happyhardcore

For this I used GCP free tier -- not sure why everyone acts like Oracle are the only free tier around when GCP and AWS offer always-free tiers too. It's just runing socat to forward to the vape over tailscale. Is there something I'm missing?

VPS with public ipv4, connected to home network over Tailscale and forward the traffic with socat. You'd probably be fine opening a port directly but a small VPS is free most places so might as well make the most of it.

You can generate the keys on-device during the initial provisioning and have it encrypt the flash with that key, so every device generates its own unique key and there isn't any practical way to extract it; even the developer can't flash it directly, and OTAs are required to update the firmware. This effectively means nobody can flash the chip anyway since you can't know the keys. Is there some sort of attack vector here I'm missing that gets mitigated by preventing flashing entirely?

How is this different in practice to the regular ESP32's secure boot, where you can technically flash the chip with whatever you like but unless you have the signing key the bootloader will refuse to load it?

We don't know if he's gone to the cops, but more often than not the police will not be able to help you in these sorts of situations. The way that Kiwifarms target people is incredibly hard to stop and I don't think they particularly need ammo; the way to not "give them ammo" would be to stop standing up for trans rights, and the fact that he hasn't is commendable.

I suspect this is why OpenAI is going more in the direction of optimising for price / latency / whatever with 4o-mini and whatnot. Presumably they found out long before the rest of us did that models can't really get all that much better than what we're approaching now, and once you're there the only thing you can compete on is how many parameters it takes and how cheaply you can serve that to users.

How so? Other than the security issues that get exploited by NSO group from time to time (that appear to be mitigated fairly well by lockdown mode if that's something that's important to you) or the obvious flaw that you can't talk to anyone that doesn't have an iPhone it seems to be a perfectly good platform. The alternatives either have worse encryption (Telegram, RCS), worse privacy (WhatsApp), or the same platform lock-in as iMessage (Google's RCS).

I started out using a cheap MicroSD and it only lasted a week or two before failing; I've since replaced it with a 128 GB SATA SSD with a USB3-SATA dongle I bought off Amazon. No SD card needed and it's served me incredibly well. I figured that even the best MicroSD card isn't going to be designed to run as a computer's boot drive, and SATA SSDs are cheap and plentiful.

It's worth bearing in mind that _all_ ports on the device are expansion cards, including the USB-C port that the device needs to actually charge. In any case I think WiFi is 'good enough' for most use cases, and as such the number of laptops that provide ethernet as standard is rapidly diminishing. I very rarely need an ethernet port on my laptop, but for the times I do it'd be very helpful to have it installed rather than needing a dongle flapping about.

Ah, TIL. Thanks for clearing that up!