I'd suggest going straight to the source and reading through Antiqua et nova direct from the Vatican [1]. I think it's a very well written document about the subject and very clear.

Pope Leo has mentioned AI often since his election[2], so I expect we'll be hearing more from the Magisterium on it in the coming years.

[1]: https://www.vatican.va/roman_curia/congregations/cfaith/docu...

[2]: https://www.vaticannews.va/en/taglist.cultura-e-societa.Cult...

> Later on he says that never dealing with insurance is one of the perks of being a doctor in the military.

Despite not being anything close to an MD, a social media app I use has determined that I am. I get recruiting ads from the Navy that says this, in effect: "Don't worry about malpractice or insurance, just your patient". It's a pretty good sales pitch, I imagine.

> "Don't worry about malpractice or insurance, just your patient". It's a pretty good sales pitch, I imagine.

If only the rest of government aspired to that. :)

In my corner of the DoD, we absolutely aspire to work like that.

It's beyond frustrating to have politicians use us as rhetorical punching bags. The stereotypes they espouse about civil servants are largely inaccurate. I say this from having worked decades inside the DoD an in non-defense private sector.

Amen, similar experience here. There are parts of the US federal government that aspire to and excel in the way you have described.

Of course the opposite is true too. But it bothers me that much of the discourse on both sides tend to ignore the high functioning projects and sectors. It’s a cool professional experience to take part in.

Agreed. I was unclear, but I meant to refer to government policies around healthcare (especially insurance companies), not about civil servants.

They kind of do, only their sales pitch is

> don’t worry about your constituents nor breaking the law, just your own self interest.

It really is about time politicians were locked up for their equivalent of malpractices.

I think that would lead to even less civilized relationships between politicians and parties. Politicians throwing their rivals into courts and prison is not usually an aspect of a healthy civil society.

Politicians being above the law is not an aspect of a healthy civil society.

Throwing politicians into courts and prison after due legal process for crimes they actually commit is an aspect of a healthy civil society.

If your judicial system is so corrupt that every accusation against a politician is a ruse manufactured by their enemies and no fair trial is possible, then you don't have a healthy civil society either way.

The status quo is clearly demonstrating that accountability is desperately needed.

And here I am thinking the threat of malpractice, and malpractice insurance costs, are part of the reason healthcare is so expensive in the USA

It's a small fraction: https://pmc.ncbi.nlm.nih.gov/articles/PMC3048809/#:~:text=Ov...

The bigger reason is profit-minded middlemen taking advantage of inelastic demand to jack up prices, a problem that does not exist in other countries.

It actually seems like an interesting bit of phrasing.

I think the ad, and you, are talking about malpractice insurance and other documentation to prove that you didn’t do malpractice.

The comment you replied to is actually taking about the underlying act of malpractice.

The first line of defenses against actual malpractice is that professionals are supposed to have some self-respect and standards. But of course our society is structured against professionalism. The insurance company or hospital admin doesn’t care if you are a real professional who does the right things when nobody is looking, that’s too hard quantify.

The ad is offering the opportunity to be a professional.

What happens in other countries when the doctor amputates the wrong leg or operates on the wrong patient? Does the government pay damages arising from malpractice?

In short: in some, yes. In my country, one's private insurance company may pay damages for injuries caused by medical malpractice. This may be included in the home insurance or some health/injury/accident insurance. Otherwise and in addition, you are covered by the provider's malpractice insurance. Private medical providers must have malpractice insurance. There is also a national scheme, regulated by law, that covers all public providers, which in practice would be all the emergency departments etc.

They are. Those $10M+ lawsuit verdicts get paid one way or another, and everyone is doing unnecessary cover your ass work to be able to not be in the line of fire for that lawsuit.

I'm an experienced engineer who is AI skeptical overall. I've continued to try these tools as they evolved. Sometimes they're neat, oftentimes they fail spectacularly and sometimes they fail in very pernicious ways.

If it keeps getting better, I'll just start using it more. It's not hard to use, so the FOMO "you have to be using this RIGHT NOW" stuff is just ridiculous.

Why is this line of thinking so common with AI folk? Is it just inconceivable to you that other people have different experiences with a technology that has only become widespread in the past couple years and that by its very nature is non deterministic?

For what it's worth, I basically accept the premise of the GP comment, in the same way that I would accept a statement that "loggers who don't use a chainsaw will be put out of business". Sure, fine, whatever.

I still think the tone is silly and polarizing, particularly when it's replying to a comment where I am very clearly not arguing against use of the tools.

It assumes the result though. These comments presuppose that LLMs are universally good and useful and positive when that is the very argument that is being debated, and then uses the presupposition to belittle the other side of the debate.

> These comments presuppose that LLMs are universally good and useful and positive when that is the very argument that is being debated

No

They can be good but people spend more time fighting them and throwing up imaginary walls and defending their skillset rather than actually learning how to use these tools to be successful.

Again, you're assuming they are required to be successful and those who don't use them won't be. That is precisely what is up for debate right now so you're just begging the question while belittling any opposition (imaginary walls).

And why shouldn't anyone defend their skill set?

Edit: I went through your recent comment history and it turns out you're just not the type of person I enjoy interacting with. You seem to take a good amount of joy in putting down others who disagree with you, or fantasizing about their financial ruin.

I can't believe how nostalgic this made me for the Weather Channel.

Thanks for showing me this. Made me smile.

I bump into these limits just using a few public install scripts for things like Atuin, Babashka, and Clojure on a single machine on my home IP. They're way too low to be reasonable.

I would like a potato. Emailed you.

I have received your email and do hereby commit to sending you a potato.

I have the USPS notification service [1] where they send me an email with a scan of all my incoming mail. I look forward to seeing what this one looks like.

[1]: https://www.usps.com/manage/informed-delivery.htm

You wouldn't download a potato!

I use Atuin, but unlike the author actually find it more valuable since I use it across many machines. I have 7 different machines (of various make and OS though all *NIX) in my house right now that I regularly SSH in to or use directly, and Atuin's sync keeps my history on all of them. If I want to narrow down by host I can still do that. I also keep similar directory structures so I can narrow down by directory even if I performed a command on a different machine most of the time.

That said, some form of advanced history search is a game changer, no matter how you get it. It's one of those "can't understand how I lived without it" things once you get it going.

I’ve started using Atuin based on a recommendation from here a few weeks ago. I generally like it, but feel like the fuzzy matching is bad - maybe I either misconfigured something or nobody else cares about it?

If the command I want to match against is within the last few days or so, the fuzzy match performs ok, but anything from months ago which I know for a fact is in the history, it just doesn’t match it and instead shows irrelevant items (which technically I’m sure according to some algorithm are correct). Another one is I often have to put a ^ to ensure the ‘curl’ I’m searching for starts looking for matches at beginning of line.

Often times I still fall back to using fzf on ~/.zsh_history which seems to get what I want. There is this thread which is same issues I’m seeing, and I did try smart_sort=True but it’s still not great.

https://forum.atuin.sh/t/understanding-atuin-history-search/...

Try to add ' in front of words to find exact matches if the fuzzy search isn't providing the results you're looking for.

If using Nix, you can get Atuin working basically for free by just enabling it in the config. I love it. Does everything I'd every hoped for with history search.

I don't really like nix (yeah I tried it for a couple of months), but I'd like to point out that atuin is exceptionally easy to set up even without using nix as well in case someone gets an idea that it is difficult.

I'm also in this boat. I have atuin as part of my zsh config that is distributed to all new machines, whether they run NixOS or some other operating system with Nix on them (e.g. MacOS). After switching to NixOS I found an interest in maintaining a custom setup again, since it wouldn't fall apart every time I moved machine.

  { pkgs, ... }:
  {

    users.defaultUserShell = pkgs.zsh;

    environment.systemPackages = with pkgs; [
      atuin  # ^R
      eza    # ls
      git
      zsh
    ];

    programs.direnv.enable = true;
    programs.nix-direnv.enable = true;

    programs.zsh = {
      enable = true;
      enableCompletion = true;
      enableBashCompletion = true;
      enableGlobalCompInit = true;

      # https://github.com/zsh-users/zsh-syntax-highlighting/blob/master/docs/highlighters.md
      syntaxHighlighting.enable = true;
      syntaxHighlighting.highlighters = [ "main" "brackets" ];

      # See `man zshoptions` for more details.
      setOptions = [
        # Remove duplicates continuously from command history (preserve newest entry).
        "HIST_IGNORE_DUPS"

        # Instantly share command history between all active shells.
        "SHARE_HISTORY" # Alternative to: "APPEND_HISTORY", "INC_APPEND_HISTORY",

        # Disable ^S and ^Z for less accidental freezing.
        "FLOW_CONTROL"

        # Save timestamp and duration of each command in command history.
        "EXTENDED_HISTORY"
      ];

      shellAliases = {
        # Navigation
        rm = "rm -iv";
        ls = "eza -lg";
        tree = "eza -lgT";

        # git aliases
        # ...
      };

      promptInit = ''
        autoload -U promptinit
        promptinit
        prompt off

        # Simple:
        # PS1='[%n@%m:%~] %(!.#.$) '

        # Colorful:
        # PS1='[%F{green}%n@%m%f:%F{blue}%~%f] %(!.#.$) '

        # Colorful with git branch:
        function git_branch_name() {
          branch=$(git symbolic-ref HEAD --short 2>/dev/null)
          if [ ! -z "$branch" ]; then
            echo -n " [%F{red}$branch%f]"
          fi
        }

        # Omit username, print hostname + '$' with red when root, otherwise green:
        prompt='[%(!.%F{red}.%F{green})%m%f:%F{blue}%~%f]$(git_branch_name) %(!.%F{red}#%f.$) '

        # See: https://zsh.sourceforge.io/Doc/Release/Options.html#Prompting
        setopt prompt_cr
        setopt prompt_sp
        setopt prompt_subst

        export PROMPT_EOL_MARK=""
      '';

  interactiveShellInit = ''
        # Prevent user-level "config missing" message.
        touch $HOME/.zshrc

        # MacOS
        bindkey '^[[7~' beginning-of-line
        bindkey '^[[8~' end-of-line

        # Linux
        bindkey '^[[1;3D' beginning-of-line  # alt+left
        bindkey '^[[1;3C' end-of-line        # alt+right
        bindkey '^[[1;5D' backward-word      # ctrl+left
        bindkey '^[[1;5C' forward-word       # ctrl+right

        # Both
        bindkey '^R' history-incremental-search-backward
        bindkey '^U' kill-whole-line
        bindkey '^Y' yank

        # My SSH endpoints don't recognize modern terminals

        export TERM=xterm-256color

        # ^R only
        eval "$(atuin init zsh --disable-up-arrow)"
      '';
    };
  }

Or if using home manager:

        programs.atuin = {
          enable = true;
          enableZshIntegration = true;
        };

NixOS and Kagi user here. Hacker News often is the most reliable search result there is. Gists aren’t (they become easily deleted, unlike HN comments).

Sure, and I accept that happily enough for "small" snippets. But I had to page down multiple times and it really felt like too much content.

I could have cut down the sample a lot, I apologize.

Curious on this: "Atuin's sync keeps my history on all of them"

I just checked on their GitHub and it says "Additionally, it provides optional and fully encrypted synchronisation of your history between machines, via an Atuin server."

So you trust all of your shell commands to be stored on a server that you don't control?

Maybe I'm missing something here.

Sync is optional*, end to end encrypted, and you can self host the server so you don't really need to trust anything if you don't want to

*: nothing syncs if you don't register, and you can even compile a version with the sync code flagged out if you REALLY don't want to trust anything

Got it, thx!

I appreciate that the journey might be the destination here, but you really don't need to do this anymore if the goal is to play games on Linux. Valve et al. have done so much Proton work that nearly every game I try just works.

Aside from the experience, this could be useful if you want to play games that have kernel level rootkits.

QubesOS is very much not "Linux on the hardware." It is silos of isolation, interacting freely at the window level.

I wrote on it some while back: https://www.sevarg.net/2023/07/29/qubes-os-silos-of-isolatio...

The concept is that you have a lot of isolated "AppVMs" running applications, in silos that cannot talk to each other. So, right now, I'm logged into HN with my "random-web" VM - that has nothing of interest in it beyond some PDFs I've downloaded. This, for instance, has zero access (except by exploiting and passing through Xen) my "sysadmin" VM, which contains my SSH keys for various things, and which I use for sysadmin type tasks. I've got other silos as well. All the windows from all these VMs interact like normal on my desktop - I'm not dealing with "Okay, this VM is for this, that VM is for that." Things just work smoothly and as expected.

A side effect of this, though, is that the AppVMs have no hardware acceleration of anything graphical. It's all software rendering in them. So gaming is normally right out - except, this talks about how to pass another GPU through to do this sort of thing, if you want.

> Things just work smoothly and as expected.

Do you have the ability to pass files between or drag and drop files between isolated levels? Can I mount a shared folder into multiple isolated apps so they all have access? I like QubeOS in theory but I’m hesitant to try it due to (perhaps misplaced) UX concerns.

You have the ability to push files from one AppVM to another - they appear in ~/QubesIncoming/[source-vm-name]/ and you can do what you want with them from there. I do this regularly and it works perfectly fine. It's not drag-and-drop, there be demons. It's either a command line utility or a context menu in the file explorer.

There's no concept of a local shared folder you can mount in multiple AppVMs, though as networking exists, you could easily do so, if you wanted - share a folder in StorageVM and mount it in others. Though doing so would defeat a lot of the point of isolation, if VM1 can corrupt a file that will then attack VM2 when read. You'd want to really think hard about your threat models and what you would and wouldn't want, with such a setup.

My advice? Dual boot. Yes, at some level, dual booting raises the risk of QubesOS compromise from the other booted OS, because it could pop /boot, and such. But in practical terms, you're no worse off doing that, than you are with another OS running full time - and as a lot of the threats are things like "ad-delivered malware" or "random PDF to your inbox being malicious," you gain quite a bit even if you still dual boot into something else on occasion. My daily driver X250 has a straight Ubuntu install on a separate SSD that I use on occasion, in theory. Mostly, it exists to run a VM to talk to a car, except I've not had to do that in a long while. Oh, and movie playback on long flights. Power efficiency for video playback on Qubes is "not good." Except I don't do those anymore either. So, every few months, I boot into the Ubuntu install and update it.

Caution: QubesOS, to the right sort of person, may as well be a virus. It took less than a year to go from "Play OS on a random laptop I was in the process of selling" to "Primary daily driver OS on several machines." And then I realized I didn't actually use the desktops anymore.

If you _really_ want to break isolation between untrusted VMs, they should be stateless so that malware cannot persist after VM reboot.

"Converting untrusted PDFs into trusted ones: The Qubes Way (2013)", https://news.ycombinator.com/item?id=42401904.

These rootkits hate VMs, and will almost always refuse to run inside one. In some cases, attempting this might get you banned.

Qubes is not a GNU/Linux distribution: https://www.qubes-os.org/faq/#is-qubes-just-another-linux-di....

You still need GPU passthrough if you want to use ant actual GPU instead of llvmpipe or whatever else renderer. Mind you, QubeOS is virtualization OS, Linux on QubesOS does not have access to GPU by default

This is exactly the architecture of Xbox. Every game is a VM

> In the past year, we’ve also observed significant advances in terms of approaches to application development, an area that we at JetBrains are also heavily investing in. Just recently, we announced a new coding agent named Junie.

That agent must not be very helpful if it causes even the company creating it to be able to support less products.