some sense of scale : https://drewdevault.com/2020/03/18/Reckless-limitless-scope.... As for C, the "suitable" subset really depends what we expect from a…
> eza: A replacement for ls that's git aware I've been using eza (and exa before it) for a long time, but only for the pretty and colored output. I didn't even know about the git support! I now added the --git flag to…
In the desktop-centric organization, many people also have 1 app per workspace most of the time (I think). In a tiling WM, the app will take the full screen estate if it's alone there, so it's also maximized. The…
I also think the taskbar showing only icons is confusing when we have the same app opened multiple time. I have a similar organization as you for work: a Firefox window on desktop 10 for Calendar, Mail, another on…
I'm aware. I think I tried. At the time (silverblue 26) they recommended to use a firefox installed as rpm (actually, the GUI was offering both flatpak and RPM for some packages, and "RPM" meant it used rpm-ostree under…
I like that they went from Ubuntu to Debian as the base OS. I assume they target Debian Sid (the unstable flavor of Debian) because they can compensate for the instability with the immutability provided by ABroot. Or is…
It looks like you can do it that way according to the docs [0] : > abroot pkg add PACKAGE_NAME Not sure what it does exactly under the hood. I'm not sure it persists after an upgrade. In the release announcement blog…
Yes, swarm is not deprecated. I haven't used it myself yet, but I read elsewhere that swarm offers an easy way to manage secrets with containers. Some people run their 1 container in a swarm cluster with 1 node just for…
Interesting opinion. I think it would be so much less confusing to have only one menu. The easiest for power-users and newcomers alike would be to put on the top of this unique right-click menu the folder-level options…
Yes, sure. Although if multiple files or folders are selected, it's probably easier to just press the Escape key once instead of searching for each selected objects in the folder to unselect them one by one. What I was…
I always had the same issue, even with the file explorer that I'm using currently (Thunar, XFCE's file browser). I never really looked for a solution, I kept changing the view (go from list view to to icons view) in…
It also works only with iptables. And because it's from 2012, it's watching the file /var/log/kern.log [0], which was a simple way to monitor for incoming packets in 2012, but will not work anymore with systemd based…
A limitation with this setup is you can't let your agent/Linux user run containers with docker. Adding a user to the `docker` group effectively grants the user full root privileges [1], so the secure way is to setup…
You just made me realize why I've always considered 'chore' the most ambiguous type. In addition to being loosely defined ("transparent change with zero functionnal impact"?), this one is indeed a word related to…
Some alternative forge are built with decentralization in mind: - forgejo [1] is working on ForgeFed [2], an extension of ActivityPub (the protocol made popular by Mastodon) - tangled is built on top of ATproto (the…
And to go one step further, for achieving a profile-per-firefox-window workflow, I suggest to have a look at the underrated extension Sticky Window Containers [0] While far from being perfect, I find it good enough for…
How did you disable adaptive thinking for your experiment? In the documentation of claude code [0] it says: > Opus 4.7 always uses adaptive reasoning. The fixed thinking budget mode and…
The part about permissions with settings.json [0] is laughable. Are we really supposed to list all potential variations of harmful commands? In addition to the `Bash(cat ./.env)`, we would also need to add `Bash(cat…
The webcomics is awful. It feels off, the characters look very fake, unsettling in the way they communicate. The prompt is shown bellow the image, but for me the result looks closer to a prompt "Create lifeless…
Because the strategy of changing brand after a scandal works so well, it's good to add some precision here, for those who may not know: Facebook changed its name to Meta after a huge public backlash, the Cambridge…
> This is why I avoid using non-official actions where possible and always set a version for the action. Those are good practices. I would add that pinning the version (tag) is not enough, as we learnt with the…
> which GitHub goes to extents to document GitHub Actions policies as applying to `uses:` clauses If it were phrased like this then you would be right. The docs would give a false sense of security, would be misleading.…
That's what I understood as well. Also, the author mentions: > The installation succeeded, but the system would panic during boot. *Bhyve is more of a niche thing and not among the hypervisors supported by NetBSD*,…
The author wrote another blog post "Geoblocking the UK with Debian & Nginx"[0]. It's a short tutorial to do exactly as the title says, so it looks like the author did apply this configuration and intentionally want to…
With aider and Gemini Pro 2.5 at least I constantly have to fight against it to keep it focused on a small task. It keeps editing other parts of the file, doing small "improvements" and "optimizations" and commenting…
Regarding A, I found this blogpost from 2020 interesting to get some sense of scale : https://drewdevault.com/2020/03/18/Reckless-limitless-scope.... As for C, the "suitable" subset really depends what we expect from a…
> eza: A replacement for ls that's git aware I've been using eza (and exa before it) for a long time, but only for the pretty and colored output. I didn't even know about the git support! I now added the --git flag to…
In the desktop-centric organization, many people also have 1 app per workspace most of the time (I think). In a tiling WM, the app will take the full screen estate if it's alone there, so it's also maximized. The…
I also think the taskbar showing only icons is confusing when we have the same app opened multiple time. I have a similar organization as you for work: a Firefox window on desktop 10 for Calendar, Mail, another on…
I'm aware. I think I tried. At the time (silverblue 26) they recommended to use a firefox installed as rpm (actually, the GUI was offering both flatpak and RPM for some packages, and "RPM" meant it used rpm-ostree under…
I like that they went from Ubuntu to Debian as the base OS. I assume they target Debian Sid (the unstable flavor of Debian) because they can compensate for the instability with the immutability provided by ABroot. Or is…
It looks like you can do it that way according to the docs [0] : > abroot pkg add PACKAGE_NAME Not sure what it does exactly under the hood. I'm not sure it persists after an upgrade. In the release announcement blog…
Yes, swarm is not deprecated. I haven't used it myself yet, but I read elsewhere that swarm offers an easy way to manage secrets with containers. Some people run their 1 container in a swarm cluster with 1 node just for…
Interesting opinion. I think it would be so much less confusing to have only one menu. The easiest for power-users and newcomers alike would be to put on the top of this unique right-click menu the folder-level options…
Yes, sure. Although if multiple files or folders are selected, it's probably easier to just press the Escape key once instead of searching for each selected objects in the folder to unselect them one by one. What I was…
I always had the same issue, even with the file explorer that I'm using currently (Thunar, XFCE's file browser). I never really looked for a solution, I kept changing the view (go from list view to to icons view) in…
It also works only with iptables. And because it's from 2012, it's watching the file /var/log/kern.log [0], which was a simple way to monitor for incoming packets in 2012, but will not work anymore with systemd based…