Jari

Jari

@aarniala.fi

🎸 Guitarist in BEATA @beata.band 💻 Building https://emma.rent https://aarniala.fi

80 followers246 following76 posts

Jari reposted

nightshade →home, for now
@nightshade.technology

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

nightshade →home, for now@nightshade.technology

oh it's bad. oh it's BAD bad. oh this is CATASTROPHIC, drop-whatever-you're-doing-and-patch-NOW levels of bad cert.europa.eu/publications...

Jari reposted

Russ Cox
@swtch.com

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

bugzilla.mozilla.org2083449 - Private key compromise of eMudhra Intermediate CertificatesNEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.
Russ Cox@swtch.com

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

Jari reposted

Morgan Johnson
@poormojo.bsky.social

No joke. I think this is the most important video I have ever seen about mobile games. This guy breaks down how this game psychologically profiles you, and makes the game harder or easier in order to show you ads

Jari
@aarniala.fi

Absolute nightmare week back at work :D - A local ISP blocked most Render.com -hosted apps (at DNS level) by mistake, including ours - Noticed that Chrome 150 had pushed out a change that triggered a bug in our React code Confirmed: it's always either `useEffect` or DNS

View full thread
Jari
@aarniala.fi

However, Chrome 150 shipped "Programmatic scroll promises" where `scrollTo` now returns a Promise you can use to track whether the scroll succeeded. React now sees a defined value, assumes it's the cleanup function and tries to call it, resulting in `xyz is not a function` and the page crashing. 😬

chromestatus.comChrome Platform Status
Jari
@aarniala.fi

The fix is of course simple; add braces to the hook function to ensure it doesn't return anything. Our linter didn't catch this because the TypeScript types reflect the old `scrollTo` contract. Fun times!

Jari
@aarniala.fi

Absolute nightmare week back at work :D - A local ISP blocked most Render.com -hosted apps (at DNS level) by mistake, including ours - Noticed that Chrome 150 had pushed out a change that triggered a bug in our React code Confirmed: it's always either `useEffect` or DNS

Jari reposted

Anil Dash
@anildash.com

Just in case you still use any Basecamp products, DHH is crashing out about his AI product gently pointing out that it’s bad for him to have extermination fantasies about the Roma people.

Jari
@aarniala.fi

First session with Opus 4.8; asked it to implement issue #100 from Linear, but MCP auth had expired, so it made up an arbitrary issue and started working on that. #TGIF

Jari
@aarniala.fi

Time to bump `minimumReleaseAge`

Philippe Serhal@philippeserhal.com

⚠️ If you use any TanStack package in any of your projects and there's any chance any of them was updated today, stop what you're doing and read this. ... Actually there are 121 non-tanstack packages affected as well, so check the list anyway.

Jari
@aarniala.fi

I've switched over to jj. `jj undo` is great for learning. Just try something, and undo if it did the wrong thing. `jj absorb` feels close to magical. `jj arrange` as a built-in goes hard. In a team where some work with git, I have a Claude hook that blocks `git` and instructs using `jj` instead.

Jari
@aarniala.fi

I regret to inform i'm staying on Spotify for the time being. - Tidal looks great but has various playback bugs - Qobuz has steady playback but the UX feels unfinished - YouTube music recommendations are filled with AI slop - Apple Music is pretty great TBH, will probably revisit later

Jari
@aarniala.fi

Annual Tidal review: macos app playback (via Bluetooth headphones) is still bad, how disappointing! Seeking/skipping songs causes cracks and pops. Small dropouts even while listening. Zero such problems with Spotify. The iOS app is more solid, and Tidal Connect seems to work pretty well.

Jari
@aarniala.fi

And you can't make this shit up --- tried to play with the playback quality settings and now Tidal is playing two tracks simultaneously on top of each other. Holy cacophony.

Jari reposted

Max Kennerly
@maxkennerly.bsky.social

If America still had the rule of law, this would be the easiest prosecution ever, but we all know absolutely nothing will happen.

Bloomberg News@bloomberg.com

As US and Israeli bombs fell on Iran this weekend, bettors on Polymarket — where $529 million was traded on contracts tied to the timing of the strikes — were cashing in

bloom.bgPolymarket Iran Bets Hit $529 Million as New Wallets Draw NoticeAs US and Israeli bombs fell on Iran this weekend, bettors on Polymarket — where $529 million was traded on contracts tied to the timing of the strikes — were cashing in. Almost immediately, blockchain sleuths began hunting for unusual patterns in recent bets.

Jari reposted

Mayor Zohran Kwame Mamdani
@mayor.nyc.gov

Today’s military strikes on Iran — carried out by the United States and Israel — mark a catastrophic escalation in an illegal war of aggression. Bombing cities. Killing civilians. Opening a new theater of war.

Jari reposted

Michelle Bruton
@michellebruton.bsky.social

This GOOD BOY ran onto the course during the Women’s Cross-Country Skiing Team Sprint event, crossing the finish line and being automatically recorded by OMEGA’s photofinish camera 😆

Jari reposted

Ilhan Omar
@ilhanmn.bsky.social

"ICE will leave Minnesota if you hand over your voter rolls" tells you everything you need to know. This was never about immigration or fraud. It was always about rigging elections.

Jari
@aarniala.fi

Maybe a good day to call in sick and skip the photo op

Aaron Rupar@atrupar.com

Trump on the Florida Panthers: "Good looking people. Young, beautiful people. I hate them. You hate standing here with all this power behind you. But I got power too. It's called the United States military. I don't care."

Jari reposted

Aaron Rupar
@atrupar.com

TAPPER: Can you rule out the US is going to take Greenland by force? MILLER: Greenland should be part of the US. By what right does Denmark assert control over Greenland? The US is the power of NATO T: So force is on the table? M: Nobody is gonna fight the US militarily over future of Greenland

Jari reposted

Atte Harjanne
@atteharjanne.vihreat.fi

Rikollisen hyökkäyksen palkitseva, Ukrainan suvereniteettia ja NATOn toimintaa rajoittava ”rauha” olisi paitsi väärin, erittäin vaarallinen suoraan Euroopalle ja viestinä koko maailmalle.

Jari
@aarniala.fi

Dumb dumb make ban ban on boom boom

Brian Tyler Cohen@briantylercohen.bsky.social

The US military has removed photos of the B-29 bomber “Enola Gay” — which dropped the first atomic bomb on Japan — apparently because it contains the word “gay,” which violates their new anti-DEI rules.

apnews.comWar heroes and military firsts are among 26,000 images flagged for removal in Pentagon's DEI purgeReferences to a World War II Medal of Honor recipient, the Enola Gay aircraft that dropped an atomic bomb on Japan and women and minorites are among the tens of thousands of photos and online posts ma...

Jari reposted

Technology Connections
@techconnectify.bsky.social

I've been thinking a lot about that bumper sticker which says "everything looks like a conspiracy theory when you don't understand how anything works" and folks it's pretty obvious to me that the people in power right now have absolutely no desire to understand how anything works.

Jari reposted

Katie Mack
@astrokatie.com

The first measles death in the US in a decade -- the tragic, preventable death of a child whose parents chose not to protect them with vaccination -- should spark an immediate nation-wide campaign to ensure all children are protected against preventable diseases. Anything less is unconscionable.

Jari reposted

Lauri Holappa
@lauriholappa.bsky.social

Tässä olisi aidosti tärkeä juttuidea. Käytännössä Suomella on ollut aivan keskeisessä diplomaattisessa tehtävässä ihminen, jolta on jäänyt ymmärtämättä asemamaansa politiikassa tapahtuneet olennaiset muutokset ja niiden seuraukset Suomelle. Olisi kiinnostavaa kuulla, miten näin on voinut käydä.

This post is unavailable.

Jari reposted

Atte Harjanne
@atteharjanne.vihreat.fi

Tänään eri puolilla maailmaa on kunnioitettu eri tavoin jo kolme vuotta raakaa hyökkäyssotaa vastaan urheasti puolustautunutta Ukrainaa. Ja samana päivänä Trumpin Yhdysvallat siirtyy YK:n äänestyksessä häpeällisesti Venäjän tukijaksi. Vastenmielistä. edition.cnn.com/2025/02/24/p...

edition.cnn.comUS joins Russia to vote against UN resolution condemning Russia’s war against Ukraine | CNN PoliticsThe United States joined Russia to vote against a UN General Assembly resolution condemning Russia’s war against Ukraine Monday in a stunning shift from years of US policy.
Jari
@aarniala.fi

🙌

The Athletic@theathletic.com

Canadian Prime Minister Justin Trudeau chimed in online after Canada beat the United States in the 4 Nations Face-Off final. 🔗 www.nytimes.com/athletic/liv...

Jari
@aarniala.fi

Doubleplusungood

Financial Times@financialtimes.com

The US is opposing calling Russia the aggressor in a G7 statement on the third anniversary of Moscow’s full-scale invasion of Ukraine, threatening to derail a traditional show of unity, according to five western officials familiar with the matter. www.ft.com/content/7380...