DoH & DoT still leak the domain name (and of course IP address) you’re connecting to. The domain name leak can be solved by Encrypted Client Hello but that’s still a draft and not turned on for many servers.

I’dv deleted the default, it’s never come back.

Used it for the last few years. X just doesn’t work right with multiple monitors of different resolution.

You wouldn’t end up at a login screen, you’d end up in the last logged in user’s session.

CPU doesn’t have any secure storage, so it can’t encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage.

People use computers to accplish tasks. That requires running software on an OS, but nobody runs software or an OS just to sit & watch it exist. They run it to accomplish tasks.

Different distros mostly vary in how easy it is to accomplish various tasks. No one distro is the easiest for everything, so people make different choices depending on their needs.

RF circuits are the same core principles filtered through black magic and the Laplace domain.

__auto_type is a compiler builtin, not a library function. It’s not a function at all, the parentheses are for precedence & grouping.

I use NixOS & Home Manager. My config is in git, and I use an ephemeral setup with ZFS & tmpfs:

Mount layout:

/		 tmpfs  
├─/boot /dev/sda1  FAT32 EFI system partition
├─/nix	 rpool/local/nix ZFS partition
├─/home/persist rpool/safe/home ZFS partition
└─/persist	 rpool/safe/persist ZFS partition

ZFS partitions under rpool/safe/ get backed up, the rest don’t need to be. Everything else can be rebuilt (and most of it gets re-created at boot anyway, since / and /home are tmpfs).

Yep, providing exemptions for vehicles under the weight threshold where a commercial driver’s license is required is dumb.

Yep. If exemptions required a CDL there would be far fewer exempt vehicles being made.

#define max(x,y) ( { __auto_type __x = (x); __auto_type __y = (y); __x > __y ? __x : __y; })

GNU C. Also works with Clang. Avoids evaluating the arguments multiple times. The optimizer will convert the branch into a conditional move, if it doesn’t I’d replace the ternary with the “bit hacker 2” version.

You don’t have an autoformatter in your pre-commit hook? Why not?

Yep, it’s basically a way to define new groups per directory. But these groups are hidden from the normal group commands!

Hah! Lots of (shitty) sites don’t allow some “special” characters, like '. That’s usually a sign that they’re storing passwords insecurely, and it’s always a sign that they’re not following current security best practices (composition rules reduce security).

I deliberately run / and /home as tmpfs. Then everything I want to persist across boots gets symlinked in at system start, and anything I didn’t opt in to saving gets deleted every boot.

If you heat carbon in a vacuum, it sublimates straight to gas. If you heat it under extreme pressure in an inert gas atmosphere, then it can melt. Unfortunately creating such pressures in the lab is only possible with diamond anvil presses, which are themselves carbon and thus tend to sublimate from the heat, resulting in pressure vessel failure. Doing the experiment on the surface of a neutron star would work, but presents some other difficulties.

Looks a heck of a lot like the RS-485 serial cable I’ve got on my desk right now. Scale is hard to tell, not sure how big that bowl is.

Yes, Krita is by far a better editor.

Or color spasecs other than sRGB (8 bits/channel). I’ve a camera that takes 10 bits/channel photos, a monitor that displays 10 bits/channel, etc. But GIMP will just distort the colors because they hard-coded the color space! Can’t edit for print either, no CMYK. GIMP is an image editor for the noughties, not the 2020s.

Then again, we’re talking about MS Paint here. If Paint fills your needs, GIMP will be fine.