Construction costs are not "trivial" if each I-beam you're using has a PhD in materials testing.

  Meta's nuclear intention is a perfect example of how tech is willing to pay far more for energy than other customers

I believe their plan is to convert that energy into revenue at a rate that exceeds the amortized cost of generating the energy. It's not a social good project even though you interpret the cost outlay as such?

Diablo Canyon in particular is big (https://www.pge.com/en/newsroom/currents/energy-savings/diab...). It might be too big for their balance sheet. I imagine they picked the most economical sites to expand?

If anything, the limit of RBAC is ultimately the human attention required to provision, maintain and monitor the systems. Endpoint security monitoring is only as sophisticated as the algorithm that does the monitoring.

I'm actually most worried about the ease of deploying RBAC with more sophisticated monitoring to control humans but for goals that I would not agree with. Imagine every single thing you do on your computer being checked by a model to make sure it is "safe" or "allowed".

An article making that case: https://www.thebignewsletter.com/p/messing-with-texas-how-bi...

A rebuttal to that article from Derek Thompson: https://www.derekthompson.org/p/the-anti-abundance-critique-...

Noah Smith on "Corporations aren't the reason your rent is too high", with nice things to say about Thompson:

https://www.noahpinion.blog/p/corporations-arent-the-reason-...

Quoting Thompson:

"The U.S. has roughly 140 million housing units, a broad category that includes mansions, tiny townhouses, and apartments of all sizes. Of those 140 million units, about 80 million are stand-alone single-family homes. Of those 80 million, about 15 million are rental properties. Of those 15 million single-family rentals, institutional investors own about 300,000; most of the rest are owned by individual landlords. Of that 300,000, the real-estate rental company Invitation Homes—in which BlackRock is an investor—owns about 80,000. (To clear up a common confusion: The investment firm Blackstone, not BlackRock, established Invitation Homes. Don’t yell at me; I didn’t name them.)

Megacorps such as BlackRock, then, are not removing a large share of the market from individual ownership. Rental-home companies own less than half of one percent of all housing, even in states such as Texas, where they were actively buying up foreclosed properties after the Great Recession. Their recent buying has been small compared with the overall market."

This is so you do not leak the host through TLS. Using DNS to serve an encryption key.

It’s not just encrypted server name indication (ESNI), it is the whole hello now (ECH)! So you don’t leak anything.

This is really cool!

I wonder if it would be possible to live-migrate apps from one machine running munix to another. You could pause, transfer, and resume the virtual machine.

There is a nice co-working space in the Wanamaker building if you need an excuse to visit:

https://www.mindspace.me/philadelphia/wanamaker/

You can likely just take a small open weight language model and use it like a classifier quite easily.

I imagine a coding agent would be great at editing your regex file to maximize coverage.

Just like manually editing Sieve/Gmail filters: I want full determinism, but managing all of that determinism can be annoying…

This really hinges on whether you let state accumulate, and where you let it do so. NixOS generally creates a dedicated user and data directory for its services, for example. I make some of my XDG config directories symlinks to the nix store because I want those configurations to be read-only. home-manager should ask before making modifications outside of the nix store (or make a backup).

This is not only a Nix problem, fwiw. I first encountered this with, say, running ZNC in Docker. It will happily write logs and configs to a temporary directory in the container and get blown away on restart unless you mount persistent volumes in just the right spots. Syncthing can be configured to manage its own config or it can be configured fully by Nix, etc.