PuercoPop
PuercoPop boosted:
2025-06-28

@david_chisnall @bill88t

divergent-desktop.org/blog/202 I had a 'less neighbourly' one queued up and PoCed ever since, as there is another middle ground to be had. In the spirit of choosing both armies and battles wisely - it's not the fight to fight. "Nie mój cyrk, nie moje małpy"

PuercoPop boosted:
Alan Zimmermanalanz@social.coop
2025-06-27

@deech vc-annotate is one of my personal favourites.

Age shown by colour temperature, you can easily move to the relevant commit

PuercoPop boosted:
deechdeech
2025-06-27

As someone who went straight from command line Git to Magit, I'm just now learning the built in vc-* commands are pretty good, vc-region-history in particular which shows the commit history of a selected region is pretty killer.

PuercoPop boosted:
2025-06-27

You know back in my day, we had static analysis tooling that would give you exactly this kind of feedback, except it was correct. Now we have shit which only looks at the vibes of the source text and does no semantic analysis whatsoever, so of course it's just fucking wrong

PuercoPop boosted:
2025-06-27

Sent a pull request to Audacity fixing a crash bug I'd been running into frequently. The cause was an out-of-bounds memmove. Classic C++ areas.

Anyway I got a fucking copilot review on my PR which left two comments, both completely wrong, one of which suggesting I reintroduce the out of bounds memory access. I'm furious!

PuercoPop boosted:
David Chisnall (*Now with 50% more sarcasm!*)david_chisnall@infosec.exchange
2025-06-26

@mark @jwz

If you got paranoid about it, you’d build it atop a permission model. The same kind of thing that grants on-screen keyboards the ability to inject key presses into other programs.

Wayland just declared it out of scope and left it to compositors to implement. Eventually some compositor authors agreed on some APIs.

PuercoPop boosted:
2025-06-24

So, there’s much to be said about these vulnerabilities…
guix.gnu.org/en/blog/2025/priv

First, thanks to fellow Nix and Lix hackers for sending us a heads-up, for sharing Snyk’s detailed report, and for coordinating with us. 👍

PuercoPop boosted:
2025-06-24

We are pleased to announce that we are abandoning our account on X for reasons that will be obvious to denizens of the Fediverse.

PuercoPopPuercoPop
2025-06-23

@keithamus

> What new features would you like to see?

Embedding jq to enhance the existing `filter properties` in JSON responses in the network inspector 😬

PuercoPopPuercoPop
2025-06-23

@ferrisoxide any reason to prefer shelling out to whoami vs variable substitution? i.e. using $(whoami) vs ${USER}?

PuercoPop boosted:
Prof. Emily M. Bender(she/her)emilymbender@dair-community.social
2025-06-22

@cyberlyra Thanks.

I have lots of issues with the "AI skeptic" framing, starting with the fact that it sets things up as the question under discussion being "is AI real?" rather than "what harms are these companies doing?"

PuercoPop boosted:
Inspirational Skeletor💀skeletor@mas.to
2025-06-21
I wish I could take your pain and give it to someone we both really hate.
PuercoPopPuercoPop
2025-06-21

Writing an SQLite extension is straightforward with . Although my reason is to be being able to use the SQLite REPL directly, without having to wrap the connection with code that exposes the function to a connection.

A terminal session which read:

~/src/bliki
$ sqlite3
-- Loading resources from /home/puercopop/.sqliterc
SQLite version 3.47.2 2024-12-07 20:39:59
Enter ".help" for usage hints.
Connected to a transient in-memory database.
Use ".open FILENAME" to reopen on a persistent database.
sqlite> .load ./target/release/libbliki_sqlite.so
sqlite> select slugify('hello world');
┌────────────────────────┐
│ slugify('hello world') │
├────────────────────────┤
│ hello%20world          │
└────────────────────────┘
sqlite>
PuercoPop boosted:
2025-06-20

A useful tool I created a few years ago but never really promoted much: usand

github.com/richfelker/usand

It creates no-network (cutting off main exfil vectors), read-only except for current dir and descendants, sandboxed environment to run low-trust code, even full build processes, within.

Only dependency is unshare(1) utility and Linux kernel with unprivileged namespace functionality.

PuercoPop boosted:
mccmcc
2025-06-20

Exasperated and disturbed the new IP license in the Mastodon TOS has no termination clause.

mastodon.social/terms-of-servi

Facebook and YouTube have terms saying you can intentionally remove your IP grant by deleting the content. Twitter lets you remove your IP grant by deleting your *accounts*, which is punitive, but possible to exercise (I did). It's very good Mastodon's grant is limited-use—but so was Tumblr, and it eventually abused its. I want Mastodon to be as pro-user as *Facebook and Google*.

PuercoPop boosted:
2025-06-17

Delia Espinoza: “Han intentado sacarme por la fuerza”

piefed.social/post/940466

PuercoPop boosted:
2025-06-15

Here is the code to setup this GUI (attached pic), except the library itself, which is not yet released, but stay tuned - I will publish it in a few days

PuercoPop boosted:
2025-06-15

An early demo of an SVG GUI implemented in Emacs. Currently two types of widgets are implemented: a label and a button.

It creates a buffer with a single SVG canvas where widgets can be added.

#emacs #svg_gui

PuercoPopPuercoPop
2025-06-14

find is the command that embodies the spirit for me. Questionable aesthetics, does too much and too little at the same time, includes ways to shot yourself in the foot, but you always find new ways to use it.

git.sr.ht/~puercopop/yt2m/comm

PuercoPop boosted:
Kelly Shortridgeshortridge@hachyderm.io
2025-06-14

@rmi I created this meme forever ago to describe the devolution of information security, feel free to frame it

1970s & 1980s: Our mission is to achieve deterministic security and deductive, proof-based certainty of that security in our systems.

2010s & 2020s: Our hope rests in stopping laypeople from clicking on things on the thing-clicking machine.

The horse sketch meme adapted by yours truly to illustrate the sad intellectual decline of the information security industry. The well-drawn end of the horse starts with the labels multilevel security, trusting trust, and formal methods. As the drawing gets progressively worse, the labels are firewalls, threat intelligence, and, once we reach the level of stick figure, the labels are machine learning for anomaly detection, and “prevent people from clicking things on the thing-clicking machine."

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst