Skip Navigation

Posts
13
Comments
489
Joined
2 yr. ago
  • Technology Consultant.
  • Software Developer.
  • Musician.
  • Burner.
  • Game Master.
  • Non-theistic Pagan.
  • Cishet White Male Feminist.
  • Father.
  • Fountain Maker.
  • Aquarium Builder.
  • Hamster Daddy.
  • Resident of Colorado.
  • Anti-Capitalist.
  • Hackerspace Regular.
  • Traveler of the American West.

  • Yeah! Postgres is great!

    • Mutters something under his breath about MariaDB.
  • My experience working with a vibe coder hired by one of our clients is actually that's it great for MAXIMUM VP, as in a viable product made up of just under 40k lines of typescript, plus 90+ Node libraries for an app that amounts to a login page, a Square payment gateway and a user settings page (it's seriously just a signup page for a coastguard and weather alerts service that the rest of our team built in Python and Rust). It crashes if it can't talk to a database server that hosts no actual databases. It crashes if it doesn't have the Square API secrets as envars, but the LLM also hard coded them into the API calls. It actually crashes if you try to run it any way other than "npm run dev" (so I srsly set up a service that runs it as npm run dev, as the ubuntu user).

  • Well yeah, they can't keep training their models if all the available data is slop from their models.

    A future is coming where it can just be your job to let an LLM observe your life 24/7... And that might be the only job available.

  • The way laws and bylaws describe the jobs of CEOs and CFOs, the most qualified people to do those jobs are sociopaths. Empathy is practically a disqualifying personality trait.

  • I mean, I didn't bother reading the OpenAI ToS or privacy policy.

    I just assumed they were recording everything I did and would probably sell it given the opportunity.

  • We would have gone extinct before we discovered fire.

  • I forbid ye maidens all,

    Who let fly your lovely hair.

    To go down to Carterhaugh for young Tam Lin is there.

    Janet's tied a girdle green,

    Above her knee and not below,

    And she's away to Carterhaugh,

    Just as fast as she can go,

    She's come for the roses growing wild,

    She pulls a single one,

    When a wild young man appears and cries "Ohh... Lady let alone!"

    "How dare you pull my roses out?"

    "How dare you break my tree?"

    "How dare you run in these green woods,"

    "Without asking leave of me?"

    Says Janet fair "This wood's mine own,"

    "My father gave it me,"

    "And I shall pluck myself a rose,"

    "Without asking leave of thee."

    Bold as brass he takes her hand,

    Color rises to her skin,

    She looks the young man in the eye,

    And knows him now for young Tam Lin.

    I forbid ye maidens all,

    Who let fly your lovely hair,

    To go down to Carterhaugh, for young Tam Lin is there.

    https://youtu.be/15wS9F73hGo

  • Please don't promote Red Cap politics disguised as software.

  • systemd’s networkd has a built-in DHCP server; check option ‘DHCPServer’ and section ‘DHCPServer’ for that (same man page as above).

    Is that true in Debian? If so, cool. I did not know that.

  • I'm happy to answer specific questions as you dig into it. :) Good luck.

  • This is extremely possible and I have done a lot of stuff like it (I set up my first home built Linux firewall over 20 years ago). You do want to get some kind of multiport network card (or multiple network cards... usb -> ethernet adapters can do OK filling in in a pinch). It also gives you a lot of power if you want to do specific stuff with specific connections (sub netting, isolation of specific hosts, etc).

    There's a lot of ways to do it, but the one I'm most familiar with is just to use IP tables.

    The very first thing you want to do is open up /proc/sys/net/ipv4/ip_forward and change the 0 to a 1 to turn on network forwarding.

    You want to install bridge-utils and isc-dhcp-server (or some other DHCP server). Google or get help from an LLM to configure them, because they're powerful and there's a lot of configs. Ditto if you want it to handle DNS. But basically what you're going to do (why you need bridge-utils) is you're going to set up a virtual bridge interface and then add all the various NICs you want on your LAN side into it (or you can make multiple bridges or whatever... lots of possibilities).

    Your basic iptables rule is going to be something like

    iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE, but again there's lots of possible IP tables rules so read up on those.

  • Even if they did, you can run VPNs over https, or make Tor disguise itself as other kinds of web traffic.

  • Deleted

    Permanently Deleted

    Jump
  • I'm working with some Rust right now that is 100% a big mess..

    It's consistently either the Rust or the Docker components that fail to build. In fairness, it's a VERY big and complex application.

  • At a guess, the Venn diagram of people who would happily regularly pay for apps and people who have heard of flathub is teeny tiny.

  • Qubes or gtfo (troll answer, don't listen to me)

  • Why would it be a bad idea?

  • Indeed.

  • I'm working with a team where my business partner and I are external consultants, but they also have internal developers (who are mostly very junior and need hand holding with things like using git).

    Anyway, the CEO (without talking to us first) hired a pure vibe coder with no software engineering experience to build the user interface. Super nice guy, super easy to work worth, super eager to learn but OH MY GOD THIS CODE.

    A lot of my work is / has been in cybersecurity (mostly for the space industry / NASA adjacent projects, but also less recently for start ups and fortune 500 companies). This app is the worst I've ever seen. The AI writes things SO weirdly. 30k lines of typescript to do something we could have done in 6k. Reams of dead code. Procedural code to do repeatable tasks instead of functions / classes (10 different ways of doing the same thing). API keys / data base credentials committed to git. API Keys stored in .env but then ALSO just hardcoded into the actual API calls.

    AND no. At the end of the day, it wasn't cheaper or faster than it would have been to hire us to do it right. And the tech debt now accumulated to secure / maintain this thing? Security is a long term requirement, we're bringing a buddy of mine in to pentest this thing next week, I expect him to find like 10-12 critical vulns. Wow.

    tl;dr: If a project requires security, stability, auditability, or the need to quickly understand how something works / why something happens, DON'T vibe code it. You won't save money OR time in the long run. If you're project DOESN'T need any of those things (and never will), then by all means I guess, knock yourself out.

  • Driving wider adoption of alternative social media and privacy tools.

    Although I expect them to try to come for us and our tools at some point.