FoxQuirk 🦊 @quirk@computerfairi.es

beauty is everywhere if you look for it

some cool stuff from Celeste 64 😏💫

my partner said to post this
so although i don't usually tattoos on the internet, and my back is WOW a huge WIP, here we are :3

it's been a few years but this is still one of my favourite GIFs ever

I now see the true purpose of life, it's kissing girls and cuddling with girls

kids these days don’t want to be CEOs they just want to be:

• server maid
• shitposter
• woem artist
• hyperpop producer
• doll
• skirt spinner
• yesterweb designer
• furry barista
• yuri engineer
• doll

Fediverse 0day (not verified but 99% sure it works):

Toot something with content ppl will support and boost in the html but something horrible in the plain text or vice versa.

This inspired by instances that put all the @'s in html so they don't get rendered right on reader's instance. 🤬

The right fix is for the receiving/interpreting instance to attempt to align content between the versions and warn or show both if they don't clearly align (and maybe always have a feature to toggle which is shown). I know I hate getting html toots that are just "plain text but in an ugly font" too...

Heads-up FOSS maintainers!

There is a person sending bulk patches/PRs to FOSS projects for supposed issues "Found by RASU JSC" (not sure if that's a static analysis tool itself, or some org).

The patches I've received are all very, VERY wrong formulatic changes, maybe even LLM-generated, doing things as stupid as replacing sprintf(s, fmt, ...) with snprintf(s, sizeof s, fmt, ...) where s has pointer type.

If you've accepted any such patches, review carefully & possibly revert!

This time it's arcane timezone shit, particularly the missing day at the boundary where Samoa crossed/moved the international dateline.

Without knowing it, musl actually was already following the POSIX-future requirements for how dates on the nonexistent day get normalized. glibc was found to have a wacky bug misinterpreting dates even just *near* the nonexistent day. 🙃

It's always hilarious when a thread that starts out as "musl has a bug!" ends up finding that nearly every implementation but #musl has a bug (all different, no less!)

@aris It is, but this distills it down to something that is easy to understand by most people.

Who is the threat actor?

What do they want?

Why do they want it?

Developers should make "abuser stories" a thing.

"As an stalker,

I want to track my ex's every move,

so that I can 'coincidentally' run into them at any time."

"As a thief,

I want to be able to reset passwords using SMS verification,

so that I can compromise any account by bribing a telco employee."

"Be Gay, Do Crime"
Calligraffiti in Chicago