This is a tricky statement, though. You could argue that sorting popular posts to the top is an attempt to maximize engagement, since you’re probably more likely to click on and/or comment on top posts. Lemmy just has less data to use to make the decisions as to what you’d like, but it’s still trying to do it.

Oh no! I didn’t know that. I was considering getting a Polestar a few years ago, but ended up getting a BMW instead (an iX, then an i4)

They said they’re just gonna withdraw and focus on the European market instead.

Makes sense. In the end, the USA only accounts for around 7.5% of EV sales globally so it doesn’t make sense to overindex on US sales when it’s much easier for them to sell in other countries.

Lemmy has algorithmic feeds though, unless you’re just using the new, old, or top feeds. https://join-lemmy.org/docs/contributors/07-ranking-algo.html

There’s some Chinese EVs in the USA - you can buy BYD busses, trucks and forklifts (we use BYD busses at work for transportation between buildings), and Waymo’s new van-looking cars are manufactured by Zeekr.

The Polestar 4 and Volvo EX30 are also both built on a Chinese platform (Geely / Zeekr) but the US is OK with them since they’re partially manufactured in South Korea and partially in the USA at Volvo’s factories.

The issue is that there’s huge tariffs, it’s hard to get Chinese cars approved to sell in the US, plus the US is still mostlyl holding on to the legacy dealership model. The Chinese cars are so much better and cheaper than US brands, but the US has to protect the dying legacy US brands.

deleted by creator

weed at y

Does Patchmon not have a setting to look for the Docker socket in a different location?

I could be wrong but I don’t think there’s any security issues making a symlink to a socket, since permissions/ACLs on the socket would still apply.

I’m going to make an effort to never pick 7 again.

ClownlyFans

Proton’s server is closed source so I don’t trust it as much as Bitwarden.

My Epyc 7702 does have onboard TPM, but my supermicro H11DSi-NT doesn’t pass it through to the OS, for some reason

Huh… That’s interesting. At my workplace we have Linux EPYC servers with working TPM (it’s mandated that all computers, both clients and servers, must have TPM 2.0), but I’m not a hardware person and don’t know exactly how they’re configured.

It’s crazy that forced arbitration is legal in the US.

This is good to know. I haven’t had issues with using a USB drive though, since it doesn’t receive many reads or writes - the system is copied to a RAM drive on boot and runs off that rather than the USB.

I assume this means I’d need another drive to boot it from? My current setup is that I have 2 x 22TB drives in a ZFS mirror for data storage, and 2 x 2TB NVMe SSDs in a ZFS mirror for things like VMs, Docker containers, documents, etc.

I had to get a Supermicro AOM-TPM-9665V TPM chip for my motherboard

How old is your CPU that it doesn’t have onboard TPM? It’s been a standard feature for quite a while now

Bitwarden’s the only “cloud-based” password manager I trust, since their entire stack is open-source.

For self-hosting, they recently released Bitwarden Lite, which is a lot simpler to host than their regular server. One Docker image and you can use SQLite for the database. Different design decisions compared to the regular server which is designed to scale up to handle businesses with tens or hundreds of thousands of employees.

There’s also Vaultwarden, which is an unofficial third-party server implementation.

This isn’t too bad if you’re running Docker in rootless mode.

Adding a user to the docker group while running Docker as root doesn’t really make sense though, since it makes it trivial to run things as root.

You need to use hooks to actually block it from doing things. CLAUDE.md files are just guidance, and it’s not guaranteed to follow everything (and the longer the file gets, the more likely it’ll ignore stuff - it should be kept as short as possible)

https://code.claude.com/docs/en/hooks

Hooks are code that runs at a certain point (eg after you submit a prompt, before a tool call, after a turn, etc) that can do some validation, verification, logging, etc.

It does still try to work around the blocks though, but it’s not as bad as trying to put the restrictions in the prompt.

Giving Docker access to Claude is certainly a choice.

Unfortunately the search tooling is specific to our internal systems. It’s essentially just a cronjob that periodically indexes the entire repo and a backend service to do the search.

ag / rg don’t work well in this particular scenario either. Because files are loaded on-demand, they end up trying to load the entire repo.