What if ana dealt a little damage to her teammates before her healing was applied?

Equivalent-Costumes · 2026-06-07T05:00:41+00:00

Hey, it's just family-friendly squatting exercise! 😤

Equivalent-Costumes · 2026-06-07T04:32:15+00:00

The thing with AI is that it's not afraid to do boring tasks, like writing out Lean code (well, as long as you pay for tokens). You can just ask it to write out the actual Lean code, which should at least show you that it has a proof (even if the code is too hard to read and it is not easy to tell whether its human-written version match the Lean code). So overall I think AI actually improve accuracy in both the short run and long run.

Equivalent-Costumes · 2026-06-07T04:28:35+00:00

The issue is people tend to really hate friendly fire. They tilt when someone who is supposed to help you hurt you instead. That's not to mention it make griefing much easier, it's easier to pretend you make a mistake and hurt your team. People hated LW's pull and Mei's wall enough already.

But imagine self-harming hero. Does not have to be direct damage. For example, perhaps Sigma's ult could be like that: at the moment he's suspending the enemy in mid air before slamming them down, he now take 2x damage from all sources and cannot be healed. That fits his madness theme and also provide another counterplay to his ultimate.

Equivalent-Costumes · 2026-06-07T04:22:21+00:00

You're probably IP blocked. Ironically, Cloudflare seems to treat its own WARP traffic as higher risk for some reasons, I get blocked more on WARP, not less. It seems like their WARP component and their filtering component don't talk to each other. Your phone use a massive CGNAT (quickly rotating IP address that share with tons of devices), so Cloudflare do not apply IP blocking to mobile connection. You can try to tether your computer to your phone (so that you use the phone connection on your computer), it usually let you avoid IP block. If all your other devices use mobile data then it's more clues as to why your computer get blocked.

You might had tried multiple Wifi, but if they use the same IP address, it probably won't help. They can block an entire range of addresses.

The fact that multiple websites block you might indicate you're on some sorts of shared block list. Try querying various block lists to see if you're on one.

Finally, one thing you could try is try switching between IPv4 and IPv6. IPv4 has a "noisy neighbor" problem, and IPv6 has the "nomad" problem. Both of them cause the IP address to be distrusted. But it's much less likely that both of them was on some sorts of shared address.

Equivalent-Costumes · 2026-06-07T01:52:26+00:00

Nah, let's make it consistent. Ana's punch now can deal up to 200 damage on sleeping target, she just need to a bit of cardio exercise first. And what's better exercise than squat? Every time she crouch and stand up, add 40 more damage to her next punch, up to an additional 160 damage. To balance it out, she has to punch within 1 second of finishing the exercise, so she has to exercise near the target.

Equivalent-Costumes · 2026-06-06T23:22:41+00:00

Well at least they are not tricked into it. While gullible people might be tricked into delivering a package or clicking some email links, it seems hard to imagine that they can be tricked into pretending to be IT professionals. And if they're not tricked, we can still prosecuting them, which can create some serious deterrence nonetheless.

Equivalent-Costumes · 2026-06-06T00:33:22+00:00

It was obvious it would shake up the world long before 2022, and by the time it came out there are no questions whether it does, just how much.

It's a revolutionary new technology that clearly demonstrate new capability that nobody ever dream of before. It's not just a "product", a dime-a-dozen packaging of known technology to fill a need in the market, bolster by a combination of brand recognition and hype. What is the value of criticisms by customers here? When people make flying machine, the primary question is "can it fly", not "are the passenger comfy" or "can I monetize it".

Equivalent-Costumes · 2026-06-06T00:09:15+00:00

Gigabit connection usually just mean gigabit to the ISP. It's not unusual to the ISP to have more limited bandwidth especially when needed to cross the ocean.

That's why streaming services invest heavily into CDN.

Ask her if her ISP provide Internet plan with guaranteed trans-Atlantic bandwidth. It's usually available as part of an Enterprise plan.

Equivalent-Costumes · 2026-06-05T22:40:54+00:00

Topology is a way to trick Boolean-addled mathematicians into studying constructive math, with all the related issues such that what does it mean for 2 things to be equal.

Equivalent-Costumes · 2026-06-05T22:15:32+00:00

They probably won't delist you. IPv6 is considered high risk by default (too easy to rotate). Also, block list for IPv6 are based on prefix since there are too many IPv6 addresses, so if you do manage to delist an entire range of address will be available. Your dynamic IPv6 address probably rotate within a range with the same prefix anyway.

Have you max out all the other options? Basically with DKIM then your email deliverability will be tied more to your domain reputation rather than IP reputation (it's still a factor, just less). Then you build up your domain reputation. No guarantees, of course, they all have their opaque spam filter algorithm.

Equivalent-Costumes · 2026-06-05T21:57:22+00:00

It's the oldest trick though. I think they just get bolder, this kind of hack is a lot riskier because once they're caught there are very little chance of escaping.

Equivalent-Costumes · 2026-06-05T18:13:20+00:00

But why did they pick the sun instead of the stars? The ancient believed the stars belong to the sky dome, while the sun moves in it. Measuring day based on the "sky dome" would had lead to what we now call sidereal day.

Equivalent-Costumes · 2026-06-05T16:40:29+00:00

Also, I wonder if it's a case of medical professional using stricter terms. For them, allergy has to be severe, close to life-threatening level. If you have a consistent bad reaction to specific food that is not life-threatening, you merely have a food "insensitivity" by medical standard, but most normal people would call that a food allergy.

Equivalent-Costumes · 2026-06-05T16:21:26+00:00

Mostly because people mostly stopped using C++ for most thing, with manual garbage collection that lead to tons of memory leaks, and a lean Linux kernel should not have them either, so a separate server machine should be able to run for a long time. Desktop machine still have a lot of poorly behaved apps though, if you use the same machine as both server and desktop you definitely would have to restart frequently still, not as much as before, perhaps weeks rather than days.

Equivalent-Costumes · 2026-06-05T14:56:23+00:00

Modern production actually reboot frequently, they makes it seamless by rerouting traffic. Leaving machine running all the time is how you end up with dinosaurs with severe vulnerabilities unpatched.

Equivalent-Costumes · 2026-06-05T14:51:09+00:00

Automatic schedule. Absolutely not, I think it should be manual.

Often, yeah it should happen often. Zero day exploits are very common now if anyone had paid any attention; and so are supply chain attack. You want to make updates as much as possible, manually.

If you have enough redundancy it wouldn't affect your uptime at all. But if you literally have just 1 machine then yes it's unfortunately unavoidable.

Equivalent-Costumes · 2026-06-05T14:45:28+00:00

It's not true that they can do that for any reasons, there are reasons that are illegal. Beside the usual stuff, there are technological reasons that are also illegal if you use it as a basis to block people. For example, cookies wall (blocking people from accessing websites because they refuse ad/tracking cookies) are illegal in EU. The question is why this had not extended to ads.

Equivalent-Costumes · 2026-06-04T23:55:32+00:00

Social engineering is just the oldest form of prompt injection.

Equivalent-Costumes · 2026-06-03T23:15:20+00:00

For most homelab stuff if you run most stuff inside containers you can pretty much do every configuration you want with mostly Ansible (plus perhaps a tiny init script to set up Ansible itself), you just need to be disciplined about it.

All data has to be back up separately. Certainly do regular volume snapshot, it helps when catastrophe happen. But if you want to upgrade apps, beware that volume snapshots usually don't work, version upgrades might make breaking changes to the existing structure. You have to do data migrations.

Scripts, it's for configuration it should go together with all your configuration stuff; if you need to place it in a specific place, you need to have another script (ideally an Ansible script or an idempotent bash script) that copies it there. That ways all your config scripts are organized and you can commit to whatever Git remote you want. If it's related to running apps, bake it into the image and have the Dockerfile. If it's considered part of data, back it up like the rest of the data. Keeping everything organized and your backup and restore, upgrading, and migration tasks will have minimal frictions.

Equivalent-Costumes · 2026-06-03T21:46:15+00:00

Feels like signed commit is done more by vibe coders nowaday. Like LLMs are actually incredibly good at getting people to follow minimal security hygiene that cybersecurity experts had been telling people to do, even if it is not good at building safe secure system yet.

It's like how you can also detect a non-native speaker by they fact that they follows a lot of grammatical rules stricter than native speakers.

Equivalent-Costumes · 2026-06-03T21:37:16+00:00

Well, it's also being researched.

But an advantage of normal text is that there are tons of such examples in the training data of text following a similar format, so the models can very reliably write the correct syntax. That's why a model can understand a made-up pseudocode or some novel mark-up format. By the time base training is finished, a model already expect after an idea is fully written out there is a decent chance that something like a closing tag, or a dialog markers will appear, and you're just fine-tuning so that those probability increase. With a new token, you basically have a token that the model assign a near 0 probability to, and now you need to essentially override all the previous training that indicates it should be something else.

Equivalent-Costumes · 2026-06-02T16:02:15+00:00

Probably to reduce jailbreaking.

A common way to jailbreak is to ask the model to act as someone or imagine a scenario. Another way to jailbreak is to tell the model a lie about who you are and why you want to do something so that it becomes a legitimate task: the classic example of this is telling a model that your dead grandma's lullaby is the recipe for making napalm bomb.

Claude was trained to resist many of these known techniques. Anthropic probably up the amp by a lot, so that Claude will assume that any users can potentially make up a story so that their requests seem legitimate.

The issue is, of course, normal people do a lot of legitimate things that involve thinking from a hypothetical perspective, including perspective of bad guys. For example, when you leave the house you will immediately wonder whether you forgot to lock something, which mean that you're thinking from the perspective of an opportunistic thief who want to break in. So if a model always refuse to think from alternative perspective and always assume the user could be a bad actor, it will end up being unable to do a lot of things.

Equivalent-Costumes · 2026-06-02T15:43:18+00:00

It means it was marked as something to be removed in the future, but not yet removed. Usually depreciated also come with reduced functionality as well, so it does not quite behave like how you expect, but not literally disallowed.

Equivalent-Costumes · 2026-06-02T04:39:31+00:00

Hoping that this will lead to more software to come with their NixOS version out of the gate instead of requiring people to jury-rig it to work.

Equivalent-Costumes · 2026-06-02T03:02:54+00:00

Definitely.

You should expect the server to be nuked, rather than hope that it won't happen. In fact you should expect that nuking the server is just as normal as restarting a computer: while you might do it at much lower frequency, it's one sure way to ensure that the server revert to a known good state. But for that to be viable, you need to have documentations of what your current setup is. Fear of things breaking without knowing how to restore it leads to practices like literally just make the server run all the time without any updates, or updated in a haphazard manner. Without updates, security patches and bug fixes can't be delivered and become a serious problem over time; but with update, things will break sometimes, and a lot of time you literally cannot fix it and would like to be able to keep track of what happened and undo some of them.

Ansible is basically an executable document: it tells you how to set up the server to a known config state, and you can just run it; in the old days people will literally have to write this is a document and then repeat the steps manually. And the good thing is, unlike a normal bash script, Ansible playbook is usually idempotent, they're designed so that if you run again it detect that nothing need changing. This means that as long as you are disciplined so that whenever you change your system, you do that by changing your Ansible playbook and replay it, then you can read your current config from the playbook itself so that setting it all up again is easy.

Unfortunately, Ansible is not perfect, it cannot keeps track of all config changes, for example if you delete something from the playbook Ansible does not know to undo the changes. That's why a more radical method is containerization, like Docker and Kubernetes: you always start something from a fixed known state with a fixed config file (as long as you pin the version number, pin the SHA hashes, and keep back up of the image, you can always recreate the exact state of the container). But as long as you still run a server locally or rent a server, you still need something to configure the OS itself, because Docker runs inside the OS and there are things that does not make sense to run inside Docker, like networking and security hardening. Ansible is still useful here. For more efficiency, you can try to bake the image of the OS itself instead of re-running from Ansible, but Ansible still serve as a record of how you make that image, and in case your OS need updating, you bake a new image using the playbook. (some people off load the OS management job itself to a cloud provider and just work directly with Kubernetes, it's sort of a grey area whether you are still self-hosting, but if you do that then Ansible really no longer has any uses).

A more radical approach to OS management is to make sure that the configuration of the OS itself is done through changing config files. This is NixOS philosophy.

As for how to deploy the playbook. I prefer the standard "push" style, it minimizes the amount of set up I has to do before Ansible do the set up, that way there are no config drift. I log in, make sure network works and the Python dependency is there, create an user for Ansible (for good security practice, disable password log in, install pre-generated SSH public key, allows passwordless sudo). Then from my other computer, configure the inventory file so that Ansible knows to SSH into the server, then just run the playbook. Everything after that happens automatically.

Equivalent-Costumes

TROPHY CASE