-
Omg, I came across the totalitarian fever dream that is called #IPv8. Why is it even reported on? Takes 2 mins to realise:
- Website is 100% AI
- Vast portions of the proposal most probably too
- Everyone can propose an Internet Draft and have it published on ietf.org
- Author is called "veteran network architect" but has no track record and hides behind entity registered in BermudaWhat real experts say
https://seclists.org/nanog/2026/Apr/99
https://openfactory.net/the-ipv8-proposal-and-a-bit-of-an-opinion-on-it/
https://shitwolfymakes.substack.com/p/we-need-to-talk-about-the-ipv8-draft -
RE: https://social.toplap.org/@polymorphic_engine/116545791978011339
I’d like to do a little bit of promotion here for my sibling in spirit, Lil Data! So if you happen to be in #Vienna the weekend after the next, check this out!
-
And here's another one:
https://github.com/0xdeadbeefnetwork/Copy_Fail2-Electric_BoogalooThis one is not fixed by f4c50a40, so all current kernels are vulnerable. Looks like mitigation is possible by blocking kernel modules `esp4` + `esp6` here as well (and breaking #IPSec in doing so). Can someone confirm?
Why is it called "Electric Boogaloo"… is this a #DonaldByrd fan? Were they inspired by this week's @thekalimerashow shows??
#privilegeescalation #linux #vulnerability #linuxadmin #sysadmin #exploit #copyfail2 #electricboogaloo
-
Here we go again :-/ Another deterministic #privilegeescalation bug in the #Linux kernel. Make sure you're using at least the following version of your branch to mitigate against #dirtyfrag:
- 7.0.5
- 6.18.28
- 6.12.87
- 6.6.138
- 6.1.171
- 5.15.205
- 5.10.2556.19 is eol, so it probably won't get patched. Remove and blocklist the following modules if you have to use an unpatched kernel: esp4 esp6 rxrpc
See https://github.com/V4bel/dirtyfrag/blob/master/README.md for more info.
-
#Nodejs v26 is out! Most notably, it enables the #TemporalAPI by default. This also means the official Node.js build toolchain now includes #Rust.
-
#TIL You can set the `d` attribute value of a #SVG path element via #CSS. This means you can animate SVGs with pure CSS!
Docs:
https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Properties/dArticle with demos:
https://www.joshwcomeau.com/animation/squash-and-stretch -
I couldn't find a list of #Linux #kernel versions that include a patch for #copyfail, so I dug into the commit log and made one. Make sure you're using at least the following version of your branch to mitigate against copyfail:
- 7.0-rc7 (any stable 7.x is safe)
- 6.19.12
- 6.18.22
- 6.12.85
- 6.6.137
- 6.1.170
- 5.15.204
- 5.10.254See https://copy.fail for more info about the #exploit.
#privilegeescalation #vulnerability #cryptography #linuxadmin #sysadmin
-
The #ISDN stack got removed from the #Linux kernel a few days ago. That's quite the blast from the past. It's been in the kernel since, erm… *checks*… before #git and it's what the first ever #software product I built *and* sold was based on, a "unified messaging" server for #email, #fax and #voicemail. It was basically just some #python glue code duct-taping different systems together. But it worked and was used for far too many years by some.
-
Oh, this is bad. Luckily, it was disclosed responsibly and is already fixed in latest #Firefox… and more importantly, #Tor browser. #indexeddb
https://fingerprint.com/blog/firefox-tor-indexeddb-privacy-vulnerability/
-
The 🏆 for the most sadistic user-hostile website goes to 🥁 #Broadcom!
Had issues with #UTM / #AVF and wanted to try #VMWareFusion as an alt. What should've been few clicks became 30m of fighting through the corporate jungle: Mandatory registration. Trying diff. emails. Defeating anti-paste password fields, captchas, license checkboxes. Cross-checking other sites to find the correct download. In the end, I lost the little trust I had in Broadcom and deleted it w/out installing. #virtualisation
-
Some really nice things arrived in #browser land in February 2026 (i.e. "Baseline Newly available"):
Trusted Types API (prevent DOM-based cross-site scripting):
https://web.dev/articles/trusted-types`Map.prototype.getOrInsert()`:
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Map/getOrInsertZstandard compression (only server-side via `Content-Encoding` for now it seems, so no support in #JavaScript `CompressionStream` / `DecompressionStream` yet):
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Encoding -
Excellent article explaining audio frequency analysis in #JavaScript
-
@inpc secret preorder is up!!! But I'm letting it out, right here and right now:
-
#TIL from building a web audio player (for the mixes):
#Safari's #opus support is still quirky. With a #webm container, playback works but AnalyserNodes won't receive anything to compute frequency data with. With #ogg, `getByteFrequencyData()` works, but the audio element calculates the wrong duration, prob. b/c it always assumes CBR. Also if you build the audio pipeline before the first user interaction in Safari, nothing will get routed to the speakers
But still, the #WebAudioAPI is awesome!
-
Stanisław Lem died 20y ago today, a brilliant #scifi #author and #philosopher, best known for his 1961's novel Solaris.
He envisioned many technologies before they really happened, including the internet and how it would lead to the fractured, post-truth political world we live in today (1968's His Master's Voice).
Having used the actual internet decades later, he also said: "Until I started using the Internet, I hadn't known there were so many idiots in the world."
https://culture.pl/en/article/13-things-lem-predicted-about-the-future-we-live-in
-
#NavigationAPI is now baseline and it's so nice!
- No more click listeners on `<a>` tags, fighting with history state, manually updating the #dom, listening for popstate events
- handles scroll position
- ties in with the #ViewTransitionsAPI -
RE: https://mastodon.social/@bagder/116153056914895130
#TheSerialPort YouTube channel is on a roll!
Last month they published a high-quality documentary about the origins of internet telephony (the og "IPhone"), featuring original interviews with the people directly involved.
Just 3 weeks later, they're following up with #curl, featuring @bagder .
-
🎧 Guest Mix No.4! 🎧
@[email protected] is away touring again, so I get the chance to host another guest mix on the @[email protected] today. Thank you for all the lovely comments on the previous mixes! I really enjoy putting these together and your feedback makes it even more fun.
Listen here:
https://pirate.mxtthxw.art/@thekalimerashow/episodes/special-guest-mix-data0-mix4v2(Extended tracklist with all the album links can be found on the chapters tab):
#pirateradio #musicpodcast #radioshow #jazz #beats #dub #erichfromm #noise #psychedelic #experimentalmusic #djmix #guestmix
-
Remember Blake L., the ex-Googler who got sacked for claiming their #LLM had gained consciousness? He was one of the first of very clever but mentally unstable SEs who let their brains fool them into believing something like that. By the time Google wished him well and said, they'd take "the responsible #development of #AI very seriously." Hard to believe that this was just 3 years ago! Today, they'd probably promote him to devrel or something.
-
@bazkie I'm not sure how ironic your comment is meant to be (it would be justified if it were :-)), but this has been possible with #flexbox since 2015. It's even easier with #grid, though. #CSS is getting so nice now, that I'm tempted to do vanilla/raw CSS on the next big project. Haven't done that in decades.
-
RE: https://indieweb.social/@data0/115884351198568459
Last reminder: Are you using fedi-followers.data0.one ? If you do and want to continue using it, please migrate to the #ipns domain (more info in the quote toot below). The data0.one domain will be gone next week.
-
A few years ago, I migrated my personal projects from #GitHub via self‑hosting (#Gitea, #Forgejo) to plain #SSH‑backed bare repositories and a read‑only web frontend (#cgit). What have I really lost?
I've lost much visibility, that's obvious. But I’ve also lost the low‑effort PRs, the hostile forks, and the hard to understand issues. For personal projects, that's a good trade‑off. The most important thing is to be able to link to a project and I still have that thanks to the #frontend.
[1/3]
-
@inpc @doktorlond Just finished listening. Great show! Enjoyed it a lot! Cool that you made it a proper radio show and not just a mix!
#pirateradio #musicpodcast #radioshow #jazz #beats #dub #reggae #experimentalmusic #djmix #guestmix
-
This is such a good article, anyone (any real person anyway) doing open source should read it! 👏👏👏 @andrewnez
> #GitHub made #forking a one-click operation a decade ago without ever investing in making the resulting graph navigable […] A pull-based model would sidestep most of this, because #agents can #fork and generate garbage all day without anything landing in anyone’s inbox.
-
🎧 Guest Mix Vol.3! 🎧
Today, the @[email protected] is featuring another guest mix by me! I had lots of fun recording this and I hope there's something in it for all of you. Thank you @[email protected] !
Listen here:
https://pirate.mxtthxw.art/@thekalimerashow/episodes/supa-dupa-guest-mix-data0-mix3Extended tracklist:
https://pastebin.com/raw/QyM0USSMFriends of the show tag bomb:
@axwax @bazkie @yala @nickajordan @SnakeInTheGrass @rgarner @doktorlond @ethicalrevolution#pirateradio #musicpodcast #radioshow #jazz #beats #experimentalmusic #djmix #guestmix #tabla #fusion #reggae #tuba
-
🎧 Guest Mix Vol.2 Alert! 🎧
I'm excited to announce that today the @thekalimerashow is featuring another guest mix by me!
Listen here:
https://pirate.mxtthxw.art/@thekalimerashow/episodes/special-guest-mix-data0-mix2Friends of the show tag bomb:
@axwax @bazkie @yala @nickajordan @SnakeInTheGrass @rgarner @doktorlond @ethicalrevolution#pirateradio #musicpodcast #radioshow #jazz #beats #krautrock #experimentalmusic #djmix #guestmix
[1/2]
-
Oh no! This will lead to a massive #shortage of #Z80 #CPUs this year! We'll be hearing stories of mysterious break-ins where nothing more than a #Commodore #C128 was stolen from the basement game room. It's going to be terrible!
-
>> "Why let mere mortals decide #CPU priorities when the cosmos can guide us?"
> A fully functional sched_ext #scheduler that makes real CPU #scheduling decisions based on real-time planetary positions, #zodiac signs, and astrological principles. This actually loads into the #Linux kernel and schedules your system tasks. Because if the universe can influence our lives, why not our CPU scheduling too?
-
Did you know `zig cc` might be a better C #compiler than #GCC / #Clang? And that you can use it to compile your #CGO-dependent #golang projects as well?
I just needed to cross-compile something for x86_64-linux-musl on aarch64-macos-none. Everything else kept giving me headaches (#docker, #qemu)… but using #zig just worked.
https://andrewkelley.me/post/zig-cc-powerful-drop-in-replacement-gcc-clang.html
-
One of my favourite #feeds in my #RSS reader is #Wikipedia's "On this day..." #feed. It always includes something interesting to read and delivers several deep #rabbitholes per week. Highly recommended!
https://en.wikipedia.org/w/api.php?action=featuredfeed&feed=onthisday&feedformat=rss
-
RE: https://indieweb.social/@data0/114143860462112419
Are you using fedi-followers? If so, you may have to switch to another url because I'll dump the `data0.one` domain soon.
These will STOP working:
https://fedi-followers.data0.one (forwarder)
https://fedi--followers-data0-one.ipns.dweb.link (#dnslink url)The direct #ipfs #ipns link will continue to work however:
https://k51qzi5uqu5dgivcxhlxa17kjyawt9kc5a2jdlq44o6kpxspltff5gi3sfyo4p.ipns.dweb.linkYou can use the backup/restore function to migrate your data. (Remember, it's a local-only web app, your data only lives in your browser and is bound to the domain/origin.)
-
It's difficult to write this post in a neutral tone, but I'll try:
Apparently, in 2025 you can buy a #camera to install in your #toilet bowl that will upload #photos of your #poop into the #cloud. The manufacturer claimed the data was #encrypted. But it was a lie. So if you did buy such a device and used it, your poop may now be floating around the internet. (NO SH*T!)
-
RE: https://social.anoxinon.de/@linuxnews/115632152144208105
Using #SyncthingFork on #Android? The Repo + #Fdroid keys have recently changed hands and the new owner seems a bit dubious at this time. There is still a chance that they are entirely non-malicious and the takeover has just been a bit bumpy… but I still went ahead and switched to the #Termux #cli-only version for the time being. The official #Syncthing Android app has been discontinued in Oct. 2024, so it's is the only way left to use it on Android unfortunately.
-
This is a goldmine of #podman #networking tricks:
Example: Use socket units with `ReusePort=true` for your container units to let multiple containers share one port and let the kernel do the load-balancing via SO_REUSEPORT
-
Probably a good time to repeat myself:
- Run your #node-based prod app **AND** dev stack in isolated #containers / #vms (most malware targets you, the dev!)
- Use as few external packages as possible
- Check all packages carefully before installing, incl. updates (grab tarball and use #diff when in doubt!)
- What you see in a module's #GitHub is not necessarily what's on #npmAnd btw, the issue lies with npm and the move-fast-and-break-things culture, not #javascript
-
There's a #mechanicalkeyboard tagged at USD 3,600-8,090 now. Don't get too excited if that alone makes you want to have one. It's sold out and the waitlist is long.
To quote from the product page:
"Nothing about this makes any sense. It is over the top. Needlessly lavish. Exuberantly irrational. And that is the point. If you're looking for a #keyboard to solve only an earthly practical need, the <c̶e̶n̶s̶o̶r̶e̶d̶> is admittedly maybe not for you."
They should've called it the "#Simulacrum" instead.
-
Nice side effect: My config is now down to just a single file with 36 lines, 19 of which are folder name configs probably very specific to my users.
Conclusion: For as long as there's no #openimapd, #dovecot is still the preferred (read simplest) #imap server for little self-hosted setups like mine.
[3/3]
-
RE: https://indieweb.social/@data0/112631247141940220
@nobodyinperson Sorry to hear! Reminds me of an issue I had with the #PinebookPro. I semi-bricked it by installing Manjaro. But it only seemed dead. In reality, it was (probably) stuck trying to load the bootloader and draining the battery below safe levels in doing so, eventually killing it. Luckily the battery came back to life somewhat after leaving it on the charger for a while and doing a few charging cycles.
-
@Tijn @DigiAntiquarian That was a very entertaining episode! Going back and forth between gameplay and the backstory made it really interesting. I never thought I'd listen to all of the almost 4h, but in the end I did! :-)
#planetfall #Infocom #textadventure #interactivefiction #stevemeretzky #dosgaming #podcast
-
"I definitely think that FM radio will become a very Important factor in communications. Instead of using the phone lines, you’re going to be able to use the FM airwaves. You’ll be able to transmit a lot of information from computer to computer. You’re going to be able to transport software through FM radio."
– #JackTramiel (Founder of #Commodore, then new owner of #Atari Corporation), #FamilyComputing February 1985https://computeradsfromthepast.substack.com/p/family-computing-interviews-jack (@johnblood)
-
"PREPARE TO ENTER #HYPERTEXT."
(From an #ad on p30 of #MacWorld issue July 1987, via @johnblood's "Computer Ads from the Past" blog)
https://computeradsfromthepast.substack.com/p/vote-for-the-october-2025-post-topic
-
It is widely known that the #XeroxAlto pioneered many aspects of modern computing, or at least integrated them into the #userInterface we still use today.
But it also featured the first #modalEditor with #Bravo (although they eventually replaced it with the modeless #BravoX).
https://oldbytes.space/@amoroso/115422978986104778
#modalEditing #vi #vim #BillJoy #unix #posix #xerox #alto #gui #editor
-
Regular software assumptions don't apply to #ai:
❌ "#Software #vulnerabilities are caused by mistakes in the #code"
❌ "#Bugs in the code can be found by carefully analysing the code"
❌ "Once a #bug is fixed, it won’t come back again"
❌ "Every time you run the code, the same thing happens"
❌ "If you give #specifications beforehand, you can get software that meets those specifications" -
"This reflects a #businessculture obsessed with outcomes while treating outputs as speed bumps. But outputs (#code, #design, #products) are the load-bearing work—the actual prerequisites for the outcomes desired. Focusing on outcomes while ignoring outputs means hiding in abstractions […] These tactics may get you profit, but you sacrifice benefit. The climb may feel like progress, but at the end you’ll find yourself at the top of a mountain of #lemons."
-
Yesterday #AOL finally shut down #dialup. No more bee-bzz-brr-chrrr.
In 2019, 265,000 people in the US were still using a dial-up connection¹ (at 56 kbps!). Before the shutdown, this number was in the low 1000s².
What were they doing? An average website probably takes 10 minutes to load with a modem. Still eternal-septembering the #usenet? ;)
I'd be interested in numbers from other parts of the world.
⒈) https://data.census.gov/table/ACSDT1Y2019.B28011?q=ACSDT1Y2019.B28011
-
I've just added another item to the "why most humans don't deserve this planet" list (it's getting really big…):
Disposable #vapes (aka. electronic #cigarettes) now pack enough compute to run a web server on them:
https://bogdanthegeek.github.io/blog/projects/vapeserver/
#ecigarettes #embedded #embeddedsystems #slip #modem #usb #arm
-
#Ed25519 is now supported in all major #browsers. Big up @igalia!
-
I enjoyed this article on #vim #minimalism, even though it's a bit too extreme for my taste. I too try to keep my setup as lean and use as much built-in functionality as possible. But I still think syntax highlighting and LSPs are genuinely useful. #LSP feedback should be entirely on-demand of course. And compiling commits with #fugitive is just so much faster and more flexible than with the #git #cli. But apart from that… right on!
-
Two of the nicest new #JavaScript features of recent times:
Iterator Helpers (`.values()`) and `Array.fromAsync()`
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/fromAsync