Apologies for the youtube shorts link, but Liz Kendall was on LBC yesterday talking about VPNs:

https://youtube.com/shorts/WvHl3G6KojI

I believe they're "doing research" into it, which basically means they don't understand how any of it works.

Huh, it works just fine in the UK. Wonder if they have different builds (or completely different apps) for different regions. Or maybe it's the GrapheneOS compatibility layer that makes it work? Not sure.

Play Integrity has several levels. GrapheneOS MEETS_BASIC_INTEGRITY, which I believe only requires a locked bootloader and no superuser.

There's also been some discussion of spoofing MEETS_DEVICE_INTEGRITY, since before Android 13 it didn't rely on a TPM, and many apps don't want to lock out older devices, but it's been decided against it [0].

[0] https://github.com/GrapheneOS/os-issue-tracker/issues/1986

I saw on the GrapheneOS forums that some people had managed to get it working, but I was unable to do so.

My bootloader is locked, because I re-locked it after installing GrapheneOS. The app runs, but refuses to let me log in. I even tried (temporarily) using a browser to login, and let the browser switch to the app in the process. Nada.

It's ridiculous that Google bills their "DEVICE INTEGRITY" initiative as a security feature, when GrapheneOS, which is a more secure platform, cannot use it.

Hmmmm.... Actually you can have an unlocked bootloader for the basic integrity level.[0]

[0] https://developer.android.com/google/play/integrity/verdicts

I knew it was owned by github, but this is the first time I've personally seen the release notes on github's blog instead of npm's.

Web-based IDEs like VSCode on github just had a 1-click github token stealing vulnerability: https://blog.ammaraskar.com/github-token-stealing/

You could argue this is probably on GitHub for creating a token here that gives blanket access to all repos vs a scoped token for just the repo.

Would be good to be able to select multiple points on the compass and have it tell me the best place for it (front and back garden)

Good idea. I want to add specific options for different mounting locations (sheds etc) as well.

Smyths toys is doing pretty well in my town, in an out of town centre retail park admittedly. It is situated in a fairly new retail park that got built exactly behind the old one where Toys R Us used to be. That got knocked down and replaced with warehouses. Must be cheaper to tear down and start from scratch than try to modernise after being vacant for a few years.

Town centre is lots of barbers, vape shops and betting shops. Few new independent bars and restaurants seem to be breaking through thankfully.

I had the best success yet earlier today running https://pi.dev with a local gemma4 model on ollama on my m4 Mac with 48GB ram. I think pi is a lot lighter than Claude code.

I didn’t think pi supported local models?

It does! Ollama provides a helper to launch it with the local model too: https://docs.ollama.com/integrations/pi

So you can do:

   ollama launch pi --model gemma4:26b

And it launches and points to the local model in one command. pi seems to do some setting caching too, because after doing the above once I can just do `pi` and it's already setup to the local model.

pi does, it can talk to any OpenAI API

how do you provide the base url?

That is interesting. In the UK they're both available pretty much everywhere, and they're some of the cheapest drug prices I've seen anywhere in the world... ~20p for 16 tablets or something.

I would say 16 tablets would be closer to 6, or even 8 euro here.

This is very cool! I too have been very curious about ATProto after reading Dan Abramov's blog posts on it: https://overreacted.io/a-social-filesystem/

One question, I tried sharing your site with a friend and the share URL is coming up as http://localhost/ which is strange and I've never seen before. Is this something that's possible to customise via meta tag, or is this a bug in my browser (Vanadium 147 on GrapheneOS)?

Seems like accidentally they uploaded a local development build of the HTML:

<meta property="og:url" content="http://localhost/"/>

<link rel="canonical" href="http://localhost/">

Yeah thought it might be something like that, I just couldn't recall off the top of my head which one would get passed to the share context.

This should be fixed now!

Definitely something on my end. Thanks for the heads up! I’ll try to fix it tonight.