Don't blindly believe everything you read online, tempting as that is. Do your homework first. This video series will help you do it well: https://www.youtube.com/playlist?list=PL8dPuuaLjXtN07XYqqWSKpPrtNDiCHTzU
Just look at the outpouring of love and respect for Patrick Stewart and compare him with the mediocre men at the head of the tech industry, sitting alone in their castles made of money and algorithms. How jealous they must feel, longing for the genuine affection they will never get, the popularity earned and not bought, the love they will never understand.
I never installed VSCode because it has a hard dependency on cups and somehow has a recursive dependency in several places on "the sound (mixer) of silence," pulseaudio.
Cups tries to break my LPR network, and pulseaudio succeeds in breaking my audio in unpredictably incredible ways.
okay, so here's what I'm thinking right now:
1) we, people who like things to have some reasonable baseline amount of safety in our everyday tools, have been complaining for years that VS Code's plugin model is absurdly unsafe and an absolute open sewer; Microsoft shrugs and says it's the user's responsibility to only install reliable plugins
2) as foretold by the prophecy, a major plugin from a major company is compromised and begins pushing shell scripts to automatically install ssh backdoors, which is a thing VS Code plugins can do despite being fucking JAVASCRIPT PLUGINS for a TEXT EDITOR
3) within hours, Binance, the exact sort of company that would be using Claude for daily programming tasks, suffers a massive compromise through a devops laptop and literally billions of dollars in cryptocoins are funneled into the North Korean war chest, the largest heist in history. (We don't know for *sure* at the moment that these are connected, but they sure sound pretty likely to be connected.)
Microsoft, what exactly are you planning to do about your share of responsibility for this catastrophe?
So someone pwned the Anthropic Claude VSCode extension, deployed the pwned version, and used *that* to pwn Binance for billions of dollars. Hey @davidgerard hope you brought enough booze for the weekend
RE: https://floss.social/@josch/117507580019985725
Note that the most significant example of a project taking a ‘wait and see’/‘neither approve nor condemn’ approach to LLM usage has, in practice, approved, adopted, and now forced it on its developers
Happy 25th anniversary, Windows XP!
#WindowsXP #WinXP
(Also, happy 25th to this cursed photo)
instructions for vibecoders
As someone who is enthusiastic about documentation, I have a little hack for you:
1. Write an extensive AGENTS.md. Explain all the quirks about setting up and developing your software. You wouldn't want your agent stumbling on the same thing over and over again and wasting precious tokens.
2. Copy everything from your AGENTS.md into your README.md for visibility. Humans can use it too!
3. Delete AGENTS.md. Remember to keep your repository DRY.
4. Delete your coding agent. Now you have extensive instructions for working on the project yourself and with a community!
5. Donate the $200 per month you save to charity!
flathub deprecates their forum and urges you to hit up their discord (matrix) instead. remind me again why anyone pretends this is a serious way to release software https://floss.social/@flathub/117489580979242810
php panic
There isn't an easy exploit for this PHP vulnerability: https://eliastaylor.com/noexploit/
It's so hard to take the panic seriously when the only way admins have for testing & evaluating how vulnerable their installations are is looking at the version number on the box.
There's a world of difference between needing to plan a smooth update or migration soon & needing to break everything now in a panicked, frenzied patching fit that's indistinguishable from a successful exploit to an end user.
eMudhra, 4
I can't tell if they ragequit or shamequit, but all of us laughing at them over the use of "4" and seven other 8-bit numbers as 384-bit cryptographic keys made them quit the SSL/TLS certificate business completely.
https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
As an example, here's xemeraldia, a nifty puzzle game where you need to drop colored blocks onto matching colors to crack, then break them. It is possible to set up some really cool combos! It did not compile out of the box, I had to rework it a bit to account for obsolete and removed GTK2 stuff. Would have been really awesome to get one of the older, non-GTK versions to try and build, but I'm happy with what I got :)
Alright, found an active mirror...
So, here's a nifty idea for a game jam/coding project. There exists an archive of ancient Linux software on Ibiblio (which is, as of this toot, down, but a mirror exists) that, due to the nature of Linux moving fast and breaking things... doesn't really compile on modern systems anymore. Therefore... why not take one of the games in this archive and make it work again?
The main collection of games is here: https://ftp.sun.ac.za/ftp/pub/mirrors/sunsite.unc.edu/pub/Linux/games/!INDEX.short.html
There are also a few other games sneakily hidden here: https://ftp.sun.ac.za/ftp/pub/mirrors/sunsite.unc.edu/pub/Linux/X11/games/!INDEX.short.html
Who knows, maybe some lost gems will be found in here? Could probably make something akin to the old Microsoft Entertainment Packs for Windows 3.x from this
✨ Kind 'Net Help Desk fairy by day. ✨
✨ Weird & furry Unix fairy by night. ✨
✨ Sometimes a retrocomputer fairy. ✨
✨ Pays the ComputerFairi.es bills. ✨
✨ Sparkly✨shellscript✨princess. ✨
✨ Age: Mere days younger than ✨
✨ the Intel 4004 & Unix 1st Edition. ✨
✨ Follow requests welcome. ✨
✨
✨