RE: https://mastodon.social/@MoritzGlantz/116585420284314690

So, it is really live! Streamicorn – a #Peertube app for #AppleTV

- My aim is to provide a very good and simple UX. If you have ideas to improve, let me know.
- It has a very narrow feature set as of right now, but there will be more in the future. For now it is just a simple viewer app.
- It costs 0,99€ to cover the cost of the Apple Developer Tax and my development expenses.

https://apps.apple.com/de/app/streamicorn/id6767251863

#didit #dutgemacht #did #dut

I designed a shirt you might find useful from time to time.

https://supergeek.de/de/motive/seen-enough/30?cid=197

Neat! If you follow this link on Android, you get Firefox *with* uBlock Origin installed.

https://addons.mozilla.org/android/addon/ublock-origin/?utm_campaign=amo-fx-android-qr&utm_content=ublock-origin&utm_source=addons.mozilla.org

We added a quickaction to manage AI in Firefox, so if you want to disable AI just type "disable AI" in the urlbar

Tried to debug a perl project I inherited using a local LLM. I have a M4 Max with 64GB. Running with opencode and often times getting stupid loops of the model trying the same thing over and over again or "Iä Iä Cthulu Ftaghn" output.

Tried GPT-OSS 20B, Qwen3.5 9B which were completely terrible. Qwen 3.6 40B was better but horribly slow.
Am I doing something wrong or are local models really this stupid?

Hey all, I have a big favour to ask.

At the beginning of the week, a large client that we had 100% expected to get started with a large project this month has dropped out at the most inconvenient time for us.

My team at @neighbourhoodie and I are looking for any and all projects we might be able to help with, the sooner the better.

We are really good at turning manual and/or analogue processes into digital ones, especially, but not limited to, if parts of the process need to work while a person or device is offline.

We have proven this repeatedly by making substantial contributions to fighting a Ebola epidemic, testing the first ever Ebola vaccine and distributing the very first COVID vaccinations to all eligible Bavarians.

We are also really good at taking your prototypes and turn them into real-life, secure, reliable, fast and scalable systems that you can bet your company on for years. From UX to SRE, we got you covered.

You need a frontend for a backend service you’ve built, we got you. You need a backend for a mobile app or game you’ve built, we got you.

We also excel at designing, building and debugging distributed database systems of all sizes and shapes. If you sync your photos with tools from the large red brick company, we helped with that.

We can help migrate your infrastructures from US clouds to EU hosters (within reason). Wanna move from GitHub to a self-hosted or managed Forgejo? Get in touch!

Additionally, in the past three years we helped 15+ FOSS projects from systemd, to GNOME, to PHP and PyPI, as well as Servo and Log4j with maintenance and security tasks in all sorts of programming languages and environments. We can help with yours, too.

We can also help join your team (remotely, CE[S]T) to augment any current projects you’re need accelerated.

I’m happy to answer any question you might have.

And I appreciate any leads and all boosts <3

https://neighbourhood.ie

Hot blocks for a hot summer, over at https://16colo.rs/pack/fire-46/

Very clever @firefoxwebdevs DevTools feature 🦊

When you go to a page from a file URL, with DevTools open, you can now map "https://firefox.localhost" to the file's parent folder.

So, now, I have "https://firefox.localhost" wired up to my Downloads folder. No servers. Thank you Firefox!

We've completed our work on Web Security documentation on @mdn !

The entire MDN content tree has been reworked and now features in-depth information on:
- Attacks
- Defenses
- Authentication
- Threat Modeling

↪️ Blog post https://openwebdocs.org/content/posts/security-docs-sovereign-tech-agency/

Oh cool, over 50% of all traffic that cloudflare is seeing appears to be from bots. This chart only shows 4 weeks, querying for more doesn't work as it appears they just started collecting this kind of data. Source: https://radar.cloudflare.com/explorer?dataSet=http&groupBy=bot_class&filters=contentType%253DHTML&dt=28d

So. For the past few days I've been deep in a fun and very rewarding, but also extremely scary debugging saga. To cut a long git-bisecting story short:

Since Linux 6.9 (May 2024), the tool that locks the laptop's drive on suspend had been silently failing.

Like many of my friends, I use full-disk encryption (LUKS) to protect my data if my laptop is lost, seized or stolen. Highly recommended to everyone; in combination with tested and automated backups, it contributes greatly to peace of mind. (Under Windows, the canonical software to do that is VeraCrypt.)

Except that, for more than two years, the encryption key remained resident in memory across suspend, leaving it there for the taking by anyone who seized the still-powered laptop. (It still worked on a full shutdown, but a full shutdown is rare these days.)

There is something uniquely unsettling about trusting a security mechanism for years and learning it was never doing the thing. "A technical argument by a trusted author, which is hard to check and looks similar to arguments known to be correct, is hardly ever checked in detail." The same, it seems, is true for computer code.

The culprit was a sensible and useful refactoring, https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a28d893eb3270cf62c10dd8777af0d8452cdc072. But it had an unexpected long-range interaction with the encryption code. The fix is exactly one line long: https://lore.kernel.org/all/ajKwRtP8izwRsMmv@quasitopos/ And no, without formal proofs I cannot say whether my patch is correct and free of its own long-range interactions... At the very least, we now have an automated test to detect future regressions (https://github.com/NixOS/nixpkgs/pull/532499) and a patch to emit a warning instead of failing silently (https://gitlab.com/cryptsetup/cryptsetup/-/merge_requests/936).

Oh more #fedijobs at Mozilla

Senior Security Engineer (Add-ons) (https://www.mozilla.org/en-US/careers/position/gh/7583571/). This involves building code-review / malware detection pipelines for addons.mozilla.org - really cool team. The same team is also looking for an engineer to implement extension APIs within Firefox, a Senior Platform Engineer (https://www.mozilla.org/en-US/careers/position/gh/7921750/).

Reminder we're active looking for candidates from diverse backgrounds and with perspectives different from our own. Questions? Just ask me :)

Any of my mutuals playing Slay the Spire 2? I have no friends (who play the game) and I'd love to try multiplayer :D

I just published a first version of my new editor project: Wordgard!

https://marijnhaverbeke.nl/blog/wordgard-0.1.html

RE: https://infosec.exchange/@david_chisnall/116845197744863138

Holy default browser removal dialog, batman! What could it be?

Der Warteschleifenhaltemodus von meinem Telefon ist schon echt einfach sehr sehr nice. Warum hat das nicht früher jemand gebaut? 10 Minuten dumme Warteschleifenmusik? Well, not for me.

@afelia @freddy
Na gut, dann mach ich auch mit. So lang ich es mir noch leisten kann 😇

Uuund auf ein großes Honorar verzichtet, weil in eine Podiumsdiskussion jetzt noch AfD gesetzt werden soll. Langsam kosten mich die Brüder Geld.

@freddy Spende für aula oder für Podcast Wind und Wurzeln sind immer sehr willkommen. Ich habe bei beidem tolle Leute, die bezahlt werden müssen, damit sie kostenlosen Wert in die Welt bringen https://steady.page/de/wind-und-wurzeln/about

Online discussions be like...