schlarpc

5 ms·

1.
by schlarpc 4d ago
That ribbon got slammed full of advertisements at some point, last I knew.
2.
by schlarpc 23d ago
I suspect the bar will raise for some devices, but most will continue to be made cheaply and with poorly-defined requirements and threat models, and "it works" will continue be the only bar they're measured against before rel
3.
by schlarpc 24d ago
Personal plan, but yes, my day job is being a security engineer for big tech.
4.
by schlarpc 24d ago
I didn’t put this in the post, but yeah, I think about Daemon almost every day at this point. Unbelievably prescient novel.
5.
by schlarpc 24d ago
I have CVP access, which removes the external refusals for Opus 5. I submitted my LinkedIn and Github and got approved in less than 10 minutes.
6.
by schlarpc 24d ago
We should catch up some time, it’s been ages!
7.
by schlarpc 24d ago
I understand what it does, I think the alert is annoying. It takes at least five minutes and automatically runs when the monitor is off. I’ve had it for a few years and have no burn in issues despite not doing this every eight hours on comm
8.
Everything I own, owned(schlarp.com)
1453 points by schlarpc 24d ago|351 comments
9.
by schlarpc 1y ago
Doesn’t work for livestreams as far as I know. There’s an open PR: https://github.com/yt-dlp/yt-dlp/pull/6498
10.
by schlarpc 1y ago
Interesting that it can’t reestablish the connection, as the application level protocol should support it just fine. The client should notice the GRE (game rules engine) TCP socket is broken, and reset everything. When you reconnect, the fr
11.
by schlarpc 1y ago
And thankfully you won’t be looking at it much longer
12.
by schlarpc 1y ago
Just wanted to say thanks for nix2container. I’ve been using it to do some deploys to AWS (ECR) and my iteration time between builds is down to single digit seconds.
13.
by schlarpc 2y ago
Thanks for the link, I've got a bunch of hacky code for running Immich's compose under Nix that this might be able to replace.
14.
by schlarpc 3y ago
I have a similar display, and also use blue noise dithering. Mine is driven in the backend by a web browser, which means I was able to abuse CSS and mix-blend-mode to do the dithering for me: ha-card::after { content: "";
15.
by schlarpc 3y ago
Whoa, .alt is finally a proposed standard with a real RFC number. Really happy about this, it's sorely needed in some spaces.
16.
by schlarpc 3y ago
Another option for NixOS is bootspec-secureboot, I'm using it with no real complaints: https://github.com/DeterminateSystems/bootspec-secureboot
17.
by schlarpc 3y ago
There kind of is, but it's not really made for that use case so there's a bunch of caveats (it's read/write, has a limited max number of attachments, io1/2 required, can't be the boot volume): https:/&#x2
18.
by schlarpc 3y ago
https://docs.aws.amazon.com/whitepapers/latest/security-desi... .
19.
by schlarpc 3y ago
This was considered a feature back in the day; it was called MASE - Multiple Account, Same Email. I'm pretty sure you can just change the email on one of them to get out of that state.
20.
by schlarpc 3y ago
Somewhat related - I made a bridge server [1] that lets ACME clients use standard RFC2136 to solve DNS-01 challenges for internal names without them needing credentials for the actual DNS backend (Route 53 in my case). [1] https:/&#x2
21.
by schlarpc 3y ago
If anyone's interested in poking around a little bit more, here's a half-finished client for the MTG Arena wire protocol: https://gist.github.com/schlarpc/a58f2f647ee2a640baa62c23a51... There may be something
22.
by schlarpc 3y ago
Just created it yesterday. I don't think there's as much incentive to squat on the S3 namespace like there is for domain names.
23.
by schlarpc 5y ago
Kinesis Firehose uses an IAM role to deliver data, so delivery within the same account does not necessarily depend on permissions on the bucket. Removing s3:* permissions from that IAM role or adding an explicit deny statement to the bucket
24.
by schlarpc 8y ago
The Chrome update only bumped to 3.25.3, so it's likely a commit between 3.24.0 and 3.25.3: https://chromium.googlesource.com/chromium/src/+/c368e30ae55...
25.
by schlarpc 8y ago
In Python 3, all classes are "new style", so omitting the parent is the same as inheriting from `object`.
26.
by schlarpc 9y ago
There's a couple recent products that hit similar niches: GPD Pocket: https://www.indiegogo.com/projects/gpd-pocket-7-0-umpc-lapto... GPD Win 2: https://www.indiegogo.com/projects/gpd-win-2-ha
27.
by schlarpc 9y ago
Looks like the "Go support" is just running a precompiled binary that starts a TCP listener ( https://github.com/aws/aws-lambda-go/blob/master/lambda/entr... ), so might not be that hard to
28.
by schlarpc 9y ago
And when you use a role like this, you really should use an external ID to avoid confused deputy attacks. http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_cre...
29.
by schlarpc 9y ago
The relocation benefits have to be paid back (prorated) until two years, so it sounds plausible enough. For what it's worth (not much without numbers on growth and turnover), I've been with them for about 2.5 years and am around t
30.
by schlarpc 9y ago
SNI puts the DNS names you're connecting to in plaintext at the start of every TLS connection. Running your DNS over an encrypted channel won't stop someone from knowing or blocking the sites you connect to.

More ›