adg

adg

@nf.id.au

https://andrewgerrand.com/

1K followers131 following254 posts

adg reposted

just FYI, today's Apple OS updates still put the bad eMudhra certs in /etc/ssl/cert.pem, so /usr/bin/curl and /usr/bin/git and so on still relies on them. if you already remediated /etc/ssl/cert.pem last week, install the update and then do it again.

adg reposted

I see a lot of non-technical people confused about the recent security notices, so here's a quick explanation of how you can minimize risk: burn your driver's license, wipe and smash your computer, cut and dye your hair in a gas station bathroom. Find a coyote to get you over the border. Pay cash.

adg reposted

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

On my community notice board I saw a flyer made by a family of four looking for a place to live. Their photo was annotated with their names and occupations and interests. The dad “likes fixing things,” the daughter is “into design,” the son an “aspiring musician,” and the mum? “AI hater.”

adg reposted

it's simple: everyone on earth should make at least one game in bitsy, twine, puzzlescript, zzt, rpgmaker 2k/3, and pico-8. all of them have robust tooling, smart creative constraints, browser exports, and lively communities.

adg reposted

saying that LLMs makes you lazy is mostly incorrect, and ignores one of the actually harmful things about them: it means that as long as you're still capable of talking, you're capable of working. you can overwork yourself in ways that were never remotely possible before

I think that point was the industrial revolution, but back then it was just called “industry“.

This post is unavailable.

adg reposted

attention Fastmail executive team: please continue to be normal. If you have any thoughts about anything other than emails, please keep them to yourselves. Please do not fund any external projects that have anything to do with anything other than emails. Thank you.

adg reposted

I can finally talk about this, 3 years later... github.com/tailscale/ta... It's a library + CLI tool that's like netcat, but over Tailscale's data plane without any control plane (no accounts, no dependence on Tailscale the company, all open source) WireGuard + NAT traversal without IP addresses.

github.comGitHub - tailscale/tailcat: like netcat, but over Tailscale's data plane, without Tailscale's control planelike netcat, but over Tailscale's data plane, without Tailscale's control plane - tailscale/tailcat

adg reposted

It's an inflection point, a phase change, a new ability unlocked in creative ADS-B spoofing. We've seen primitive vector art before, but as far as I know never raster spoofing. (This isn't RF spoofing, this is sending bad data over the network to an aggregator.) x.com/thenewarea51...

adg reposted

everyone's parents: You will get more conservative as you age me at 46: legalize all drugs, abolish prison for all nonviolent offenses, and force the politicians with the lowest approval rating to participate in The Running Man once a month

For "reasons" I am playing around with DVD video streams, and today I learned that DVD subtitles are bitmaps, not text rendered by the player. My copy of Terminator 2 Extreme Edition has this interesting subtitle track that gives details on the VFX, including some illustrations.

adg reposted

Worth a watch: Head of Signal, Meredith Whittaker, on so-called "agentic AI" and the difference between how it's described in the marketing and what access and control it would actually require to work as advertised.

adg reposted

The honest reason I don't have microtransactions/season pass/ads/100 DLCs/etc in Balatro isn't just about the ethics of those practices but because when I play other games that have those things it makes me want to put my computer in the dishwasher and set it to pots & pans

adg reposted

This whole thing is amazing but I was not prepared for the reveal that Atrus was wearing a Hard Rock Cafe shirt the entire time

Video Game History Foundation@gamehistoryorg.bsky.social

The creators of Myst series (@cyan.com) saved hundreds of video tapes from the making of their iconic adventure game franchose. We helped preserve them. Here's what we found.

adg reposted

Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾 Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨ Yes I am taking a victory lap. No I am not sorry. 🏆

go.devGo Cryptography Security AuditGo's cryptography libraries underwent an audit by Trail of Bits. Read more about the scope and results.

I downloaded an LLM model and ran it locally on my laptop, asked it questions about people and things and it gave some true answers (and many made up ones). The model is 5GB which is much smaller than gzipped Wikipedia. A visceral “llm is just a lossy compression scheme” moment.

adg reposted

it's incredible that the generation who told us "don't trust anything you read on the internet" went through a decade of being scammed for itunes gift cards and STILL scrolls facebook so they can comment "Amen" on ai slop images of a soldier with three legs

adg reposted

out of the $143.88 that you pay spotify in a year for Spotify Premium, artists receive less than $1. buy music from bandcamp, or buy used LPs/CDs, listen on youtube with adblockers, or pirate it, just don't give any more of your money to billionaires

This is the deck I won with. By ante 8 I had flushed at level 57. A satisfying landslide victory.

adg reposted

📢 The Internet Archive needs your help. At a time when information is being rewritten or erased online, a $700 million lawsuit from major record labels threatens to destroy the Wayback Machine. Tell the labels to drop the 78s lawsuit. 👉 Sign our open letter: www.change.org/p/defend-the... 🧵⬇️

adg reposted

Funny story about music #piracy. I used to upload my albums in lossless to now-defunct music torrent trackers. I lost the streaming version of 'Louisiana Mourning' and streaming services don't allow you to download your own submissions. Rutracker has my original torrent from 2009 w/ my notes. 🙌🏻

adg reposted

one of the funniest Generative AI claims is that it's "for people who can't draw." the one thing that people seeking to take me down a peg have said for the past 25 years is that i can't draw. i do it anyway and it's fun and it's fine. to refuse to doodle is to abdicate your own humanity

LLM thought: LLMs “learn” by building a probability matrix of next most likely words. How many times have you learned something crucial because the next word that came out of someone’s mouth was exactly the opposite of what you thought it would be?