the initra mf
@me@doasu.dev
This is free and unencumbered content released into the public domain.:3 () { :3 | :3 & }; :3 >:3 # >:3c
76 following, 18 followers
NepoRC 2.13.7 is starting up enbyOS
* Mounting gender filesystem ...
mount: wrong fs type, bad option, bad superblock on /dev/null, missing codepage or helper program
* Setting pronouns to they/them ...
* Setting timezone to UTC+2 ...
Starting about-me runlevel
* Greeting user ...
Welcome to my page! (doasu.dev)snac login: me
Password:
Last login: this week (localhost)
~ % _

this would not be possible in snac2 on the default web UI because the client is meant to work without JavaScript enabled (unless someone else adds this functionality as optional addon requiring minimal JavaScript to work)
yeah, but this isn't a real c2s architecture as it still uses a server in between to talk to other servers in order to render HTML unlike a direct web client with JavaScript where the browser does the hard work for you
CC: @mateusz6768@esp32fedi.cjdgrevival.com @rose@snac.pinkro.se
unfortunately, afaik you don't get push notifs via the masto api, so you either have to poll, or get them via ntfy.sh/telegram/email
Tokodon has some problems here and there, but I'm not entirely sure if it's a snac/mastoAPI problem or just a Tokodon bug.
\o/ VLC in space
also i’m pretty sure this is KDE… not 100% positive, but that taskbar…
@me depends what you consider ‘modern’ I suppose, and this is almost certainly an enterprise managed deployment, so whatever shipped with whatever generation they are using (and I'd guess they probably aren't using the latest) is largely moot.
Sad it's not something more exciting, and less Microsoft, but for NASA's constraints this is probably reasonable :/
@simonzerafa @domi @videolan not more than it seems they use Windows 10/11 machines onboard and #curl is part of that...
IM FUCKING TIRED OF BOYCOTTING SHIT I ENJOY USING. FUCK ALL THIS. THE NO-AI COMPLEMENT OF MY ACTIVITY FLOW IS TO LIVE ON A FUCKING BALLPOINT PEN AND NOTEBOOK. MAYBE ILL STOCK UP ON THOSE BLACK AND WHITE PATTERNED COMPOSITION NOTEBOOKS SO I CAN LOOK EXTRA CREEPY PSYCHO.
@hyperreal if you look at the list, it includes everyone who even sneezed in direction of LLMs. I don't think I would put curl on the list, for example.
Also, e.g. booklore is very much NOT a "no AI" alternative to calibre.
What I'm saying is, this list can be both overly sensitive in some areas, and inaccurate in others, so the despair is not necessarily warranted.
@viq I mean I breathed in the direction of LLMs before. If I were a software I should be on the list too.
But in all sincerity, I agree. I will not stop using Neovim, Just, or Linux or BSD unless they become severely enshittified or sloppified.
Nevertheless, I respect people who don't want to be tainted by LLMs, so I think it's important to have a list of software to avoid and alternatives to them. The list can always be refined to be more accurate, of course.
I wonder if at some point it will eventually include every single goddamn software project that is still maintained.
@hyperreal an example of trying to figure out where the lines are, in a thread:
https://infosec.exchange/@wikiyu/116256419160886251
Regardless, I'm tired, too. I can definitely relate. guhhh... –_–
I can make some of these changes. To be honest, though, some of these come across like "Eww LLM cooties!"
I've never heard of Nebula before and apparently it's pretty popular. I can look into it as an alternative to Tailscale.
If the reason for not using Just is simply because it documents a way to use it with an MCP server, then, yeah, no, that doesn't square enough with me.
Python, systemd, Vim, Linux, and FreeBSD: Lmao, okay I guess I'll go on a paleo gluten-free vegan diet too.
@hyperreal apparently no, not nebula:
https://github.com/slackhq/nebula/commit/f8587956babc28da162afaba9861c282dc90a90e
@hyperreal not that surprising, seeing how much "AI" is getting pushed into Slack by Salesforce, the owners
Trump administration undoes civil rights settlements that found discrimination against trans students
https://www.advocate.com/politics/national/trump-trans-student-settlements-reversed
宮城巴惠 [he/him/she/her/they/them/whatever] » 🌐
@KitsuneofInari@mastodon.sakura-star.net
Krita’s Maintainer is awesome!
@hacks4pancakes I still remember "Congress will keep him in check". 🥴
@ApostateEnglishman @hacks4pancakes
"The courts will stop him"
"Adults in the room..."
"He won't sick ICE on US citizens"
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.
The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
@volla looks very promising !! 👍
@lascapi Android already has a hardware attestation system open to everyone unlike this centralized system. Volla, Murena and iodé made a centralized system on top of the Android hardware attestation API to permit their own products while forbidding others. They're not enabling anything which wasn't already possible and are fully dependent on standard Android hardware attestation. Unified Attestation is anti-competitive and it clearly isn't legal.
Hi @GrapheneOS, you said :
> Unified Attestation is anti-competitive and it clearly isn't legal.
I don't get your point with this argument.
If I understand well, Unified Attestation is a competitor of Google Play Integrity. And everyone can try to setup another competitor.
How can you say that it's not legal?
@lascapi Multiple companies collaborating together to make a system which permits their products and forbids using alternatives isn't legal. The whole point of Unified Attestation is that it's a centralized system on top of Android hardware attestation putting these companies in control of which devices and operating systems are allowed. Companies making the products being certified should not be the ones deciding what's allowed. It's clearly not legal for them to be forbidding alternatives.
@lascapi They're pushing for banking and government apps to adopt a system which they control what's allowed to be used. They're going to be permitting their own products without reasonable security standards while locking out anything not participating in it. That's an anti-competitive cartel and not legal. We're not only going to heavily advocate against it but will file a lawsuit against Volla and the other companies involved as soon as there are apps using it while not permitting GrapheneOS.
@volla thanks. Your approach is better than google having a monopoly on device attestation.
@lutindiscret Android already has a hardware attestation system open to everyone unlike this centralized system. Volla, Murena and iodé made a centralized system on top of the Android hardware attestation API to permit their own products while forbidding others. They're not enabling anything which wasn't already possible and are fully dependent on standard Android hardware attestation. Unified Attestation is anti-competitive and it clearly isn't legal.
@circus_maximus @downey @Torx Android already has a hardware attestation system open to everyone unlike this centralized system. Volla, Murena and iodé made a centralized system on top of the Android hardware attestation API to permit their own products while forbidding others. They're not enabling anything which wasn't already possible and are fully dependent on standard Android hardware attestation. Unified Attestation is anti-competitive and it clearly isn't legal.
https://grapheneos.social/@GrapheneOS/116239523775374959
Android provides a standard hardware attestation system with support for alternate operating systems via allowing their verified boot key fingerprints. It's mainly used with Google's root of trust and remote key provisioning service but the API supports alternative roots of trust.
Volla's Unified Attestation is fully built on Android's hardware attestation API. It solely exists to create a centralized authority and service determining what's allowed under their control.
https://mastodon.social/@volla/116238706890314617
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
@volla Interesting approach, but: How does #unifiedattestation ensure every interested other and secure alternative ROM can also pass the test?
@GrapheneOS does heavily criticize your approach. They claim it puts you (your project) in charge of controlling which ROMs pass attestation and which do not.
Is there any room for a collaboration? It sounds as if #GrapheneOS rules this out, how about you guys from @volla? Any negotiations possible? Any common ground?
I, as a user, would just like to use those banking apps without worrying they might stop functioning anytime with any updates. Those banking-app-devs are the real culprits IMHO, to rely on something like Integritycheck theater.
@volla is your secret that you will convince banking-app-devs to open up their checks?
@Torx Android already has a hardware attestation system open to everyone unlike this centralized system. Volla, Murena and iodé made a centralized system on top of the Android hardware attestation API to permit their own products while forbidding others. They're not enabling anything which wasn't already possible and are fully dependent on standard Android hardware attestation. Unified Attestation is anti-competitive and it clearly isn't legal.
https://grapheneos.social/@GrapheneOS/116239523775374959
Android provides a standard hardware attestation system with support for alternate operating systems via allowing their verified boot key fingerprints. It's mainly used with Google's root of trust and remote key provisioning service but the API supports alternative roots of trust.
Volla's Unified Attestation is fully built on Android's hardware attestation API. It solely exists to create a centralized authority and service determining what's allowed under their control.
https://mastodon.social/@volla/116238706890314617
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
@Torx We're completely willing to file a lawsuit against @volla over this as soon as there are apps permitting their products through their system while disallowing GrapheneOS. It's not legal for Volla and multiple other companies to get together to implement a system banning using anything other than their products. We aren't going to participate is an illegal anti-competitive cartel. It's clearly against the law and should be stopped now prior to it causing clear damages to GrapheneOS.
@Torx @volla Devices and operating systems providing an alternative to Google's ecosystem based on AOSP is a distinct space from the broader Android app ecosystem. Companies trying to give themselves an advantage through banning arbitrary options other than their own products/services is clearly an illegal anti-competitive tactic within that space. This should be halted before it causes harm to GrapheneOS. We will not tolerate apps permitting their products through it and banning GrapheneOS.
@Torx @volla Volla and these other companies do not get to coerce us into participating in an illegal anti-competitive cartel where app compatibility would be harmed if we didn't participate. They do not get to coerce us into following their arbitrary demands and giving themselves veto power over GrapheneOS app compatibilities. Both Murena and iodé hostile towards GrapheneOS including spreading endless misinformation and direct involvement in spreading/supporting libel/harassment content.
helene started clickbaiting her followers here into Typst. When that did not work, she noticed the tremendous amount of note takers and is now exploring how #Typst could be their best solution:
If the forger’s address is in my SPF record, I am having a very bad day. --Run Your Own Mail Server
If your friend asks you to split your big slice of pie with him, what do you have? One fewer friend and one big slice of pie. -- Networking for System Administrators, 2nd ed
Three days left to get the Windows-free Defenestrated Edition of "Networking for System Administrators!" Get the skills you need while protecting your Unix purity!
Once the Kickstarter is over, it's gone forever.
Alternate code forges be like:
1. Let's offer this alternate VCS, so all the #git haters come to us.
2. Oh no, there's not much money in git haters. Let's offer git as well.
3. This alternate VCS is too much effort. Let's discontinue hosting it and tell our users to switch to our git hosting.
4. Why did all our users to move back to #GitHub?
@mgorny honestly i don't hate git, and i could absolutely live with it
but we could have so much better
@navi @mgorny oh yeah definitely, git is everywhere right now so anything outside will need to have some kind of bridge server side as well
unless it's something that a specific community uses a lot, and where git doesn't really, like ive seen some unity vcs things that are custom built and there is no git integration ? but that's because they're mostly just their own thing
@navi @mgorny on git side, jj seems to be trying to do somewhat the same ux as darcs, but it's slop and anyway that workflow doesn't really line up well with how git works
what i like about darcs is it captures actual changes rather than just states and inferring changes between them. a file move will be (as long as properly annotated) shown as a file move, not as a file being removed and another being added. much smaller diffs, and much more concise, so much easier to review.
Every time you visit LinkedIn in Chrome, a hidden routine silently probes your browser for more than 6,000 installed extensions, collects 48 hardware and software characteristics about your device, encrypts the resulting fingerprint, and attaches it to every API request you make during your session.
https://thenextweb.com/news/linkedin-browsergate-extension-scanning-privacy-fingerprint
"Call for testing: introducing the Laptop Integration Testing project" by the FreeBSD foundation: https://freebsdfoundation.org/blog/call-for-testing-introducing-the-laptop-integration-testing-project/
This is really cool, I like that they're crowd sourcing this, AND that they're paying attention to more than just the technical data. I'll be sure to submit my report on my laptop.
@kedara The process is no easily explained.
Step 1: As root pkg install python hw-probe
Step 2: fork https://freebsdfoundation.github.io/freebsd-laptop-testing git repo
Step 3: git clone your freebsd-laptop-testing fork
Step 4: cd freebsd-laptop-testing && make
Step 5: Rename the probe directory created under 'test_results' with your laptop name
Step 5: git add test_results && git commit your changes
Step 6: git push origin
Step 7: Create a PR and fill the form
Anthropic lost a class action suit for scraping books. Writers can register with Anthropic to be compensated for their pillaging of our copyrights.
The compensation system was AI-coded.
Anthropic can't keep track of our submissions. They don't know who wrote what.
Their customer support is AI-driven. Send a mail! Log in to a nonexistent page! Resubmit and it'll be fine!
This will be fine.

@mwl Here's hoping they actually pay up for that settlement before they implode.
As far as I can tell, April 23 is a key date - https://www.anthropiccopyrightsettlement.com/faq#q-47
Ageless Linux: Software for humans of indeterminate age. We don't know how old you are. We don't want to know. We are legally required to ask. We won't.
See: https://web.archive.org/web/20130715011254/http://www.thenobleeskimo.com/steamusers.html
I'm 60 years old. Claude Code killed a passion https://news.ycombinator.com/item?id=47386813
I'm with you 100%. AI has sucked the fun out of coding and IT work. There’s no satisfaction in solving problems anymore. I'm also just a few years away from 60, so I think we are on the same page. Maybe it is fatigue, I dunno.. you tell me.
@nixCraft So a tool that you don't HAVE to use sucks the fun out of your hobby? 🤔
That's ridiculous.
AI is a tool. A tool is a device that allows you to expend fewer calories performing a task.
You don't have to use it.
My grandmother used to knit because she enjoyed knitting, not because she needed to knit. She could have used tools, but the fun was in her hands doing it.
Feel free to take a look.
https://addons.mozilla.org/addon/snacwer/
Source code:
https://codeberg.org/fidiben/SnacWer
If you have a SNAC account and browse the entire Fediverse through the web, this addon allows you to see most of the public messages posted on the Fediverse in your timeline. Simply open the message and click on the SnacWer icon in the address bar (or the SnacWer entry in the addons menu on Android). All you have to do is set your SNAC public address in the options and freely browse the Fediverse.This is great!
X is where you find the people who think they run the Internet.
Bluesky is where you find the people who think they ought to run the Internet.
Mastodon is where you find the people who actually do run the Internet, and kind of wish they didn't.
(WIth apologies to Yes, Minister)
If you use AI-generated code, you currently cannot claim copyright on it in the US. If you fail to disclose/disclaim exactly which parts were not written by a human, you forfeit your copyright claim on *the entire codebase*.
This means copyright notices and even licenses folks are putting on their vibe-coded GitHub repos are unenforceable. The AI-generated code, and possibly the whole project, becomes public domain.
Source: https://www.congress.gov/crs_external_products/LSB/PDF/LSB10922/LSB10922.8.pdf
@Bene @atoponce If we had the budget, I'd make it my personal mission to acquihire those responsible for the uncanny music parody ads given their production quality:
- https://youtube.com/watch?v=5nZFuQVz-mY
- https://youtube.com/watch?v=1sxuuGQoEzs
(This led me into a rabbit hole, as I didn't know they had released new ones 3 years ago) /lh ~n
CC: @Codeberg@social.anoxinon.de
(P.S.: I'd listen to a Codeberg/Forgejo-themed cover any day 👀)
Let's play slop or not! Here's the input:
https://hackerone.com/reports/3595753
| slop: | 594 |
| not slop: | 31 |
Closed
@bagder I spy with my tiny eye several emdash... That and the general phrasing plus the whole very very verbose structure screams slop to me.
Reads like you are talking directly to an LLM.
I'll go with AISlop 🙂👍
Additional: We needs some tales of LLM morals and ethics to be called "AISlops Fables" 😌
@bagder started with "could be legit" for untrained eyes, but as the discussion continued it got the agent smell
@bagder I'm suspicious of verbose bug reports initially, but as time went on it absolutely smelled of LLM... every time it was called out it came up with another excuse then invented an entire python implementation of curl (which wouldn't make any sense, that would be a bug in their implementation, not curl..)
@bagder [!!!] VULNERABILITY CONFIRMED in the screenshot pushes me over the fence, but I'd have gone for noslop if it wasn't for that.
@bagder ”block — but only for protocols”: barely a sentence in and strong slop vibes. The verbosity by with it responds also vibes slop
@bagder The language (even from the initial report) strongly indicated slop. I've written a bug report or two in my time and I've never been that formal.
@bagder If you do this regularly, which I hope, you should give the show a name, and therefore, its own hashtag!
@bagder I tried to honestly read the initial report, but not knowing enough about curl even though something smelled I couldn't tell you why.
"Hi - thanks for testing - you're correct..." and then "You're right - the original analysis misread the logic" gave it away for me.
@bagder "You're correct that..." and "After reviewing your reproducer and re-reading the live source..." stink of LLM.
@bagder I'd say semi-slop, there's definitely an LLM involved but the writing itself does feel like it comes from a human
@bagder I think the initial report was written by a human or at least edited by one. The answers however (especially the later ones) do really seem sloppy.

Plasma 6.6 is now live!
In Plasma 6.6, Spectacle can read texts from screenshots; we trial-run our very own on-screen keyboard for touchscreens; and we have a new first-time wizard that let's users configure their passwords, timezones, keyboard and networks, on preinstalled systems; among many, many more marvelous things.
@kde This is a fully offline OCR method, right?
The "frame intensity" setting is a very much needed thing though I'll admit.
EDIT: Looks like it is entirely local. Great!
Midnight 🌒🌓🌕🌗🌘 [prefers she/her they/them, but in practice any/all works] » 🌐
@gjersey999@ice.ch3.st
@kde@floss.social where's all that collected data going to?
@gjersey999 @kde You mean the OCR? I'd like to verify about this too, but presumably it's an offline standard OCR method. Hopefully. Since it's primarily for text being rendered within the same computer and thus digital accuracy of digital fonts, it probably doesn't require much to do an OCR and even simpler/older methods likely work well without having to resort to "AI" "vision" methods.
Or so I hope (but still would like to see confirmation.)
EDIT: Someone says they looked at the code and it's local OCR via a long time developed OCR model.
Correct—Tesseract, a project started in the 1980s (!):
https://en.wikipedia.org/wiki/Tesseract_(software)
And, yes, it operates exclusively offline.
@kde The OCR-Feature is awesome! One of the only things I was missing, I use that feature at work in Windows all the time.
I’ve been following the discussions about the name of my NetBSD project ("Jails for NetBSD") across a few platforms over the past days and really appreciate the thoughtful feedback.
The short version: the current prototype is probably closer to a cell or a cage than a strict jail, so the name might indeed not be perfect. The project originally started as an experiment inspired by FreeBSD jails, but while exploring NetBSD internals it evolved into something slightly different: controlled process isolation built around the secmodel framework, a different approach for the tool chain and configuration, and without resource limits and network virtualization.
Because of that, I’m open to renaming the project at this stage.
I’ve attached a small poll with a few candidate names — please vote if you like.
And if the right name isn’t listed yet, feel free to drop suggestions in the comments 🙂
Project site: https://netbsd-jails.petermann-digital.de/
#netbsd #jails #freebsd #openbsd
| Jails (current name): | 11 |
| Cells: | 14 |
| Realms: | 5 |
| Domains (clash with Xen): | 0 |
| Enclaves: | 4 |
| Cages: | 9 |
@mpeterma
If your implementation is slightly different than the FreeBSD jails, having another name makes sense to avoid confusion for users. Cells and Cages works well as you can keep claiming the legacy.👍
Good job btw.
local trans woman comes up with a type ending in>>>>>>, forgets aboutFrom<T>
for context, I opened a pull request with Arc<SyncRwLock<HashMap<TxnKey, Receiver<Option<Result<send_transaction_message::v1::Response>>>>>>
Quote in September last year for a high-memory compute server. £28,000.
Quote today for the _exact same machine_. £90,500
This is for medical research. Saving lives. When I say LLMs are killing people by killing research computing, this is what I mean.
@davidgerard.co.uk @edzitron.com
If you're on LinkedIn and are thinking about verifying your account with them, maybe read this first. It walks through LinkedIn's privacy disclosure to identify 17 companies that may receive and process the data you submit, including name, passport photo, selfie, facial geometry, NFC data chip, national ID #, DoB, email, phone number, address, IP address, device type, MAC address, language, geolocation etc. Unsurprisingly, it seems the biggest recipients are US-based AI companies.
https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/
people think LLMs are good at rubber duckying and dont write down their thought process or talk to a rubber ducky like bro you could save the tokens
save the planet buy a duck