26-04

• Trivially breaking confidential VMs | Lobsters

  • trusted computing and how to get aroud it via ACPI

• Chris’s Wiki :: blog/sysadmin/SSHAuthenticationWithOIDCTokens

  • ssh auth via OIDC

• 800 Rust terminal projects in 3 years - Orhun’s Blog

  • another list :D

• Jean - A dev environment for AI agents.

  • via andrasbacsai (Andras Bacsai)

  • via coolLabs Team | Coolify Docs

• Why I forked httpx | Hacker News

  • niquests gets good

• Building a Dry-Run Mode for the OpenTelemetry Collector — Simon Aronsson

• The Clock

  • re-thinking a clock

  • computer art

• Lightpanda | The headless browser

  • supposedly “starts instantly, uses 10x less memory than Chrome, and executes 10x faster”

  • via Lightpanda | agent-browser

    • via carderne/pi-sandbox: OS-level sandboxing for pi with interactive permission prompts

• The AI Industry Is Lying To You

  • 🤷

  • via #lobsters on libera.chat

• Put your SSH keys in your TPM chip | Lobsters

  • Foxboron/ssh-tpm-agent: :computer: ssh-agent for TPMs

• Unternehmen speichert Sommerwärme und reduziert massiv Energiepreise - YouTube

  • wie ein Meer im Keller

• The Crop That Should’ve Saved The World 🌎 - YouTube

  • en Winged bean - Wikipedia

  • de Goabohne – Wikipedia / Flügelbohne

  • Flügelbohnen Anbau Anleitung: Der ultimative Ratgeber für Anfänger - Green Replant

• ISO 1 - Wikipedia

  • “the standard reference temperature for geometrical product specification” is 20°C

• I Just Want Simple S3 | Lobsters

  • versity/versitygw: versity s3 gateway

  • RustFS | The High-Performance, Apache 2.0 Alternative to MinIO

• PRQL again ;)

• Swival is the AI agent I actually wanted - Frank DENIS random thoughts.

  • via Configuration flags are where software goes to rot - Frank DENIS random thoughts.

    • configuration flags are often just a polite way to ship uncertainty

    • A boolean in the interface usually means a branching factor in maintenance.

    • via https://lobste.rs/s/pvawq1/configuration_flags_are_where_software

      • every boolean config doubles the test matrix

      • … multiple flags are “often not defined, because defining how all these flags interact is pretty awkward”

• deevus/neutils: Modern CLI utilities for everyday developer tasks, written in Zig

  • written in Zig, by Simon Hartcher (deevus)

  • via Testing OpenGraph on localhost from the CLI before you go public | Simon Hartcher

  • JacobCrabill/zigdown: Markdown toolset in Zig ⚡ has a CLI to render Markdown to Terminal

• Surely there must be a way to make container secrets less dangerous? | Lobsters

  • Some secret management belongs in your HTTP proxy | Lobsters is similar

  • put credentials into a proxy that can easily revoke access instead of sharing secrets like API keys

  • e.g. “The credential proxy” from NanoClaw’s Architecture is a Masterclass in Doing Less — jonno.nz

• How GitHub uses eBPF to improve deployment safety | Lobsters

  • of course there is a LISP hacker that does eBPF in 16 LOC

• Things you didn’t know about indexes | Lobsters

  • good overview of basic Postgres indexes and their tradeoffs

  • CREATE INDEX ... WHERE is nice

  • INCLUDE was new to me

• Integration of AI in Metasploit Framework for Enhanced Penetration Testing · Issue #19202 · rapid7/metasploit-framework

  • first comment 😁

• Command Execution via Drag-and-Drop in Terminal Emulators

TIL: dateutil.relativedelta(day=1)

The following gets you the first day of this month:

from dateutil.relativedelta import relativedelta

context_today() + relativedelta(day=1)

The Age of the Harness

Is there still need for (Linux) distributions when software becomes more fluid? If I were to let my agents run rampant on my machine (which I wont), then it would be easy to install different releases from different places. Also: static binding (rust, go) means less dependencies and less complexity, further alleviating the need for distros. What is the element of operation we think about then? Policy and “harnesses” seem to be the current trend. But we have seen where this goes: couch SELinux cough. I believe we will see new aggregate units of software deployment emerge in the near future. Think back before Docker: It was package or box. Then we got containers, but to do something useful, they need to work in concert (they are processes with some sparkles after all), so every tutorial deployment nowadays is a docker-compose.yaml file with commends and lots of configuration docs. This is the zoom level I am talking about here.

As an afterthought: Smalltalk. Those who know know [1].

TL;DR: RTFM FTW!

Thinking stuff like this heading happens when you spend too much time on the internet. It’s true though.

---

[1]

I don’t, but I am intrigued by some crumbs I picked up, like the ability to snapshot the environment and resume at will. Code is just data. Self-modifying stuff. Flying saucers! … but I digress.