Do you disable SMS too? It’s far, far less secure than RCS so I’m not sure why you’d avoid RCS but not SMS.

I usually use Clonezilla and have it verify the data after cloning. It works for local drives, but it can also clone a drive over the network by running it on both the source and destination system, which is very useful for remote servers (eg moving a VPS to a different location).

I usually use rsync -avHXS --numeric-ids --progress --delete

I think that’d make sense. The trackers for public torrents are often at seemingly random domain names and nobody really pays much attention to who runs them.

The US military created Tor, so I don’t doubt the US government still runs a lot of the nodes.

I doubt it. It’s likely custom code that’s better suited to the task.

The *arrs watch RSS feeds to find new torrents. It wouldn’t be difficult to write a script that pulls the RSS feed and polls the tracker to collect data on the initial seeds/peers. They might use an actual torrent client for some of the data collection, since I’d guess they have to prove the person is actually uploading, rather than just being connected but not actually uploading or downloading.

Interesting, thanks for the link. Strange that a bot is on the list (https://lemmy.bestiver.se/u/rssbot)

For other alternatives with their own engine - the main ones are Yandex, Mojeek, and Qwant. DuckDuckGo is good, but most of their results come from Bing.

Kagi is priced well for what you get. Search engines are very expensive to run. You don’t have to pay for the premium AI, and the pricing of the starter ($5/month for 300 searches) and pro ($10/m for unlimited searches) plans hasn’t been affected by AI. They’ve remained the same price ever since they launched in 2022.

Accurate. At work I’m finally getting around to paying down tech debt from a temporary hack that was supposed to only be in the code for a month or so, but now it’s been in our production code for around five years.

It would have been maybe a week or so to do it the right way initially, but we had hard deadlines and were pressed for time and just couldn’t get around to doing it. Now it’s over a month of work for one senior engineer (me) to clean up, because there’s so many interdependencies between the hacky code and other parts of the system that depend on side effects of the hacky code, or the order of updates performed in the hacky code. What a mess.

At least AI can help a bit. Even the newest models aren’t so great at system architecture in brownfield projects though (projects building into existing systems).

Not sure if this counts, but as a software engineer, pretty much all major software you use is hacks on top of hacks on top of something someone built as a ‘temporary’ solution or as a proof-of-concept that’s still in use years later. It’s amazing that anything works properly at all. Stable software is basically just software with 10+ years of bug fixes layered on top of it.

Part of the reason that Windows backwards compatibility is so good (plenty of Windows 95/98 apps still work fine on Windows 11!) is because Windows automatically applies compatibility fixes, including simulating bugs that were in older versions of Windows, because old apps could be relying on those bugs.

My wife gets very frustrated when she encounters bugs, whereas I’m usually like “well, it’s not nearly as bad as it could be” lol

I missed all this drama. Is there still a way to see the list? I’m very curious about it.

It’s not way more than they thought because it’s within the limits they set for the subscriptions. They wouldn’t have set the limits that high if they didn’t think people would use it.

Yeah I think I was thinking of DPAPI. Updating my comment!

There’s other approaches to automatically unlocking. For example, you can combine Clevis with Tang to use Network Bound Disk Encryption, which lets you automatically decrypt only when on a trusted network.

You can have multiple different LUKS keys, and any of them can be used to decrypt the disk. This lets you automatically unlock via a network server when your system is at home, while still prompting for an unlock password when not at home.

At my workplace, our laptops have two LUKS keys - one for me and one for IT / tech support. It lets IT boot the system (eg if I send it in for repair) without having to know my LUKS password.

Bitlocker stores the key required to boot the system in the TPM.

You can do that on Linux too if you want to, using Clevis or systemd-cryptenroll.

As far as I know, Bitlocker uses two keys to boot: There’s a key in the TPM, that’s used to decrypt a key stored on the drive, that’s used to decrypt the data.

I think some data (maybe just user-specific data?) is encrypted with a user-specific key too, that isn’t unlocked until you log in. Edit: I think I was thinking of DPAPI.

I’m not 100% sure about the specifics of its design.

cost of AI going up

The highly subsidized Anthropic and OpenAI subscriptions will go away, but open weight models are getting much better over time - GLM-5.2 and Kimi K3 are both very good.

The most expensive part by far is training the model. That’s why OpenAI and Anthropic are losing so much money (well, that and the subscriptions).

With an open weight model, someone has already trained it, and you just have to cover the cost of inference, making it a lot cheaper. Any company (or individual!) with powerful enough equipment can host the model, which means there’s competition in terms of price, compared to something like Claude Opus where the only four hosts (Anthropic, Amazon Bedrock, Google Vertex AI, and Azure AI Foundry) use Anthropic’s pricing.

I agree that AI slop is bad, but I don’t really agree with their method of determining if an app is abandoned (no updates in 2-3 months).

Sometimes apps don’t need updates. Some Linux apps don’t receive major updates for years. I used backupninja (https://0xacab.org/liberate/backupninja) for long time even though sometimes there’s 2-3 years between releases, because it did what I needed. (I switched to Borgmatic at some point though).

I didn’t update one of my apps for over a year because it already did everything I needed, and I wasn’t receiving any major feature requests. There’s still some bugs I need to fix but I just haven’t gotten around to it yet.

Ahh, interesting, thanks for the info.

It would require either every app developer on F-Droid to comply as well

Has this been mentioned anywhere? I haven’t seen it.

That’s a separate thing. As far as I know, there’ll be no difference between third-party app stores installed via Google Play vs third-party app stores installed via APK in terms of the apps in the store itself.

IIRC they’re going to force verification for all apps but have an opt-out that you just need to do once, and wait 24 hours after enabling it.

It would increase visibility of F-Droid (people that might have never heard of it might start seeing it in the Play Store) so I think they’ll give in to Google’s requirements even if they oppose them…