168 results for “packy”
Japan people - has anyone noticed a recent, really big jump in the price of canned tuna?
I know food inflation has been non-stop for the last year+, but it seems like a 3-pack jumped something like 80 yen in the last couple of months
My imagination? (I'm sure not)
Any global shock to explain it?
📜 Cocora Valley & Salento, CO — A misty valley of towering wax palms in Colombia's coffee region.
#Wanderlust #Travel #HistoryLovers #Colombia…
Pack your glow — this skincare essential travels beautifully
Shop now: https://www.amazon.com/dp/B0BCCK81B2?tag=jwebb004-20
#PaidLink #Ad #AmazonAffiliate
Cocora Valley
Dishwasher detergent pods are worse than every alternative in every conceivable way. For the price Dollarama is charging for a pack of 11 pods ($3.75), I could buy 63% of a 1.8kg ($5.99) box of powder. Let's do the math... At $3.75 for 11 pods, that's 34c per 11g pod, which in this case just contains powder anyway (and a little orb of Jet Dry). Meanwhile at $5.99 for 1.8kg of No Frill's powder, you get 1800g total, at a value of 30c/100g.
Sure, a box of 50 or whatever pods is probably a better value per pod than 34c—you know what, let's find out...
The exact same pods (Finish Powerball Classic) also come in a bag of 105, which at the current sale price of $22 (reg. $24.99) makes each 11g pod... 21 cents.
So I can pay $5.99 for 1.8kg of powder, or $22 for 1.75kg of pre-portioned powder, negating my dishwasher's pre-wash cycle almost entirely?
And people just accepted this as the state of the art in detergent technology the moment they hit the shelves? It's fucking bananas.
State Farm Arena workers change Dream’s WNBA Finals court in time for Hawks to host night game https://www.rawchili.com/5132779/ #AmandaMann #Atlanta #DreamHawksWNBAFinals #Package100502MemberChoiceSportsOption #Product30599APSportsNews(SWireOnly) #Product40776APCaliforniaSportsOnly #Product40781APGeorgiaSportsOnly #Product40815APTexasSportsOnly #WNBA
Trump threatens to rename Lake Ontario as Canada hits back at US tariffs
Prime Minister Mark Carney says Canada won't be subordinated as 50 per cent US tariffs trigger a CAD$5.4 billion ($5.4 billion) aid package.
https://www.sbs.com.au/news/article/trump-lake-america-ontario-canada-trade-war-tariffs/o7udweihr
Creating lockfiles is a good protection against new pushes with vulnerabilities, but also ensure that you're subscribed to relevant advisories in case a vulnerability is found in a package that was already released earlier. - @gaborbernat at #pybeach
If you think something may have happened to a release, you can rebuild independently from the provided source to verify. Allowing this can give your users confidence in the integrity of your package.
Immutable releases are also helpful, because it's rare to need to rebuild an already-released wheel; you'd normally cut a new release instead. - @gaborbernat at #pybeach
Another type of check, hash checks, lets you assure file integrity by confirming that the downloaded package version or other resource matches the expectation for what you intended to download.
Don't forget that your build has dependencies, too! Using lockfiles to confirm intended files to download lets you assure integrity on the entire tool chain.
You want to delay a little bit from the initial release of a version, rather than adopting immediately, in most cases to allow time for any security issues to be spotted before you use it. You didn't need a huge delay, and Bernat recommends updating pins about weekly. - @gaborbernat @ #pybeach
Mavericks’ Cooper Flagg will miss game vs. Spurs with left shoulder sprain https://www.rawchili.com/nba/866792/ #AaronNesmith #Basketball #CooperFlagg #DallasMavericksCooperFlaggShoulderInjury #Indiana #IndianaPacers #IndianaPacers #NBA #Pacers #Package100502MemberChoiceSportsOption #Product30599APSportsNews(SWireOnly) #Product40815APTexasSportsOnly
A federal appeals court ruled detained immigrants have no constitutional right to bond hearings, even after months in custody. DHS celebrated. Due process apparently now comes in the optional-equipment package. #Immigration
Les nouvelles venues du jour. Une bruyère callune, un Hypoestes phyllostachia, et deux succulentes identifiées comme des Sedum : Sedum pachyphyllum et Sedum makinoi. (gros doute sur S. pachyphyllum, ça pourrait aussi être un Pachyphytum oviferum ou une autre succulente à feuilles épaisses —peut-être un Curio ?)
🚨 Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497
Google explained that an 11-hour unattended run of Gemini 4 Argon produced two accepted optimizations for the Google Agent Development Kit codebase, reducing in-memory session-preparation overhead by about 40 % in long sessions and cold package import time by 21 %.
Things that I've gotten working so far on the NLS eReader: a braille shell, Tailscale networking, "Development Tools" submenu, editor package, working volume buttons, enhanced speech settings so you can toggle between more than the two voices that come with stock. Rewrote the unlocker to not use any proprietary Humanware drivers. Oh, right. The eReader doesn't ship with Acapela, so installing the "nls-speech" package will enable eSpeak which is included in all copies of Bread, for some reason. Then we have other packages for doubletalk, Dectalk, Pico and BestSpeech which will also work on non-NLS devices. The package manager is almost done, then I think I'll be ready for something for people to test and play around with.
La UE mantiene la negociación con Estados Unidos para excluir al vino y los destilados de los aranceles https://www.vinetur.com/es/20261024109667/the-eu-plans-a-december-trade-package-with-a-new-defense-tool.html #UE #vino #aranceles #EstadosUnidos #Francia
Please be sure you don’t take your eye off the big node.js/brotli vulnerability while php2shell was sucking all the air from the room. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497
fixed my problem with elisa. for everyone who has the same bug that track progression freezes the app: the problem seems to occur since pipewire got updated to 1.6.10. elisa is using the alsa plugin by default but prefers the pulse audio plugin when installed. on arch simply install the vlc-plugin-pulse package and everything should work again. #arch #kde #elisa #musicplayer #pulseaudio #pipewire #alsa
📢 CVE-2026-111497 : faille critique Brotli (HTTP2Shell) affecte Node.js, Python, .NET, Java et plus
Cet article détaille la vulnérabilité CVE-2026-111497, surnommée Node2Shell puis HTTP2Shell, découverte dans le décodeur Brotli de Google. La faille a été initialement divulguée par Node.js le 21 octobre 2026, avant de s'étendre à de nombreux autres…
📖 cyberveille : https://cyberveille.ch/posts/2026-10-26-cve-2026-111497-faille-critique-brotli-http2shell-affecte-node-js-python-net-java-et-plus/
🌐 source : https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497
🟢 vérification factuelle haute
#Brotli #HTTP2Shell #Cyberveille
The economics of starting a VHS distribution label almost make sense, really, and I bet I know enough weirdos from the #monsterdon community and associated communities that I could find some folks who would be pretty damn excited about the obscure releases we could put out.
Maybe offer a USB Video Disc option for people who don't want a VHS (and a como USB/VHS pack for people who want the tape but also want the good looking copy?)
Between films that are unambiguously in the US public domain and films that are *probably* in the US public domain, but nobody has been able to prove it one way or the other, I could easily put together a few dozen obscure releases that most folks haven't seen.
And that's without getting into the indie filmmakers I know who would probably want in.
#Stalwart mail server 1.0 is out.
It combines mail server (imap, pop3, jmap), SMTP server, spam filter, web admin, dkim handling in one package: https://stalw.art/ and https://github.com/stalwartlabs/stalwart/releases/tag/v1.0.0
In a year, when the early bugs are ironed out, I'll consider switching from my dovecot+postfix+rspamd+postfixadmin setup.
Also contains caldav+carddav server, but I'll keep using Nextcloud for that.
Join us for an Oct. 28 roundtable in which editors from publications across Canada will speak of the changing landscape of news #editing and how newsroom practices such as fact-checking, generating headlines and more are being affected. Sign up now: https://webinars.editors.ca/upcoming_webinar/news-editing-in-canada-a-roundtable-discussion/
This roundtable is available at a discounted rate as part of the Editors Canada Training Day package, but you can also register for it as an individual session (member price: $60 / non-member price: $100).
Calling all editors interested in crossing the floor to become authors: don't miss our Oct. 28 webinar with Suzanne Bowness, which will walk you through the process of book development from manuscript and submission to #editing and marketing. Register now: https://webinars.editors.ca/upcoming_webinar/when-editor-becomes-author-introduction-to-the-publishing-process-for-editors/
This webinar is available at a discounted rate as part of the Editors Canada Training Day package, but you can also register for it as an individual session (member price: $42 / non-member price: $70).
@energieexperten 1. #respekt 2. bitte max 3min #youtube machen #keepitsimple 3. #wärmepumpe? komm mir doch nicht mit #vernunft :) wer investiert denn in #speicher ? #rwe #kkr = #energiemafia sicherlich nicht :D
4. #WARNING #LiFePO4 https://docs.fenecon.de/pdfs/home-avu/2026/de/MAR1135_FENECON_Produktblatt_H6-10-15_Web.pdf ist auch #lithium und damit gefährlich
5. 3mm stahl box drum rum
6. im fallx wohin werden die gase gehen dürfen (nach draussen via kellerfenster?
7. geht bestimmt 1 bis 2 jahre gut, dann wird #bms nicht mehr voll laden, weil einzelne zellen schlecht sind, weil #china iwie das nicht hin bekommt gleichbleibende qualität
8. dann muss man den pack auf machen, die schlechten zellen tauschen, falls überhaupt möglich
9. dann sollte man mit mir #kooperation #startup machen und sich #lithiumtitanate anschauen bis #catl mit dem #sodium oder #natrium so weit ist (weil in #DE wird ja nix mehr produziert auch #RCT vom #Bodensee war quasi ein #China outlet und lässt jetzt seine Kunden in #Deutschland mit ihren Produkten alleine :(
the aur is still encountering malware due to sleeper accounts
i think #nuraeco could be attacked similarly
example:
1. create a kernel fork for a device and embed malware
2. open a pr and once the checksum step passes, update the kernel repo to hide malware
3. merge package built with malware
im not sure if reviewers review kernel code. codeberg’s checksum sometimes changes too even when theres no repo change
counter: we can have patches within pmaports itself
All models, including large models such as Claude Sonnet, can have a limited context window. The context window is nothing but everything the model can see in one call.
Larger models can have a relatively bigger context window compared to smaller models. A bigger context size can hold more history compared to a smaller one.
We are going to see how we can manage the context size, regardless of the model's context size.
Generally, all conversation history will be stored in the local machine's RAM. As RAM size is limited, we cannot store all the history. So, we can calculate the tokens that are going to be stored in the RAM approximately using a package called count_tokens_approximately.
messages : 4
tokens used : 87
room left : 6913
turn 5: this call = 287 tokens, all calls so far = 1035 tokens
turn 20: this call = 887 tokens, all calls so far = 10140 tokens
turn 50: this call = 2087 tokens, all calls so far = 55350 tokens
So, we need to plan the budget for the context ahead. Instead of reacting when the window is full, decide in advance how much room each part gets:
WINDOW = 8_000
BUDGET = {"system": 0.05, "memories": 0.10, "retrieved": 0.35, "history": 0.40, "reserve": 0.10}
Here, we can define that the system can occupy 5% of the total usage. Likewise, memories contain important facts/information about the particular user, retrieved chunks are retrieved from RAG, and recent history/conversation is stored as part of the context.
Set an alarm when we reach the allotted memory usage so we can take action before overflow. What type of action can we take? We can trim the history, clear the old tool outputs, and perform summarization for the conversation.
Trimming - drops whole messages until the history fits. It can trim either at the end, beginning, or middle.
Clear the old tool outputs - keep the newest tool output in full and replace older ones with a one-line placeholder. Keep the same tool_call_id, so the AI message that asked for the tool still has its answer.
Summarization - trimming forgets. A rolling summary compresses the old part into a short note, so facts survive. For summarization, we will use a low-cost LLM. The prompt used for summarization tells what to keep: names, numbers, decisions, and preferences.
Choose the actions from the cheapest fix first, which means first try to clear the old tool outputs. If that is not sufficient, then move to trimming and then summarization, and store the whole history in long-term memory.#ai #agents #llm #software #coding #development #engineering #inclusive #community
Conversation Management & Context Window
is there a huge back up of pkgs needed to be built in #alpinelinux ?
eg. usb-signaller is 0.4.2 still, but should be 0.4.3. its been 2 days
https://pkgs.alpinelinux.org/package/edge/community/armv7/usb-signaller
👉 For everyone who started #Node2Shell triage over the weekend, we see you and your huge effort! If you need a hand, we just added detection for CVE-2026-111497 to our Network Scanner, in every paid plan. ( ⏭️ Free trial link below.)
The scan tests if your endpoint decodes Brotli with a vulnerable decoder, so you see reachability (not a version guess). Once it completes, you get a PDF report with: 👇
✅ the finding and the request and response behind it
✅ the fixed release for Node.js, Bun, or Envoy
✅ the CVSS score and severity rating
✅ remediation steps you can hand to whoever owns the fix
❗One thing to check before you call it patched: the runtime hides in more places than your package.json shows. Container base images, Envoy and Istio sidecars, and Python services that use the Brotli or brotlicffi packages all carry their own copy of the decoder.
Need to check every service, rescan after each patch, or document findings for compliance? Start Node2Shell detection with the Network Scanner with a free trial. ⬇️ ⬇️ ⬇️
#Node2Shell details: https://pentest-tools.com/vulnerabilities-exploits/node2shell-brotli-decoder-remote-code-execution_29896
Free Pentest-Tools.com trial: https://app.pentest-tools.com/trial/signup
#offensivesecurity #pentesting #vulnerabilitymanagement #ethicalhacking #cybersecurity
Gadget Review: LiberNovo Omni - the USB-C powered office chair
https://shkspr.mobi/blog/2026/10/gadget-review-libernovo-omni-chair/Whenever a company asks me to review their gadgets, I always ask if it is USB-C powered. If not, I'm not interested. So, welcome to the future where your chair is USC-C rechargeable!
WHAT?!
The LiberNovo Omni looks like a standard office chair - but has two secret features.
First, is that it is exceedingly comfortable. Full foam cushions, lovely headrest, and a recline which almost gets you horizontal.
Second, it is USB-C powered. There's a small battery pack which plugs in to the chair. Why? Read on!
OK, let's start at the beginning.
Assembly
Flat-pack chairs like this are normally notoriously hard to assemble. The LiberNovo bucks that trend - not only does it include a how-to video, it prints the instructions on a MASSIVE piece of cardboard.
I'm used to peering at tiny black-and-white diagrams in a flimsy paper booklet. IKEA could learn a thing or two from this.
The screws are all labelled and a hex-driver is included. What's an even nicer touch, however, is some safety gloves:
That's the sort of thing which doesn't cost much to the manufacturer, but is such a thoughtful gesture. There's nothing too sharp as you assemble, but who wants to cover their new chair in blood, eh?
The parts come in two large boxes, but there aren't that many separate bits.
Building it took about half an hour. It's easier with a friend to help - as are most things in life - but doesn't require much skill.
Go Back To The USB-C Part Again Please?
The battery pack is a 2200mAh unit with a USB-C port to recharge. It connects in to the chair with this slightly unusual connector:
The internals of the chair have a USB-C cable to connect everything up.
LOL!
YES BUT WHY DOES A CHAIR NEED A BATTERY PACK??!?!
On the side of the left arm-rest are three buttons.
Two of them move the lumbar-support up and down. Depending on how your back is feeling and how far you are reclined, you can adjust the the back-support position.
And the 3rd button?
That's the build-in back massager, silly!
Is that useful?
Yes. Being able to instantly adjust the back support without having to twist around is fantastic, especially for those of us reaching a certain age.
The "massage" feature essentially just moves the support up and down for five minutes before returning to its previous location. When sat upright, it feels great. But the real benefit is when you're laying down.
How flat does this thing go?
160° - not quite flat, but good enough when you're taking a break from Typing Real Hard. You don't want a photo of me sprawled out, so LiberNovo have helpfully provided some stock photos of much better looking folk.
It is incredibly stable. At no point did it tip over or feel like it was going to deposit me on the floor. What really helps is the included foot stall.
No Feets On Seats
Unsurprisingly, this is not USB-C powered. A sturdy plastic footrest with a deeply padded leg rest on top.
Again, assembly was a cinch - follow the large printed instructions and clip it together. It's rated for 40㎏, so you shouldn't stand on it but it is more than enough to rest your weary legs.
Price
I hope you're sitting down for this.
Direct from LiberNovo, you can expect to pay around £700 - although there are bundles with extra batteries, the footrest, and even an eye mask which will shoot that price up. You can get the full bundle on Amazon for around £1,000.
There's two ways to look at that price. Firstly, youch. But, alternatively, that's still cheaper than a Herman Miller Aeron. And Herm's doesn't come with a built-in lumbar massage.
(There is also an upgraded version which has a built in fan under the seat. Personally, I suggest eating a healthier diet.)
I can't deny that's a chunk of change. If you're anything like me, you probably spend most of your day sat down. You might as well sit on something comfortable.
Final Thoughts
Having the back-rest adjustable via arm-rest buttons is a genius touch. I just wish it went further. I'd love a control panel (or, dare I say it, app) which let me adjust the seat height, recline, headrest position etc. Who can be bothered with fiddly manual levers when electricity can do the work for us?
Building this chair was a breeze - and it was delightful to get a pair of safety gloves with it.
The chair is extraordinarily comfortable and the back massage, while not on the level of a "shiatsu" style heated massage pillow, is delightfully pleasant. Would I lie all the way back and sleep in it? Yeah! Certainly more comfortable than an economy airline seat.
If you spend a lot of time sitting at your computer, your arse deserves something supportive. Your back deserves some love too. Yes, the USB-C power-pack is a little bit of a gimmick - but it is a hell of a good one.
In my opinion, this is worth splashing out on.
#chair #furniture #gadget #Review #USBC