nym's avatar
nym
nym@primal.net
npub1hn4z...htl5
nym's avatar
nym 11 months ago
nym's avatar
nym 11 months ago
Trump Is Going to Pump Our Bags to Kingdom Come https://archive.ph/kQYMY A guy, stool-bound inside the front door of PubKey, a Bitcoin-themed bar in Manhattan’s Greenwich Village, motioned for my ID. I reached for my wallet. But wait—turns out he wasn’t actually working the door. “We’re just trying to get people,” he told me, chortling. Epic prank, sir! Hence got, I made my way to the bar’s backroom for a panel called “Coin Based: Concepts of a Plan for Nation-State Bitcoin Adoption.” “My how things have changed,” read the online event page. “Ideas that only a few weeks ago were laughed at by pundits and commentators are now on the table.” It was time to decide what exactly the crypto community desires from the Trump administration on a policy level, and a few dozen guys had gathered to listen to a four-guy panel debate potential legislative achievements that could define Trump 2.0. It was off to an annoying start, as expected, but money buys you that right, even digital money. originally posted at
nym's avatar
nym 11 months ago
Is NixOS truly reproducible? Build reproducibility is often considered as a de facto feature provided by functional package managers like Nix. Although the functional package manager model has important assets in the quest for build reproducibility (like reproducibility of build environments for example1), it is clear among practitioners that Nix does not guarantee that all its builds achieve bitwise reproducibility. In fact, it is not complicated to write a Nix package that builds an artifact non-deterministically. originally posted at
nym's avatar
nym 11 months ago
Marginalia – A search engine that prioritizes non-commercial content Marginalia Search is an independent open source Internet search engine operating out of Sweden. It is principally developed and operated by Viktor Lofgren . **Philosophy** The need for discovery Nothing you do to try to make the web a better place matters if nobody can find what you did. There are a lot of precious websites out there that deserve an audience, but instead are languishing in obscurity. This makes alternative discovery mechanisms an urgent priority of the free and independent web, both document search as well as blog and RSS-feed discovery. It's time to build None of this is new. How long have been talking about the decrepit state of the web? How many pages of essays have been written, how long have we waited for the planets to align and the web somehow to fix itself? Seems very clear talking and writing isn’t going to fix the web. Rallies or pleas to the government isn’t going to fix the web either. Not even AI or Elon Musk is going to fix the web. New search and discovery mechanisms stubbornly refuse to manifest almost no matter what we do, until we actually go build the things. You do not need VC funding, or a San Fransisco address, or even someone’s permission. This is how it’s always been. Things exist on the web because someone built them. As a consequence, if you want something to exist on the web, you go build it. Traditional information retrieval A search engine’s ability to answer natural language queries comes at the cost of its ability to discover websites. The more human the answers become, the less human the results become. This has lead to a web that feels both small and lonely. Natural language search is likely a dead end that will be consumed by GPT-style interfaces. Traditional Information Retrieval approaches still offer capabilities that have largely become lost in the rush toward natural language search by major search engines. The need for multiple search engines In practice, most alternative search engines are backed by Google or Bing, or authoritarian states such as Russia and China. The lack of diversity in search engines makes it terrifyingly easy to censor information on the web, even if this is not intentional, having every major search engine be based in United States imposes a significant cultural bias on the rest of the world using these services. Marginalia isn’t seeking to replace Bing or Google, but to complement them, to provide a minority report that keeps them honest. Business model Web search has traditionally been difficult to monetize, which has pushed many search engines to go the route of advertisement, to the detriment of the search results. The project is independent in that it has no loans, no investors looking for a payday, no strings attached anywhere to pressure it into doing anything than providing as much and as good internet search as it is capable of. The marginalia search engine is designed to be very cheap to run and operate, and the goal is to provide outsized value, and thus be able to scrape by on donations, grants and commercial API-deals with other search engines. The project currently has bills in the ballpark of $200/month, meaning it can keep operating even if funding runs completely dry, although this would cause development to stall almost completely. originally posted at
nym's avatar
nym 11 months ago
Chimera Linux works toward a simplified desktop [LWN.net] Chimera Linux is a new distribution designed to be "simple, transparent, and easy to pick up". The distribution is built from scratch, and recently announced its first beta release. While the documentation and installation process are both a bit rough, the project already provides a usable desktop with plenty of useful software — one built primarily on tools adopted from BSD. Chimera Linux was started by "q66" (who previously worked on Void Linux) in 2021 with the goal of creating a modern distribution that could "eliminate legacy cruft where possible" to provide a simple, practical desktop. In service of that goal, the project is based on BSD tools. Chimera's frequently asked questions page explains that unlike other projects that use those tools for licensing reasons, project picked BSD tools for their smaller code size and reduced complexity. Bootstrapping a modern Linux distribution is quite complex, with many packages that depend on other packages; using BSD tools allowed the project to avoid a lot of that complexity. For example, Chimera uses musl as its C library, which cuts out a lot of dependencies from the GNU C library. ![](https://m.stacker.news/74670) originally posted at
nym's avatar
nym 11 months ago
Oracle Linux is the best local VM for MacBooks > Part of working on Anubis means that I need a local Linux environment on my MacBook. Ideally, I want Kubernetes so that I have a somewhat cromulent setup. Most of my experience using a local Kubernetes cluster on a MacBook is with Docker Desktop. I have a love/hate relationship with Docker Desktop. Historically it's been a battery hog and caused some really weird issues. > I tried to use Docker Desktop on my MacBook again and not only was it a battery hog like I remembered; whenever the Kubernetes cluster is running the machine fails to go to sleep when I close it. I haven't been able to diagnose this despite help from mac expert friends in an infosec shitposting slack. I've resigned myself to just shutting down the Docker Desktop app when I don't immediately need Docker. > I have found a solution thanks to a very unlikely Linux distribution: Oracle Linux. Oracle Linux is downstream of Red Hat Enterprise Linux, and more importantly they ship a "no thinking required" template for UTM. Just download the aarch64 UTM image from their cloud images page, extract it somewhere, rename the .utm file to the name of your VM, double click, copy the password, log in, change your password on first login, and bam. You get a Linux environment. originally posted at
nym's avatar
nym 11 months ago
Snowdrop OS - my operating system from scratch, in assembly language Snowdrop OS was born of my childhood curiosity around what happens when a PC is turned on, the mysteries of bootable disks, and the hidden aspects of operating systems. It is a 16-bit real mode operating system for the IBM PC architecture. I designed and developed this homebrew OS from scratch, using only x86 assembly language. I have created and included a number of utilities, including a file manager, text editor, graphical applications, BASIC interpreter, x86 assembler and debugger. I also ported one of my DOS games to it. After all, what kind of an operating system doesn't have games? The Snowdrop OS and the apps are distributed as both a floppy disk (1.44Mb) image, as well as a CD-ROM image. The images contain the following, all programmed from scratch: - a boot loader which loads the kernel into memory - a kernel which sets up interrupt vectors to be used by user apps, and then loads the startup app - user apps, including a shell (command line interface), utilities, test apps, and aSMtris, my Tetris clone Snowdrop OS can also be installed to a hard disk - prompting the user to do so during boot - if it detects one. I hope that Snowdrop can serve other programmers who are looking to get a basic understanding of operating system functions. Like my other projects, the source code is fully available, without any restrictions on its usage and modification. ![](https://m.stacker.news/74559) ![](https://m.stacker.news/74558) originally posted at
nym's avatar
nym 11 months ago
Google's official URL shortcut is compromised g.co, Google's official URL shortcut (update: or Google Workspace's domain verification, see bottom), is compromised. People are actively having their Google accounts stolen. Someone just tried the most sophisticated phishing attack I've ever seen. I almost fell for it. My mind is a little blown. - Someone named "Chloe" called me from 650-203-0000 with Caller ID saying "Google". She sounded like a real engineer, the connection was super clear, and she had an American accent. Screenshot. - They said that they were from Google Workspace and someone had recently gained access to my account, which they had blocked. They asked me if I had recently logged in from Frankfurt, Germany and I said no. - I asked if they can confirm this is Google calling by emailing me from a Google email and they said sure and sent me this email and told me to look for a case number in it, which I saw in the email string. I asked why it said important.g.co and she said it was an internal Google subnet. ![](https://m.stacker.news/74489) OK, so that can't be from a google.com email, right? It must be a spoofed email using g.co, which doesn't have DKIM / SPF turned on - right? Nope. ![](https://m.stacker.news/74490) ![](https://m.stacker.news/74491) originally posted at
nym's avatar
nym 11 months ago
API Size Matters One-size-fits-all doesn't apply to APIs. Instead, they come in all kinds of shapes and sizes. Even if it's true that during design time people try to come up with small APIs, over time they tend to grow. By size, I'm referring to the number of paths that REST APIs have, and not any other measure like the number of parameters, or the length of the responses. So, what can you consider a "normal" size for an API? ![](https://m.stacker.news/74196) originally posted at
nym's avatar
nym 11 months ago
A Look Back at 2024: F-Droid's Progress and What’s Coming in 2025 With 2024 now behind us, we wanted to take a moment to reflect on the growth and achievements we accomplished as a community last year, and celebrate the incredible support we received from the FOSS community throughout the journey. This year has been a milestone for us, with significant strides in decentralizing app distribution, expanding the F-Droid ecosystem, and solidifying our infrastructure. All of these advancements were made possible thanks to donations, grants, our volunteers and regular contributors. So thank you again to everyone who helped make 2024 another great year for F-Droid. Now let’s take a closer look at what we accomplished. One of the most important initiatives we worked on in 2024 was the continued development of our app decentralization efforts. Our aim is to make F-Droid a more robust and accessible platform, making further in-roads into the hold Big Tech currently has on app distribution. Building on the work we started in 2022, as a part of the Filecoin Foundation for the Decentralized Web grant, we continued to make substantial progress this year in providing developers and end-users with more options to distribute their apps through a decentralized, equitable and privacy-oriented process. The goal for this project is to enable individuals and organizations to mirror and distribute F-Droid apps in a community-driven fashion, reducing reliance on centralized services. This work ties into a larger vision of creating a truly open-source ecosystem for Android apps that is not governed by proprietary companies. In 2024 we completed the following infrastructure upgrades: - Broke out and overhauled core client logic around publishing and consuming repositories. - Made client logic into libraries to make it easy to embed repositories in any app that needs it. - Added support for mirroring repositories onto both IPFS and Filecoin. - Added support in F-Droid client to use mirrors and repositories hosted on IPFS and Filecoin. - Improved F-Droid client “whitelabel builds”. - Enhanced F-Droid client’s existing “nearby” and “app swap” capabilities. - Updated F-Droid’s Repomaker tool (for easy “point and click” curation and publishing of app repos) and add support for IPFS publishing. - Supported iOS apps and progressive web apps (PWA) as packages that can be shipped via repositories. 2024 marked the end of this grant period, however the tools, features and policies established within the scope of the grant, will continue to be developed thanks to donations and other funders who are committed to further decentralizing app distribution. originally posted at
nym's avatar
nym 11 months ago
AngelList, CoinList partner to help crypto startups raise and manage funds Crypto is making such a big comeback that AngelList and CoinList are launching a way to help raise capital for crypto-specific founders using crypto coins. They are teaming up to launch crypto special purpose vehicles (SPVs) and crypto roll-up vehicles (RUVs), the companies shared with TechCrunch exclusively on Wednesday. The partnership, they said, will give users a way “to raise with syndicates and manage crypto startup investments the crypto way.” Syndicates are a group of companies or individuals that work together to jointly manage a large financial transaction. AngelList said the users will be able to fund crypto SPVs in stablecoins — currently for a $0 fee. “Investors can fund with USDC, which is easier for crypto investors who don’t operate via banks,” said CoinList CEO Raghav Gulati. USDC is the term for a digital dollar, also known as a stablecoin, that can be redeemed 1:1 for U.S. dollars as it is pegged to the dollar. Tokens can be distributed in kind to LPs and are compatible with “many non-U.S. token issuers and investors.” An integration with CoinList’s software is “coming soon,” the companies said. “The model is significant because investors receive tokens once they are available, instead of receiving cash returns, which is aligned with the crypto ethos of stakeholder participation and self-ownership of assets,” Gulati told TechCrunch. The crypto roll-up vehicles are designed to collect investments that a founder has raised for a particular round. The advantage, the companies said, is that startups don’t have to worry about “managing compliance for many stakeholders” at an early stage. “Crypto startups often seek to bring on many angel investors. With RUVs, dozens of angels who need to sign paperwork, send money, and get proper reporting on an ongoing basis can do so with AngelList Crypto RUVs,” Gulati said. Crypto’s acceptance in the mainstream investor world where AngelList belongs wavered during crypto winter. That’s when all things Web3 fell out of favor and industry bigwigs like Sam Bankman-Fried and Binance founder Changpeng Zhao were sentenced to jail. But between bitcoin hitting record highs and the Trump administration’s clear interest in it, crypto is poised to come back in vogue in broader tech circles. originally posted at
nym's avatar
nym 11 months ago
Google Fiber Blog: Las Vegas, get ready for your close-up Network construction is officially underway in Las Vegas! We’ve broken ground on the west side of the city, with construction to follow in additional parts of Clark County next month. ![](https://m.stacker.news/74174) Google Fiber announced agreements with both the City of Las Vegas and Clark County in 2024. Now that construction has officially begun, we will continue to work closely with the city and county to build our network while minimizing disruption to residents. ![](https://m.stacker.news/74175) GFiber service will be available in parts of the metro area later this year. Nevada residents and business owners will be able to choose between Google Fiber’s plans with prices that haven’t changed since 2012 and speeds up to 8 gig. For updates on construction progress, products and availability, sign up here. We’re excited to be part of connecting this vibrant city. originally posted at
nym's avatar
nym 11 months ago
nym's avatar
nym 11 months ago
I gave an AI agent edit access to my website I'm often asked, "Will AI agents replace digital marketers and site builders?". The answer is yes, at least for certain kinds of tasks. To explore this idea, I prototyped two AI agents to automate marketing tasks on my personal website. They update meta descriptions to improve SEO and optimize tags to improve content discovery. Watching the AI agents in action is incredible. In the video below, you'll see them effortlessly navigate my Drupal site — logging in, finding posts, and editing content. It's a glimpse into how AI could transform the role of digital marketers. ![](https://m.stacker.news/74136) **The experiment** I built two AI agents to help optimize my blog posts. Here is how they work together: - Agent 1: Content analysis: This agent finds a blog post, reviews its content, and suggests improved summaries and tags to enhance SEO and increase discoverability. - Agent 2: Applying updates: After manual approval, this agent logs into the site and updates the summary and tags suggested by the first agent. - All of this could be done in one step, or with a single agent, but keeping a 'human-in-the-loop' is good for quality assurance. This was achieved with just 120 lines of Python code and a few hours of trial and error. As the video demonstrates, the code is approachable for developers with basic programming skills. The secret ingredient is the browser_use framework, which acts as a bridge between various LLMs and Playwright, a framework for browser automation and testing. **The magic and the reality check** What makes this exciting is the agent's ability to problem-solve. It's almost human-like. Watching the AI agents operate my site, I noticed they often face the same UX challenges as humans. It likely means that the more we simplify a CMS like Drupal for human users, the more accessible it becomes for AI agents. I find this link between human and AI usability both striking and thought-provoking. In the first part of the video, the agent was tasked with finding my DrupalCon Lille 2023 keynote. When scrolling through the blog section failed, it adapted by using Google search instead. In the second part of the video, it navigated Drupal's more complex UI elements, like auto-complete taxonomy fields, though it required one trial-and-error attempt. The results are incredible, but not flawless. I ran the agents multiple times, and while they performed well most of the time, they aren't reliable enough for production use. However, this field is evolving quickly, and agents like this could become highly reliable within a year or two. **Native agents versus explorer agents** In my mind, agents can be categorized as "explorer agents" or "native agents". I haven't seen these terms used before, so here is how I define them: Explorer agents: These agents operate across multiple websites. For example, an agent might use Google to search for a product, compare prices on different sites, and order the cheapest option. Native agents: These agents work within a specific site, directly integrating with the CMS to leverage its APIs and built-in features. The browser_use framework, in my view, is best suited for explorer agents. While it can be applied to a single website, as shown in my demo, it's not the most efficient approach. Native agents that directly interact with the CMS's APIs should be more effective. Rather than imitating human behavior to "search" for content, the agent could retrieve it directly through a single API call. It could then programmatically propose changes within a CMS-supported content editing workflow, complete with role-based permissions and moderation states I can also imagine a future where native agents and explorer agents work together (hybrid agents), combining the strengths of both approaches to unlock even greater opportunities. **Next steps** A next step for me is to build a similar solution using Drupal's AI agent capabilities. Drupal's native AI agents should make finding and updating content more efficiently. Of course, other digital marketing use cases might benefit from explorer agents. I'd be happy to explore these possibilities as well. Let me know if you have ideas. **Conclusions** Building an AI assistant to handle digital marketing tasks is no longer science fiction. It's clear that, soon, AI agents will be working alongside digital marketers and site builders. These tools are advancing rapidly and are surprisingly easy to create, even though they're not yet perfect. Their potential disruption is both exciting and hard to fully understand. As Drupal, we need to stay ahead by asking questions like: are we fully imagining the disruption AI could bring? The future is ours to shape, but we need to rise to the challenge. originally posted at
nym's avatar
nym 11 months ago
The Untold Story of Silk Road, Part 2: The Fall (2015) Part 1 here: THE DESCENT WAS stunning. Chris Tarbell, a special agent from the New York FBI office, was in a window seat, watching a green anomaly in a sea of blue as it resolved into Iceland’s severe, beautiful landscape. On approach to Keflavík International Airport, he could now see the city of Reykjavik coming into view. And just beyond that, perched on the edge of a moss-covered lava field: the massive matte-white box that housed the Thor Data Center. That’s why Tarbell and two US attorneys had come all this way. Thor was the home of a computer with a very important IP address, one that Tarbell and his FBI colleagues had discovered back in New York—the hidden server for a vast online criminal enterprise called Silk Road. They’d been working on this case for months, as had federal agents across the country, in a wide-ranging digital manhunt for Dread Pirate Roberts: the mysterious proprietor of Silk Road, a clandestine online marketplace that functioned like an anonymous Amazon for criminal goods and services. Silk Road investigations had been launched by Homeland Security, the Secret Service, and the DEA office in Baltimore, where an agent named Carl Force had been working an undercover identity as a Silk Road smuggler for more than a year. Tarbell and his team—known as Cyber Squad 2 (or CY2 for short and “the Deuce” for fun)—were relative newcomers to the case. The other agencies had dismissed the FBI, partly because of interagency bluster and partly because the traditional agents who thought casework was all guns and grime and grit had no respect for the eggheads from cybercrime. But in the midst of this enormous law enforcement effort—mostly fruitless so far—Tarbell and CY2 had found the first promising lead in the case. Cybercrime agents spend a lot of time at their desks, and it was exciting to be in the field. Down below they could see Iceland’s fierce geology, all jutting rock built up from the water by volcanoes. Beneath the surrounding ocean are the massive cables that make the country an important location for web traffic; the island is nearly equidistant between North American and Europe, and its forbidding geography and climate reduce cooling costs and provide free geothermal power. One of the attorneys told Tarbell about Iceland’s tectonic forces—the North American and Eurasian plates, slowly tearing open a growing chasm. Really puts you in your place, Tarbell thought. originally posted at
nym's avatar
nym 11 months ago
A platform that moulds to your needs Emacs users may be known for bringing in all sorts of diverse workflows into their beloved text editor. From the outside, I get how odd this may seem. We often treat our text editor as a platform of sorts to do our email, web browsing, calendars, project management, chat… the list goes on. Take email, as an example. Back in 2018 I thought "managing email from Emacs… surely that's crazy-talk", yet I gave it a try just in case. 7 years later and I never looked back. I still use the excellent mu4e client. As you become more accustomed to Emacs, you may find yourself wishing you could navigate other tasks just as efficiently. But this doesn't happen right away. The editor starts moulding to your needs, initially as you copy others's code/configurations, but this can only take you so far. Emacs truly does mould to your own needs, once you start learning a little elisp. When comparing elisp to modern languages, one may be tempted to dismiss it as a niche language from another era. While both of those things may be true, its moulding and glueing capabilities remain just as relevant and powerful today, even in the LLM era. Take a random workflow like extracting vocabulary from a Japanese class paper handout. While it may seem far-fetched for Emacs to handle this, it's actually fairly straightforward with a little elisp glue. Often, this consists of finding some crucial utilities and glueing them up. ![](https://m.stacker.news/74054) originally posted at
nym's avatar
nym 11 months ago
Building a tiny Linux from scratch Last week, I built a tiny Linux system from scratch, and booted it on my laptop! Here’s what it looked like: ![](https://m.stacker.news/74052) Let me tell you how I got there. I wanted to learn more about how the Linux kernel works, and what’s involved in booting it. So I set myself the goal to cobble together the bare neccessities required to boot into a working shell. In the end, I had a tiny Linux system with a size of 2.5 MB, which I could boot from a USB stick on my laptop! What you’ll get out of this article: - A better understanding of what happens when your computer boots Linux. - What terms like bzImage, initrd and UEFI mean. - Ideas for how to deal with the problems that I encountered. - And if you haven’t used Nix, it might be interesting to see how I used it to manage the tools and libraries I needed. ![](https://m.stacker.news/74053) originally posted at
nym's avatar
nym 11 months ago
I'll think twice before using Github Actions again Before I rant about GitHub Actions, I'd like to set the context on where this dissatisfaction comes from. My team consists of about 15 engineers constantly pushing to the main branch. Our code lives in a monorepo split per module, which, through trunk based development, gets deployed multiple times a day. I want to emphasize that your mileage may vary. There will be folks who say GitHub Actions are great (I also use them for smaller projects), but as with any tool, it has limits and might not be suitable for all problems. Let's look at some of them. **GitHub doesn't care** Of all the pain points, this is the worst one. It seems that GitHub doesn't care about fixing any of these issues or improving its product. Some of the threads have been open for years without any action taken by GitHub. A lot of these issues have been recently closed by GitHub causing a backlash from the community. There are no signs that these will be addressed based on their public roadmap. ![](https://m.stacker.news/74047) originally posted at