I like this although I would not have chosen Docker. Podman comes with no socket and rootless by default, it just seems more in line with this sort of architecture, not to mean Podman Quadlets and honestly, I would think it's better with git tracking but to each their own.

I probably wouldn't have chosen Debian. It'd probably be easier to use a RHEL spinoff like Alma or Rocky Linux.

Overall, very nice!

For me, it's a personal preference and in my opinion, it's less professional.

Places that want to use Anubis but find the logo not professional enough are free to pay the author, IIRC it was major "professional support" benefit :D

People always seem surprised when someone in CS or SWE doesn't care for anime or cutesy pictorial graphics of girls.

It's mostly surprising how many grown adult men go into a blind rage when confronted with a picture of a cartoon woman. In a lobsters thread about Anubis, a community member of 12 years got themselves permanently banned because they were frothing at the mouth with accusations of pedophilia against the developer and refused to apologise when given an opportunity by moderators. Telling on themselves, perhaps? It's funny, in a bizarre way, that this is a hill people will die on.

> ...they were frothing at the mouth with accusations of pedophilia against the developer...

I think I remember that thread. IIRC, it went something very, very roughly like this:

  Future banned user: It weirds me out a bit how young the mascot looks. I've never been comfortable with cutesy, underage-looking mascots.
  
  The dogpile: How dare you insinuate that the dev a pedophile? Don't you know how anti-trans that dogwhistle is?

and the conversation degraded from there.

I'll also note that you chipped in with

> It's mostly surprising how many grown adult men go into a blind rage when confronted with a picture of a cartoon woman.

when -AFAICT- noone in this subthread expressed anything more heated than "dislike of kawaii". But perhaps you were speaking more generally, and weren't inspired by any conversation that happened in this subthread.

It also serves as a sort of "chud defense", in a way.

I like it.

If anything, its the opposite, going by the number of users with anime girl pfps on Twitter and other social media posting slurs and bigotry.

It's moreso only a loose indicator the user is between the ages of 14-30, if anything.

For some reason it's always underage girls.

How do you determine whether a drawing is "underage"?

If you don't want the anime girl pay for the support, otherwise you get the anime jackal. Seems like a fair deal to me.

everyone knows that penguins are much more professional

The Pixel series outside of security (to which their own flavor of Android doesn't even take advantage of like we see with GrapheneOS) doesn't have any particular outliers that would make it any more or less enticing than another company's phone.

Their ChromeOS hardware was nice but had lackluster software and by the time it was EoL'd, never got the love of ChromeOS-present.

Google TV generally gets outpaced by onn (Walmart's brand) on cost and value proposition.

And also the fact they have shown time and time again that they just kill products over and over again.

A big part of why Stadia was cancelled is because it didn't get traction, and a big part of why it didn't get traction was because of how many people assumed it was just going to get cancelled.

Ah, hardware products.

I know this is off topic, but I do thank you for your Android work, the idea and elegance of fastboot.js and that SafetyNet workaround trick was truly really cool.

Ahh those were good times, glad you came across it :)

One of the neat things about something like this is that you could, in theory, do OS builds (think stuff like bootable containers) where you can, deterministically, configure an operating system to boot into all within the confines of your web browser.

We already have image builders for stuff like Talos Linux and Incus OS. This is not out of the realm of possibility.

Hey Nirav, congrats on the newest release and I'm really eyeing the 13 Pro.

A couple of questions:

1. How are the thermals? I've had mixed experiences with my 11th gen FW 13 throttling under load with the fan sounding noisy. It's fine if I'm alone but if I'm at a team gathering, it's noticeably loud.

2. Does the lid open with one hand?

1. Intel Core Ultra Series 3 is super efficient for video conferencing. That's a use case that Intel has specifically been optimizing for, so as long as you're using video conferencing software that leverages hardware encode/decode, which should be most of them at this point, the fan should stay off entirely.

2. We have one hand open on the lid for each generation of 13.

1. That's awesome! I assume RDP or VNC would be the same then, I use that for work primarily.

2. Huh. Well, I feel like an idiot! I always use two hands when opening the lid, muscle memory, I guess.

ps. one question you don't have to answer: for the wireless keyboard, did you guys consider something like a fingerprint sensor? I like the idea of having something like that akin to Mac's Wireless Keyboard but I don't know how much integration something like that would need.

I'm confused why they can't just generate their own signing key and deploy it alongside the installer.

Using arbiter platforms like this sounds like a great way to footgun yourself.

Because a bad guy can also generate their own signing key and deploy it alongside the installer.

See Notepad++ for how that winds up.

Then you can publish the public Code Signing certificate for download/import or publish it through WinGet.

Using Azure Trusted Signing or any other certificate vendor does not guarantee that a binary is 100% trustworthy, it just means someone put their name on it.

I'm actually kind of surprised that most of these images are just advertising and shock imagery. I never expected adverts to be done through shodan, though I guess it makes sense.

For the record, bootc supports and has workflows for verity images.