jcgl

One of the goals of Signal is that they do not know who is talking to whom. Sealed sender and all that. This can possibly break down in certain scenarios with some server-side correlation. But they certainly do have a design goal that the social graph is entirely private.

I presume though that the mentioned fix only installs the terming for the user, rather than system-wide. I don’t see how that’d be rude (assuming it’s some non-root user that you should reasonably be considered to have control over).

Exactly. What factors limited tech debt before? Mostly two things, I’d guess: velocity, and Good Practice. And I’d guess that the former plays at least as large a role as the latter. So if you then unconstrain velocity, you’ve likely done a lot to unconstrain tech debt.

I remember RHEL being quite slow with copyfail as well. It'd be nice to have some more comprehensive statistics though.

And I don't put a lot of faith in container scans as a metrics. (More properly, I don't have faith in most containers scanners to properly identify package versions and backports.)

Good example. There is simply a long tail of things that are valuable to static sites that HTML can't/won't provide. Some other examples from my simple blog:

- Using buttons/links to seek to specific times in a <video>

- Localizing dates

- Expanding/collapsing sets of comments

Sure, for the most static of static sites. But without JavaScript you can’t even do basic things client-side, such as having some variable-length list of fields in a form. Or customized field validation.

If such client-side behavior counts as “basically an application,” then “applications” is a larger set than seems useful.

No, but my point that was AI coding changed the balance of a system such that a previously useful heuristic no longer works.

But most bad developers were likely not making a fully-featured, useful mail client. Creating such a mail client was a proof of work, if you will.

In addition to what the other commenters say about electricity generation, heat pumps are more than 100% efficient. So using an incandescent bulb as a resistive heater loses there too.

> TPM signatures are only useful for verifying the state of your own computers, and only because you control when and how the upgrades happen. And by “you” I really mean large enterprises with tens of thousands of computers (both real and virtual) to manage and a dedicated staff to keep track of everything.

Yes! And part of what makes this new systemd tooling so exciting to a sysadmin like me is that it’s making this very useful stuff available to less-enterprisey shops too.

This is very exciting to me. systemd-sysupdate is a very nice building block for delivering updates, but having some opinionated (and secure) repo system that sysupdate can consume would be very, very nice.

The Go team as a whole was not adamantly against generics though, as I recall. Rather, they were against implementations that would have bad overall implications for the language (especially its complexity, both in usage and in implementation).

Once a sufficiently good proposal was made, generics were adopted.

I’m quite happy with RSS Guard. Pleasant and quick to use, plenty of features, and can stay out of your way as much as you like.

Not if the response to the AirPods losing capacity is to replace them altogether.

The world is a big place. Of course it happens. But, colloquially speaking, "getting people's attention" suggests that more than a rounding error took heed.

I'm glad your CEO cares. It makes a difference and I hope you feel good about that. And the world would be a better place if more did care. But, to a first approximation, it seems like organizations don't care about data breaches.