The ability to sandbox Google Play Services (if you need it, but realistically, you probably do) and to simply not assign it more permissions than it absolutely needs is awesome. I run it with very restricted permissions, where it by default requests every single permission it can. In stock Android, it has all those, and you can't limit it. Just that is worth it for me.
Imagine what can happen if the French and other governments would start pouring all the money into developing that further in the open, rather than just giving it all to Microsoft instead?
Because it's been trained on decades of StackOverflow and forum posts. And because while some command line tools go in and out of fashion, quite a lot are very stable, so their use will show up all the time in the training material.
Since it's all statistics under the LLM hood, both of those cause proven CLI tools to have strong signals as being the right answer.
So they pretty much have to ship one, to stay relevant. And they are privacy-focused, so I'm happy they are not just using ChatGPT or whatever under the hood to implement support.
Help me understand what this means to e.g. GrapheneOS, please. Will it be able to exist and just have to wait longer for updates or will it be in real jeopardy?
It is interesting that this relates exactly to everything that goes as "cloud native" these days, without really mentioning the fact that due to Kubernetes and the Cloud Native Computing Foundation's huge landscape of open source software that targets specifically Kubernetes, you can have a comprehensive platform on "any" infrastructure. On-premise, private cloud, public clouds that are in the EC2/S3 era of services (VMs and object storage)... it doesn't matter. You can literally run the same database that powers YouTube, it's freely available and operates great on Kubernetes.
Yes, the problem is that someone has to manage it all (full disclosure: I work for Elastisys, a company exactly in the space of fully-managed application platforms on top of the infra operated by others).
But the fact that smaller cloud providers haven't had the money to invest in their capabilities to offer managed services to the same degree as the enormous hyperscalers isn't exactly impossible to overcome. In fact, it's never been more possible. Other comments here show that very well, too. And that the particular choice of identity management services is perhaps not the best for showing where the hyperscaler options shine.
Do you need fancy looking ones or just barebones QR codes? Because the latter you can just get from the qrcode Python package and simply go "qr news.ycombinator.com > hn.png" in your terminal.
That's right, and it's also why you see Kubernetes distributions popping up.
That way, someone has already done all the configuration of various plugins and components for you. For instance, the major clouds that all let you easily start with their Kubernetes services and that they integrate well with the logging and monitoring systems, IAM, server/node provisioning, etc.
Or ones that are not tied to any particular cloud provider, and perhaps focused on security (full disclosure: I work for Elastisys, who makes exactly that) or ease of use.
I'm sure we will see more and more such efforts in this space, exactly because cobbling together something yourself from scratch (basically just a control loop runner, as you said) is neither very appealing when you think about ongoing maintenance, nor very cost-effective for businesses to spend engineering time on.
As writing advice, it went from very understandable and approachable to stuff like:
"You can get this property by stapling HKDF onto your protocol (once for key derivation, again for commitment). See also: PASETO v3 and v4, or Version 2 of the AWS Encryption SDK.
It may be tempting to build a committing AEAD scheme out of, e.g., AES-CTR and HMAC, but take care that you don’t introduce canonicalization risks in your MAC."
I would almost suggest breaking stuff like this into two articles, one which is very technical and correct, and one that conveys the high-level message. The high-level one can link to the technically correct one whenever the urge would come to explain something more fully.
Can't do it myself, but I've heard that people listen to typical traditional "video game music" for this purpose. Fast, upbeat, and never something you need to focus on, but rather, it just helps you keep up the concentration.
...if you're the type of person who can listen to music while working, that is.
In tons of enterprise and just general office settings, you'll be given a CSV file, rather than a database dump. Heck, even scientific lab equipment will output CSV for you. It's basically the lowest common denominator for all kinds of tabular data.
So anything that makes using CSV files easier with your product is likely going to be a welcome change for a lot of people.
Realistically, your database engine can probably ingest the CSV file in a simple import statement, so you're likely 98% done already with this. :)