This is fun, and relaxing:
Lapo Luchini likes this.
reshared this
Lapo Luchini likes this.
Lapo Luchini reshared this.
Lapo Luchini likes this.
Lapo Luchini reshared this.
"Lights Out: Covertly turning off the ThinkPad webcam LED indicator":
powerofcommunity.net/poc2024/A…
(A 150-slide PowerPoint presentation converted to PDF - but, seriously, folks, check it out. This is NSA-level shit.)
Lapo Luchini likes this.
reshared this
Lapo Luchini likes this.
Time-lapse of the Sun circling the horizon at the South Pole during early March.
Video credit: Robert Schwarz
Source: vimeo.com/208466944
What does the sun do at the Pole !?
Only at the Pole - the sun circles around the horizon in 24h here is a time-lapse of nearly 5 days from March 08-13, 2017. So only a few days until sunset so in…Vimeo
Lapo Luchini likes this.
reshared this
How decentralized is Bluesky really? - by @cwebber
like this
reshared this
Future of Mozilla (and) Firefox
… but I am also more and more worried each and every time a new article about #Mozilla hits the news. 😞
(I look forward to #Servo too, but that's a partly different issue)
Matteꙮ Italia reshared this.
Lapo Luchini likes this.
reshared this
In my experience, most people model security issues as broken windows or loose locks, something easily fixed with some care and attention.
On the other hand, most security issues are better modelled as missing structural beams or sinking foundations, flaws that compromise the integrity of the entire structure and the safety people around and within.
Lapo Luchini likes this.
reshared this
Security design sometimes seems like a "Unwinnable by Design" scenario in a game where an early incorrect choice leads to a situation where it's impossible to win or rectify conditions in order to win.
Having to start all over from the ground up is rarely favored by management
Investors favor just patches that build technical debt & postpone the inevitable pain of the next data breach, system crash, or ransomware hack.
rustls outperforms OpenSSL and BoringSSL.
Security and performance: pick two!
memorysafety.org/blog/rustls-p…
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance.www.memorysafety.org
Lapo Luchini likes this.
reshared this
Lapo Luchini likes this.
Lapo Luchini reshared this.
The Archive is back! (In read only mode). Get to the things you love, and we will continue our quest to be dependable, clean up the mess left behind, and be there for you.
Lapo Luchini likes this.
reshared this
LLMs can’t perform “genuine logical reasoning,” Apple researchers suggest
Irrelevant red herrings lead to "catastrophic" failure of logical inference.
arstechnica.com/ai/2024/10/llm…
LLMs can’t perform “genuine logical reasoning,” Apple researchers suggest
Irrelevant red herrings lead to “catastrophic” failure of logical inference.Kyle Orland (Ars Technica)
Lapo Luchini likes this.
Lapo Luchini reshared this.
There is a lot of alarmist stuff going around about .io ccTLD being "retired", fedi instances that use it having to move, etc. 👀
Keep calm. Here's the one thing you need to know about this right now:
👉 Even if .io ever gets "retired", it will take *years* for this to affect already delegated .io domains in any way at all.
I cannot stress this enough, we are talking years if not decades.
Soviet Union dissolved 33 years ago, but .su domains still resolve.
Deep breaths.
Carry on.
Lapo Luchini likes this.
reshared this
fuck anyone who profiteered
off the backs of the Chagossians:
you aren't even a serious technologist
if you prioritized marketing vanity
over sustainability for your project.
you reap what you sow;
you get exactly what you deserve.
Just in case you need a NodeJS script to sort extended #ZSH history which doesn't break on multi-line entries:
#! /usr/bin/env node
const fs = require('fs');
const lines = fs.readFileSync(process.argv[2], 'utf8').split(/(?<=[^\\])\n/);
lines.sort((a, b) => a.split(/:/)[1] - b.split(/:/)[1]);
fs.writeFileSync(process.argv[2], lines.join('\n'), 'utf8');
Sort extended ZSH history (works with multi-line entries)
Sort extended ZSH history (works with multi-line entries) - zsh_history_sort.jsGist
In principle I could even see myself supporting Mozilla's advertising thing.
It would not be a bad idea, in general, to have a privacy-preserving, ethical advertising network. It would serve as an alternative for vendors, and as an example to regulators that this is possible – and that banning targeted advertising can be done without hurting organizations that rely on ads to stay afloat.
Problem is, I don't trust Mozilla to hold up their side of this.
I used to, but not anymore.
Lapo Luchini likes this.
Lapo Luchini reshared this.
@BassRck5000 I'm not ignoring it, I just think that i prefer a lesser evil over more ones who've lost their moral compas decades ago.
Not agreeing with you, doesn't make me ignorant. It just means I evaluate it differently.
@dynom @BassRck5000 it's not about agreeing or not, it's about throwing around clichés like "running a profit is not a bad thing".
And I did not call you ignorant. I said you seem to be ignoring the context. That's a different thing, please don't twist my words like that.
OUTDATED⚠️
Mozilla bought the Android email app K-9 (which didn’t include any trackers) and integrated trackers as part of #Mozilla‘s rebranding under the #Thunderbird name.
They even made it opt-out instead of opt-in. Their defense for breaking the law: ”we wouldn’t have enough data if we obeyed the law.“
It doesn’t matter whether you ”anonymized“ the data or not: If you want to extract data from someone’s device to yours, you may do so only if they knowingly consented.
sigmoid.social/@davidculley/11…
Gibt sogar ein GitHub-Issue dazu. Money quote:»Unfortunately we cannot make this type of data collection opt-in because the limited data from voluntary reports wouldn’t provide enough insights to make informed product decisions. Opt-in data would come from a small, biased subset, leading to flawed conclusions.«
Datenschutz und Einwilligungen sind grundlegende Rechte der Nutzer, die respektiert werden müssen, selbst wenn dies die Datenerhebung erschwert.
github.com/thunderbird/thunder…
Expose the ability to mange Telemetry settings on first-time use · Issue #8199 · thunderbird/thunderbird-android
Checklist I have used the search function to see if someone else has already submitted the same bug report. I will describe the problem with as much detail as possible. App version 8.0b1 Where did ...GitHub
reshared this
Why laptop support, why now: FreeBSD’s strategic move toward broader adoption | FreeBSD Foundation
FreeBSD has long been a top choice for IT professionals and organizations focused on servers and networking, and it is known for its unmatched stability, performance, and security.Drew Gurkowski (FreeBSD Foundation)
Lapo Luchini likes this.
reshared this
Around 2000, humankind split into two groups:
One who was convinced it needed expensive Content Management Systems to keep office documents.
And the other who had an unprecedented productive, global collaboration with repositories and text files.💁♂️
Lapo Luchini likes this.
Lapo Luchini reshared this.
I read that the official Mastodon instance of the Swiss government will be closing down.
They say there are few active users, low engagement, and minimal interaction, which seems quite plausible. Additionally, they claim that "on platforms like X or Instagram, the Federal Council and the Federal Administration have many more followers." I believe that too, of course.
However, I do not agree with their decision. I think a government shouldn’t be overly concerned about follower counts and interactions, but rather about providing free, autonomous communication that is independent of third-party companies. In my view, a government shouldn’t operate like a business focused on "numbers."
Still, I appreciate their experiment - many governments, like the Italian one, haven’t even tried.
Regarding costs and management effort: an instance with 5 users and 3,500 followers (numbers provided by them) can run on a VPS for €3 a month and doesn't require heavy moderation. The cost for them is nearly zero. Yet, the freedom of information and discussion, especially for a Neutral Country, should always be a priority.
I believe that maintaining control over one’s information channels is crucial, especially in today's world. But, I fear that decision-makers only consider the numbers, which often favor the flashiest - but worse - solutions.
Encouraging citizens to use closed platforms is, in my opinion, a wrong choice.
Thanks to the Swiss government for at least giving it a shot.
admin.ch/gov/it/pagina-inizial…
#Mastodon #FreedomOfSpeech #Switzerland #Fediverse #SocialNetworks
La Confederazione chiude la sua istanza su Mastodon
Aktuelle Informationen aus der Verwaltung. Alle Medienmitteilungen der Bundesverwaltung, der Departemente und Ämter.www.admin.ch
Lapo Luchini likes this.
reshared this
«I think a government shouldn’t be overly concerned about follower counts and interactions, but rather about providing free, autonomous communication that is independent of third-party companies. In my view, a government shouldn’t operate like a business focused on "numbers."»
Absolutely 👏
Exactly this. A closed platform should never be supported; Facebook and Twitter are now severely limited of you don't hav an account, to thr point where most posts are not viewable. "But creating an account is free" is not the solution, obviously.
They missed the point there, I think, and as stated they didn't really push it in any form.
CC: @stefano@bsd.cafe
"What were you asked, and offered?" the dragon said.
"To drive you off, to receive the hand of the princess and half the kingdom," the knight replied.
"Very well, I'll go."
"Wait, what?"
"There once was a huge empire, that was halved..." The dragon laughed. "I'll go. For now."
Lapo Luchini likes this.
Lapo Luchini reshared this.
Lapo Luchini likes this.
reshared this
And they did it in TLS as well:
openssl s_client -connect signed.bad.horse:443 -servername signed.bad.horse
Lapo Luchini likes this.
JavaScript™
Oracle, it's time to free the JavaScript trademark. Join us in asking Oracle to release the trademark, and helping us file a Petition for Trademark Cancellation with the USPTO.JavaScript™
Lapo Luchini likes this.
reshared this
Hey folks, so the Quantum Witch demo has been released :) It lets you explore a few locations from the beginning of the story, and even get up to the first big story event!
I hope you enjoy it, and all boosts and very appreciated :)
store.steampowered.com/app/310…
Quantum Witch on Steam
Wake up lovely, you've got things to do! First, find your lost flock of faer. Then find your wife, she'd look so cute wearing that flower you found. And if you have time, attack and dethrone god. Ok? Don't worry about that portal.store.steampowered.com
reshared this
We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI
labs.watchtowr.com/we-spent-20…
#IT
We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI
Welcome back to another watchTowr Labs blog. Brace yourselves, this is one of our most astounding discoveries.Benjamin Harris (watchTowr Labs - Blog)
Lapo Luchini likes this.
Lapo Luchini reshared this.
Reading about the computer you made... On the computer you made.
How meta.
Lapo Luchini likes this.
reshared this
ssh banner seems not to follow RFC · Issue #97 · rapier1/hpn-ssh
The current ssh banner defined in ssh_api.c:423 is this: sshbuf_putf(banner, "SSH-2.0-%.100s\r\n", SSH_RELEASE) and the constant is defined in version.h:3-7 as: #define SSH_VERSION "OpenSSH_9.7" #d...GitHub
like this
reshared this
The Pentium as a Navajo weaving
Hurrying through the National Gallery of Art five minutes before closing, I passed a Navajo weaving with a complex abstract pattern. Suddenl...www.righto.com
Two weeks ago I asked on here about indie developers and everyone told me I had to speak to @nikki so I did! Quantum Witch looks wonderful
theguardian.com/games/article/…
Quantum Witch: where religious cults collide with 80s Spectrum games
This queer emancipation story is set in a cosy pixellated art world but all is not what it seems. You’ll tend your flock, pick some flowers – and also have to dethrone GodKeith Stuart (The Guardian)
Lapo Luchini likes this.
reshared this
I have seen Threads messages shared/boosted by others, but I can't manage to do it myself from my Friendica account.
Is that possible?
Fun fact: the code which took Apollo 11 to the moon is available on github github.com/chrislgarry/Apollo-…
And if you look through it you'll see that - joyfully - it also includes original comments.
My absolute favourite thing about the Moon Code is that it includes comments like this: "TEMPORARY - I HOPE HOPE HOPE"
Apollo-11/Luminary099/LUNAR_LANDING_GUIDANCE_EQUATIONS.agc at master · chrislgarry/Apollo-11
Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules. - chrislgarry/Apollo-11GitHub
Lapo Luchini likes this.
reshared this
Usually the time limit is 18 months and the person being critical is your future self.
Lapo Luchini likes this.
#golang Fediverse please help a Go-noob: is it possible to get the `git describe` string from a `go install github.com…@latest` type installation?
In order to use for `--version` output, that in various projects report no version when installed that way.
E.g.:
% go install github.com/walles/moar@latest
% moar --version
Should be set when building, please use build.sh to build
Lapo Luchini likes this.
Lapo Luchini reshared this.
Priorities. So important.
- EU-Petition to keep video games playable by forcing the publishers to NOT remove essential functions: 302.000 signatures in less than a month.
[1]- EU-Petition to tax the rich and keep our planet inhabitable: 271.000 signatures after 10 months.
[2]If you care about playing your games, please also support the other petition to make sure you still can do that and many other things, ok? :)
[1] eci.ec.europa.eu/045/public/#/…
[2] eci.ec.europa.eu/038/public/#/…
Lapo Luchini likes this.
reshared this
Lapo Luchini likes this.
reshared this
Ted Gould
in reply to Jessica Rosenkrantz • • •Jessica Rosenkrantz
in reply to Ted Gould • • •Luis Villa
in reply to Jessica Rosenkrantz • • •@ted the most traditional ones do not but the more useful ones do.
(And I can’t believe I hadn’t thought of this before; I don’t wear them that often but more than never. Would buy at least one set.)
Jessica Rosenkrantz
in reply to Luis Villa • • •Jessica Rosenkrantz
in reply to Jessica Rosenkrantz • • •CyclesSmiles
in reply to Jessica Rosenkrantz • • •