lol calling Python lightweight:

  ⟩ dnf install --downloadonly --installroot /tmp/yourmom python3
  …SNIP…
  Transaction Summary:
  Installing:        59 packages

  Total size of inbound packages is 33 MiB. Need to download 33 MiB.
  After this operation, 118 MiB extra will be used (install 118 MiB, remove 0 B).
  The operation will only download packages for the transaction.

Don't get me wrong, Python is a great many things. Easy to use, surprisingly fast for a scripting language, and well documented. But not lightweight.

(( The Windows version is 110MiB after decompression. ))

[1] https://www.youtube.com/watch?v=lj3iNxZ8Dww

Yes. For one simple reason: As vi is part of the POSIX standard[1], it is gauranteed to be installed on all unix(-like) machines you may touch now or in the future.

[1] https://pubs.opengroup.org/onlinepubs/9699919799/

I generally use iSH[1] for my iPhone to Linux needs. Specifically, I like it because it's a standard Linux distribution with OpenSSH. Meaning all the things work like sftp, ssh, tunnels, and local clients like `mysql` tunneled through ssh

[1] https://apps.apple.com/us/app/ish-shell/id1436902243

I use iSH too and love that I have all my standard CLI tools available, or can just install ones I want.

But using the ssh client in iSH to interact with TUI interfaces is a less than optimal experience. Many nice UI affordances that something like Terminus provides are lacking. Like using swipes as input, key management tools, or using location monitoring as a trick to keep it running in the background. Definitely excited to check out this new Echo client.

I also love iSH. However, I haven't been able to run agents directly from my phone on it like I would hope.

I spent a few hours trying to get GitHub Copilot CLI or Claude Code installed only to discover that the version of Node is pegged to 14, which prohibits installation of several of these tools via NPM.

Has anyone had success with this? I'd love to see the packages updated to support later versions

Hah! I learned of Anna's a few months ago. I posted a slightly snarky comment on the lack of an explainer and got downvoted to oblivion

https://news.ycombinator.com/item?id=46169388

  >>  You know, it wouldn't kill them to add some fucking details to the main page rather than making you dig for it. The TL;DR:

  WTF is a Anna's Archive: Hi, I’m Anna. I created Anna’s Archive, the world’s largest shadow library. This is my personal blog, in which I and my teammates write about piracy, digital preservation, and more.

  WTF this post is about: Exclusive access for LLM companies to largest Chinese non-fiction book collection in the world.

I really like and hate this at the same time.

Years ago, I had a really fubar shell script for generating the DNS-01 records on my own (non-cloud) run authoritative nameserver. It "worked," but its reliability was highly questionable.

I like this DNS-PERSIST fixes that.

But I don't understand why they chose to include the account as a plain-text string in the DNS record. Seems they could have just as easily used a randomly generated key that wouldn't mean anything to anyone outside Let's Encrypt, and without exposing my account to every privacy-invasive bot and hacker.

> they could have just as easily used a randomly generated key

Isn't that pretty much what an accounturi is in the context of ACME? Who goes around manually creating Let's Encrypt accounts and re-using them on every server they manage?

Those who choose to use DNS-PERSIST-01 should fully commit to automation and create one LetsEncrypt account per FQDN (or at least per loadbalancer), using a UUID as username.

There is no username in ACME besides the account URI, so the UUID you’re suggesting isn’t needed. The account uri themselves just have a number (db primary key).

If you’re worried about correlating between domains, then yes just make multiple accounts.

There is an email field in ACME account registration but we don’t persist that since we dropped sending expiry emails.

It’s still a valid point IMHO - why not just use the public key directly? It seems like the account URI just adds problems instead of resolving any.

It has these primary advantages:

1. It matches what the CAA accounturi field has

2. Its consistent across an account, making it easier to set up new domains without needing to make any API calls

3. It doesn’t pin a users key, so they can rotate it without needing to update DNS records - which this method assumes is nontrivial, otherwise you’d use the classic DNS validation method

Interesting.

I didn't realize the email field wasn't persisted. I assumed it could be used in some type of account recovery scenario.

Many larger corporations strictly control what software is available and allowed to be installed.

On Linux, this is commonly accomplished using Red Hat Satellite [1], although many other tools are also available to use instead.

Getting approval to install something like Vim can literally take months of effort and arguing.

[1] https://docs.redhat.com/en/documentation/red_hat_satellite/6...

This has been a long-standing problem with 7-Zip.

An article from 2018:

https://www.bleepingcomputer.com/news/security/fake-websites...

And uBlock Origin's "Badware" filter blocks it:

https://github.com/uBlockOrigin/uAssets/blob/master/filters/...

I’m not sure if gitfriend is a typo.

I’m lonely and really want a gitfriend to push and merge with! Please tell the story of how you got one!

/s for the /s impaired

I'm afraid of commits.

It always ends up with a lot of blaming.

In extreme cases, it terminates with a bisect.

Don't worry! We're moving away from automatic cameras, too. Soon, you'll just use ChatGPT to generate your vacation images on demand.

I'm being a little hyperbolic, but it really seems like, for a non-insignificant portion of the population, that will be true.

Friend of mine suggested "vacation camera" concept when Panoramio was established (around 2006): box with compass, GPS and Internet connection. You point it to the sight, press button, it downloads photos of this sight. If you have premium subscription, it downloads professional photos with professional post-processing.

Inserting user's mates was a problem in 2006.

The rate at which people are currently posting AI enhanced or modified images of themselves is a bit surprising to me. Apparently people very much like wearing different outfits or travelling to new places without actually having to put them on or actually leave the house.