Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)C

CameronDev

@ CameronDev @programming.dev

Posts
2
Comments
628
Joined
3 yr. ago

  • How to reach different services on the same machine via name instead of ip+port?

    Jump

  • You can of course do it manually with plain nginx, it's just a little more effort. Good luck :)

  • Removed

    Docker Hub's trust signals are a lie — and Huntarr is just the latest proof

    Jump

  • Pull by digest just ensures that people end up running an ancient version, vulnerabilities and all long after any issues were patched, so that isn't a one-size-fits-all solution either.

    Most projects are well behaved, so pulling latest makes sense, they likely have fixes that you need. In the case of an actually malicious project, the answer is to not run it at all. Huntarr showed their hand, you cannot trust any of their code.

  • How to reach different services on the same machine via name instead of ip+port?

    Jump

  • Nginx proxy manager can help you with all of that.

    basically want a domain name that you can use to subdomain each service off.

    E.g:

    https://service1.auth.local/ -> proxies your first service (192.168.1.111:4567)

    Https:/service2.auth.local -> proxies to the second (192.168.1.123:9876) And so on.

    If you purchase an actual domain name, you can get letencrypt certs via nginx proxy manager, and it all works very smoothly.

  • Ladybird Browser adopts Rust, with help from AI

    Jump

  • Having done some C to rust auto-translation some time ago, it definitely was wildly unsafe. Maybe it's better now, but there is no reason to assume it's mostly safe now either. Even recently I did some regular vibe coding to test it out, and it generated some very questionable code.

    Even if there is zero "unsafe", there could be loads of unchecked array accesses, or unwraps causing panics, which while "safe", will cause crashes.

    Fixing unsafe can be a mixed bag, some will be easy, some will require much deeper changes. And without looking at the code, impossible to say which it will be.

  • Ladybird Browser adopts Rust, with help from AI

    Jump

  • I haven't looked at the code, but the mem safety may be out if the translation just slapped unsafe and transmute everywhere.

    And "working code" is often very hard to replace, it can be hard to justify code changes when the original "works just the same". So, I would expect the weird ported code to live on unless there is a major effort to rewrite it.

  • Ladybird Browser adopts Rust, with help from AI

    Jump

  • https://github.com/DioxusLabs/blitz - This kinda covers the "engine without JS" part, it's a bit more limited, but also in alpha. It's part of the dioxus project, they use it for rendering UI on desktop.

  • Vibe Coding Has a Security Problem Nobody Wants to Talk About

    Jump

  • While human developers bring intuitive understanding

    Well.... some do.

    Jokes aside, I don't think this is an undiscussed topic, and ultimately, the solution is the same as it as always been: project culture. Project leaders need to insist that code is responsibly written and reviewed, and to make it part of the team culture. AI doesn't change that.

  • Stop Uploading Your Personal Files to Random “Free” Compression Sites

    Jump

  • It is a perfect honeypot. Do local compression for the majority, but if the IP comes from a government IP block, serve a different page and upload...

  • Deleted

    Permanently Deleted

    Jump

  • They also want the safety net of the maintainers. It's cowardice really.

  • Deleted

    Permanently Deleted

    Jump

  • They can fork Godot and let their LLMs go at it. They don't have to use the Godot human maintainers as free slop filters.

    But of course, if they did that, their LLMs would have to stand on their own merits.

  • Deleted

    Permanently Deleted

    Jump

  • Those kind of challenges only work for a short while. Chatgpt has solved the strawberry one already.

    That said, I wish these AI people would just create their own projects and contribute to them. Create a LLM fork of the engine, and go nuts. If your AI is actually good, you'll end up with a better engine and become the dominant fork.

  • Show HN: GitHub "Lines Viewed" extension to keep you sane reviewing long AI PRs

    Jump

  • Long AI PRs are super easy to review. Just reject. I'm not interested in reviewing AI code. If I created it, sure, I'll review it, but I'm not reading someone else's slop.

  • X.Org Server's "Master" Branch Now Closed With Cleaned Up State On "Main"

    Jump

  • You'll also weed out the BDSM crowd, are you sure you want that loss of talent?

  • I gave my AI drugs

    Jump

  • Heroin: Falls asleep, whilst still burning tokens. 1% of the time it vomits over the codebase, chokes and dies.

  • I Fixed Windows Native Development

    Jump

  • Integrating this into rustup would be a godsend

  • Discord Distances Itself from Peter Thiel's Palantir Age Verification Firm

    Jump

  • Discord suggested users who encountered prompts from Persona are part of “an experiment” and that the information will only be stored for seven days.

    Lol. Sure.

  • MinIO repository is no longer maintained

    Jump

  • Rug -> pulled.

    Seems they are pushing their own proprietary S3 store instead.

    We have designed MinIO as an Open Source software for the Open Source software community.

    Lol.

  • Ping! The WhatsApps that should have been an email

    Jump

  • Just because they are a distasteful company, doesn't give us free reign to spread lies about them. There is plenty of verifiable true things to say.

    The signal protocol and encryption explicitly prevents the transit server decrypting messages. That a theoretical hidden third person (who may or may not be part of meta) in the chat doesn't change that is e2e encrypted.

    Simplifying it down to "they might have a hidden back-door, therefore it's https is a dishonest framing in my opinion.

  • Ping! The WhatsApps that should have been an email

    Jump

  • Them including themselves as a participant still does not make it "like https".

    Being sued also doesn't mean anything, anyone can be sued at any time, and there does not need to be a basis in reality for it to go ahead. It is not proof of anything.

    They control the app, they can obviously steal the messages if they wanted to, but you are making very strong claims with zero evidence.

    I don't like meta any more than you do, but if you are going to make claims of "like https", bring actual evidence.