8bit

updated profile pin: mostly a lurker but I repost a lot took off the "automated" tag, it was funny but I didn't want to actually confuse people all my links are at my profile URL :)

Finally published another visual article after a long time. 🔗 visualrambling.space/distance-fie... This one is about distance fields, one of the most interesting topics I explored recently. made with #threejs and #animejs

"This blog is about celebrating that friendship" with open source developers. That was our first post in Feb 2008. Today, all 1,557 posts (2008–2026) live in the Atmosphere as verified @standard.site records: https://opensource.googleblog.com/2008/02/welcome-to-google-open-source-blog.html

Yesterday I pushed samwho.dev 2.0. - Every interactive/visual post revamped. - New content added to several old posts. - New consistent visual style throughout. - Dark mode(!) - New interactive heroes for all posts that didn't have them. - Updated dog animations.

The two big projects I work on: * the update system at Oxide. If this breaks, our product cannot be updated any more. The entire update process is autonomous, too * cargo-nextest. ~a quarter of professional Rust devs use it. If this breaks, many people have a bad time So yes, I look at the code

somehow, when I find security bugs in software I use, even when the company involved has kinda torqued me off for other reasons, I report them, because I would want somebody to report them to me if it were mine this is what we call "normal behavior" and "being normal"

🚨 Password2Shell 🚨 An attacker just has to type in the username and password to gain full control. Full writeup here: man7.org/linux/man-pa...

Just got my first real sale for @avette.eu ✨ super super happy about it. It's a dictation app for macOS, the productized version of what I've been using for a year. It's really very good, I encourage you to download and try it out, should be fresh air after whisper/parakeet/apple stuff x)

Reminder that "formally proved program X" is a meaningless statement. You formally prove that some program or a reduced model of it upholds some kind of property or invariant

I did though

> handled the recent incident diligently > within 14 hours of discovery leaving seems like a win for everyone

btop is insane. it's the only TUI I'm aware of that has fog of war for vertical lists

the story goes like this

an outdated system in a salmon farm using PHP was found to have been breached, allowing the attackers to perform remote cod execution

this is the real Disclosure Day sorry, I had to get that out of my head so I can sleep, gn

PHP is burning. Node is burning. GitLab is burning. The certificate authorities have apparently been generating their private keys with an enchanted D6.

🫪 what a day multiple CVEs and the whole CA thing, and when I go to disable remote access to my homelab + update containers, it's just down??? all of it, even the BMC?? freaked out for 6 hours till I got home to find the C13 plug loose ;-; glad that's all it was but also whew fire risk too!

Next week →

I have no great love for OpenAI, but they are not to blame for half of the internet shutting down the continued use of the C and PHP programming languages is

lmao

One of my coworkers has a printed sign on his wall, conspicuous visible in Google Meet, which reads "PERFORMANCE NUMBERS FOR BROKEN CODE DON'T COUNT" It's a helpful reminder whenever we have to consider correctness fixes which cause performance regressions!

This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca

ed explains

guys I think they were literally asking

actually, 4 is a very hard to guess number, and is secure from modern attacks

I made it! Do not feel obligated to join, only do so if you have the means. I'm not paywalling anything this is going to just be support to continue sharing and share more www.patreon.com/cw/Natalieth...

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

might be the most delusional shit i ever post, but despite the cyberpsycho jokes i'm… really proud of, seemingly, still being stable and well adjusted, yknow? i'm happy with my life. i like going outside. i like cuddling loved ones. computers are good but they're only there if i want them to be.

not sure if this made it here yet but important video for you to watch

vaguely distressing state machines, a small experiment in emotion with automata and alt text.

i redid the whole thing basically from scratch in a way that allows it to run in realtime, without any sleeptime overhead i gave the model a password, then pasted the entire contents of WARHOUND into the next message, then started a new chat and it still remembers both ^^

come say hi, I'm in room a picto.a2.co

okay it's ready!!! go turn your avatar into felt 🧶 button eyes, googly eyes, worried little eyebrows (•᷄- •᷅ ;) keith.is/projects/atp...

omg wait when did bsky fix the input box in DMs (or the bottom bar elsewhere) getting hidden behind the keyboard when in split-screen :D ty from a wide boi ❤️ @samuel.fm (pls redirect if you're not the right app person who fixed this)

Every game of naughts and crosses (tic tac toe)

People will really discourse around pretending that people who code, people who put in the hands of billions of people free tools to better and take control of their lives online out of ideology and for nothing in exchange, are not generous people. And people will believe this if we don't speak up.

You really need to watch this, particularly if you're a Man In Tech

This is Pele, my new rendering library for diagrams and charts, compatible with the latest Mermaid syntax. - 100-500× faster than mermaid.js - 6× smaller bundle - No dependencies - Easy to theme - Responsive to device width - Open source (MIT) Try it at pele.run

A month in the works, I am happy to announce the newest version of PDS MOOver! - OAUTH!!!! - A brand new cow thanks to @goose.art! - A dedicated rotation key tool - A directory to find your next PDS, as well as typeahead for PDSs. - 🧙based forms for migrations and recoveries - QOL everywhere

you wha? 🫪 it's a bot mapping out the network and I think it's saying a bunch of clusters it's identified are bridged via me?

(i’m diffing how much presence/absence of past context changes the activations and then fucking with attention just enough to preserve that diff without changing anything else about the output)

No more leap seconds, ever! There isn’t one in December and they will be abolished in May. The last one will forever be the 2016(?!) one. Didn’t realize having experienced leap seconds in prod dates me. I’m not going to miss time going backwards, I’ll be honest. www.bipm.org/en/cgpm-2026...

Desktop environment: 2 GB Chrome tabs: 4 GB Expert cache: 186 GB someone help me budget this, my RAM is dying

An explanation on why Big Walk isn't available on Xbox. bigwalk.game/xbox

huh, this seems awesome, I wonder how it handles different scaling and window aspect ratios