eiopa
Joined 13 years ago
Joined 13 years ago
I haven't used OMP before. Let me take a look :)
I put a lot of small touches like that throughout the app. It just makes me feel cozy inside haha.
I can see that it closes one vector of attack (attacking the install script serving), but beyond that the user still runs the binary outside a sandbox.
I feel that the binaries themselves, both directly and indirectly (supply chain attack) are the elephant in the room.
Any thoughts on that? I always wished the cli stuff I install from Homebrew was locked down by default, but it's not practical with today's computer systems since it kills usability.
Anyway, big fan of Homebrew. Looks like I can't submit a formula to core until I get more traction on GitHub (stars/forks/watchers). Otherwise I have to go to taps which takes away a lot of the benefits of being on homebrew-core iiuc.
I work off of several machines, and the lack of native remoting has been frustrating for me so it’s the next big thing to add :)
Can you share the theme clunkiness you’re seeing? I tried to avoid having another theme system for users to config, but maybe these adaptive tricks won’t quite cut it.
My email is [email protected]
The huge ts files are indeed concerning, but in practice are more resilient than I had expected. They do eventually break down though, and I have been refactoring the systems as they reach their limits. (the last one was a breaking up agent providers into modules, motivated by wanting to support Pi and OpenCode)
I do have some very basic git tooling in there but would be awesome to beef it up :)
I’ll take a look then, as I am unsure how sandboxing will interact with this system since it does a few unusual things
It works ~alright in light themes, but not as well considered as the default one yet which is why it's not the default.
Can you give it a try?
Maybe I am missing something, but the second you run the code, it has the same powers and risk profile as a bash curled from the internet. Maybe something about having explicit versioning?
(as an aside, I think this will change very soon…)
Hope you like it!
For the website, it would be helpful to have either a screenshot or a "sandbox" thing so I can play with it a bit
If the goal is keeping people informed, one can show various breakdowns, piecharts or any other creative infographic at the canvas of the bill.
A common one sees the restaurant charge you separately for the employee health benefits, cynically marketing it to consumers as “healthy SF” and “SF health mandate”.
What’s sort of fun is that like cryptocurrencies, you can always materialize new ones out of thin air. One popular establishment demands that you pay a separate “carbon offset fee”.
Something I am nervous about is using a @hey.com email. Similarly to domain, it's a world-visible and sticky, but unlike domains, it isn't portable, the only options are: pay Basecamp forever, or lose access. gulp
Last time I tried Windows though, coding agents were pretty finicky on native Windows for some reason. Maybe this gap is closed now though!
If you have the tokens to spend, please give it a try. I am curious to see how well it will work. The toolchains it uses, Bun & Zig, do work there, and I think most of the system tricks have Windows equivalents