we've seen things you people wouldn't believe — shell scripts piping `openssl smime` through an HTTP tunnel. push-mode kerberos propagation across 7 zones worth of replicas. `iptables` rules that, over 24 hours, dropped 96 gigabytes of DNS traffic. all these moments will be lost, like tweets in rain
Source code version control is actually such an amazing tool. I wish other industries had similar uses. Like, I'd love to be able to do the equivalent of git blame for 3D objects or vector graphics and see what else changed for that version and trace the "why" for the change.
I'm getting more acquainted with this codebase and seeing where a particular line got added in the history can make such a difference.
Here's another #techromancy tip:
Create a 2GB "sacrificial" file for your volumes. When the disk fills up and your system locks up, kill it and run your cleanup scripts. It's helped me get out of a bind a few times now.
```bash
dd if=/dev/urandom of=sacrifice.txt bs=1M count=2048
```
```bash
rm sacrifice.txt
```
Hit that bell icon for more techromancy tips and cyberlifehacks
Android 從一開始就不是我們在初入 21 世紀時認知的那種 open source,不要再對這種巨頭有什麼奇怪的開放文化幻想了
https://www.androidauthority.com/google-android-development-aosp-3538503/
Noble causes struggle with banking regulations and face financial censorship from governments and companies.
⚡ We've built an uncensorable front-end to support organizations facing financial censorship.
🛠️ Open-source & easy to set up —start accepting unstoppable donations today.
🔗 Fork and start today: https://github.com/hyphacoop/distributed-uncensorable-frontend/
My matrix server got full of crap but the admin panel only allows deleting 250 media entries at a time. Luckily I could look at the API calls the app was making in devtools as I manually performed a delete and now I have these 30k spam entries getting purged in a while loop 🥰
Reminds me of when I acidentally deleted my entire client's notion DB and made a script to restore everything one item at a time 💀
Next.js dropped a CVSS 9.1 authentication bypass vulnerability (CVE-2025-29927) over the weekend. This flaw is trivially exploitable by sending the header `x-middleware-subrequest: true` and causes the request to skip all middleware processing, including any authentication steps.
Shodan reports over 300,000 services with the `X-Powered-By: Next.js` header alone.
You can find links to the advisory and queries for runZero at: https://www.runzero.com/blog/next-js/
No, covid did not teach me that online conferences are just not working. It taught me that 2/3rds of all conferences could be fully online (though one still needs to think about best structure for them and not just transplant them without any adaptation) - and the remaining third needs to focus even more on interaction (unconferences, small workshops, hackatons...) and not the usual talks.
Ok. #IT nerds of the fediverse. Let's do a thought experiment. It's Monday morning, the boss comes in. We need to move all out stuff off US clouds onto our own hardware. He's bought us a small data centre (or larger server room). It's empty, just a raised floor, a power panel on the wall, Aircon, and two MAN generators outside. He wants you to buy everything to make this facility work. The catch. It has to all come from European companies. Everything.
What do you buy from who?
1/n
this is not a joke. behold the power of mastofuse, a file system mastodon client: https://gist.github.com/halcy/b4f455ef05c4c36906107e9367b8dd63
AI web crawlers are a menace.
https://thelibre.news/foss-infrastructure-is-under-attack-by-ai-companies/
Literally no reason they can't just make their scraping a bit less evil to avoid this. Just add some cache logic and respect robots.txt 🤷
Occult Enby that's making local-first software with peer to peer protocols, mesh networks, and the web.
Exploring what a local-first cyberspace might look like in my spare time.