tatterdemalion

This was not the brag that DHH thought it was From DHH’s long-winded keynote at Rails World 2026. He was bragging that Hey’s backend is so efficient because it’s written in Rust (which he hates and refuses to read).

I do appreciate some of the philosophy of Hey, like cherishing the human-to-human section of your inbox. But it’s simply not worth the price tag. I just self-host Stalwart and Bulwark.

What do you think is the future of file sharing? There are now many technologies for P2P file sharing: Usenet Bittorrent IPFS Tenfinger more? And also several technologies for anonymization: VPNs Tor I2P AFAICT the most popular option is still Bittorrent with various public and private trackers and indexers. Private trackers seem to be the most effective option that communities have converged on. I’ve tried all of the above solutions over the years and while I think something like I2P sounds great in theory, it doesn’t seem to actually work well in practice. Because it’s not terribly popular, it’s hard to know what to expect. We clearly still haven’t found the ideal model that can provide both good performance, discovery, access, availability, and anonymity. But do you think we will actually make progress on these problems? We seem to have stabilized on a local maximum.

Slop points aside, I found 5.4 to be pretty ass compared to 5.3 codex. Took way longer and wasted more tokens.

LLMs might suck at this game but I'm pretty sure Deepmind's deep reinforcement learning AI could solve these easily. EDIT: I know you guys hate AI around here, but you need to at least be aware of what the technology is capable of. From 11 years ago: https://youtu.be/V1eYniJ0Rnk

Wdym? It's existed for at least a decade. Plenty of papers about it. It mastered Atari and Mario. It became the best Go player.

1000 lines isn't that unreasonable for a PR. Commit size matters more.

Not a senior dev thing, just a bad dev thing.

Or idk maybe people have a job where it’s useful to hone your tools? This meme doesn’t make any sense.

This is basically the definition of throwing the baby out with the bathwater.

I'm talking specifically about the variant of RL used by systems like AlphaGo.

I don't understand how this serves the purpose of ad blocking.

MEEOOOWW. MEEEEOOOOOWW. ...mm mm. Nope nope nope.

All I know is YouTube has more advanced ad delivery methods than DNS blocklists can filter, so you need client-level blocking. This only works if you use browser plugins or 3rd party client apps. YouTube’s first party app will always have ads. Please correct me if I’m wrong, this is just my understanding.

Hadn’t even heard of it.

Zeus

Oh nice it has Lee Pace. I really like him in Foundation.

I agree the transport layer is good and having anonymity in a different layer works. I think my main gripes with it today are: Anonymity is paid for and trust-based. It’d be awesome if something like I2P started working well enough that anyone could have anonymity for free without needing to trust a company or worry about poor performance. Private trackers. While I understand the logic behind this form of community (incentivize seeding and make bans meaningful), I think it’s possible to solve those problems with a public tracker. I have ideas on how this could work if anyone is interested.

Secrets Encrypted secrets file. All repo-managed credentials live in secrets/secrets.yaml, encrypted with SOPS/age. Encrypted OpenTofu state. State and plans are encrypted client-side (PBKDF2 + AES-GCM) with a passphrase from TF_VAR_state_passphrase. Network perimeter Default-drop firewall on the router. I use a hand-written nftables ruleset with policy drop on both input and forward. Only lo, lan0 and wg0 are trusted. WAN accepts only established traffic, WireGuard UDP and HTTP/HTTPS. No SSH from the WAN. sshd on the router is not exposed to the internet at all. WireGuard for remote access. Forced DNS. NAT redirects all LAN and VPN port-53 traffic to the router’s AdGuard. AdGuard uses Quad9 over DoT upstream, with blocklists and safe search. Second-level ACL in nginx. Private .home vhosts and Grafana carry allow LAN; allow VPN; deny all;. TLS everywhere. Every public vhost sets forceSSL with recommendedTlsSettings. Certificates come from ACME DNS-01, so issuance needs no inbound port 80. Cloudflare is DNS-only with no proxy, so no third party sees plaintext. Host access SSH hardening. Password and keyboard-interactive auth are off, PermitRootLogin = “no”, and logins are key-only. Dedicated deployer system user. It uses a CI-only keypair, separate from the interactive keys. Everything it does through sudo is logged with LOG_INPUT/LOG_OUTPUT to /var/log/sudo-deployer.log.

What do you think about learning languages with LLMs? I use them to help when I want to make a translation sound more natural or understand why a native speaker phrased something a certain way.

It’s not middling, it’s an early-advanced rating. For perspective, an Elo differential of 400 implies 10:1 win:loss odds.

What’s controversial about The Walking Dead? (I only saw the first season).

It’s a mediocre list for sure. Shogun is too low. Babylon Berlin is missing. Lost? Really? Band of Brothers is too low. Better Call Saul is too low. Severance is too low. Watchmen is too low. Barry is too low. Eastbound and Down but no Vice Principals is crazy. Community is too low.

anathema to actually learning anything Why? I’ve learned lots of things from asking an LLM to help me understand a new piece of foreign grammar.

OK sure, how is that different from learning from a human? People also lie sometimes, even without knowing it. Fact checking is still relevant.

Reading through the docs about it here, it sounds like it’s only an indexer, not a tracker.

Public trackers never seem to have as good of releases or swarm health, except for the most popular content.

I haven’t tried SoulSeek. What does it do better than Bittorrent?

Well fuck me. I mean I don’t think that’s an immediate issue for me but that does suck.

You don’t need to. But it’s probably a good idea for the same reason as with BitTorrent.

Do people not recommend PIA anymore? I’ve used it for a long time and never had issues. Supports port forwarding. Audits have shown they don’t store activity logs, and they even run RAM-only servers.