minfapper

By default pull requests my new contributors require approval from someone with write-access to the repo before running actions.

These repos have specifically decided to change a setting to make them not require approval for anyone. The UI to change that setting explicitly warns you about exactly this attack, so this “article” feels like a non-item trying to farm engagement.

The core of the problem trickles down to weak CI/CD configurations that grant pull requests (PRs) more permissions than they should have.

How exactly do their competitors like codeberg do better in preventing that?

Who is jellyroll? I’m guessing someone whose music sounds like farts?

Out of the loop here. What was the great purge?

Does it have to be an SBC? I’ve had great success with a second hand Lenovo Thinkpad

The problem is that nobody enjoys porting bugfixes to old LTS releases and thus won’t volunteer to do it.

So, you either have to use some Enterprise OS that you pay a license to make people do it, or just miss out on bug fixes.

KDE community stopped releasing LTS versions when they realized they were doing the latter.

Bookmarked. Will keep in mind if I ever need a DAM tool.

Just make sure you don’t store any personal data on those devices. They become useless because they slowly turn into a security nightmare

I see you’ve lumped me in with the NixOS crowd and I take great offense to this

I’m a little confused about this thing’s use case.

What does it do differently/better than OpenCode ?

Dunno about Europe, but if anyone is reading this from America, here you go:

https://www.ebay.com/sch/i.html?_nkw=dell+optiplex&_sacat=0&_sop=15&rt=nc&LH_BIN=1

They are a little more expensive than the last time I looked, but still cheaper than raspberry pi.

Only tangentially related, but might fill your need for isolation:

https://games-on-whales.github.io/

I started using games on whales a while back and never looked back

I work for Microsoft, and a lot of my former co-workers are still in the Xbox org. And can assure you they absolutely don’t have the ability to fake any of that.

Not from a legal perspective

Yep. Assuming you’re in the US, searching eBay for “Dell optiplex” is the way to go. Those are mostly used by companies that upgrade their entire fleet in one go so they sell the old ones for cheap in great condition.

If anyone is after a non vibe coded version, there’s

https://github.com/babybuddy/babybuddy

With all the same features and home assistant integration. So my wife can click a button on a zwave remote (that stays in the pocket of her nursing pillow) to log the feeding without having to find her phone.

Installation for MiniFlux is similar, once you have docker installed you run the long ass docker command from their documentation:

https://miniflux.app/docs/docker.html

I personally prefer the approach they mention in the Docker Compose section of that page though, for long term maintenance.

Or miniflux if it is. It’s efficient, fast, and I like the interface better.

I think it’s something like

kscreen-doctor --dpms off  

works the same as xset dpms