tedu

tedu, 2 months ago to random

Everything I know about spy craft comes from tv, but carrying around a cell phone with only a single number programmed into it seems leaky? Shouldn't you want a burner programmed with a hundred decoy numbers, like the laundromat and the dentist and so on?

tedu, 2 months ago to random

Honk file store work mostly complete. The default is back to using the blob store, but there are now some commands to extract blobs and convert to file store.

It's also possible to switch modes without extraction. The code should mostly work fine with data stored across both locations.

Think the peripheral modes like export and backup should be good now too.

tedu, 2 months ago to random

Found a macOS bug. Safari draws the status bar (such as when hovering over a link) over its own window, but if you time it right, switching to expose will cause it to draw the status bar where the window used to be, and it will be floating out over the desktop by itself.

Maybe the guy who fixed the Firefox bug is available for an internship. https://arstechnica.com/gadgets/2023/10/22-year-old-firefox-tooltip-bug-fixed-in-a-few-lines-offering-hope-to-us-all/

tedu, 2 months ago to random

Diary of a honk dev, day 1842. I just realized click to expand images in honk requires javascript and it's not included in the page unless logged in, so visitors only see preview size images.

tedu, 2 months ago to random

It's been one year since twitter open sourced the algorithm. Last commit was eight months ago.

https://github.com/twitter/the-algorithm

tedu, 2 months ago to random

Thinking about a plan to rework how honk stores images. The big blob db was the simple evolution of storing everything in the main db, but I think it just makes space management difficult. Would like to switch to a simple file store. Going to be a messy upgrade.

Orthogonal to that, lazy fetching attachments so we don't drag in every image on posts that are never seen could help. Maybe will do that first, because it reduces space requirements for the upgrade above.

tedu, 2 months ago to random

It's hysterical that history books will record 2024 as the year people first questioned the need for complicated autofuck configure scripts.

tedu, 2 months ago to random

Good news for everyone upset GitHub has deleted the xz repo. You can still leave an emoji on this PR. You're helping!

https://github.com/google/oss-fuzz/pull/10667

tedu, 2 months ago to random

A humble request: When I step away from open source development, can HN refrain from speculating that state actors provided me with a mistress?

https://news.ycombinator.com/item?id=39867535

tedu, 2 months ago to random

Long con: xz guy is cutting a 30% cut from all the security firms DHS and CISA are going to pay to audit all the tarballs.

tedu, 2 months ago to random

Good time to disclose that the honk source tarballs also contain files not in the repo and can't be deterministically recreated. Depends on which laptop I run the release script on.

tedu, 2 months ago to random

Ironically, I am not affected because I never run brew update.

Also, the build script only targets linux. On macOS you'd just get a normal xz.

If you use Homebrew on MacOS, you're affected—do 'brew update' and 'brew upgrade’.

https://mastodon.lawprofs.org/@SteveBellovin/112180311536275381

tedu, 2 months ago to random

Pretty jazzed about the potential to now reply "but what if the test is a backdoor" to anyone telling me tests are good.

tedu, 2 months ago to random

openssh does not directly use liblzma. However debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma.

Oof.

tedu, 2 months ago to random

Has anyone ever sued their hosting provider for hosting their content? What's the case law background for these terms?

tedu, 2 months ago to random

I'm willing to believe vultr made the incompetent, as opposed to malicious, fuckup of copying extravagent text into their TOS as part of the annual review and update to the latest boilerplate process, but also, how hard is to do so competently? Even as a mistake, you care so little for your customers you're not going to read the terms you make them agree to? The ones you (allegedly) wrote?

tedu, 2 months ago to random

How many news events do people really need real time updates for? Such that you are happy to trade accuracy for expediency? (Is this is a conscious choice? Or just smashing the button for another info pellet?)

tedu, 2 months ago to random

Oh, nice, now we get a negative leap second. What if we had just skipped the last one instead?

tedu, 2 months ago to random

TIL German wikipedia still uses the old site design.

tedu, 2 months ago to random

"Astronomers discover 49 galaxies in under three hours"

Am I to infer that GPH is the standard unit by which astrometric achievement is measured?

tedu, 2 months ago to random

alias lfg='hg pull; hg up; make'

tedu, 2 months ago to random

Today's fun mastodon fact is that after the web server falls over, sidekiq keeps pumping out messages, but the signature can't be verified because the key can't be found.

tedu, 2 months ago to random

Apparently the new cool ActivityPub thing to do is ignore the Accept header and instead look for Mastodon in the user agent.

tedu, 2 months ago to random

What's the likelihood that Mozilla can go a whole month with no news to report other than "we made the browser better"? No "sorry about our experimental ad". No "our privacy tool was really a person tracker". No "we fired a bunch of people who lacked valuable identities". Just make the fucking browser better.

tedu, 1 year ago to random

The only way to prevent embrace, extend, extinguish from destroying your open source project is to add a no hugs clause to the code of conduct.