Andreas Schneider

FOSS Hacker (Samba, MIT Kerberos, libssh, cmocka, cwrap, darktable, etc.). Loves bicycles.

Andreas Schneidercryptomilk
2025-06-25

@fleaz Wenn nur die Leute konsequent ihren Mist auch so markieren würden 😞

Andreas Schneidercryptomilk
2025-06-24

libssh 0.11.2 security and bugfix release is out addressing 7 CVEs.

Thanks to the security researchers and the libssh team for fixing those bugs.

libssh.org/2025/06/24/libssh-0

Andreas Schneider boosted:
2025-06-10

When browsing through the thousands of new uploads on #Printables, I really wonder if it’s still worth putting effort into free quality content. Without a big channel or ad reach, even great models can get buried. And with “Trending” mostly surfacing what’s already popular, new creators barely get a chance. Feels like the app store dilemma all over again. #Printables #Prusa3D

Andreas Schneidercryptomilk
2025-06-03

@jelmer If you just want to plan routes I suggest bikerouter.de

Andreas Schneidercryptomilk
2025-06-03

You can't really trust any app you don't have the source code for localmess.github.io/

Andreas Schneider boosted:
2025-05-21

🚨 *Attention!* We were made aware of a fake “KeePassXC Password Manager Pro” repository on GitHub that links to unverified external binary downloads.
- There is NO Pro version of KeePassXC!
- You get all the “Pro” features with the regular version.
Please download KeePassXC only from trusted distribution channels linked on keepassxc.org/ !

Screenshot of the fake “KeePassXC Pro - Ultimate Security Solution” README.Screenshot of the fake Pro features.
Andreas Schneidercryptomilk
2025-05-20

@bagder @aris Yes, if you use the async libssh API which curl doesn't do. The libssh team will try to provide a patch for curl ...

Andreas Schneidercryptomilk
2025-05-20

@bagder @aris curl doesn't use the libssh async aio for downloading files with sftp. What do you expect?

Andreas Schneidercryptomilk
2025-05-20

@bagder The SFTP AIO API is only used for uploading files: github.com/curl/curl/commit/8b

You tested downloading?

Andreas Schneidercryptomilk
2025-05-20

@bagder Does curl use the SFTP AIO API? I guess the answer is NO ...

api.libssh.org/stable/libssh_t

Andreas Schneider boosted:
2025-05-16

FreeCAD 1.0.1 released
We've just released FreeCAD 1.0.1. There are no new features in this version. The 176 commits that we backported from the main development branch are fixes for various issues identified in the stable release. We encourage everyone using v1.0 to upgrade!

blog.freecad.org/2025/05/16/fr
#Announcement

Andreas Schneidercryptomilk
2025-05-16
Andreas Schneidercryptomilk
2025-05-16

You want to get started with and don't know how as you're overwhelmed by the number of plugins and config file?

Maybe start here with the book "LazyVim for Ambitious Developers":
lazyvim-ambitious-devs.phillip

Andreas Schneider boosted:

#Photography picks of the day:

➡️ @darktable - Free open source software to organise, view, develop raw images

➡️ @camerawiki - Volunteers creating free encyclopedia of all cameras & lens models

➡️ @ewenbell & @ewen - Pro photographer making really excellent videos about photography, cameras, travel

➡️ @tokyocameraclub - Highlighting Japanese photographers

➡️ @pixelfed - Fediverse alternative to Instagram

➡️ @ArtPhotosDesk - Human-curated account of interesting photos & art on Fediverse

🧵 1/14

Andreas Schneider boosted:
Finn :finn: :gay: :demisexual:finn@ice.finnley.dev
2025-05-15

Want to keep your files safe? Here are your options!

Truecrypt
PBKDF2-RIPEMD160 with 1-2k iterations, practically impossible to break!

Veracrypt
PBKDF2-RIPEMD160 with 327-665k iterations or 500k iterations for SHA-2 or Whirlpool. Virtually impossible to crack even in the distant future!

Seagate Barracuda 3TB
Data unrecoverable after a few months of usage, even on unencrypted volumes!

Andreas Schneider boosted:
pixelfedpixelfed
2025-05-14

Coming soon: A complete redesign.

We've scrapped our old web UI and started fresh to bring you what matters - faster loading, cleaner design, and a photo experience that just makes sense (finally!).

Stay tuned ✨

Our new UI, coming soon!
Andreas Schneider boosted:
Josh Aas 🇺🇦joshaas@infosec.exchange
2025-05-14

We created a safer AV1 decoder, rav1d, by forking the dav1d decoder and rewriting the C code in Rust. It works well except our Rust is 5% slower than the C. We're not sure why so we're offering a $20k bounty to figure it out and make the Rust code faster. memorysafety.org/blog/rav1d-pe

Andreas Schneider boosted:
Alexander Bokovoyabbra
2025-05-12

:

- together with @cryptomilk we've got to handle IP addresses associated with the host as aliases for Kerberos authentication. You'd be able to do SMB3 with Kerberos using IP address and still use Kerberos auth. This is work in progress.

- keep discussing with DocHelp folks IAKERB interop with Windows. Both sides need some work, which is exciting. MSFT also works on improvements in the collaboration area: bsky.app/profile/syfuhs.net/po

..

Andreas Schneider boosted:
2025-05-11

The @Cockpit team has tried sourcery.ai and GitHub #Copilot automatic #PR #reviews for four weeks. I wrote down our conclusions.

TL/DR: a lot of noise, a lot of bad advice, and not enough signal, so we switched it off again.

I hope other teams/developers have more success with that -- it can't possibly be that bad or useless for everyone, otherwise it wouldn't/shouldn't be a thing any more?

piware.de/post/2025-05-09-sour

#ai #llm #sourcery

Andreas Schneider boosted:
Pat Davidpatdavid
2025-05-11

Ahhh. Recently one of my work sites was found by an aggressive Brazilian scraping bot (possibly ai scanning). So @cadey to the rescue with Anubis (anubis.techaro.lol)! ❤️

patdavid.net/2025/05/anubis-an

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst