@krinkle@fosstodon.org
@krinkle@fosstodon.org avatar

krinkle

@krinkle@fosstodon.org

Dutch geek from Enschede living in London.

Principal Engineer at Wikimedia Foundation, https://fosstodon.org/@qunit project lead, jQuery Infra (OpenJSF) https://social.lfx.dev/@jquery, W3C Web Performance, ♥️ FLOSS.

Creative interests: linguistics, music, photography. Work interests: performance, web standards, UI design, digital privacy and security.

Avatar photo by Niek Hidding.

#webperf #PHP #mediawiki #wikipedia #qunit #nederlands #music #muziek #fedi22

Formerly at mastodon.technology (2019-2022).

This profile is from a federated server and may be incomplete. Browse more on the original instance.

krinkle, to infosec
@krinkle@fosstodon.org avatar

Cryptominer Leverages Free GitHub CI

It's kind of obvious, given:

  • overpriced cloud server renting (GCP, AWS, ..),
  • increasingly heavy software ("just run these docker containers!"),
  • promise of free crypto "money".

People will use "Free" cloud hosting via Travis/GitHub/Circle and other CIs to run the most compute possible, triggered via random empty commits and such. This is the new normal.

https://sysdig.com/blog/massive-cryptomining-operation-github-actions/

simevidas, to random
@simevidas@mastodon.social avatar

In German and Croatian, vote = voice. It’s the same word.

🇩🇪 Meine Stimme an der Wahl.
🇭🇷 Moj glas na izborima.

In these languages, my vote in the election = my voice in the election.

krinkle, (edited )
@krinkle@fosstodon.org avatar

@simevidas

From Wiktionary:
> voice, from [..] Old French (voiz). Displaced native [..] Old English (stefn) [..]

"stefn" came from Proto-Germanic stebnō, and would eventuelly become German "Stimme".

The same root entered English as "steven", and is still used in the idiom "even steven" (to have an equal voice/vote).

vote/voice share no root, but English does have "say" which can mean vote (I have no say in this, I have an equal say on the matter).

https://en.wiktionary.org/wiki/voice

krinkle, to random
@krinkle@fosstodon.org avatar

Brought to you by the makers of:

Trains, Trams, and Uber mobiles.

https://botsin.space/

krinkle, to infosec
@krinkle@fosstodon.org avatar

Timo Longin @login introduces SMTP smuggling, a novel technique to spoof fully SPF-validated emails from various popular domains including @microsoft.com.

Wow. It's incredible nobody found this before. It's the first of its kind. Probably not the last...!

https://youtu.be/V8KPV96g1To

Related:
https://media.ccc.de/v/37c3-11782-smtp_smuggling_spoofing_e-mails_worldwide
https://www.postfix.org/smtp-smuggling.html
https://www.malwarebytes.com/blog/news/2024/01/explained-smtp-smuggling

krinkle,
@krinkle@fosstodon.org avatar

SMTP smuggling feels similar to HTTP smuggling, but differs in impact.

SMTP smuggling sends a legitimate email to an unsuspecting receiver. It ends up in someone's inbox, at another provider.

HTTP request smuggling is not always visible to other users, and can (depending on the web app) be limited to one backend cluster and the attacker's own requests, i.e. to steal/manipulate private data.

There are multiple HTTP smuggling vulns by now.

A recent one from DEFCON 27:

https://youtu.be/w-eJM2Pc0KI

krinkle, to random
@krinkle@fosstodon.org avatar

The shape of Happiness.

I can imagine theories for why someone's experience might follow this shape, and of course many people will have a very differently shaped life.

Yet, it surprises me to learn that there is a clear overall average, and that this is the shape of that average.

It sure doesn't inspire hope (speaking as an under-50), but then again it's important to know you're not doomed to this shape. You be you!

from https://www.washingtonpost.com/news/wonk/wp/2017/08/24/under-50-you-still-havent-hit-rock-bottom-happiness-wise/ via https://juliawise.net/raising-children-on-the-eve-of-ai/

krinkle,
@krinkle@fosstodon.org avatar

One theory is that young folks start out with a wider ambition. We see all that we think is wrong, and believe we can, we must, change it.

The good thing is, a few of us succeed and humanity evolves with various refined ideas, social norms, and quality of life.

The bad thing is, most fail and we seem to feel bad, until eventually we start focussing more on what we can do closer to home, and we find satisfaction in improving the lives of those we care for.

What do you think?

krinkle, to random
@krinkle@fosstodon.org avatar

"14-Hour Search for the End of TGI Friday's Endless Appetizers" by Caity Weaver.

A classic Gawker article from the archives...

In this epic journey, a Gawker reporter investigates TGI Friday's bottomless mozzarella sticks — in exchange for a week's vacation. A fun read, loved every moment of it!

https://archive.is/TrWUk

Original link (gone, domain sold):
https://www.gawker.com/my-14-hour-search-for-the-end-of-tgi-fridays-endless-ap-1606122925

krinkle, to random
@krinkle@fosstodon.org avatar

Love this headline by The Register: "SQLite creator crucified after code of conduct warns devs to love God".

https://www.theregister.com/2018/10/22/sqlite_code_of_conduct/

lapcatsoftware, to random
@lapcatsoftware@mastodon.social avatar

Why is it taking a dozen Dock bounces to launch FileMerge app?!?!?

krinkle,
@krinkle@fosstodon.org avatar

@lapcatsoftware

"""
defaults write com.apple.dock open-bounce-gravity -float 0.11
"""

Just dial it down to 11. Apps now take 89% fewer bounces to launch!

Disclaimer: Messing with gravity voids the Dock warranty. Use at your own risk. Smaller apps may fly away and become difficult to pin down.

krinkle, to johnoliver
@krinkle@fosstodon.org avatar

John Oliver's Last Week Tonight just made a 5min-long fake episode of Thomas the Tank Engine, featuring hilarious narration by Matt Berry! (Mr Reynolds, The IT Crowd, Channel 4)

https://youtu.be/AJ2keSJzYyY?si=L68irZnAmI6vhIbQ&t=1363

via https://eigenmagic.net/@vampiress/111860385530784941

krinkle, to infosec
@krinkle@fosstodon.org avatar

Dutch intelligence agency publishes detailed technical analysis of the COATHANGER malware they found in their network, originating from Chinese state-sponsored actors.

"""
It hides itself by hooking system calls that could reveal its presence. It survives reboots and
firmware upgrades. [..]

First libpe.so will check if the contents of /proc/[pid]/cmdline starts with [..]
"""

https://www.ncsc.nl/binaries/ncsc/documenten/publicaties/2024/februari/6/mivd-aivd-advisory-coathanger-tlp-clear/TLP-CLEAR+MIVD+AIVD+Advisory+COATHANGER.pdf

via https://www.ncsc.nl/documenten/publicaties/2024/februari/6/mivd-aivd-advisory-coathanger-tlp-clear

#infosec #coathanger #malware #AIVD #NCSC

krinkle, to VisionPro
@krinkle@fosstodon.org avatar

Mark Hurst, on Apple's Vision Pro:

"""
I was happy to share my thoughts about Apple’s face jail and hope it helps people reject it, much as I helped kill Google Glass dead in 2013 when my column went viral.
"""

https://creativegood.com/blog/24/vision-pro-i-poison-vr.html

via @lapcatsoftware https://mastodon.social/@lapcatsoftware/111864135115582877

saramg, to random
@saramg@fosstodon.org avatar

Whenever someone asks me about my time at Facebook, I like to share this pair of photos. One from when I started, and the other from when I left about 6 years later.

My hair can tell you how it went.

krinkle,
@krinkle@fosstodon.org avatar

@saramg @kraigschmidt

You and your team's work at Facebook on HHVM will be eternally a milestone, evidence, and hopeful reminder that better is possible!

https://techblog.wikimedia.org/2014/12/29/how-we-made-editing-wikipedia-twice-as-fast/

No matter that Wikipedia moved "back" to PHP. PHP 7+ was better because of it!

krinkle, to random
@krinkle@fosstodon.org avatar

Life of an AppleCare Dispatch, by Mathew Duggan @matdevdug

I love all these little stories!

"""
If you broke a connector, Apple could ask you to pay for that. [..] This could destroy your pay [..], so you'd end up going to Al, who ran basically a "solder Apple stuff together" business in his garage. He wore overalls and talked about old airplanes, which you'd need to endure to get the part. [..] Ironically his parts often lasted longer than the official
"""

https://matduggan.com/fixing-macs-door-to-door/

krinkle, (edited ) to random
@krinkle@fosstodon.org avatar

Steve Jobs in 2010 internal email:

> digital hub [..] moving from PC to cloud
> * we invented Digital Hub concept [..] for all your contacts, calendars, bookmarks, photos, music, videos
> * PC now just another client alongside iPhone, iPad, iPod
> * Apple is in danger of hanging on to old paradigm too long (innovator's dilemma)
> * Google and Microsoft are further along [..], but haven't quite figured it out.

Interesting to see it all spelled out (§14).

https://www.theverge.com/c/22611236/epic-v-apple-emails-project-liberty-app-store-schiller-sweeney-cook-jobs

krinkle, to Wikipedia
@krinkle@fosstodon.org avatar

TED Talk: The joy of learning random things on Wikipedia, by Annie Rauwerda @annierau

via @Deykun

https://www.youtube.com/watch?v=WCmeOccXRq8

krinkle, to random
@krinkle@fosstodon.org avatar

@manton It seems @Dejal has stopped working since 3-4 months, at least from the POV of my instance. Other microblogs such as your and @NetNewsWire continue to work fine. Trying to follow creates an indefinite "Request pending" period indicator. I wonder if I'm doing something wrong?

slightlyoff, to random
@slightlyoff@toot.cafe avatar

TIL that Wikipedia publishes their browser stats; a goldmine!

https://analytics.wikimedia.org/dashboards/browsers/#all-sites-by-os-and-browser

krinkle, (edited )
@krinkle@fosstodon.org avatar

@slightlyoff

You can use this Wikipedia dataset to plot adoption rate of new browser releases:

https://codepen.io/Krinkle/full/OJoVqXm

Prior analysis: https://timotijhof.net/posts/2023/browser-adoption/

krinkle, (edited ) to Youtube
@krinkle@fosstodon.org avatar

Basically, an Uzbekistan TV channel used part of a film by Blender Studio. Another artist also embedded part of that same film (both legal under CC license).

The TV company's rant-a-scam "copyright protection" agency semi-automatically reports the artist's video to YouTube as illegal copy of its TV content, despite holding no copyright to do so, and wins. The artist had to risk a channel strike to appeal - and still lost.

https://torrentfreak.com/company-hijacks-blenders-cc-by-licensed-film-youtube-strikes-user-221205/

@torrentfreak

krinkle, to jenkins
@krinkle@fosstodon.org avatar

CI Dream

> In this world, CI as a SaaS feels like accidental complexity of midlayer mistake variety.

https://matklad.github.io/2023/12/24/ci-dream.html

bagder, to random
@bagder@mastodon.social avatar

Please don't make this a new trend. 😕

(issue closed by bot because the user filing the issue has not starred the repository...)

krinkle,
@krinkle@fosstodon.org avatar

@bagder

"Stars Don't Mean Shit", takes on a new level of meaning.

I recall a blogpost back in the day along these lines by @dmethvin. I can't find it though...

brion, to random

what's a functional programmer's favorite genre of indian dish?

curry

krinkle,
@krinkle@fosstodon.org avatar

@brion

Law & Order: SUV.

.. in which every victim was a citizen of car-dependent suburbia.

bert_hubert, to random
@bert_hubert@fosstodon.org avatar

So tomorrow there are national elections in The Netherlands and I need to acquaint you with two oddities. For one, we take our democracy entirely for granted so we mostly vote in.. garbage bins. Secondly, our ballots are HUGE as they list 28 parties and 1128 candidates (no joke). So we need to make good use of the space in the garbage bin. For this purpose, polling stations are equipped with the STEMBUSSTAMPER, specially designed to tamp down wayward ballots:

The stembusstamper is a longish piece of wood that fits through the slot meant for ballots. It allows one to tamp down wayward ballots so there is more room in the ballot box.

krinkle,
@krinkle@fosstodon.org avatar

@bert_hubert

It's a real-life game of "Where's Waldo" on our ballots. So many checkboxes. One is not like the others. (Except for blank votes!)

pollita, to random
@pollita@phpc.social avatar

This issue continues to not age well.

krinkle,
@krinkle@fosstodon.org avatar

@pollita

There are still a bunch of PHP-6 books for sale. The optimism...

https://www.amazon.com/s?k=%22php+6%22

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • megavids
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • osvaldo12
  • ethstaker
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • everett
  • ngwrru68w68
  • khanakhh
  • JUstTest
  • InstantRegret
  • GTA5RPClips
  • Durango
  • normalnudes
  • cubers
  • tacticalgear
  • cisconetworking
  • tester
  • modclub
  • provamag3
  • anitta
  • Leos
  • lostlight
  • All magazines
    •