Viewing profile — amsha

Yeah, the underlying sandbox technology between Ash and CC is fundamentally different. Ash is built on the Endpoint Security and Network Extension APIs. Together, they cover the fu…

Good idea about the GitHub stub repo, I've added it here: https://github.com/Ash-Sandbox/bugs . Your feedback about permissions is something I'm working on fixing now. Apple requir…

Yeah I think that's a good point. I've added process-specific network access to the roadmap: https://github.com/Ash-Sandbox/bugs/issues/1

I'd be interested in seeing a breakdown in which ones use: - VMs - Containers - sandbox-exec (macOS builtin tool) - Endpoint Security + Network Extension (AFAIK this is just Ash bu…

Yeah I like the idea of allowing the sandbox to restrict network connections to specific processes. I'll put it on the roadmap: https://github.com/Ash-Sandbox/bugs/issues/1

Ash is a macOS sandbox that restricts AI coding agents. It limits access to files, networks, processes, IO devices, and environment variables. You can use Ash with any CLI coding a…

There is a very to-the-point diagram called the Hydrogen Ladder [0] that classifies the usefulness of hydrogen by domain. The author makes a good case that, despite its versatility…

Email federation is more than just the addressing system. Even with a consistent address, your host still needs to be able to send and receive SMTP messages to participate in the e…

One unmentioned feature of federation is that it lowers the cost of switching. If your provider begins to misbehave, you can jump to another one. This is especially true in email, …

This looks pretty interesting. Besides telephony and other message-passing applications, what are the hero use cases for an actor system on an embedded device?

The structure of your website's data is less important than its moderation process. High quality online communities tend to have strong, well-defined moderation policies – Wikipedi…

> I think that in studying economic growth, we (and especially we in the Silicon Valley) focus way too much on gadgets, and too little on the simple fact of human knowledge of how …

It’s dynamically-typed and it doesn’t have real arrays. It can sometimes be frustratingly slow to do things that imperative languages do easily, but that’s the price of entry for f…

That's true. My performance claims are biased toward offline-capable editors, where the last consistent state between sites may be thousands or millions of edits ago. For online-on…

My understanding of OT is that each change requires traveling backward though the edit history to find the first state that is consistent between sites, then traveling forward to t…

Here's the key sentence: "concrete implementations of CRDT in co-editors revealed key missing steps in CRDT literature." This paper may be correct for academic CRDTs but it is very…

I would go with the simplest solution that lets you ship. For basic web apps, I find k8s is overkill. However, once you need service discovery, secret management, auto scaling, etc…

Are there any specific actions Seattle has taken to make the driving experience worse?

That's what I'm currently using! The downside with configuring via CLI is that anyone who needs to update the cluster has to download the tool, make sure they have the right AWS ke…

Unfortunately ECS doesn't provide Kubernetes clusters, it's a proprietary orchestration platform with its own feature set.

Is there any service that provides automated Kubernetes cluster management for AWS the way GKS does for Google Cloud? If not, does anybody else want this?

I'd mostly agree, and the packages you've written (ExRM and Distillery) make releases super easy to build, start, and stop. The main benefit of Go, I think, is that it can cross-co…

Yeah, disabling the discrete card made a huge difference to my laptop's stability (also 2010 15" MBP with NVIDIA GT 330M). There's an open-source app called gfxCardStatus [0] that …

Does anyone here have insight into how widely Pronovost's ideas have been implemented since the article was published?

Yes, email is federated.