maxgashkov

8 ms·

1.
by maxgashkov 6d ago
Oh boy, I do mostly agree with you but this applies well if you’re making software for the fellow SWEs. While a lot of them can be an annoying bunch, once you’re making something for general consumption, like let’s say running an e-commerce
2.
by maxgashkov 8d ago
Yeah, I have been doing this with a naive firewall rule blocking its IP from egress, but how long until they'll wise up to it and start truly nefarious shit like using hidden MACs to acquire multiple addresses in the background? Then y
3.
by maxgashkov 8d ago
PSA for the home automation enthusiasts who keep smart TVs connected to the network to turn them on or off remotely: a lot of other sources that are likely connected to HDMI ports (Apple TVs, gaming PCs etc.) could do the same via HDMI-CEC,
4.
by maxgashkov 12d ago
wrong thread
5.
by maxgashkov 15d ago
Yeah, my bad. After re-reading your original comment I think I was responding to the part that explains 'visa sticker grants entry, residence status is separate', but I have somehow missed the tail of 'you cannot enter w&#x2F
6.
by maxgashkov 15d ago
wrong thread
7.
by maxgashkov 21d ago
It's not unique: Japanese system is exactly as you described.
8.
by maxgashkov 1mo ago
While I'm fascinated by Oxide, their style and work culture (if open documents are to be believed), I do think you're misunderstanding the homelab people a lot. Yes, I want the chance to play with an actual Oxide hardware in the s
9.
by maxgashkov 1mo ago
Wrong thread.
10.
by maxgashkov 1mo ago
Could you confirm if the SRE role would allow work from Japan or do you strictly need the person to be US-based?
11.
by maxgashkov 2mo ago
I guess it depends on the maker. For my car it nudges the wheel back into the lane in addition to vibrating.
12.
by maxgashkov 2mo ago
That's quite insane then. Especially the lane departure warning / assist was downright dangerous in snowy conditions when the road markings became partially covered, I cannot imagine driving with that setting on all the time.
13.
by maxgashkov 2mo ago
I get all of these with more or less recent (2023) Mazda here in Japan, but all of them can be turned off in settings. Are they always-on in EU?
14.
by maxgashkov 2mo ago
(it seems they list it under the contract with Latacora, disregard)
15.
by maxgashkov 2mo ago
<s>Read</s> Skimmed the report (and cheers for not gating it behind request-to-obtain) and I'm a bit surprised to not see any mentions of pentests which I'd expect given the large surface you host. What gives?
16.
by maxgashkov 2mo ago
There is very silly but very simple reason for that. If they let you run MSFS on the Vision, there will be a non-insignificant amount of tiktok videos showing uninitiated people puking after a half an hour in it. There is no breakthrough in
17.
by maxgashkov 2mo ago
That's why it's very unlikely that you will be able to put a file under google.com/.well-known/acme-challenge But if you somehow managed to do that, no one in the right mind would argue that you're free to undelegat
18.
by maxgashkov 2mo ago
You're missing that HTTP-01 challenge grants you no ability beyond what the check has demonstrated, i.e. you have proven that you're able to serve random file from a webserver, so the grant is to allow you to serve them via TLS co
19.
by maxgashkov 2mo ago
Webserver control is never used and must not be used to prove domain ownership. If you're pwned and have to re-point to a server stood up from backup, having registrar relying on someone being able to put up a random file on a compromi
20.
by maxgashkov 2mo ago
I don't really get why you need handoff if your score is accurate. If it is, and it is low for a given response, just let the harness re-run the prompt with a different seed until the score is high enough. If this approach doesn't
21.
by maxgashkov 2mo ago
I do have love/hate relationship with passkeys. Love: I truly have redundancy for most critical accounts, meaning I have 4 separate passkeys assigned, each not tied to one SPoF -- one in 1Password, one in iCloud -- both synced everywhe
22.
by maxgashkov 2mo ago
I'm wondering how many ssh'd into this with the agent forwarding on?
23.
by maxgashkov 2mo ago
> I never understood the popularity of Tailscale, though that is on me. > I guess self hosting Wireguard is too boring to warrant any further discussion? It's popular because you don't have to deal with NAT punching. It &quo
24.
by maxgashkov 2mo ago
Two more things: - well-designed apps retain enough state to be useful offline or in places with spotty coverage; PWAs can kinda be made to work like this but IIRC iOS will happily evict them under disk pressure; - notifications. I've
25.
by maxgashkov 2mo ago
Not really. The incentive is to make you hooked on the process, so you bring the same process to the workplace, and start paying corporate prices, not individual subscription prices. For that to work Claude Code, prompt, and the rest of the
26.
by maxgashkov 2mo ago
very mundane web app and networking security (vpn etc.), nowhere near redteaming
27.
by maxgashkov 2mo ago
If they haven't relaxed the classifier this makes little to no difference as the model is essentially unusable no matter the token quotas.
28.
by maxgashkov 2mo ago
What is the incentive for me to join the public mesh? Do you have any fairness guarantees, e.g. if I contribute 1/8th of the VRAM required to run a particular model, do I get at least 1/16th of the inference share, or anything sim
29.
by maxgashkov 2mo ago
I've settled on using .internal and Knot as a authoritative NS, step CA + ACME to issue short-lived certs, and a Split DNS resolver from Tailscale as the only external dependency (mostly as a convenience for when I'm on the road).
30.
by maxgashkov 3mo ago
> requirement is zero ai used don't ask people to lie to you

More ›