@scy@chaos.social
@scy@chaos.social avatar

scy

@scy@chaos.social

Nerd. Freelance Software Dev. Relationship Anarchist. Sometimes lives in a van. Queer white cis dude, promotes anti-capitalism, anti-fascism, intersectional feminism, the fight against climate change, and thoughtful, ethical behavior in general.

Toots in English or German about software development (mainly Python, JavaScript, Shell), Linux, Vim, electronics/µCs, van life, politics, sex, (inter)personal & emotional things, music, Star Trek, beverages.

May contain awful puns.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

scy, to maps
@scy@chaos.social avatar

Holy shit I think I’m in love.

#Protomaps, a way to serve vector #maps of the entire world using a single static file and HTTP range requests.

It’s basically a static site generator for interactive maps. Tile servers are pretty much obsolete now. No database needed, you can run your interactive, smooth-zooming vector map from any HTTP storage. S3, Caddy running on your Wi-Fi router, even GitHub pages.

https://protomaps.com/

It’s open source & free to use. Wow. 🤯

via https://chaos.social/@djh/111280447304607540

scy, to random
@scy@chaos.social avatar

"Create your account to continue reading."

yeah how about i just close the tab instead

scy, (edited ) to random
@scy@chaos.social avatar

A few days ago, my groovebox, the , running the new and awesome community-built firmware, crashed, which was very cool.

Not that it crashed, but what happened next: It displayed a colorful pattern on its pads.

That's a stack trace. It's listing the last steps the code made before crashing. The devs have asked to be sent photos of these, to help them find bugs.

I've pasted it on Discord, and there's a bot that recognizes these images and decodes them into addresses!

scy, to random
@scy@chaos.social avatar

The year is 2023. My mouse driver would like to know who I’m talking to.

scy, (edited ) to RaspberryPi
@scy@chaos.social avatar

With the releasing, don't forget how they boasted about hiring an ex surveillance cop, then ridiculed the people who criticized them for it.

Also remember how you weren't able to buy a Pi for months because they prioritized supplying their business customers.

I'm not buying products any longer, nor do I recommend them to my friends and clients. The Pi Foundation has become seriously out of touch.

scy, to random
@scy@chaos.social avatar

So #Kagi is now partnering with #Brave, i.e. the company of Brendan Eich, who has been CEO at Mozilla for eleven days before he had to leave due to massive criticism of his homophobic views. Brave's most well-known product is a browser with its own cryptocurrency, co-designed by Eich.

A feedback post asking Kagi to reconsider has been closed by Kagi's founder Vladimir Prelovac because "Considering company x founder political views is not a factor in [their] evaluation".

https://kagifeedback.org/d/2808-reconsider-your-partnership-with-brave

scy, (edited ) to random
@scy@chaos.social avatar

So @element took part in the European Police Congress in Berlin, had a booth and presentation there, and is proudly posting on the fedi about it.

https://mastodon.matrix.org/@element/110304013472307767
https://mastodon.matrix.org/@element/110310853505977058

I’m currently paying them $11.90 a month to host my homeserver on their EMS platform.

My payment in April will have been the last.

It’s one thing to provide FLOSS comms to the government. It’s another to proudly support our fucked up police system.

scy, to random
@scy@chaos.social avatar

every typography nerd loves a good keming joke

scy, to random
@scy@chaos.social avatar

Eek. Apparently liblzma (part of the xz package) has a backdoor in versions 5.6.0 and 5.6.1, causing SSH to be compromised.

https://www.openwall.com/lists/oss-security/2024/03/29/4

This might even have been done on purpose by the upstream devs.

Developing story, please take with a grain of salt.

The 5.6 versions are somewhat recent, depending on how bleeding edge your distro is you might not be affected.

#liblzma #xz #lzma #backdoor #ITsecurity #OpenSSH #SSH

scy, (edited )
@scy@chaos.social avatar

Hell yeah , that's certainly going to help the researchers who are working on the weekend trying to reverse engineer the backdoor.

What a great idea. 🙄

Edit: This also deleted the project's GitHub-hosted website.

Mirrors of the repo can be found here:

https://hachyderm.io/@joeyh/112181981560074232
https://git.tukaani.org/?p=xz.git;a=summary

scy, (edited )
@scy@chaos.social avatar

Meanwhile, #Debian is considering rolling #xz back not only to the point before the backdoor was added, but to where the person who wrote the backdoor hadn't contributed any code to xz yet.

Which means considering creating patches to fix ABI breakage such a rollback would cause.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024

For all the trash talk Debian gets for being "pedantic" and slow to change: They put in the work to do things right. I respect that.

via https://hachyderm.io/@joeyh/112181512951127467

(Edit: English is hard.)

scy,
@scy@chaos.social avatar

Please do not advise people to run xz --version or similar to check whether they're affected or not.

Right now, as far as I know, the analysis of the obfuscated malware is far from complete. There may be other triggers. There may be malware in older versions, because the attacker had commit access for years.

By running xz and asking it for its version, you're running what could be more malware.

Instead, ask the system's package manager which version of xz is currently installed.

scy, to generativeAI
@scy@chaos.social avatar

I'm old enough to remember how @creativecommons was founded as a way for independent creators to safely share their work and build upon each other.

In 2024, their take is now "billion dollar companies plagiarizing your art is fair use".

https://creativecommons.org/2023/02/17/fair-use-training-generative-ai/

Hats off to the author, you don't see that kind of, uh, skillful rhetoric chicanery every day. Like "generative AI doesn't compete with artists because artists are not in the data market". 😬

#CreativeCommons #GenerativeAI

scy, to random German
@scy@chaos.social avatar

Wir könnten in einer Welt leben, in der "zeig mir alle Kinovorstellungen von Dune Part Two in Originalfassung im Umkreis von 100 km um diese drei Orte, am Donnerstag oder Freitag zwischen 10 und 17 Uhr, sortiert nach wie viel Prozent des Kinosaals bereits reserviert sind" eine in zwei Sekunden beantwortete Suchabfrage ist.

Technisch ist das um Größenordnungen einfacher als "generier mir ein Video von einer lila Kuh auf einem Skateboard".

Aber nein.

We chose to do bullshit instead.

scy, to random
@scy@chaos.social avatar

As in the previous years, I pledge to not post or boost any "April fools" content tomorrow.

Most of it isn't really funny anyway, and on top of that disinformation and fake "facts" are some of the biggest problems we as a society face these days.

Simply doesn't spark joy 🤷‍♂️

scy, to linux
@scy@chaos.social avatar

Pro tip: less can filter the lines it displays. Hit the “&” key and enter a search pattern. You’ll only see lines matching the pattern.

Want to only see lines that don’t match the pattern? Prefix the pattern with an exclamation mark.

Super useful when looking at logs, for example.

The man page is definitely worth a read, it can do a bunch more stuff you might find interesting.

scy, to random
@scy@chaos.social avatar

Imagine you’re a divorced mother working as a spa masseuse in Kuala Lumpur.

One day, a guy asks you whether you’d like to earn some money by doing harmless prank videos for social media. Sure, you think, why not.

For the pranks, you approach strangers in hotels or airports, kissing them on the cheek or covering their eyes from behind (sometimes with baby oil or lotion on your hands, because that will surprise the prank victims even more, says your client), then apologize and run away.

1/3

scy, to random
@scy@chaos.social avatar

I don't want "regularly remind people that #Kagi is a bunch of libertarians" to be my job, but as people are currently talking about them more than usual, and many seem to not know about it, let me link to my thread from January about it:

https://chaos.social/@scy/111704636274463611

In short, when asked to not collaborate with cryptocurrency-powered, homophobe-led company Brave, Kagi's CEO responded with things like "Politics finding its way into tech is one of the reason we do not have innovation any more."

scy, to random
@scy@chaos.social avatar

"What do you do for a living?"

"I'm a contempt creator."

scy, to random
@scy@chaos.social avatar

stolen and alt-texted

scy, (edited ) to linux
@scy@chaos.social avatar

Okay, so. I have a #PDF and a #DOCX file. And I’d like to compare them. And since I’m a programmer, I don’t want to compare them visually, but with a #diff. But how?

Like this.

alias pdfcat='gs -q -sDEVICE=txtwrite -o-'
alias doccat='pandoc -t plain'

pdfcat a.pdf > a.txt
doccat b.docx > b.txt

git diff --no-index --word-diff a.txt b.txt

And since we’re using --word-diff, it doesn’t matter that the two files use wildly different line wrapping.

#Unix #Linux #terminal #CLI

scy, to random
@scy@chaos.social avatar

The BigCode project (supported by Hugging Face) created an "AI" dataset with 67 TB of code, a lot of it from GitHub users who did not agree to this. Some even claim that private repositories are included. 91 of my repositories are in it, many without an open-source license, but no private ones. They provide an opt-out link, but only for "future versions", and it simply creates an issue in a GitHub repo. 99.8 % of them are still in "open" state, dating back to March 2023.

https://huggingface.co/spaces/bigcode/in-the-stack

scy,
@scy@chaos.social avatar

Wait, it's even worse. The dataset is based on @swheritage's archive, containing way more than just GitHub (e.g. @Codeberg is archived, too).

I assumed they were somewhat neutral, but they're praising the LLM usage of this unlicensed code:

https://www.softwareheritage.org/2024/02/28/responsible-ai-with-starcoder2/

Also, they're refusing to remove deadnames, even outright ignoring GDPR demands for it:

https://cohost.org/arborelia/post/5169338-the-software-heritag

I can only conclude that they're a bad actor and should be considered harmful by the community.

scy, to linux
@scy@chaos.social avatar

The article's title: What exactly was the point of [ “x$var” = “xval” ]?

Me: "Well, cargo culting for people who don't know how to quote in the shell?"

Turns out: no. There are several good reasons why people did this, and the bugs it's been a workaround for have continued to exist into the 2010s.

If you're somewhat proficient in #shell scripting and/or interested in #Unix history, this is an awesome read.

https://www.vidarholen.net/contents/blog/?p=1035

#Linux #bash #sh #ksh

scy, to random
@scy@chaos.social avatar

See, that's an April Fools joke I enjoy. Not making fun at the expense of someone, just being a bit cheeky and weird.

Bonus points for immediately resolving the weirdness instead of leaving people confused, for linking to an explanation of the in-joke (xkcd 624), and for adding a queer-friendly spin to it.

Well done, @Codeberg. 💜

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • ngwrru68w68
  • everett
  • InstantRegret
  • magazineikmin
  • thenastyranch
  • rosin
  • GTA5RPClips
  • Durango
  • Youngstown
  • slotface
  • khanakhh
  • kavyap
  • DreamBathrooms
  • provamag3
  • tacticalgear
  • osvaldo12
  • tester
  • cubers
  • cisconetworking
  • mdbf
  • ethstaker
  • modclub
  • Leos
  • anitta
  • normalnudes
  • megavids
  • lostlight
  • All magazines