Readit News logoReadit News
vigilans commented on Supabase MCP can leak your entire SQL database   generalanalysis.com/blog/... · Posted by u/rexpository
vigilans · 2 months ago
If you're hooking up an LLM to your production infrastructure, the vulnerability is you.
vigilans commented on Qubes OS: A reasonably secure operating system   qubes-os.org/... · Posted by u/doener
pgaddict · 8 months ago
I'm using Qubes OS as my primary for years - I think I started with the 2.0 release in 2014 (I might have tried/used the 1.0 release, I don't recall.) and I was immediately hooked.

I understand the usual story is that the goal is security benefits, and the compartmentalization (or rather the implied inconvenience) is the price for that. But for me the compartmentalization turned out to be a benefit on it's own, and actually convenient.

I find it extremely convenient to have multiple isolated / virtual workspaces for different stuff, even if you assume attackers / malice do not exist. Having separate VMs is not the same as having separate folders. I also love the VM templates, which allow me to do all kinds of experiments (e.g. install packages in the app VM, which disappear after restart). Or run VMs with a mix of distros/versions/... Yes, I could do some of that with plain VMs, but Qubes integrates that in a way that I find very convenient. The commands for copying stuff between VMs are muscle memory at this point.

Yes, there are limitations, like the lack of GPU acceleration. But movies in 1080p play just fine without it, and I'm not a gamer, so I don't mind much. I can't play with CUDA etc. on these QubesOS machines, and scrolling web pages with large images is laggy, but I find this to be an acceptable price.

I went through multiple laptops / workstations over the years, and the situation improved a lot I think. Initially I had to solve quite a few issues with installer, some hardware not working (or requiring setting something special), or poor battery life on the laptops. But after a while that mostly either went away, especially once I switched to laptops with official Linux support (Dell Precision were good, I'm on Thinkpad P1 G7 now). The battery life is pretty decent too (especially once I disabled HT in BIOS).

Is it perfect for everyone? No, certainly not. But it sure is great for me, and I hope they keep working on it.

vigilans · 8 months ago
I’m in the same boat.

Love the compartmentalization and being able to route VMs to different network backends and the ability to create ephemeral domains for quick tasks.

Thank you Joanna, Marek, Andrew, and all the wonderful contributors. I couldn’t live without Qubes.

vigilans commented on Review of Mullvad VPN   x41-dsec.de/news/2024/12/... · Posted by u/ylk
accidbuddy · 9 months ago
Is there any serious website that reviews (rank list) these VPNs? I say this because it is always difficult to find information that is not sponsored on the internet. In fact, I've always heard that Mullvad is one of the best, even supporting P2P
vigilans · 9 months ago
You heard wrong. Mullvad is the best ;)
vigilans commented on Google's Gemini Headaches Spur $90B Selloff   forbes.com/sites/dereksau... · Posted by u/donsupreme
moralestapia · 2 years ago
>And the few that were there were watching some Korean drama on YouTube, etc.

Ugh, plus 1 to that. As much as people love hating "the new orange guy", there's a lesson behind the fact that he got rid of 80% of staff in a big company in an afternoon and pretty much nothing adverse happened.

vigilans · 2 years ago
Nothing adverse besides widespread outages and revenue collapse.

To be clear the revenue collapse might be unrelated to the full but I'd call it adverse.

vigilans commented on A French village that voted to ban scrolling in public   theguardian.com/world/202... · Posted by u/giuliomagnifico
berkes · 2 years ago
If, instead of scrolling HN, you talked to me, both our lives would improve.

Human contact, even with strangers, has a profound impact on health, mental state and quality of life. This has been researched and proven over and over. We are simply wired to function in social groups. Our current state of individualism is rather exceptional, and a cause for many issues with (mental) health.

So, yes, you scrolling HN has an effect on my health, because the reverse is unfortunately true too: loneliness (and isolation etc) have a negative effect on humans

vigilans · 2 years ago
"If, instead of scrolling HN, you talked to me, both our lives would improve."

You haven't talked to me :D

vigilans commented on Lessons from a fountain pen addict   ukfountainpens.com/2019/0... · Posted by u/bookofjoe
bookofjoe · 2 years ago
Eton?
vigilans · 2 years ago
I don't know, there's no mention of pig skulls and prime ministers.
vigilans commented on Lessons from a fountain pen addict   ukfountainpens.com/2019/0... · Posted by u/bookofjoe
madaxe_again · 2 years ago
As written by somebody who was quite clearly never forced to use one at the pointy end of a cane.

I hate fountain pens with a burning, unbridled passion - from 6 to 17, they were the only acceptable writing implement at school, and I just remember endless blotting, leaks, ruined shirts, thefts, bent nibs (it was considered sport to grab someone’s pen and bang it hard into a desktop), and of course there was always some idiot blowing through theirs in the back of class, drizzling everyone with ink.

The moment I was finished it went in the bin, and ever since I’ve used disposable biros.

Fountain pens are an anachronism, kept about seemingly solely to torture children.

vigilans · 2 years ago
Sounds like the issue was the environment, not the pens.
vigilans commented on Car insurance in America is too cheap   economist.com/united-stat... · Posted by u/scythe
paulgerhardt · 2 years ago
Yes and no.

A benefit of those same restrictions means TSMC is building foundries in the US for a change.

GaAs sensors are awesome. Combine those chips with ML optimized compute on a silicon interposer and drone warfare gets a hockey stick in adoption.

As civilians we get functional self driving cars via trickle down.

vigilans · 2 years ago
ITAR blocks export, not import. It has nothing to do with TSMC building fabs here. $50B in incentives might have something to do with that.

And like sister comment says, ITAR is not about industrial or economic policy. It’s about maintaining a qualitative edge in weaponry. How is there a qualitative edge when you can buy the restricted components freely from China?

Just noticed the other comment on GP saying they’re restricted through a different list (EAR). It serves the same purpose so I’m leaving my response as is.

vigilans commented on Car insurance in America is too cheap   economist.com/united-stat... · Posted by u/scythe
paulgerhardt · 2 years ago
Unlike sending engines for cryptographic cyphers across nation state lines, night vision is absolutely one of those things ITAR cares about. And the number of loops holes and exemptions Audi had to apply for made the project financially unprofitable to the point of moving to always on high beam DLP style headlights.

Retrofitting one system in my car which had the option code was a yak shave.

Most automotive systems get by this by limiting night vision to 8fps(!). Similar to how GPS was limited to 100m accuracy in the first civilian models.

What blows my mind is one can get Chinese models off Taobao with 60fps for 1/10th the price of US products like FLIR.

vigilans · 2 years ago
That last part would indicate that the restrictions are utterly moronic if one were to reason. At the very least they need to be relaxed so technology that's readily available to end consumers worldwide isn't restricted.
vigilans commented on Android now lets you transfer eSIMs between your phones   androidpolice.com/android... · Posted by u/thunderbong
Dalewyn · 2 years ago
>But phone is not the best one.

Phones are the best one.

Why?

Because (almost) everyone has one within reach.

Security enthusiasts and believers constantly fail to understand why straight passwords and to a lesser extent phone 2FA never go away: All their proposed alternatives and solutions are inconvenient.

Most people couldn't give a rotten rat's undead arse about security, but they will kill for convenience. Passwords and phone 2FA win and keep winning because they are convenient with good enough security.

vigilans · 2 years ago
The most uninformed takes always come with a healthy dose of arrogance and vulgarity.

Every part of the industry that matters has been bitten by using phone numbers as a 2FA mechanism. It's why they're actually disappearing and are being phased out in favor of apps, OTP tokens, and email codes, depending on the amount of influence technical people wield at a given org.

u/vigilans

KarmaCake day129February 26, 2022View Original