treesknees

You’re not actually making the point you think you are. This comes back to the original comment stating you need to compromise a lot to MITM here.

So you need to somehow trick macOS into remotely connecting to the wrong bssid, and then arp poison a user who happens to be using a macOS cli tool that’s using https.

Sounds pretty targeted and unlikely to happen.

Client isolation is very common on wireless and wired LANs these days in enterprise and guest network environments. You also have tools like dynamic arp inspection to block poisoning attempts via the network switch.

If you get past all of that, you still need a victim who is actively using a cli tool on macOS using https.

It’s not impossible, but the conditions are much more specific than those needed to inject porn into a webpage on a poorly configured school network in 2006.

The one that doesn’t fly is only a $45,000 loan

The website still loads and renders text without js enabled. The JavaScript only appears to cycle the text through multiple translations. I suppose you could do most of this with pure CSS, but what’s the point?

I think if you want to depend on a “safe inert noscript” website for your purposes, you should put up a webpage for it yourself and use that.

It has ramped up over time, it used to be just a few seconds was enough. You’re right that it’s unsustainable and annoying.

Without more context it’s hard to say whether 332 is reasonable, but I interpreted “reasonable” as in there will always be some amount of harmful content uncaught by automated systems.

I’ve been running a VPS with the same IP (v4 and v6) for ~15 years, so I’d say its stable enough. What should I use as an upstream source of time in this case that would actually be useful?

I downloaded it along with everyone else. It’s decent but the voice over through CarPlay is choppy and cuts off words. You also can’t report or see hazards, speed checks, etc. and its time estimate is less accurate.

I want them to do well. But they need to add a few key features to actually compete beyond just the geographical names.

In my experience, it’s their chat harnesses/website that filters historical events. The model itself doesn’t.

For example you can point opencode at DeepSeek v4 and ask, it will accurately tell you about Tiananmen square.

This is similar to my use case as well. I’ll use a cloud model to identify security issues in a codebase and then use a report/spec output as input to the local model to build tests or verify the issue is real.

I stopped drinking alcohol for the new year. I wasn’t an alcoholic, but I’m sure I’ve driven home after consuming enough alcohol to blow above the legal limit. It’s not something I’m proud of. But one day I decided I was done taking risks like that, done feeling crappy the next day, done having to wreck myself just to socialize.

I don’t really miss it. Honestly the worst part is constantly having to defend my drink choice (mocktail or N/A beer) to the people I’m with who are ordering alcohol.