ohnoerik!

ohnoerik!

@ohnoerik.com

programming (python, go, learning elixir and rust) • photography • electronics • amateur radio he/him/his opinions expressed on here are my own

318 followers1K following612 posts

the ol' classic "don't feed the trolls"

Rafa Sales Ross@rafiews.com

I’m not a political journalist, so was gladly surprised at the community I found here last night. To Americans anxious about the upcoming elections, a key thing we learned in Brazil that might help you: DO NOT engage with the far-right online. Don’t share rage bait. Amplify your people. Ignore them.

this is pretty good

Firefox@firefox.com

Since 2004, this community has helped make Firefox and the open internet possible. Our “Come Back to Firefox” campaign reunites a few early internet icons to remind people what made the internet special, and why it’s worth protecting.

I am not liking this seemingly increased trend of some drivers *speeding up* to try beating pedestrians about to enter a crosswalk.

Less than ideal. Highly recommend Kagi and Fastmail if you want to switch out and are fine paying a few bucks a month.

Techmeme@techmeme.com

Google updates its privacy policy to clarify it could use data shared via Personal Intelligence from connected apps, including Gmail and Photos, to target ads (Shimul Sood/Android Authority) Main Link | Techmeme Permalink

Actually being able to stream media on the internet. Dialup could kind of do it if you liked small squares. DSL (368k or whatever) was better, but sucked. 1xRTT could squeak out some excuse for video but it sucked. EvDO got a little better but sucked. Fiber to my home *and* 5G? Now we're talking.

Social media loves talking about how everything is getting worse. But what’s something that you’ve seen get _better_ in your lifetime?

tbh this is directionally where things need to go unfortunately. users are going to automate their usage of some websites because many service operators do not provide a safe way for users to access their data. this is much better than "copy/paste passwords into $free model that trains on data"

plaid is an example of a critical failure in financial services in this regard. there is no reason why end users should not have read-only programatic access to their banking data, so plaid is a bandaid that gives full access. services need to wake up to reality: give users safe ways to their data

no good reason why my bank shouldn't be able to let me generate a read-only credential so I can pull my transaction/account balance data or my utility company with my usage data. right now the options are "no access" or "full access" and it's not great.

The uncertainty is what's getting to me. I have a lot of fun with these tools in my free time, but there is so much uncertainty about what jobs will look like in 2 years. I suspect that's the uncomfortable tension I feel from others right now at work.

MrNelson007 Belongs in a Museum@mrnelson007.bsky.social

As someone working in tech, this year has had me considering a change in career more than anything up to this point, it’s been nonstop. Nothing as bad as these today but the amount of overtime everyone is working cleaning things up is causing a lot of burnout.

View full thread

turns out, there’s a lot of shady cybersecurity companies who are selling snake oil, a lot of companies who still need to update their processes, and a lot of projects *objectively* risking their users’ security by putting heads in sand!

and bonus: journalists can do this without giving openai and anthropic credit! plenty of scenarios where both have failed to give extremely important projects that *power the world* access to the latest models.

the “oh shit, we aren’t prepared for this in a cybersecurity perspective because this tool…works” was the conclusion many people reached months ago and is where 404 should’ve been. no fearmongering fluff outside of this was needed! plenty of vendors and software to call out for being ill-prepared!

Lmao

This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-statement-distrust-global-tls-intermediate-root-ca

probably worth rotating a few important passwords this morning, then again in a few days after people install patches

This feels correct. I’m at a place now where lots of folks want to improve workflows with Claude but everyone’s jumping to write skills and wants other teams to install them. It’s just not a great paradigm. The effort would be better spent on finding ways to make the raw information accessible.

Ed@ed3d.net

I at this point am like 90% convinced that reusable/shareable skills packages are a bad thing for LLM users. The 10% is that it can show you what's possible; the 90% is that people want to be incurious and just slap something in the only person who can effectively guide your tasks is you

I really want a way to say “I trust these CAs for these TLDs/domains” as a client, and a way to explicitly define which CAs I trust as a server. My brain could be drawing a huge blank but to my knowledge I don’t think there’s a good approach for either.

it’s really untenable that we have so many CAs

hot take: the people who think X mattered/matters spent too much time on it and are as obnoxious as redditors about reddit

Nitish Pahwa@nitishpahwa.com

tWiTtEr iS bAcK … down to 18% of nationwide usage this year from 21% last year, appropriately tied with Nextdoor www.pewresearch.org/internet/fac...

this ain't good (and also we are *extremely* fortunate to have a number of open source maintainers taking this seriously)

Filippo Valsorda@filippo.abyssdomain.expert

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

seems suboptimal

Politico@politico.com

“I’m old. I’ve paid my home off,” said Ray Warner, a 72-year-old Akron resident. “Why would I pay property tax?” Across the country, homeowners are asking the same question and revolting against property taxes at a scale not seen in a half century.

having a lot of fun this morning. set a thing up so i can toss a PXE-bootable machine onto any port of my mikrotik switches, flip that switch into a provisioning mode, and re-deploy linux/whatever. never having to ever copy an ISO to a thumb drive or my IODD again

It should be a crime for a utility company to send emails that insinuate a service/payment issue when they're actually trying to upsell junk.

I unsubscribed a bit ago from 404. Their enthuseam for reporting on FOIA'd info from a tech POV was exciting but now it's unrecognizable from even 2 yrs ago. Reminds me of how ArsTechnica completely went off the cliff a few years ago in the name of clickbait. The tech blog circle continues.

dame@dame.is

Side note: 404 Media has some of the most overtly biased and prejudiced reporting in the business. So many articles come out of that rag that display a total disregard for journalistic integrity, it’s turning into a culture war fueled engagement grifting tabloid.

In ArsTechnica’s case, their automotive reporter seemed to have a weekly quota of finding any bad Tesla news, even if it was flimsy. If their editorial staff are pushing these quotas, what other behavior did they endorse to push a viewpoint? How can I trust their reporting? Same Q’s I have for 404

uh holy crap this is kind of unexpected and neat for a map app to just build in

MapQuest@mapquest.com

The Roads Have Eyes! 👁️ Turn on the Surveillance Layer in Map Options to see known license plate readers from Flock Safety, Motorola Solutions (Vigilant), Genetec, Axis Communications, Axon, Leonardo (ELSAG), Neology, Rekor, PlateSmart, Ubicquia, Verkada, and other outdoor surveillance cameras.

ohnoerik! reposted

Interviewer: can you explain this gap in your CV? Person who wrote the layout engine for Microsoft Word: absolutely not

Ariel Edwards-Levy@aedwardslevy.bsky.social

interviewer: can you explain this gap in your CV? pollster: oh, that's fine, it's ignorable nonresponse

ohnoerik! reposted

Replying to @joohnchoe.bsky.social

Not only is this not real: if you take a long, hard look at who told you it IS real without doing BASIC due diligence first, then I think you should take some learning from that about source reliability going forward. Because it’s going to get more confusing, not less, until November 3.

I’ve been having so much fun forking open source apps and tweaking them into behavior and a UI I like to replace commercial apps. I’m extremely grateful for the foundation that others have laid for me to do this.

riley@riguh.bsky.social

I am rewriting software I regularly use as custom apps. I did that with my printer software earlier, and tonight I integrated a music player into my personal agent. SO GOOD It’s 100% a the “delight the user” experience. I didn’t realise just how bad the Spotify UI is until I replaced it

the precedent that’s being set is wild. not feeling great that The One Easy Trick to Just Do Crime is to proxy it behind a corporate entity, a couple of funding rounds, and a LLM.

asura@asura.dev

what the hell are we doing here If I run burpsuite against a website unauthorized and then deface it, no one says "herr derr the law hasn't caught up yet" and the operator is in hot water

part of the fun of having a homelab is having a never-ending list of things to do with it. i've basically caught up on a multi-year backlog and idk, the feeling of "complete" with it is strange.