thecopy

Maybe. Maybe not. It depends on the sophistication of the malware. Generally my impression is that these install-script type attacks cast a wide net. I would hazard a guess that they would not know how to even ask my 1Password for the keys. They are in an account they dont know, in a vault they dont know, and have a name they dont know

It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"

In my thinking, this is more secure than plaintext in filesystem

I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.

Having the same issue. I have stopped Googling it, since i just start to wonder if its better to just rebrand.

I have a small ChatGPT subscription and a skill i run pre-commit post-Claude that goes through every file and rewrites all english sentences, removes comments and replaces dense terms in variable and function names. It usually reduces comments by ~80%

Well, the thing with renewables is that the energy is not destroyed. When you use a solar panel is does not disappear

What is wrong with it?

Peak Hours: 01:00–04:00 and 06:00–10:00 UTC

For European and US customers this is effectively 2x increase. I think i wll keep using both Flash and Pro as before.

EDIT: Misread numbers to believe off-peak kept old prices

Except the first time you do it

Sure, but doesn't this assume that you cannot the publisher anyway? So why would you not trust their homepage but trust their source-code

How so? As i understand your point, this would mean we cannot trust GitHub enough to return the same content in git clone vs curl?

>Nothing is arbitrary nor mutable in the default state.

What do you mean with this?

>Anything that suggests curl into bash just plain sketches me out.

How is it different than trusting any other method of installation? If URL has https and is from an author you trust i dont see the difference.