schlarpc

Totally agree with this sentiment. On your plugin point, I recently did a PoC of QuickJS in wasmtime with a restrictive sandbox (10 syscalls total) for running untrusted plugin code and it was great. Took maybe 3-4 days to pull together and performed more than adequately for the kind of thing this class of software needs, with a security posture that beats pretty much anything widely deployed. When this level of engineering excellence is so cheap to achieve, we really need to bully companies that refuse to do it.

That ribbon got slammed full of advertisements at some point, last I knew.

I suspect the bar will raise for some devices, but most will continue to be made cheaply and with poorly-defined requirements and threat models, and "it works" will continue be the only bar they're measured against before release.

Personal plan, but yes, my day job is being a security engineer for big tech.

I didn’t put this in the post, but yeah, I think about Daemon almost every day at this point. Unbelievably prescient novel.

I have CVP access, which removes the external refusals for Opus 5. I submitted my LinkedIn and Github and got approved in less than 10 minutes.

We should catch up some time, it’s been ages!

I understand what it does, I think the alert is annoying. It takes at least five minutes and automatically runs when the monitor is off. I’ve had it for a few years and have no burn in issues despite not doing this every eight hours on command.

Interesting that it can’t reestablish the connection, as the application level protocol should support it just fine. The client should notice the GRE (game rules engine) TCP socket is broken, and reset everything. When you reconnect, the front door service should notify you to a GRE session still in progress, and the client should be able to rejoin that. At least, that’s how it works on desktop.

And thankfully you won’t be looking at it much longer

Just wanted to say thanks for nix2container. I’ve been using it to do some deploys to AWS (ECR) and my iteration time between builds is down to single digit seconds.

Thanks for the link, I've got a bunch of hacky code for running Immich's compose under Nix that this might be able to replace.