the initra mf
@me@doasu.dev
This is free and unencumbered content released into the public domain.:3 () { :3 | :3 & }; :3 >:3 # >:3c
82 following, 23 followers
NepoRC 2.13.7 is starting up enbyOS
* Mounting gender filesystem ...
mount: wrong fs type, bad option, bad superblock on /dev/null, missing codepage or helper program
* Setting pronouns to they/them ...
* Setting timezone to UTC+2 ...
Starting about-me runlevel
* Greeting user ...
Welcome to my page! (doasu.dev)snac login: me
Password:
Last login: this week (localhost)
~ % _

this would not be possible in snac2 on the default web UI because the client is meant to work without JavaScript enabled (unless someone else adds this functionality as optional addon requiring minimal JavaScript to work)
yeah, but this isn't a real c2s architecture as it still uses a server in between to talk to other servers in order to render HTML unlike a direct web client with JavaScript where the browser does the hard work for you
CC: @mateusz6768@esp32fedi.cjdgrevival.com @rose@snac.pinkro.se
unfortunately, afaik you don't get push notifs via the masto api, so you either have to poll, or get them via ntfy.sh/telegram/email
Tokodon has some problems here and there, but I'm not entirely sure if it's a snac/mastoAPI problem or just a Tokodon bug.
I'll let you know if I find anything better, lol.
ig snac's interface it is :p
(I like it, but I prefer to use my browser strictly for, well, browsing the web, not apps/"social media")
Trump administration undoes civil rights settlements that found discrimination against trans students
https://www.advocate.com/politics/national/trump-trans-student-settlements-reversed
\o/ VLC in space
also i’m pretty sure this is KDE… not 100% positive, but that taskbar…
@me depends what you consider ‘modern’ I suppose, and this is almost certainly an enterprise managed deployment, so whatever shipped with whatever generation they are using (and I'd guess they probably aren't using the latest) is largely moot.
Sad it's not something more exciting, and less Microsoft, but for NASA's constraints this is probably reasonable :/
@simonzerafa @domi @videolan not more than it seems they use Windows 10/11 machines onboard and #curl is part of that...
宮城巴惠
[he/him/she/her/they/them/whatever] » 🌐
@KitsuneofInari@mastodon.sakura-star.net
Krita’s Maintainer is awesome!
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.
The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
@volla Interesting approach, but: How does #unifiedattestation ensure every interested other and secure alternative ROM can also pass the test?
@GrapheneOS does heavily criticize your approach. They claim it puts you (your project) in charge of controlling which ROMs pass attestation and which do not.
Is there any room for a collaboration? It sounds as if #GrapheneOS rules this out, how about you guys from @volla? Any negotiations possible? Any common ground?
I, as a user, would just like to use those banking apps without worrying they might stop functioning anytime with any updates. Those banking-app-devs are the real culprits IMHO, to rely on something like Integritycheck theater.
@volla is your secret that you will convince banking-app-devs to open up their checks?
@Torx Android already has a hardware attestation system open to everyone unlike this centralized system. Volla, Murena and iodé made a centralized system on top of the Android hardware attestation API to permit their own products while forbidding others. They're not enabling anything which wasn't already possible and are fully dependent on standard Android hardware attestation. Unified Attestation is anti-competitive and it clearly isn't legal.
https://grapheneos.social/@GrapheneOS/116239523775374959
Android provides a standard hardware attestation system with support for alternate operating systems via allowing their verified boot key fingerprints. It's mainly used with Google's root of trust and remote key provisioning service but the API supports alternative roots of trust.
Volla's Unified Attestation is fully built on Android's hardware attestation API. It solely exists to create a centralized authority and service determining what's allowed under their control.
https://mastodon.social/@volla/116238706890314617
🔐 Introducing: Unified Attestation
An open-source project for verifying the integrity of Android apps—as an alternative to Google's Play Integrity.The goal is to make apps such as banking and payment apps usable on independent Android systems without relying on Google services.
We invite developers, ROM projects, and app providers to get involved.
#Volla #VollaOS #OpenSource #software #hardware #Privacy #Security #DeGoogle
@Torx We're completely willing to file a lawsuit against @volla over this as soon as there are apps permitting their products through their system while disallowing GrapheneOS. It's not legal for Volla and multiple other companies to get together to implement a system banning using anything other than their products. We aren't going to participate is an illegal anti-competitive cartel. It's clearly against the law and should be stopped now prior to it causing clear damages to GrapheneOS.
@Torx @volla Devices and operating systems providing an alternative to Google's ecosystem based on AOSP is a distinct space from the broader Android app ecosystem. Companies trying to give themselves an advantage through banning arbitrary options other than their own products/services is clearly an illegal anti-competitive tactic within that space. This should be halted before it causes harm to GrapheneOS. We will not tolerate apps permitting their products through it and banning GrapheneOS.
@Torx @volla Volla and these other companies do not get to coerce us into participating in an illegal anti-competitive cartel where app compatibility would be harmed if we didn't participate. They do not get to coerce us into following their arbitrary demands and giving themselves veto power over GrapheneOS app compatibilities. Both Murena and iodé hostile towards GrapheneOS including spreading endless misinformation and direct involvement in spreading/supporting libel/harassment content.
helene started clickbaiting her followers here into Typst. When that did not work, she noticed the tremendous amount of note takers and is now exploring how #Typst could be their best solution:
Three days left to get the Windows-free Defenestrated Edition of "Networking for System Administrators!" Get the skills you need while protecting your Unix purity!
Once the Kickstarter is over, it's gone forever.
Alternate code forges be like:
1. Let's offer this alternate VCS, so all the #git haters come to us.
2. Oh no, there's not much money in git haters. Let's offer git as well.
3. This alternate VCS is too much effort. Let's discontinue hosting it and tell our users to switch to our git hosting.
4. Why did all our users to move back to #GitHub?
@mgorny honestly i don't hate git, and i could absolutely live with it
but we could have so much better
@navi @mgorny oh yeah definitely, git is everywhere right now so anything outside will need to have some kind of bridge server side as well
unless it's something that a specific community uses a lot, and where git doesn't really, like ive seen some unity vcs things that are custom built and there is no git integration ? but that's because they're mostly just their own thing
@navi @mgorny on git side, jj seems to be trying to do somewhat the same ux as darcs, but it's slop and anyway that workflow doesn't really line up well with how git works
what i like about darcs is it captures actual changes rather than just states and inferring changes between them. a file move will be (as long as properly annotated) shown as a file move, not as a file being removed and another being added. much smaller diffs, and much more concise, so much easier to review.
Every time you visit LinkedIn in Chrome, a hidden routine silently probes your browser for more than 6,000 installed extensions, collects 48 hardware and software characteristics about your device, encrypts the resulting fingerprint, and attaches it to every API request you make during your session.
https://thenextweb.com/news/linkedin-browsergate-extension-scanning-privacy-fingerprint
"Call for testing: introducing the Laptop Integration Testing project" by the FreeBSD foundation: https://freebsdfoundation.org/blog/call-for-testing-introducing-the-laptop-integration-testing-project/
This is really cool, I like that they're crowd sourcing this, AND that they're paying attention to more than just the technical data. I'll be sure to submit my report on my laptop.
@kedara The process is no easily explained.
Step 1: As root pkg install python hw-probe
Step 2: fork https://freebsdfoundation.github.io/freebsd-laptop-testing git repo
Step 3: git clone your freebsd-laptop-testing fork
Step 4: cd freebsd-laptop-testing && make
Step 5: Rename the probe directory created under 'test_results' with your laptop name
Step 5: git add test_results && git commit your changes
Step 6: git push origin
Step 7: Create a PR and fill the form
Anthropic lost a class action suit for scraping books. Writers can register with Anthropic to be compensated for their pillaging of our copyrights.
The compensation system was AI-coded.
Anthropic can't keep track of our submissions. They don't know who wrote what.
Their customer support is AI-driven. Send a mail! Log in to a nonexistent page! Resubmit and it'll be fine!
This will be fine.

Ageless Linux: Software for humans of indeterminate age. We don't know how old you are. We don't want to know. We are legally required to ask. We won't.
See: https://web.archive.org/web/20130715011254/http://www.thenobleeskimo.com/steamusers.html
I'm 60 years old. Claude Code killed a passion https://news.ycombinator.com/item?id=47386813
I'm with you 100%. AI has sucked the fun out of coding and IT work. There’s no satisfaction in solving problems anymore. I'm also just a few years away from 60, so I think we are on the same page. Maybe it is fatigue, I dunno.. you tell me.
@nixCraft So a tool that you don't HAVE to use sucks the fun out of your hobby? 🤔
That's ridiculous.
AI is a tool. A tool is a device that allows you to expend fewer calories performing a task.
You don't have to use it.
My grandmother used to knit because she enjoyed knitting, not because she needed to knit. She could have used tools, but the fun was in her hands doing it.
Feel free to take a look.
https://addons.mozilla.org/addon/snacwer/
Source code:
https://codeberg.org/fidiben/SnacWer
If you have a SNAC account and browse the entire Fediverse through the web, this addon allows you to see most of the public messages posted on the Fediverse in your timeline. Simply open the message and click on the SnacWer icon in the address bar (or the SnacWer entry in the addons menu on Android). All you have to do is set your SNAC public address in the options and freely browse the Fediverse.This is great!
X is where you find the people who think they run the Internet.
Bluesky is where you find the people who think they ought to run the Internet.
Mastodon is where you find the people who actually do run the Internet, and kind of wish they didn't.
(WIth apologies to Yes, Minister)
If you use AI-generated code, you currently cannot claim copyright on it in the US. If you fail to disclose/disclaim exactly which parts were not written by a human, you forfeit your copyright claim on *the entire codebase*.
This means copyright notices and even licenses folks are putting on their vibe-coded GitHub repos are unenforceable. The AI-generated code, and possibly the whole project, becomes public domain.
Source: https://www.congress.gov/crs_external_products/LSB/PDF/LSB10922/LSB10922.8.pdf
Let's play slop or not! Here's the input:
https://hackerone.com/reports/3595753
| slop: | 594 |
| not slop: | 31 |
Closed
@bagder I spy with my tiny eye several emdash... That and the general phrasing plus the whole very very verbose structure screams slop to me.
Reads like you are talking directly to an LLM.
I'll go with AISlop 🙂👍
Additional: We needs some tales of LLM morals and ethics to be called "AISlops Fables" 😌
@bagder started with "could be legit" for untrained eyes, but as the discussion continued it got the agent smell
@bagder I'm suspicious of verbose bug reports initially, but as time went on it absolutely smelled of LLM... every time it was called out it came up with another excuse then invented an entire python implementation of curl (which wouldn't make any sense, that would be a bug in their implementation, not curl..)
@bagder ”block — but only for protocols”: barely a sentence in and strong slop vibes. The verbosity by with it responds also vibes slop
@bagder The language (even from the initial report) strongly indicated slop. I've written a bug report or two in my time and I've never been that formal.
@bagder If you do this regularly, which I hope, you should give the show a name, and therefore, its own hashtag!
@bagder I tried to honestly read the initial report, but not knowing enough about curl even though something smelled I couldn't tell you why.
"Hi - thanks for testing - you're correct..." and then "You're right - the original analysis misread the logic" gave it away for me.
@bagder "You're correct that..." and "After reviewing your reproducer and re-reading the live source..." stink of LLM.
@bagder I'd say semi-slop, there's definitely an LLM involved but the writing itself does feel like it comes from a human
@bagder I think the initial report was written by a human or at least edited by one. The answers however (especially the later ones) do really seem sloppy.

Plasma 6.6 is now live!
In Plasma 6.6, Spectacle can read texts from screenshots; we trial-run our very own on-screen keyboard for touchscreens; and we have a new first-time wizard that let's users configure their passwords, timezones, keyboard and networks, on preinstalled systems; among many, many more marvelous things.
@kde This is a fully offline OCR method, right?
The "frame intensity" setting is a very much needed thing though I'll admit.
EDIT: Looks like it is entirely local. Great!
Midnight 🌒🌓🌕🌗🌘 [prefers she/her they/them, but in practice any/all works] » 🌐
@gjersey999@ice.ch3.st
@kde@floss.social where's all that collected data going to?
@gjersey999 @kde You mean the OCR? I'd like to verify about this too, but presumably it's an offline standard OCR method. Hopefully. Since it's primarily for text being rendered within the same computer and thus digital accuracy of digital fonts, it probably doesn't require much to do an OCR and even simpler/older methods likely work well without having to resort to "AI" "vision" methods.
Or so I hope (but still would like to see confirmation.)
EDIT: Someone says they looked at the code and it's local OCR via a long time developed OCR model.
Correct—Tesseract, a project started in the 1980s (!):
https://en.wikipedia.org/wiki/Tesseract_(software)
And, yes, it operates exclusively offline.
@kde The OCR-Feature is awesome! One of the only things I was missing, I use that feature at work in Windows all the time.
I’ve been following the discussions about the name of my NetBSD project ("Jails for NetBSD") across a few platforms over the past days and really appreciate the thoughtful feedback.
The short version: the current prototype is probably closer to a cell or a cage than a strict jail, so the name might indeed not be perfect. The project originally started as an experiment inspired by FreeBSD jails, but while exploring NetBSD internals it evolved into something slightly different: controlled process isolation built around the secmodel framework, a different approach for the tool chain and configuration, and without resource limits and network virtualization.
Because of that, I’m open to renaming the project at this stage.
I’ve attached a small poll with a few candidate names — please vote if you like.
And if the right name isn’t listed yet, feel free to drop suggestions in the comments 🙂
Project site: https://netbsd-jails.petermann-digital.de/
#netbsd #jails #freebsd #openbsd
| Jails (current name): | 11 |
| Cells: | 14 |
| Realms: | 5 |
| Domains (clash with Xen): | 0 |
| Enclaves: | 4 |
| Cages: | 9 |
@mpeterma
If your implementation is slightly different than the FreeBSD jails, having another name makes sense to avoid confusion for users. Cells and Cages works well as you can keep claiming the legacy.👍
Good job btw.
local trans woman comes up with a type ending in>>>>>>, forgets aboutFrom<T>
for context, I opened a pull request with Arc<SyncRwLock<HashMap<TxnKey, Receiver<Option<Result<send_transaction_message::v1::Response>>>>>>
Quote in September last year for a high-memory compute server. £28,000.
Quote today for the _exact same machine_. £90,500
This is for medical research. Saving lives. When I say LLMs are killing people by killing research computing, this is what I mean.
@davidgerard.co.uk @edzitron.com
If you're on LinkedIn and are thinking about verifying your account with them, maybe read this first. It walks through LinkedIn's privacy disclosure to identify 17 companies that may receive and process the data you submit, including name, passport photo, selfie, facial geometry, NFC data chip, national ID #, DoB, email, phone number, address, IP address, device type, MAC address, language, geolocation etc. Unsurprisingly, it seems the biggest recipients are US-based AI companies.
https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/
people think LLMs are good at rubber duckying and dont write down their thought process or talk to a rubber ducky like bro you could save the tokens
save the planet buy a duck
Alright fedi, just got back from the Nix Store, ended up buying /etc/nixos#nixosConfigurations.Infini-FRAMEWORK.config.system.build.toplevel
Three years ago I blogged about #nuget serving outdated #curl packages.
They then removed the packages I found.
I checked nuget again *today* and immediately found a nine year old curl package that is downloaded at the rate of 1,000 times/week from there... with **64** known vulnerabilities.
The blog post from back then: https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/
"Microsoft is no longer accepting new submissions through secure@microsoft.com. Please use the Microsoft Researcher Portal "...
😠
but I took it to the big generic security portal and submitted a report there. Let's see what happens.
My not at all surprised face: "After careful investigation, this case has been assessed as not a vulnerability and does not meet Microsoft's bar for immediate servicing."
@bagder our own IT team are running Office 2016 in a sensitive environment.
Why would MS be any better. 🙁
@bagder For NuGet packages, there's beyond "contact owners" also the Report package option, which goes to NuGet support. But found mileage to vary there, too. If you got a package id, I could try to back-channel it. NuGet gallery have option to bot unlist, mark as deprecated, and security advisory.
@bagder Have you considered if there's a demand for vintage curl releases that you aren't serving? Give the people what they want!
@bagder I've using dotnet for a few years and wanted to try using Curl but didn't find anything that wasn't poorly maintained or totally outdated.
@bagder @shanselman responded to the bluesky mirror of this post.
@bagder
Have you considered reserving "Curl" prefix on NuGet?
https://learn.microsoft.com/en-us/nuget/nuget-org/id-prefix-reservation
It is not much but it would prevent random people from uploading "officially looking" packages.
Charity Auction for Kansas Trans Folks and/or Minneapolis ICE Relief.
Related to my 1 April Kickstarter.
No offense: I would have expected a bit more creativity from you. This is a bit too... thick.
I mean, I already know that you are a void where money can be thrown at, in order to magically make books on mental self torture (such as mailservers) pop out.
I will ofcourse happily help any action against those deranged, inhumane lunatics that is ICE.
But that dark rectangle representing that void misses a bit of subtlety.
@h3artbl33d you're projecting. any subtlety I possess is an artifact of your imagination, sorry.
@mwl Hey, this is a Donald Trump book. Quite sure because his identity is often redacted with a big black rectangle ! This April 1st book titled “Savaged by system Trump” is indeed very creative.