@icing@chaos.social
@icing@chaos.social avatar

icing

@icing@chaos.social

Apache httpd and curl project member, HTTP/2, HTTP/3, Lets Encrypt implementations. Likes to code.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

mjg59, to random
@mjg59@nondeterministic.computer avatar

The "Recall can't record DRMed video content" thing is because DRMed video content is entirely invisible to the OS. The OS passes the encrypted content to your GPU and tells it where to draw it, and the GPU decrypts it and displays it there. It's not a policy decision on the Recall side, it's just how computers work.

icing,
@icing@chaos.social avatar

@mjg59 Now, can we have video conferencing with DRM?

bagder, to random
@bagder@mastodon.social avatar

Author density. Number of commit authors shown by git blame in product code per KLOC. In #curl. Over time.

icing,
@icing@chaos.social avatar

@bagder In 2010 there were 0.25 authors per KLOC? 🧐

icing, to random
@icing@chaos.social avatar

Digging into mbedTLS 3.6.0 failures in curl's tests. It starts to negotiate TLSv1.3 and fails the handshake where curl disables peer verification.

"We don't support disabling server authentication in TLS 1.3." 🤔

My view: this does not make anyone more secure. A library has no full understanding of its applications. It does not know what it'll break with such a change.

https://github.com/Mbed-TLS/mbedtls/issues/9210

xahteiwi, to random
@xahteiwi@mastodon.social avatar

That distributed companies need to run at least one physical, in-person all-hands gathering per year is pretty well established.

But what would you argue is the minimum and maximum length for such a gathering to be useful? Or what's the ideal length, if there is such a thing?

Boosts and comments welcome.

icing,
@icing@chaos.social avatar

@isotopp @xahteiwi At least a month initially to find out that you indeed cannot work with the person who annoyed you remotely already but you were unsure if it was only the technology.😌

icing, to random
@icing@chaos.social avatar

When @bagder reached out to the various distros earlier this year, everyone working around curl got more personal contact and means to share information.

I feel that cooperation with the project and between distros has become easier and improves life for everyone.😍

https://github.com/curl/curl/blob/master/docs/DISTROS.md

icing, to random
@icing@chaos.social avatar

Me, writing an obscure bug in curl and then being the hero for fixing it later.😌

isotopp, to random German
@isotopp@chaos.social avatar

DANKE, @icing

mod_md nimmt einem so viel Arbeit ab.

Also, es funktioniert einfach und es ist integriert statt ein gruseliger Shell-Verhau.

icing,
@icing@chaos.social avatar

@isotopp Die Zukunft ist natürlich eine AI, die mit ihrer angenehmen Stimme bei der CA anruft und freundlich ein neues Zertifikat in deren Web-Formular beantragt.

jpmens, to random
@jpmens@mastodon.social avatar

"Interestingly, my journey into the professional world began with a unique experience at a local florist when I was a child. I spent a week assisting with various tasks, from arranging flowers to managing customer interactions. This early exposure to a work environment instilled in me the importance of attention to detail, customer service, and the ability to work under pressure—qualities that have proven invaluable in my software engineering career."

I asked chat-gpt to write me an application

icing,
@icing@chaos.social avatar

@jpmens I always suspected you were a florist.

icing, to random
@icing@chaos.social avatar

I started a discussion about making curl -vv ... act as a shortcut for more tracing information. Your views on this as curl user are appreciated:

https://github.com/curl/curl/discussions/13810

icing, to random
@icing@chaos.social avatar

Sometimes we forget what a marvel 'git' really is. Just did

git show <commit-id>

and it pulled out a curl change from 16 years ago in the fraction of a second.

Hat off to its makers and maintainers!

jpmens, (edited ) to random
@jpmens@mastodon.social avatar

"Because of the lack of clear signals of general adoption of DNSSEC over three decades, is it time to acknowledge that DNSSEC is just not going anywhere? Is it time to call it a day for DNSSEC and just move on?"

https://blog.apnic.net/2024/05/28/calling-time-on-dnssec/

icing,
@icing@chaos.social avatar

@jpmens Me not smart enough. What does Mr Mens think?

jpmens, to random
@jpmens@mastodon.social avatar

We need you to sign this NDA for the training you'll be doing next week.

Jesus. Fucking. Christ. People; think before you write.

icing,
@icing@chaos.social avatar

@jpmens teaching secrets again, are we?

icing,
@icing@chaos.social avatar

@jpmens Related to the recent CVEs, we should have kept the DNS ports secret. Right @ondrej ?

bagder, to random
@bagder@mastodon.social avatar

#http3 use right now:

Firefox beta 121: 28% of all HTTP

w3techs: 29.7% of the top-1M websites

Cloudflare: 30.0% of monitored web traffic

image/jpeg
image/jpeg

icing,
@icing@chaos.social avatar

@bagder I tried HTTP/3 but it‘s no improvement. The websites are the same as with HTTP/1.💁🏻‍♂️

xahteiwi, to random
@xahteiwi@mastodon.social avatar

The fact that the conference network's DNS server is returning NXDOMAIN on reveal-multiplex.glitch.me is messing with my reveal.js slide deck today.

icing,
@icing@chaos.social avatar

@xahteiwi I always use only a local copy of js frameworks in my presentations. I like them to remain viewable in the upcoming years, for one.

icing, to random
@icing@chaos.social avatar

Another nice graph from the curl dashboard:

https://curl.se/dashboard1.html#vulns-releases

jpmens, to random
@jpmens@mastodon.social avatar

Sure I make fun of iTerm2 containing code to chatgpt and will likely continue doing so, but it’s opt-in so no reason for me to stop using the very good program.

icing,
@icing@chaos.social avatar

@jpmens I looked at the alternatives and am sticking with it for now.

I would wish they'd remove the AI integration again, but it's their free project.

icing,
@icing@chaos.social avatar

@jpmens Tried the fork, did not work at all for me, meaning it just did not work.

icing, to random
@icing@chaos.social avatar

I admit, I am not a Teams player.😌

icing, to random
@icing@chaos.social avatar

duckduckgo still not working. Looks like a deployment at scale without rollback options...

My condolences to the poor ops people sweating on this now...

Update: to be precise, DDG fails because Bing is not working.

bagder, to random
@bagder@mastodon.social avatar

How to verify a #curl release

https://daniel.haxx.se/blog/2024/05/23/how-to-verify-a-curl-release/

How we are not the next xz.

icing,
@icing@chaos.social avatar

@nblr @bagder wow! good for you!😍

icing, to random
@icing@chaos.social avatar

Very happy to live in the EU, for various reasons.

icing, to random
@icing@chaos.social avatar

Law enforcement and your employer will not demand access to your Windows Recall model, right?

Microsoft must have thought that through, for sure.

icing, to random
@icing@chaos.social avatar

A lot of „typical techbro“ behaviour can be better described as „addicts‘ overconfidence“ while high.

Current case: the lack of a plan to deal with Scarlett Johansson‘s objection to her voice cloning. The public boasting that it is intended to be like „her“.

I could be wrong, of course, and none of the techbros do any drugs.

jpmens, to random
@jpmens@mastodon.social avatar

deleted_by_author

  • Loading...
  • icing,
    @icing@chaos.social avatar

    @jpmens No plans for neither, rest assured. But we‘ll want to retrieve HTTPS records soon…

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • mdbf
  • ngwrru68w68
  • modclub
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • JUstTest
  • normalnudes
  • osvaldo12
  • tester
  • GTA5RPClips
  • cubers
  • everett
  • tacticalgear
  • ethstaker
  • provamag3
  • anitta
  • Leos
  • cisconetworking
  • lostlight
  • All magazines