Skip Navigation

dan

@ dan @upvote.au

Posts
0
Comments
1065
Joined
3 yr. ago

Aussie living in the San Francisco Bay Area.Coding since 1998..NET Foundation member. C# fan https://d.sb/Mastodon: @dan@d.sb

  • Because Google cares about us

    Jump

  • True - I just stuck with Google's naming for consistency.

    I absolutely agree that you should be able to install anything on a device you've paid for. Unfortunately, the world's been moving away from that for years, and I'm not sure what we can do to avoid it.

  • Because Google cares about us

    Jump
  • Removed Locked

    Most slopcode projects are abandoned and deleted within months of release

    Jump

  • And I don’t ever know if it’ll get better because you need to know why you want to build something someway.

    The major issue I'm seeing with junior (and even intermediate) developers is that they trust that the AI will always do things the correct way and don't question its approach, and they don't develop proper debugging skills and just rely on the AI to attempt it.

    To get decent quality output out of an AI model, you need to have critical thinking skills, at least basic knowledge of the overall architecture for whatever you're trying to build, and enough knowledge to question the model when it does something wrong.

    Blindly trusting AI is why so many old security issues are coming back - stored/reflected XSS, SQL injection, exposing databases directly to the internet with no password, things like that. Newer frameworks mostly got rid of them, and now AI is bringing them back. It's a fun time for red teams at least.

  • Tesla Caps Employee AI Spend at $200 per Week After Adoption Push

    Jump

  • Huh, interesting. I wonder why it's so infrequently used then. Maybe people are afraid of using an AI that referred to itself as "mechahitler".

  • Tesla Caps Employee AI Spend at $200 per Week After Adoption Push

    Jump

  • I would have thought they'd get access to xAI's models for very cheap.

    Grok really isn't that good, though. So few people use it that xAI are renting out most of their AI servers to both Anthropic and Google.

  • Data centers emitting more CO2 than thought: study

    Jump

  • And I would be interested on how they are referbing the equipment and selling for a profit

    My understanding is that an e-waste recycling company is contracted to take all the old equipment. The original company can say they've recycled it, record it as such, and doesn't care what's done with the equipment after that - whether that be reselling it, recycling it, whatever. The e-waste company is the one that handles finding the useful stuff and refurbishing it.

  • Data centers emitting more CO2 than thought: study

    Jump

  • They do an upgrade, ever server/switch/router etc ends up in the dumpster

    How many customers do this?

    At least here in the Bay Area, hard drives and SSDs get destroyed, but a lot of the other equipment goes to e-waste recyclers who end up refurbishing it and selling it on marketplaces like eBay.

    A lot of homelabbers get their equipment from eBay, and the source of that equipment is almost always second-hand data center equipment.

  • As Xbox Series X hits $800, Lenovo warns memory prices will likely ‘never’ return to normal | VGC

    Jump

  • Oh no! I didn't know that. I was considering getting a Polestar a few years ago, but ended up getting a BMW instead (an iX, then an i4)

    They said they're just gonna withdraw and focus on the European market instead.

    Makes sense. In the end, the USA only accounts for around 7.5% of EV sales globally so it doesn't make sense to overindex on US sales when it's much easier for them to sell in other countries.

  • As Xbox Series X hits $800, Lenovo warns memory prices will likely ‘never’ return to normal | VGC

    Jump

  • There's some Chinese EVs in the USA - you can buy BYD busses, trucks and forklifts (we use BYD busses at work for transportation between buildings), and Waymo's new van-looking cars are manufactured by Zeekr.

    The Polestar 4 and Volvo EX30 are also both built on a Chinese platform (Geely / Zeekr) but the US is OK with them since they're partially manufactured in South Korea and partially in the USA at Volvo's factories.

    The issue is that there's huge tariffs, it's hard to get Chinese cars approved to sell in the US, plus the US is still mostlyl holding on to the legacy dealership model. The Chinese cars are so much better and cheaper than US brands, but the US has to protect the dying legacy US brands.

  • Rootless docker and symlink to docker.sock security issues

    Jump

  • Does Patchmon not have a setting to look for the Docker socket in a different location?

    I could be wrong but I don't think there's any security issues making a symlink to a socket, since permissions/ACLs on the socket would still apply.

  • Math Master! [Bob the Angry Flower]

    Jump

  • I'm going to make an effort to never pick 7 again.

  • ICYMI, Unraid now supports internal boot and TPM licensing

    Jump

  • My Epyc 7702 does have onboard TPM, but my supermicro H11DSi-NT doesn't pass it through to the OS, for some reason

    Huh... That's interesting. At my workplace we have Linux EPYC servers with working TPM (it's mandated that all computers, both clients and servers, must have TPM 2.0), but I'm not a hardware person and don't know exactly how they're configured.

  • ICYMI, Unraid now supports internal boot and TPM licensing

    Jump

  • This is good to know. I haven't had issues with using a USB drive though, since it doesn't receive many reads or writes - the system is copied to a RAM drive on boot and runs off that rather than the USB.

    I assume this means I'd need another drive to boot it from? My current setup is that I have 2 x 22TB drives in a ZFS mirror for data storage, and 2 x 2TB NVMe SSDs in a ZFS mirror for things like VMs, Docker containers, documents, etc.

  • ICYMI, Unraid now supports internal boot and TPM licensing

    Jump

  • I had to get a Supermicro AOM-TPM-9665V TPM chip for my motherboard

    How old is your CPU that it doesn't have onboard TPM? It's been a standard feature for quite a while now

  • Frog put Claude in a box

    Jump

  • This isn't too bad if you're running Docker in rootless mode.

    Adding a user to the docker group while running Docker as root doesn't really make sense though, since it makes it trivial to run things as root.

  • Frog put Claude in a box

    Jump

  • You need to use hooks to actually block it from doing things. CLAUDE.md files are just guidance, and it's not guaranteed to follow everything (and the longer the file gets, the more likely it'll ignore stuff - it should be kept as short as possible)

    https://code.claude.com/docs/en/hooks

    Hooks are code that runs at a certain point (eg after you submit a prompt, before a tool call, after a turn, etc) that can do some validation, verification, logging, etc.

    It does still try to work around the blocks though, but it's not as bad as trying to put the restrictions in the prompt.

  • Frog put Claude in a box

    Jump

  • Giving Docker access to Claude is certainly a choice.

  • Frog put Claude in a box

    Jump

  • ag / rg don't work well in this particular scenario either. Because files are loaded on-demand, they end up trying to load the entire repo.

  • Frog put Claude in a box

    Jump

  • It makes sense... There's a LOT of examples of using CLI tools in the training data. At work we're moving away from MCP tools to instead using CLIs for everything.