xan || roguesys

What an absolute trash “feature”, Gmail. I’d hoped they’d rein this in by now but noooo… why don’t we all get spammed with his nonsense. An email per emoji, replied-all.

A fun thing eMudhra could do on their way out is to publish all their other CA private keys. I mean, I know they’re supposed to be in an HSM, but like… y’know. They can show us those other numbers are much, much better!

Phreak: "Alright, what are the three most commonly used private keys?" Joey: "156, 115, 55. But not in that order, necessarily, right?" Cereal: "Yeah but don't forget 4. System operators love to use 4. It's that whole male ego thing."

I have some nice numbers between 0 and 255 if you want’em.

If you are interested in poking at traffic generated by IoT devices, today would be a good day to ensure that automatic firmware updates are turned off

You Can See Everything, just like the device can test for everything.

I can’t believe this was in 2018. Mickens is truly a prophet youtu.be/ajGX7odA87k?...

@mjg59.eicar-test-file.zip this seems eminently at the intersection of your skills, passions, angry outbursts at computers etc.

The Mac is even enjoyable… butters smoothers all the systems. (from the macOS 27 release notes which were most carefully crafted, like the rest of it)

> Progress isn't a rule, it's contested terrain, fought for daily by millions of people who refuse to give in to despair. Good things are happening out there, every day. Fix the News has been my favorite source of positive stories for a long while. fixthenews.com

"LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time." 👁️👄👁️ 1password.com/blog/why-ai-...

I’m about to really “engage” with some “content”

@gruber.foo appreciate the Rogue Amoeba update notifications are now so subtle. FWIW I think Ghostty did this first in November with a very similar implementation mitchellh.com/writing/non-... Agreed it should be the (Sparkle) norm!

I feel like I haven’t hyped Jujutsu as a version control system in a minute. It’s great! Joy to use after a quick learning curve, way more user-friendly. Collocates with git so no need to switch the entire team at once. https://docs.jj-vcs.dev/latest/testimonials/

Straight out of watch_dogs www.malwarebytes.com/blog/news/20...

Ouch, Spotify only thinks there are two (really just one?) competing services I could be leaving to 🫡

Wrote some notes on self-hosting an Atuin sync server and getting to it via Tailscale hackd.net/posts/atuin-...

Oh good of course

This is such a garbage design pattern, Microsoft.

We're really cooked when Klarna starts partnering with One Medical and your local healthcare providers.

Didn't realize "🫡" was an Italian phrase!

Is TurboTax getting a kickback from all these CAPTCHAs we gotta solve? 🤔 Like damn seems like there's one every other click.

How many ===== is JavaScript up to these days?

There's a kind of cutthroat efficiency that's often applied to various kinds of systems which in turn makes them eminently exposed to black swan risk. Absent significant skin in the game, the cost of failure is an externality not borne by the system designers/owners. (See: Incerto, Infinite games)

Art critic CAPTCHAs

We're just going to leave this here…

Someone is getting fired and someone is getting promoted.

Fun fact! When the Nazis were looking for templates for their horrible fucking laws, guess where they went looking! Yes! That's right! The US Jim Crow laws! So, yes. Fucking Jim Crow, yes.

If moving your newsletter from Substack seems overwhelming, both Buttondown and Ghost have processes AND people to help with it. buttondown.com/features/con... ghost.org/docs/migrati...

1. I'm NOT the sort of SF/F nerd who thinks everyone needs to read a "canon" of older works in genre like they're homework before they get to call themselves a fan, nevertheless the book I'm always mildly surprised when people say they haven't read it is "Snow Crash," which to me is era-defining...

How are people in the US keeping up with health-related information regarding existing or developing situations, nowadays? E.g., COVID-19 rates, new and exciting pathogens and their spread, etc.?

I’ve always actually preferred using “X”, to mark its “bag of shit” era. The fact it also works for “American History X” was the unfortunate bonus we didn’t need.

How they divide us.

Some advice on How to Weather the Storm, including “create something lovely for yourself or others”, “moderate your exposure to the bullshit”, “find the people who are already doing the work, and follow their lead”, and “join something”. [kottke.org]

My keyboard is getting a little extra attention now that Severance S02 started up.

i’m glad the lonely sunfish now has cardboard company www.cnn.com/2025/01/20/a...

An experiment I recommend (maybe for a Sunday morning): * get good coffe in a style you like (e.g., light roast Ethiopian) * find suitably appealing music for your Sunday morning, and play it * select 3 (ideally), or any number N>1 coffee preparation methods (e.g., French press, pour over, siphon)

Quickest way to figure out it's a phish pretending to be your Canadian bank/government office? They forgot to scam you bilingually.

I don't think I expected this *particular* combo…

This one in particular is so cool (especially if you love sci-fi): pudding.cool/2024/07/scifi/

Breaks are important for your (mental) health. Nothing improves from unabated stress.

This is NOT a good way to try USB drops for your next red team.