Nicolás Alvarez

Currently hacking and documenting Apple stuff for fun and no profit.

2025-06-26
Nicolás Alvarez boosted:
leo vriska :light2:leo@60228.dev
2025-06-25

softwareupdated? no it isn't that's why i'm looking at these logs

2025-06-24

@mjg59 "or you reduce that risk somewhat by spawning a local server and POSTing the token back to it"
Apple is still stubbornly refusing to let websites in Safari connect to localhost.

2025-06-23

@vampirdaddy @isotopp Suppose a DNS resolver library has a bug that makes it crash on responses that contain certain data, despite being valid. One day a change on someone else's DNS server makes your app start crashing out of the blue.

What would it even *mean* for "DNS responses to be tested and versioned"?

Nicolás Alvarez boosted:
Zelda🎀TheZeldaZone🏳️‍⚧️🎮TheZeldaZone
2025-06-23

With video game prices rising, AI is a critical tool for developers and gamers alike.

By seeing which games use AI, gamers can save money by not buying those games.

2025-06-23

@idkrn support.apple.com/en-lamr/guid I just found this section says there is SPTM on macOS, so it seems the article isn't even self-consistent 🙃

2025-06-22

@filippo @goetz @julijane what do you think of the warning libxml2 added to its README? I sure hope banks, commercial operating systems, etc. stopped using libxml2 after that.

2025-06-22

@vampirdaddy @isotopp The outage wasn't caused by a change in the library, but by a change in the CT logs which the library failed to parse correctly. Dependency version pinning wouldn't have helped.

2025-06-22

@idkrn @siguza You can run unsigned code. There's still PPL and now SPTM on macOS, contradicting that article.

In fact, is PPL even directly related to code signing enforcement?

2025-06-22

@goetz @filippo @julijane ...without warranty of any kind, including the implied warranty of fitness for a particular purpose...

2025-06-22

@wiredguy I can't imagine @siguza using Apple's LLM API...

2025-06-22

@filippo @julijane That's the banking system's fault.
I fully agree with softwaremaxims.com/blog/Not-A-

2025-06-21

@tagomago @pmOS_devices the wiki page seems to explain the state quite well wiki.postmarketos.org/wiki/App
Although maybe it should be clearer about which steps are one-time and which have to be repeated on every boot...

2025-06-21

@zagura @pmOS_devices Devices vulnerable to checkm8 can be booted to a different OS by exploiting the bootrom over USB, have to re-do it on every reboot.

I tried it in 2020, wasn't really usable back then :P

Nicolás Alvarez boosted:
Luna Fox Wintersfoxtrotluna@bark.lgbt
2025-06-21

They're putting blue food coloring in everything.

A short story

blog.foxtrotluna.social/theyre

A trio of blue milk bottles sits on a driveway
2025-06-21

@esm @doskel it uses libcdparanoia, it should be fine

2025-06-21

@slonk @doskel It's a kio thing, but it uses cdparanoia to read the audio CD so it's probably Linux-specific

2025-06-20

They fixed it, but the only difference I see is for photos_memories assets, which makes no sense. I think I'm querying this server incorrectly and missing half the story.

2025-06-20

Apparently all Apple Intelligence features stopped working on iOS 26 beta today. They updated *something* in the assets for local models. I don't know what the change was yet.

It was before 20:00UTC on the 19th, but I only refresh this manually so I don't know exactly at what time either.

2025-06-18

The mess goes something like this data.nicolas17.xyz/arc-explain
(Still missing one more variant)

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst