home.social

Search

172 results for “YOURLS”

  1. OsmAnd - Why Offline Search is So Hard
    youtube.com/watch?v=aScKKQvZx3U

    A concise and beautifully presented walk through how OsmAnd majorly improved its offline search.

    Over the last years they realized that offline search is not really good at finding addresses. This is mainly because it was assumed that all (postal) addresses follow common rules (e.g. town→street→house) which is not the case. They are wildly different across the globe and people type them in various forms (out of order, incomplete, with abbreviations).

    After that introduction, I suspected that the solution might just be training some neural network. BUT, it's much cooler...
    They are using some clever algorithms where they basically find the matching places for each search word then intersect those sets of places with each other.
    Of course it's not *that* easy, so definitely go watch yourself.

    The current result is an order of magnitude faster and not even restricted to addresses only.

    #OsmAnd #map #search

  2. Spectrum Shine Colorful Lettering Hoodie Colorful Spectrum Shine Graphic Pullover Hoodie for Casual Wear Elevate your style with the Spectrum Shine Colorful Lettering Pullover Hoodie. Featuring vibrant, eye-catching lettering, this hoodie combines comfort and flair. Made from soft, breathable fabric, it’s perfect for lounging or casual outings. The relaxed fit and cozy hood provide warmth, while the unique design adds a pop of personality to any outfit. Stand out and express yourself effortlessly! A soft and comfy unisex hoodie that fits all your hoodie needs. The fleece fabric makes it a great partner all year round, be it a summer evening on the beach, or a Christmas dinner in a mountain cabin.

    fluxriot.com/products/spectrum

    #Streetwear #StreetStyle #UrbanFashion #FashionTrends #StreetFashion #SneakerCulture #Hypebeast #CasualWear #StreetwearBrand #FashionInspo #OOTD #StreetwearCommunity #GraphicTees #Athleisure #SkateStyle #StreetwearAddict #FashionPhotography #TrendyOutfits #StreetwearLookbook #FluxRiot #FashionBlog #StreetwearLife #CoolStreetwear #StreetwearLovers #FashionInfluencer #StreetwearCulture #VintageStreetwear #StreetwearShop #StreetwearStyle #StreetwearFashion

  3. If you have ever voted the way your family always did, that's a fine place to start. Plenty of us learned it at the table.

    It's also worth checking once whether those picks still match what you care about today. Maybe they do. Maybe one surprises you. The choice stays yours.

    No time to check those picks? See how your members of Congress voted and who paid for their campaigns, in about 10 minutes: voterchoice.vote

    #Congress #Midterms2026 #CivicEngagement #VoterChoice

  4. When midnight strikes along Croatia's Adriatic coast, Zadar transforms into a wonderland where the ancient Roman Forum pulses with live music and champagne toasts beneath the stars 🌟 The city's cobblestone streets come alive with intimate gatherings in hidden old town clubs, while the official celebration on Trg Petra Zoranića draws thousands into one glittering, unforgettable night. Picture yourself dancing between sea spra...

    events.europa.tips/zadar-new-y

  5. Thanks to everyone who came to our #AGNTCon + #MCPCon workshop, to @pamelafox for running it with me, and to the Agentic AI Foundation and @linuxfoundation for having us.

    The workshop repo is on GitHub. In six steps, you build an AI agent on local inference, trace it with #OpenTelemetry in Grafana, keep its history in Redis, give it tools over #MCP, and move the same containers to #Kubernetes. You don't need a GPU or a cloud account.

    Try it: aka.ms/stack-it-yourself-works

    #AIAgents #OpenSource

  6. You don’t have to visit the Dark Web for your stolen information to end up there. On The Geek and The Detective, Amy Lynn and veteran Mesquite Detective Derrick Stevens cut through the myths to explain how criminals trade stolen identities, why these cases are tough to investigate, and what to do after a data breach. Learn what’s at risk and how to protect yourself. #DarkWeb #Darknet #IdentityTheft #CyberCrime #TrueCrimeTech #PrivacyMatters #TheGeekAndTheDetective

    amylynn.org/thegeekandthedetec

  7. #introduction

    I'm Jason, in Kansas City. Literature grad. I wrote a monograph on John Hawkes and a novel called Masters X.

    Here for the postmodernists, the Gothic, Eco, and anything with an archive in it.

    Strangest book on my shelf: The Red Lion, by Mária Szepes. A 1946 alchemical novel the Hungarian regime ordered destroyed. Four copies survived; it circulated in samizdat.

    Tell me yours.

    #bookstodon #books #literature #WritersOfMastodon

  8. I just updated my website, because I really do not want you to miss out if you are an iOS developer. Preparing a newsletter send for Monday.

    Such endeavours does make for neat little website updates. ;)

    Check it on appforce1.net

    Try that big orange button and get yourself a ticket to Do iOS while you are browsing. (Not sure if Jedi mindtricks is the way to go here... But it never hurts to try. ;) )

    appforce1.net (Yes, it's all barebones PHP underneath.)

  9. I just heard a music podcast about include a beautiful but deeply disturbing song by Sufjan Stevens about John Wayne Gacy, the child molester and serial killer. My brain said Hell No. I realized I have a list of things that I am willing to consider "Halloween content" and other content that's a No for me. If you feel like sharing yours, or if a popular person wants to make a poll, I'd love that.

    Right now I think these are my preferences

    OK For Halloween:

    • Death of grown-ups
    • Already-dead people (including children) as ghosts, zombies, etc.
    • Monsters (e.g., vampires, werewolves, mummies...)
    • Murder of adults by monsters and vice-versa
    • Creepy almost-murder of kids in child-audience horror stories

    Not OK For Halloween:

    • Child molestation
    • Murder of children (although for some reason I'm OK with child ghosts and vampires)
    • Torture
    • Murder not involving any mystical or spiritual elements

    OK For Other People I Guess:

    • Non-mystical murder (e.g., slasher flicks, murder ballads)
    • Mystical Halloween stuff from a very specific religious point of view (this one is just because my faith transition has given me a complicated relationship with some religious content)

  10. What’s the first step to sustainable knitting? 🌱
    Hint: it’s not buying new yarn, not even the organic, responsibly sourced kind. Swipe to find out 🧶
    I’m working on shrinking my own stash, and I’d love to hear how you handle yours. Share your thoughts below👇
    #knitting

  11. If #AI does not become #open-sourced by #law and by #international law, then our life is going to be a raging hell until we pass away. The only way to manage #selfishness is to make it #obvious. Every stinking #mind on the planet has an #agenda and if you don't know yours, oh well. Left alone...

  12. For people wanting to move off #Wordpress to an #SSG, if #Haskell if your cup of tea, give a try to my minimal and extensible SSG framework BlogShake abhin4v.github.io/shake-blog/

    It supports posts and pages in Markdown, and custom templates in Mustache. It is built upon the solid foundation of #Pandoc and #Shake, and can be extended in any direction to make an SSG that is truly yours.

    It comes with a #GitHub Action to host your website completely on GitHub pages easily and for free.

  13. Node.js Releases Critical Security Updates to Fix Brotli Remote Code Execution and Network Flaws

    Node.js released security updates for 10 vulnerabilities, including a critical remote code execution flaw in the Brotli decoder (CVE-2026-111497) and multiple network validation bypasses. These vulnerabilities reside in the core runtime, requiring administrators to update host systems, rebuild container images, and restart all services.

    **If you run Node.js anywhere, update it right away to version 22.23.4, 24.22.1 or 26.12.1, then rebuild any containers or apps that bundle Node.js and restart all Node.js services (your usual dependency scanners won't catch this, so check the runtime versions yourself). If you're still on old versions like 20.x, 23.x or 25.x, they will never be fixed. Move to a supported version ASAP. Until you can patch, block Brotli-compressed (br) traffic at your proxy or firewall as a temporary shield.**

    beyondmachines.net/event_detai

  14. Ethan Klein went from silly, fun aspregic dude to become one of the worst pieces of shit and most hated people on the internet over the years, along with his crew and family.
    So much so, that now with this cheating scandal, everyone I see says the same thing "he got what he deserved and we wish him all the worst in his future endeavours".

    What a valuable, long lesson in karma and checking yourself before wreckin' yourself.

    #karma #news #drama #youtube #yt #h3h3 #ethanklein #internet

  15. CW: Kpop Demon Hunters implied spoilers

    "It's corrosive poison to demons, but safe for humans!" Zoe explains brightly. "Isn't it brilliant?"

    "Ew," Rumi says, and turns right back around to go out the door she came in. "You can test that concoction yourself."

    Mira sighs, but privately agrees. It probably stains clothes.

    #KPDH #KpopDemonHunters #FanPrompt (poison)
    @FanPrompt

    -Wisteria

  16. (4/4)
    So, in that sense, Dan J is not doing anything out of character for an AIP'er. Acting as a spoiler for the orthodox GOP has been the AIP's role as long as I've known them! I think a few Democratic governors can thank AIP candidates for their wins, but that's absolutely on the fringies, not the Ds!*

    Today's articles suggest that Alaska's fairly recent adoption of ranked-choice voting** is what's changed, but they are undervaluing the other big change: MAGA.

    There's no need for a right flank party in Alaska since MAGA captured the GOP. What I think is funny here is that Dan J's big sin isn't that he isn't RW enough, it's that Dan S is Trump loyal!

    Help yourself to looking into some of the characters in the AIP history--ranging from colorful to terrifying.

    (/end)

    *please take note of this lesson on the consequences of purity tests.

    **I'm not a fan.

    #uspol #election #alaska

  17. Going Home Is Different When You Know Better

    How Healing Changes the Way Family Gatherings Feel and How to Prepare for Them You did the work. You went to therapy, or coaching, or you spent years quietly unlearning the things that were holding you back. You set boundaries you were never taught to set. You learned your triggers, your patterns, your worth. You built a version of yourself that feels solid and grounded and real in a way that the old version never quite did. And then the holidays arrive. Or a birthday. Or a family dinner. […]

    thecommongroundcoach.com/2026/

  18. There's a thread over on Bluesky asking about the first video game you remember playing. I can't help but think the answers would be more interesting here

    Mine was _Tank_, a sit-down two-player cabinet game made by Atari. Our family used to go skiing about an hour north of Montreal every year and we stayed in Le Chantecler Hotel. There was a Tank in the hotel lobby

    It was 1974 so I was 7. (I had a LOT of pinball under my belt by then.) Between me and my brothers, we probably dumped $50 into that game even though we only had a window of ~4 hours every day to play, and it was in strong competition with the indoor pool. Plus we needed to talk my dad out of parting with $5 for each of us every night. I think we lied and said we needed it for the jukebox in the bar/disco that we were somehow allowed to hang out in at night

    So... what was yours?

    youtube.com/watch?v=3OsBUzYBJgU

  19. I find Krishnamurti kinda interesting, however, this whole Buddhist/Asian philosophy of have no identity, have no sense of self, have no thoughts. Just disappear. It sounds like religious crowd control tactics.

    Christianity does the same thing with advice like: don't trust yourself, only listen to what we tell you is God's will - your 'thoughts' are just the devil trying to tempt you, etc. We'll do all the thinking for you.

    1/2

    #religion #christianity #buddhism #mindlessness #crowd #control

  20. A critical PHP vulnerability was patched on October 21 that affects many business websites, including those running WordPress. Updating WordPress alone isn't enough—make sure your PHP version is also up to date to protect your site.

    sealsystems.net/go/critical-ph

  21. You shipped the feature, fixed the bugs, and answered the "quick question" that turned into a two-hour debugging session. The invoice went out on the first of the month. Thirty days later: nothing.

    The most I have ever waited on was $4,800. The client answered every message within a day - "accounts is processing it", "the approver is on holiday", "next Friday, promise". What got it paid was not a longer or angrier email. It was the third email in a sequence I already had sitting in my drafts folder, sent on day 30, worded almost exactly like the one below. The money arrived in 48 hours.

    If you freelance or run a small dev shop, chasing payment for finished work is one of the worst parts of the job. The fix is not a better apology for asking. It is a process: the same three emails, on the same days, every time.

    Here they are, copy-paste.

    Day 7: the polite nudge


    At seven days past the due date, assume a boring explanation. The invoice was missed, routed to the wrong person, or stuck in an approval queue. Your goal is a response without friction.

    Subject: Quick follow-up on invoice #[NUMBER]

    Hi [CLIENT NAME],

    I'm following up on invoice #[NUMBER] for [PROJECT/DELIVERABLE], which was due on [DUE DATE].

    Could you confirm that it's been received and let me know when I can expect payment?

    For reference, the outstanding amount is [AMOUNT].

    Thanks,
    [YOUR NAME]


    Why this works: you identify the invoice, state the amount, and ask for one specific next step. No accusation, no essay.

    Send it in the original invoice thread so the context travels with it. If they reply with a payment date, write it down. A promise in a casual email is easy to forget - yours and theirs.

    Day 14: the firm follow-up


    Two weeks late, be more direct. This message says the balance needs attention; it does not ask whether anyone saw your last email.

    Subject: Payment overdue - invoice #[NUMBER]

    Hi [CLIENT NAME],

    Invoice #[NUMBER] for [AMOUNT] was due on [DUE DATE] and remains unpaid.

    Please confirm the scheduled payment date by [RESPONSE DEADLINE].

    If payment has already been processed, please disregard this reminder and let me know so I can update my records.

    Thank you,
    [YOUR NAME]


    Why this works: it replaces a vague request with a clear action and a deadline, and it gives the client an easy out if payment is already moving.

    Set the response deadline at two business days. If the answer is "waiting for approval," ask when approval is expected. If "accounting pays on Fridays," ask which Friday your invoice is scheduled for. Turn "we'll get to it" into something you can track.

    Check your contract before this email. If it allows late fees, interest, or pausing work, know the terms before you invoke them. Never add fees the contract does not mention.

    These templates are communication examples, not legal advice. Check your contract and applicable local law before adding late fees or taking collection action.

    Day 30: the final notice


    A month overdue changes the conversation. Stay polite, but do not send a third email that sounds like the first one.

    Subject: Final payment notice - invoice #[NUMBER]

    Hi [CLIENT NAME],

    Invoice #[NUMBER] for [AMOUNT], originally due on [DUE DATE], remains outstanding despite my previous follow-ups.

    Please arrange payment in full by [FINAL DEADLINE] or contact me by that date to confirm a concrete payment arrangement.

    If the balance remains unpaid and I have not received an agreed resolution, I will consider the next steps available under our agreement and applicable law, which may include formal collection or recovery proceedings.

    Please confirm receipt of this notice.

    Regards,
    [YOUR NAME]


    Why this works: it is factual, it documents the history, and it sets an explicit deadline without threats you cannot carry out.

    Only name actions you are genuinely prepared and legally entitled to take. Before formal recovery, review your agreement, preserve the invoices and correspondence, and check the rules in the relevant jurisdiction. And do not assume you can shut down a live service, revoke access, or withhold source code - your contract decides that, not your frustration.

    What happens between the emails matters as much


    1. Keep a payment log. Invoice number, amount, due date, reminder dates, responses, promised dates. The day you have three late invoices, this log is the only thing keeping the story straight.
    2. Separate payment from new work. A client who has not paid asking for another feature is not an automatic yes. Review the agreement and discuss a pause or revised schedule.
    3. Make paying easy. Every email includes the invoice, the amount, payment instructions, and the reference their accounting needs. Every extra step is another week.
    4. Fix the next contract. Explicit payment terms, a defined invoicing schedule, a stated late-fee rule. For larger projects, milestone payments instead of one big invoice at the end.
    5. Do not let one client be your whole business. A great relationship is still a financial risk if one unpaid invoice stops you paying your own bills.


    Build the system before you need it


    The best time to decide how you handle late payment is before an invoice goes overdue. Set three calendar reminders for days 7, 14, and 30, save the scripts as templates, and when the day comes you fill in the brackets and send. You follow a process instead of writing an email while frustrated.

    Your turn: what is worse - clients who ignore reminders, clients who keep promising "next week," or clients who dispute the invoice after the work is done? And what actually worked for you?

    Written by the Change Brief team - we build practical, no-signup toolkits for freelancers.

    AI assistance was used in drafting this article. The publisher reviewed and edited the content and takes responsibility for the final version.#freelance #career #productivity #software #coding #development #engineering #inclusive #community
    3 Late-Payment Emails for Freelance Developers

  22. Short answer: find people through work you can already click on, judge them by five specific pages instead of the homepage, and use the first call to ask what is not included. Those three habits filter out most of the bad options before money comes up.

    Where to look


    Start with sites you already use in your own industry. Scroll to the footer and look for a "site by" credit. If there isn't one, ask the owner who built it. A referral from someone whose site you can open and poke at is worth more than any directory listing.

    Other places that work:

    • Industry associations, trade-show exhibitor lists, supplier newsletters — the people who serve the same kind of business you run tend to know each other.
    • Freelance marketplaces and portfolio sites. Use them to collect names, not to decide. A platform rating is not evidence about your project.
    • Your accountant, your chamber of commerce, a co-working space. Useful mainly when you want someone in your own timezone for calls.

    What not to use as a filter: the lowest price, the longest list of services, and any promise about search rankings.

    The five pages to open on every portfolio site


    Their homepage is the page they spent the most time on. It is the least informative page they have.

    1. The busiest page. Find the page with the most repeated elements — a product listing, a services index, a team page. Ask yourself: does the layout hold with three items? With thirty? Does a long paragraph still read, or does the text run into the next block? This is the page that resembles your actual site.

    2. The contact or enquiry page. Submit a test enquiry with your real email address. Did you get a confirmation? Did the form tell you clearly when you submitted it empty? A broken form on a developer's own site is the single most useful signal you will get, and it costs you two minutes.

    3. The mobile version, on your phone, on mobile data. Not on their office wifi and not in a device simulator. Time how long until you can read the headline, tap the menu open, and try to fill the form with one thumb.

    4. The second language, if you need one. Do not check whether the words are translated — check whether the pages are. Click three links from the translated homepage. Do they stay in that language, or dump you back into the default one? Does the product list show the same products?

    5. The footer pages. Privacy policy, terms, cookie notice. If they build for customers in Europe or the United States and their own site has none of these, that tells you what will be missing from yours.

    Two more checks, thirty seconds each:

    • Open an address on their site that does not exist — add a few random letters to the end of a page address. A bare server error page means nobody is minding the details.
    • Read one portfolio entry properly. Does it say what the client needed, what was built, and roughly how long it took? If every entry is a screenshot with no context, you cannot tell what they did and what was already there before they arrived.

    One more thing worth doing: portfolios often include sites the person only partly worked on, or maintained rather than built. That is not dishonest, but it is worth asking directly — "what was your part on this one?" A straight answer is a good sign.

    The first call: eleven questions


    Ask these before you talk about price. The point is not to catch anyone out; it is to find out whether they have done this enough times to have opinions.

    1. Who actually does the work? A good answer names the person and says whether any part is subcontracted. A warning sign is "our team" with no names, or a salesperson who will not be involved after signing.

    2. What do you need from me, and what happens if it arrives late? A good answer is a written list — logo files, company text, product photos, product data, hosting login — plus an explicit statement that the clock starts when the materials arrive, not when you pay. A warning sign is "just send whatever you have."

    3. What will I see first, and when? A good answer is a live preview address with a date attached. A warning sign is "we'll send you screenshots."

    4. How many rounds of changes are included, and what counts as a change? A good answer gives a number and a definition: text swaps and colour changes are one thing, a new page or a new feature is another. A warning sign is "unlimited changes" — that is not a policy, it is the absence of one.

    5. What is not included? A good answer is a list: domain, hosting, business email, copywriting, photography, translation, ongoing updates. A warning sign is silence, or "everything is included."

    6. Whose name is the domain and hosting in? A good answer is yours, from day one, and you get the login. A warning sign is theirs, "for management purposes." This is the most expensive mistake on the list — recovering a domain from someone who stops answering is slow and sometimes impossible.

    7. Will I have admin access to the site when it's finished, and can I export the content? A good answer is yes, plus a plain explanation of what you will be able to change yourself. A warning sign is "you don't need access, we handle updates."

    8. What happens after launch — what's covered, for how long, and what's billed extra? A good answer defines a window for fixing defects and a rate for everything after it. A warning sign is "free support forever", or no answer at all.

    9. What is the timeline measured from? A good answer is a number of working days counted from the date your materials are complete. A warning sign is a confident "two weeks" said before they have seen your content.

    10. What would make you turn this project down? A good answer names something real — a deadline they cannot hit, a platform that does not fit, a budget that does not match the scope. A warning sign is "nothing, we can do anything." Anyone who has done this for a while has walked away from something.

    11. Can I speak to the client whose site you just showed me? A good answer is "I'll ask them" or "they've agreed to be a reference." A warning sign is every single project being off-limits.

    Red flags and green flags


    Red flags, in roughly the order they should worry you:

    • No written scope, or a scope that is one paragraph long.
    • The domain and hosting stay in their name.
    • A price far below everyone else, with no explanation of what was cut.
    • Pressure to decide today.
    • No preview address — screenshots only.
    • Guarantees about search ranking, traffic, or sales.
    • A portfolio where every site looks identical, and none of them is in your industry.
    • They ask for the full amount up front.
    • They cannot tell you what happens after launch.

    Green flags:

    • They ask about your business before they ask about colours.
    • They can show you a site they built that is still running.
    • They push back on something you asked for, and explain why.
    • The exclusions are in writing before you ask twice.
    • They name the person who will do the work.


    Payment and paperwork


    Two rules that solve most disputes before they start.

    Do not pay the full amount up front. Split it against things you can see: a deposit to start, a payment when the preview is up, the rest at launch. Milestones tied to deliverables beat milestones tied to calendar dates.

    Get the scope in writing, including the number of pages, who writes the text, who supplies the photos, and what happens if you add a page later. If the document does not mention something, assume it is not included.

    Before you contact anyone: thirty minutes of prep


    Write these down and the conversation becomes much shorter:

    • One paragraph on what the business does, who buys, and the single action a visitor should take.
    • Three sites you like, and one specific thing about each. Not "it looks nice" — "the product table fits forty items on one screen without scrolling sideways."
    • The materials you can supply today, and the ones you cannot.
    • A budget range, and a date you genuinely need it by.
    • Two developers to get quotes from, not five. Comparing five quotes against a one-page brief teaches you nothing.

    The quotes you get will only be as good as the brief you send. And a developer who asks you good questions is telling you they have been burned before — that is usually the one worth a second call.#career #freelance #webdev #software #coding #development #engineering #inclusive #community
    How to vet a web developer before you pay: which pages to open, which questions to ask

  23. The Diggings campground on the Turon River

    In this post: The peace and the pain of camping.

    This is the blog of Mark Wordsworm, the travelling worm. I’m a 40-year-old bookmark (give or take a few years) and I proudly boast my own Hallmark serial number, 95 HBM 80-1. You’ll probably want to read all about me and my Travelling Companion (the TC).

    Today’s travel notes

    The TC, bless her cotton socks, has a new favourite place to camp. It’s The Diggings campground in New South Wales, Australia. It’s beautiful and peaceful, so she claims, tucked away between the hills, right on the bank of the Turon River. “Peaceful?” I retort. “Hah, read on!”

    “Everything in Australia is trying to kill you.” That’s what they say. Here come the 5 hazards that the TC encountered on this short two-day trip. Plus a bonus hazard!

    The book I’m in

    Gone for Good by Harlan Coben. A good fast read full of twists and turns. Perfect for bookworms like yours truly, who prefer their hazards presented between the covers of a book.

    Travel tips

    Get out there and enjoy life. It might be shorter than you think! (I’m voicing the TC here.)

    The photos

    Ah, camping. This worm doesn’t know why the TC does it!

    https://youtu.be/MpUu2zs0CJM

    Hazard 1: Aggressive ants. At the slightest provocation, they’ll barrel out of their nest on the ground, climb up your legs as far as possible, and nip like fire pokers. Also, it’s important to point out that these particular ants had built their nest right across the doorway of the dunny. (Australian terminology: a dunny is a toilet, especially a long-drop like the ones you get at campgrounds, if you’re lucky to get any at all.) So, just when you’re in a hurry, there’s a hazard in your way.

    The peace. A smooth green sward of grass, surrounded by tree-covered hills from which birds sound their music:

    Kangaroos abound, bounding around, with several little joeys both in and out of the pouch. Crimson Rosellas feed on the grass seeds, adding their rich reds and blues to the scene:

    Hazard 2: Being chased by a kangaroo. Those roos may look cute and cuddly. But… The TC stopped for a moment to listen to some birds. Suddenly a peremptory bark sounded from higher up the hill. She looked up to see a big male kangaroo loping towards her. Not fast, but purposefully. With its chest and arms all muscly and strong. She took the wiser course and walked away. The male stopped near his clutch of females and joeys to watch the TC retreat. She does confess that her heart bumped painfully for a while.

    Hazard 3: Aggressive birds. Not all birds are as peace-loving as the Crimson Rosellas in the previous photo. Earlier in this trip, before getting to the campground, an Australian Magpie did an uncomfortably close fly-by. Once again, the TC had stopped to watch some birds, though not the magpie. Suddenly, she heard and felt a loud clap just next to her head. Just a warning pass, no contact. The TC looked up to see a magpie fly off, land on a nearby branch, then turn round and ready itself for another go. On this occasion too, the TC took the wiser course, with her umbrella raised above her head in defence.

    More peace. The early morning sun glows behind a wall of mist:

    Hazard 4: Deep mineshafts. Beware where you tread, in the misty eery light. Deep mine shafts are scattered at random, remaining from the days of gold mining in the area. The shafts within the campground are fenced off, but a dreadful drop lies in wait for the unwary who wander off the beaten path:

    Yet more peace. The Turon River flows past the campground, reflecting sky and trees, home to ducks, kingfishers, and other wildlife:

    Hazard 5: River and terrain. You need a four-wheel-drive vehicle to get to The Diggings campground. Depending which route you take, there’s one river crossing and a steep, dry-weather-only descent on a dirt track, or at least four river crossings. Beware the river rising. It can be fast-flowing and deep.

    And the promised bonus hazard: In the video at the start of this post, the TC mentioned a spider in the dunny. Yes, it was a redback. A good one to avoid!

    On this trip, yours truly stayed safely tucked in a book. Hence, no photos of me in this post. My apologies, dear reader, I know you miss my noble physiognomy.

    That’s all for today, folks.

    #australia #bookmark #bookworm #TheDiggingsCampground #travel #travellingWorm #travelog #travelogue #TuronRiver
  24. 🦥 Nudgify: An AI-Powered Productivity Companion That Does the Remembering So You Can Do the Living | Hacktoberfest: Slow and Steady


    What if your productivity app didn't just wait for you to remember things, but actually helped you stay on top of them?

    We all have those little tasks that seem insignificant until we forget them.

    Reply to that message. Finish that assignment. Remember that deadline. Follow up with a friend. Prepare for tomorrow. Do that one thing you've been postponing for the past three days.

    Individually, these tasks aren't particularly difficult. The problem is remembering all of them, keeping track of when they need to happen, and making sure nothing important slips through the cracks.

    That's where Nudgify comes in.

    For this Hacktoberfest challenge, Slow and Steady, I wanted to explore an idea that feels simple but has a surprisingly meaningful impact: building technology that takes repetitive mental work off our hands.

    Nudgify is an AI-powered reminder and productivity assistant designed to help people manage their responsibilities, remember important tasks, and stay accountable without constantly having to organize everything themselves.

    Because sometimes, the smartest thing technology can do is give us one less thing to worry about.

    🦥 1. The Inspiration: Maybe We Don't Need to Work Harder


    The theme of this week's challenge is inspired by International Sloth Day, and honestly, I think there's something worth learning from sloths.

    They don't rush around unnecessarily. They conserve energy and move at their own pace.

    Meanwhile, we live in a world where everyone seems to be juggling ten different things simultaneously.

    College assignments, project deadlines, internship applications, messages from friends, personal goals, and a never-ending list of things we promise ourselves we'll do later.

    The funny part? Sometimes, we spend so much energy remembering what we need to do that we have less energy left to actually do it.

    Think about a typical student.

    You have an assignment due next week. A friend asks you to remind them about something tomorrow. You need to submit an application, prepare for an upcoming test, and finish a project you've been putting off.

    You might write some of these things down. You might set a few alarms. You might even promise yourself that you'll remember everything.

    And then, inevitably, something gets forgotten.

    The problem isn't necessarily laziness. It's that our brains aren't designed to function as perfect notification systems.

    What if we stopped expecting people to remember everything and started building software that helped them remember what matters?

    That question became the starting point for Nudgify.

    💡 2. What Is Nudgify?


    Nudgify is an AI-powered productivity companion built around a straightforward idea:

    Let software handle the remembering, organizing, and nudging, so people can focus on doing.

    Instead of treating reminders as isolated alarms, Nudgify explores a more helpful approach to everyday productivity.

    The goal is to create an experience where tasks, deadlines, and accountability are easier to manage, whether you're trying to stay organized yourself or helping a friend stay on track.

    Here are the core ideas behind the project.

    ⏰ Smarter reminders


    A reminder should do more than simply exist somewhere in a list.

    It should help you bring your attention back to something at the right moment.

    Nudgify is designed around making important tasks easier to track and revisit, reducing the need to repeatedly check your schedule or mentally calculate how much time remains before a deadline.

    🧠 Less mental clutter


    How many times have you opened your phone to check one thing and ended up scrolling for twenty minutes, only to forget what you originally intended to do?

    A productivity tool should reduce the number of things demanding your attention, not become another source of distraction.

    Nudgify aims to keep important responsibilities visible without requiring users to constantly monitor them.

    🤝 Accountability between friends


    Productivity isn't always a solo activity.

    Sometimes, a little encouragement from someone else makes a difference. Friends can have shared goals, upcoming deadlines, or commitments they want help remembering.

    Nudgify explores how an assistant can make this kind of accountability easier while keeping the experience centered on the people using it.

    The objective isn't to turn friendships into project-management systems. It's to make helping each other a little easier.

    🤖 AI as a practical assistant


    AI is often presented through spectacular demonstrations: generating entire applications, answering complicated questions, or producing impressive pieces of content.

    But I think one of its most valuable applications is much more ordinary.

    It can help make repetitive digital workflows feel less tedious.

    Rather than using AI simply because it's fashionable, Nudgify is an exploration of how AI can support a genuinely useful everyday experience.

    🔓 3. Why Open-Source AI?


    This is the part of the challenge that interests me most.

    The Slow and Steady challenge isn't simply asking us to build an application with AI somewhere in the stack. It specifically encourages us to explore open-weight models, open-source AI frameworks, local inference, and other open technologies that meaningfully power our projects.

    And there's a reason that distinction matters.

    When developers build exclusively around a closed AI service, they can become dependent on a provider's available models, pricing structure, API limits, and infrastructure.

    That can be perfectly reasonable for some projects. Hosted AI services are convenient and can be incredibly capable.

    However, convenience shouldn't be the only option.

    Open-source AI and open-weight models give developers more room to experiment with how AI is deployed, customized, and integrated into an application.

    For a project like Nudgify, that flexibility creates several interesting possibilities.

    🔓 A. Freedom to choose the model


    Different AI models have different strengths.

    One might be better at following structured instructions. Another might be faster for simple tasks. A smaller model might be sufficient for extracting dates or classifying reminders, while a more capable model might be useful for complicated requests.

    An open approach allows developers to evaluate alternatives instead of designing the entire product around one provider.

    For example, a future version of Nudgify could use a lightweight model for straightforward reminder processing and reserve more capable models for tasks that genuinely require them.

    The model becomes a component that can be evaluated and replaced, rather than a permanent limitation on the product's design.

    🔐 B. Privacy should be part of the architecture


    Think about the information a personal productivity assistant might handle.

    It could contain assignment deadlines, daily routines, personal commitments, private notes, and reminders involving other people.

    This information may not look especially sensitive when considered individually, but together it can reveal a great deal about someone's life.

    That raises an important question:

    Does every AI-powered task really need to send personal information to an external server?

    Not necessarily.

    For tasks that can be handled by a sufficiently capable local model, local inference could allow processing to happen on the user's own device.

    That would provide an opportunity to reduce external data transfers and give users more control over their information.

    Local processing isn't automatically private in every respect, and the rest of the application still needs appropriate data-handling practices. However, reducing unnecessary transmission is a meaningful architectural advantage.

    💻 C. AI that doesn't always depend on the internet


    Imagine opening your productivity assistant while travelling, sitting somewhere with unreliable connectivity, or working away from your usual setup.

    If an appropriate model runs locally, certain AI features could remain available without an internet connection.

    That would make the application less dependent on network availability for those particular tasks.

    Of course, a fully offline experience requires more than downloading a model. Data storage, authentication, synchronization, and any external notification services must also be designed to support offline use.

    Still, local inference makes offline AI a realistic design possibility rather than something that necessarily requires a remote API.

    💸 D. Lower barriers to experimentation


    Experimenting with AI can become expensive when every iteration depends on a metered API.

    You might want to test different prompts, compare models, change how an assistant behaves, or run repeated evaluations.

    Open-weight models can make it possible to conduct some of this experimentation without paying a separate hosted-inference fee for every request.

    That doesn't mean running AI is always free. Hardware, electricity, hosting, and infrastructure can all have costs, and some model licenses impose additional conditions.

    But having the option to run models on hardware you already own can make experimentation more accessible.

    For students and independent developers, that matters.

    You shouldn't need a large budget just to explore an idea.

    🛠️ E. The freedom to understand and change things


    Perhaps the most important benefit is the freedom to learn by doing.

    When a model is open-weight and its license permits the intended use, developers can inspect its available artifacts, run inference, evaluate its behavior, and sometimes fine-tune it.

    Open-source frameworks can also make it easier to understand and modify the surrounding application logic.

    Instead of treating the AI component as a mysterious service, you can investigate how it works, compare alternatives, and build a system that suits your requirements.

    For a student developer, that freedom is valuable in itself.

    Open innovation isn't just about using something that is free. It's about having more control over what you can build with it.

    🧩 4. Why This Approach Fits Nudgify


    A reminder assistant might seem like a small application, but it presents some interesting design questions.

    Which tasks actually require AI?

    Which can be handled with ordinary code?

    When should the application notify the user? What information needs to be stored? What happens if a notification is delayed? How can the assistant remain helpful without becoming annoying?

    These questions are just as important as the model itself.

    For example, consider a reminder scheduled for tomorrow at 10 AM.

    There is no reason to ask an AI model to continuously calculate the time until that reminder. A conventional scheduling system can handle that reliably.

    AI might be useful when a user describes a task in natural language, needs help interpreting an ambiguous request, or wants to turn an unstructured instruction into a structured task.

    A well-designed application can combine both approaches.

    TaskAppropriate approachStore a reminderDatabase or structured storageCalculate time until a deadlineOrdinary application logicInterpret a natural-language taskAI, when usefulSchedule a notificationScheduling infrastructureGenerate a short task summaryAI, when usefulDeliver notifications while a tab is closedBrowser push infrastructure and a push-capable backend


    This separation is important because AI shouldn't be used for everything simply because it is available.

    Reliable application logic should handle predictable operations, while AI should be reserved for tasks where flexible language understanding or generation adds genuine value.

    That also creates a natural opportunity to use a smaller open-weight model for suitable AI operations without making every part of the application dependent on inference.

    🏗️ 5. Building the Application: The Technology Behind Nudgify


    Nudgify uses a modern web-development stack designed to support an interactive frontend, application logic, and AI integration.

    The current project stack includes the following technologies:

    Frontend


    React 19

    React provides the component-based foundation for the user interface. It allows the application to be organized into reusable components rather than a collection of disconnected screens.

    Vite 8

    Vite provides the development and build tooling for the frontend, helping keep the development workflow fast and straightforward.

    TypeScript 7

    TypeScript adds static typing to JavaScript, making it easier to define data structures and catch certain mistakes during development.

    For an application that handles tasks, deadlines, and user interactions, clear data structures help keep the codebase maintainable.

    Tailwind CSS v4

    Tailwind CSS provides utility-based styling that makes it possible to develop and refine the interface without maintaining a huge collection of unrelated CSS rules.

    The objective is to create an experience that feels like a practical product, rather than a technical demo assembled around an AI API.

    Backend


    Node.js and Express 4

    The backend provides the foundation for handling application requests and server-side workflows.

    Keeping backend responsibilities separate from the frontend also provides room to evolve the application as its functionality grows.

    AI integration


    Google Gen AI SDK

    The project includes the Google Gen AI SDK for AI integration.

    This is an important distinction for the open-source AI challenge: a hosted AI SDK does not, by itself, make an application open-source-AI-powered.

    To make open AI central to Nudgify, the model layer needs to incorporate a suitable open-weight model or an appropriate open-source AI component as a meaningful part of the actual application.

    That could involve evaluating a locally hosted model, adding a compatible inference backend, or building a model adapter that makes switching between supported models straightforward.

    The goal is not to add an open model just to satisfy a checklist. It is to use the model where it provides real value.

    Data storage


    Browser localStorage

    The project uses browser localStorage for supported client-side data.

    This can be useful for lightweight persistence, but it is important to understand its limitations: browser storage is tied to a particular browser and origin, isn't automatically synchronized between devices, and shouldn't be treated as a secure database for sensitive information.

    A more complete multi-user application may require server-side persistence, appropriate access controls, and a clear strategy for data synchronization.

    Each part of the stack has a purpose, and understanding those boundaries is part of building a product that can grow beyond its initial prototype.

    🔔 6. Notifications: A Reminder Is Only Useful If It Reaches You


    There's another practical challenge with reminder applications.

    Imagine creating a reminder, closing the browser tab, and assuming the application will notify you when the time comes.

    If the application only checks for reminders while its page is open, that assumption may not hold.

    This is why notification delivery deserves its own design.

    A browser notification displayed by an open page is not the same as a push notification delivered when the page is closed.

    A more robust implementation can involve:

    • A service worker to receive push events where supported.
    • The Web Push API to deliver notifications to subscribed browsers.
    • A backend capable of scheduling and sending push messages.
    • Persistent storage for reminders and their delivery status.
    • Appropriate permission handling and user consent.

    For deadline-based reminders, the application also needs to distinguish between when a task is due and when a notification should be sent.

    For example, if a task is due at 10 AM on Friday, a user might want a reminder on Thursday morning, another shortly before the deadline, or both.

    These are scheduling decisions that ordinary backend logic can handle without repeatedly asking an AI model.

    A future version of Nudgify could combine dependable notification infrastructure with AI-assisted task interpretation, producing a system that is both helpful and predictable.

    That distinction matters: a clever assistant is not much use if its reminders never arrive.

    🦥 7. What Does “Slow and Steady” Mean in Practice?


    For me, this theme is about more than helping someone procrastinate comfortably.

    It's about being intentional with the work we ask people to do.

    There are many repetitive tasks that don't require our full attention, but still consume time because we haven't automated them.

    We repeatedly check deadlines. We reread task lists. We try to remember conversations. We manually organize information that could be structured automatically.

    Some of these activities are necessary. Others can be simplified.

    Nudgify explores the second category.

    Imagine a student who has several assignments due in the same week.

    Instead of repeatedly opening different lists and calculating which assignment needs attention first, a well-designed assistant could present the next relevant task and help the student stay aware of approaching deadlines.

    Imagine a friend who regularly forgets to follow up on a commitment.

    An assistant could help make the commitment visible at an appropriate time, reducing the need for another person to remember to remind them.

    Imagine a user who has a long list of tasks but feels overwhelmed by it.

    A carefully designed interface could make the next action easier to identify instead of presenting an intimidating wall of unfinished work.

    None of these ideas requires an AI model to do everything.

    They require a thoughtful combination of automation, reliable scheduling, useful interface design, and AI where it genuinely improves the experience.

    The aim is to save attention, not simply to produce more notifications.

    🌱 8. What I Learned From Thinking About Open AI


    One thing this project highlights is that building with AI involves much more than choosing a model.

    You need to think about how the model fits into the application, what data it receives, where inference takes place, and what happens when it isn't available.

    You also need to understand the difference between an open-source framework, an open-weight model, and a hosted service.

    These terms are related, but they aren't interchangeable.

    An open-source framework can provide an inspectable and modifiable implementation without making the model it calls open-weight.

    An open-weight model makes its trained weights available under a particular license, but that doesn't automatically mean every part of its training data, development process, or surrounding infrastructure is open.

    And a hosted AI service can be useful without giving you control over the model's deployment.

    Recognizing these differences helps developers make more informed architectural decisions.

    For Nudgify, the interesting direction is to keep the application flexible enough to experiment with open-weight inference while maintaining a clear separation between AI-assisted features and ordinary application functionality.

    That flexibility would make it easier to evaluate different models based on practical criteria such as response time, resource requirements, instruction-following ability, privacy considerations, and licensing.

    It also creates opportunities to learn more about inference, model deployment, and the trade-offs involved in bringing AI from a prototype into a usable product.

    For me, that's one of the strongest arguments for open innovation: it turns AI from something you merely consume into something you can actively experiment with and learn from.

    🚀 9. Where I'd Like to Take Nudgify Next


    There are several directions I'd like to explore as the project develops.

    1. A genuinely interchangeable model layer


    I want the application architecture to make it easier to compare models and switch between compatible inference backends without rewriting the entire application.

    That would make experimentation more practical and reduce unnecessary dependence on a single provider.

    2. Local inference where it makes sense


    Running a model locally could make selected AI features available without sending every request to an external service.

    The exact experience would depend on the model, the user's hardware, and the application's other dependencies.

    A lightweight model may be sufficient for some tasks, while more demanding operations may still benefit from hosted inference.

    3. Better deadline-aware workflows


    Reminders should be connected to meaningful task information.

    The application could help users distinguish between upcoming deadlines, overdue tasks, and commitments that need attention soon.

    The goal is to make information actionable rather than simply adding more items to a list.

    4. More reliable notification delivery


    A reminder system should be designed around dependable delivery, including appropriate handling of permissions, scheduling, and delivery failures.

    That infrastructure would allow the assistant to be useful even when the user isn't actively looking at the application, where browser and platform capabilities permit.

    5. Privacy-conscious data handling


    As the application grows, I want to pay more attention to what information is stored, what information needs to leave the device, and how user data is protected.

    Local inference could help with some of these decisions, but privacy needs to be considered throughout the application rather than delegated to the model alone.

    6. A less distracting productivity experience


    More features don't automatically make a productivity tool better.

    I'd rather explore ways to make Nudgify feel useful and unobtrusive than turn it into another application that demands constant attention.

    After all, the whole idea is to reduce the amount of effort users spend managing their responsibilities.

    💚 10. Why This Project Matters to Me


    As a student and developer, I find it exciting that we can build increasingly sophisticated applications without needing to own an enormous infrastructure stack.

    Modern web frameworks make it easier to build interactive applications, and the growing open AI ecosystem creates more opportunities to experiment with models and inference systems.

    But what interests me most is the possibility of using those tools to solve ordinary problems.

    Not every useful project needs to revolutionize an industry.

    Sometimes, making it easier for someone to remember a deadline is worthwhile. Sometimes, reducing the number of repetitive steps in a workflow is enough. Sometimes, the best feature is one that quietly works in the background and lets the user get on with their day.

    Nudgify is my exploration of that idea.

    The project brings together productivity, automation, and AI with the intention of making everyday responsibilities a little easier to manage.

    And the Slow and Steady challenge provides a particularly fitting reminder that good technology doesn't always have to encourage people to move faster.

    It can also help them waste less energy on things that don't deserve so much of their attention.

    🏁 Final Thoughts


    The future of AI shouldn't be limited to massive models, expensive APIs, or applications that send every task to a remote service.

    There is room for smaller models, local inference, open-source tools, and carefully designed systems that solve specific problems well.

    Open innovation gives developers more opportunities to experiment with these approaches, understand their limitations, and decide which trade-offs make sense for their users.

    For Nudgify, that means exploring how an AI assistant can help people remember what matters, automate repetitive work, and spend less time managing their own productivity.

    The bigger lesson is that automation isn't necessarily about doing more.

    Sometimes, it's about making room for less stress, fewer unnecessary steps, and more time for the things we actually care about.

    Build something useful. Automate the boring parts. Keep the technology open where it matters. And remember: you don't have to rush to make progress. 🦥

    🔗 Project Links


    • GitHub Repository: [Add your Nudgify repository link]
    • Live Demo: [Add your deployed application link]
    • Demo Video: [Add your demonstration link, if available]

    I'd love to hear from other developers: What's one repetitive task you'd automate with an open-weight AI model, and would you run it locally or in the cloud?

    Let's build tools that save people time, energy, and attention.

    Hacktoberfest #SlowAndSteady #OpenSourceAI #OpenInnovation #ArtificialIntelligence #AI #WebDevelopment #React #TypeScript #BuildInPublic #DeveloperCommunity

    #devchallenge #hf26challenge #software #coding #development #engineering #inclusive #community
    Nudgify

  25. Early Days


    My programming journey began in late 2015.

    Like many teenagers my age back then, I wanted to build my own video games. That was when I stumbled upon something called C++, which turned out to be a programming language. This strange-sounding term referred to a way of telling computers what to do.

    Curious to learn more, I started digging deeper to figure out how to speak this language. And that was the beginning of an incredible journey.

    From installing Code::Blocks, one of the most popular IDEs at the time, to encountering the infamous segmentation fault (core dumped) error and wrestling with countless compilation errors, every challenge became part of the adventure.

    One thing led to another, and I began discovering the countless fields where programming could be applied: web development, systems programming, mobile development, IoT, automation, data analysis, and so on. Even artificial intelligence, that thing we used to see in movies, turned out to be an application of programming principles.

    Back then, and even until recently, being a programmer felt like being both a superhero and a complete newbie. You had the power to build amazing, useful things, yet you could spend hours staring at a wall of errors simply because you forgot a semicolon or failed to break out of a loop.

    Welcome to the Shin Sekai


    With the rise of new LLMs and their incredible capabilities, everything changed.

    Projects that once took a week to plan and three months to build can now, in some cases, be prototyped by an AI agent in just a few hours. And sometimes, the result is surprisingly good, perhaps even better than what you could have built yourself. If you had enough money, computing power, and memory, you could even spawn an army of agents to build your own rocket launcher (though it might blow up on the first try).

    A skill that was once reserved for a select few is now accessible to anyone willing to build something. This is what we call equality. But as we all know:

    With great power comes great responsibility.


    But that's another debate...

    Searching for the One Piece


    In this new era, priorities and many other things are being reshaped.

    With everyone able to build at almost supersonic speed (just calm down...), the definition of a successful product has changed, and so has the role of a programmer.

    There are still people who enjoy the process of writing their own code and the satisfaction of making it work. Whether you call it ego or being a prehistoric man, that feeling is still very much alive, and the sense of accomplishment is indescribable.

    Then there are those who delegate everything to AI. Their sole purpose is to ship. They would even delegate their lives to AI if they could (spoiler: they can't, at least not yet...).

    Whichever group you belong to, you can't deny that writing software in the AI era is a whole different story, and that working without AI means missing out on a lot.

    My Take


    Now, let's get back to me. Which of these groups do I belong to?

    I'm somewhere in the gray zone. I use AI for boring tasks and to help me build complex things. I still review everything it writes, not only because it can make mistakes, but also because I want to learn from the new approaches it might suggest.

    For some tasks, I still write the code myself. I love coding, and the satisfaction of successfully wiring everything together is second to none.

    Another goal is to keep growing my skills, and that only comes with practice. There will be days when AI tools are down, and relying on them entirely could backfire. There will also be times when an expert's knowledge is needed, and failing to develop your own skills could prevent you from reaching that level.

    Outro


    Use AI to build faster, not to stop learning. Let it handle the boring stuff, help you tackle the complex stuff, and challenge you to become better. Because at the end of the day, the goal isn't just to ship more software. It's to become someone who understands what they're shipping.

    Any thoughts?#ai #beginners #learning #programming #software #coding #development #engineering #inclusive #community
    Writing Software in the AI Era: What Does It Mean to Be a Programmer?

  26. 25th October 2026

    Hello,

    I started this blog 22 years ago now (I don’t recommend going back to the start), and for the last 5 years I wrote a monthly “status update” post, aiming to mainly write about interesting stuff I might have done in the world of open source software, which I hoped in turn would motivate me to do more interesting stuff in open source software.

    The world changed a lot in that time. If I started now this would probably be a podcast with 16 listeners, instead of being a WordPress blog with 16 subscribers.

    I’ve spent a lot of time this year reading and thinking about the impact of large language models on the tech industry and open source. Its interesting because this feels like the moment, whether we like it or not, hacker culture goes mainstream. This week the world’s major news outlets had to figure out what PHP is.

    That the BBC’s cyber correspondent didn’t know PHP existed has caused some joking and debate online.

    24 years ago I was figuring out what PHP is. Jonathan Atkinson, who I met in a forum that was nominally about writing video games in QBASIC, asked me to make a wiki in PHP. So I did.

    All I knew about wikis was that, it’s like a regular website except anyone can edit it. I named the project: Wiki! Here’s a quote from the README:

     How do I install it?  It's best run in its own directory. Create it one. You'll also want a directory for nodes,  or you could keep them in the base wiki dir. Either way, the nodes directory has to be  chmod'ed to 777. 

    You might raise your eyebrows at that comment if you aren’t yourself a teenage hacker discovering web development.

    Wiki! did have a login system, and the passwords were even stored as MD5 hashes rather than plain text, as I heard that was good practice. In hindsight, an attacker who knew how to set the HTTP Cookie header could impersonate anyone, like this: Cookie: wikiticket=admin.

    Here is a snippet of the file edit.php. Note that $node and $title are inputs you can set via a POST request, or even via URL parameters like edit.php?title="/etc/passwd":

     $t=$title;  if ($node) {   	// Write new data  	//  	$file=fopen($nodedir.$t.".wiki", "w+");  	$node=stripslashes(ereg_replace("(\r\n|\n|\r)","<br>", $node));	// Linebreak to <br>  	fputs($file, $node."\n"); 

    Even if you just learned what PHP is today, you might see that this is not an entirely secure design.

    Anyway, at the time I was proud of my work, and I needed somewhere to host it. So, as you would in 2002, I registered the name “wiki” on sourceforge.net and uploaded the project code.

    Sourceforge, for those who haven’t yet reached middle age, was the 2000’s equivalent of Github. It allowed projects to have their own website, as long as they included the Sourceforge logo somewhere, and the website could use PHP. Perfect, I thought, the project’s website will be a wiki!

    Looking back now through archive.org, I can see this code actually ran in public for many years.

    Here it is around launch day in 2002: https://web.archive.org/web/20021012080349/http://wiki.sourceforge.net/wiki

    I have a local copy from around this time, which includes indexjon.wiki:

    
    Sam, there are some serious bugs in this wiki. I keep on getting 'document contains no data' errors; get me on AIM.
    
    Welcome to grove.swoo.net. You may or may not be interested in the [weblog].
    JonathanA - 29/8/02 - 11:36 am
    JonathanA - 29/8/02 - 07:36 am

    Those bugs went unfixed forever, and six months later, the front page text had been replaced with two poems, one in Italian and one in Russian: https://web.archive.org/web/20030420205758/http://wiki.sourceforge.net

    One is “Non chiederci la parola che squadri da ogni lato” by Eugenio Montale, written in 1923, and presumably posted by a fan. Does anyone know what it’s about? A machine translation suggests it might discuss “the crisis of certainty faced by contemporary man”. The other is “Anecdote for Fathers” by William Wordsworth, in Russian via an unnamed translator.

    Let’s just sit with that for a moment. Imagine what happens in 2026 if a trivially exploitable PHP website hosted by a US corporation goes online: it’ll be mining bitcoin, serving pornography and drowning in racist and antisemitic spam, probably all within the same day.

    In 2003, over the course of six months, my naive implementation of a wiki was gifted with… two rather thoughtful poems.

    Fast forward another year. I was about to turn 18 years old, was studying for A levels and mostly concerned with hanging out in the park drinking cheap cider and learning to play the guitar. I was certainly not thinking about this rather flawed chunk of PHP code that I’d written two years earlier, but via the magic of archive.org we can see that various people were genuinely trying to use it as a wiki: https://web.archive.org/web/20041121113508/http://wiki.sourceforge.net

    In hindsight, perhaps it attracted so much attention because I’d literally taken the subdomain: http://wiki.sourceforge.net/, unintentionally boosting the SEO reach quite a bit. The site was still active right up until 2007.

    I can’t find it now, but I do remember receiving an email at some point from sourceforge.net noting that they’d taken down the wiki! website after discovering it was a major security risk. And at some point they must have (quite reasonably) reclaimed the project name as well, since http://sourceforge.net/projects/wiki no longer exists. It will always live on in my heart, though, and for the moment at: https://web.archive.org/web/20021014172056/http://sourceforge.net/projects/wiki/

    The world has changed significantly since I was a teenage hacker. Some of what I learned in those days is completely obsolete, such as the QBASIC programming language and VGA graphics. I am a world expert in these irrelevant topics.

    Other stuff that I picked up in the early 2000s has become the foundation of my career as an operating systems developer: C programming, Linux distributions and an gradual induction into open source desktop world via Planet GNOME. And good old PHP, of course. Who knew that, a quarter way through the 21st century, PHP would be front page news?

    Age 18, I didn’t tell anyone in the real world that I’d written a wiki because it’d be the first time they’d heard the word “wiki”. The word evoked exotic and mysterious feelings of Hawaii in 2002. Now it universally evokes Wikipedia. People are learning about password hygiene and PHP. The arrival of AI on the scene, to me, fits into this bigger picture that began in the last century: we, the Computer People, are becoming Mainstream.

    #ai #openSource
  27. Professionalism is often misunderstood as simply being good at your job. In reality, it involves much more than technical knowledge.

    Being a professional means knowing your strengths, developing your expertise, delivering quality work, and taking responsibility for the results.

    Why Focus Matters

    1. Depth Over Superficial Knowledge


    Trying to learn everything at once can leave you with a broad but shallow understanding of many subjects.

    Focusing on a specific field allows you to understand its fundamentals, recognize complex problems, and make better technical decisions.

    For example, a developer who focuses on backend engineering can gradually build deeper knowledge of APIs, databases, authentication, system design, and performance optimization.

    2. Trust Is Built Through Consistency


    Clients, employers, and teammates need people they can rely on.

    Trust comes from delivering what you promise, communicating clearly, meeting deadlines, and being honest about what you can and cannot do.

    You don't need to know everything to be a professional. You need to be reliable about the things you take responsibility for.

    3. Better Results Through Specialization


    When you understand a field deeply, you can often solve problems more efficiently because you recognize familiar patterns and understand the trade-offs behind different solutions.

    This doesn't mean you should stop exploring other technologies. It means you should build a strong foundation before constantly jumping between unrelated areas.

    4. Knowing Your Limits Is a Strength


    Imagine you're a web developer and someone asks you to design a complete brand identity.

    You might have some experience with design tools, but that doesn't necessarily make you a professional designer.

    A professional response could be to explain your limitations, collaborate with a designer, or take on only the parts you're qualified to handle.

    Accepting every task just to prove yourself can lead to poor results. Recognizing when you need help is part of professional judgment.

    Professionalism Goes Beyond Technical Skills


    Being skilled at your job is only one part of the equation.

    Professionalism also requires:

    • Continuous learning: Keeping your knowledge relevant as tools and practices evolve.
    • Accountability: Taking ownership of mistakes and working toward solutions.
    • Communication: Explaining decisions, asking the right questions, and setting realistic expectations.
    • Attention to quality: Considering maintainability, reliability, and long-term consequences, not just whether something works today.
    • Ethics: Being honest about your skills, progress, and limitations.

    These qualities matter just as much as technical ability when working with a team or building a career.

    The Balance: Specialize Without Becoming Narrow-Minded


    Focusing on your expertise doesn't mean refusing to learn anything outside it.

    A backend developer still benefits from understanding frontend fundamentals. A frontend developer benefits from knowing how APIs, databases, and authentication work.

    The goal is to develop T-shaped skills: deep expertise in one area, supported by enough knowledge of related fields to collaborate effectively and understand the bigger picture.

    You don't have to do everything yourself. You need to understand your role, recognize how it connects to others, and know when collaboration is the better solution.

    Final Thoughts


    Professionalism isn't about pretending to know everything or accepting every opportunity that comes your way.

    It's about understanding what you do well, improving where you fall short, delivering work you can stand behind, and knowing when to ask for help.

    Focus on your craft. Build depth. Take responsibility. Let the quality of your work earn people's trust.

    That's a more sustainable path to becoming a professional than trying to be good at everything at once.#programming #career #beginners #productivity #software #coding #development #engineering #inclusive #community
    Professionalism in Software Development: Focus on Your Strengths

  28. #cybersecurity #internet #online #anonymity #tor #vpn #hacker #knowledge #knowhow #education #learn #hacking #isp #tracking #surveillance #nsa

    ♲ @[email protected]:

    Hey, Hack Besties! 💻🖤


    Okay, besties. We STILL have confusion about when to use a VPN and when to use Tor for anonymity. So here’s the final boss guide. Lock in, take notes, and touch some knowledge. This is all exam material. No cap.

    1) Tor Only: The OG Stealth Mode 🧅


    Just using Tor already protects you from many threats. It can actually be safer than adding a VPN to the mix. More layers don’t always mean more security. Sometimes, extra layers just mean extra trust in another company.

    Bonus: Tor can also help you get around geo-blocks. Region locks? Not today, bestie.

    2) VPN → Tor: The ISP Blocker 🔐


    This combo makes sense when you don’t want your internet provider to see that you’re using Tor.

    Let’s say your opp is the NSA. 💀 They might be watching your ISP. If they see you connecting to Tor every time you post something on the Dark Web, they can connect the dots. That’s a correlation. And correlation can put you on their radar.

    A VPN before Tor can hide your Tor usage from your ISP. Your ISP sees the VPN connection instead. Big difference.

    This setup also helps when your network blocks Tor. Public Wi-Fi networks sometimes do that. Hotel Wi-Fi said “no Tor”? Just another network boss fight.

    3) Tor → VPN: The Website Bypass 🌐


    This setup can make sense when a website blocks Tor connections.

    If your VPN doesn’t require you to log in or identify yourself, the VPN might not know who you are. But don’t assume you’re automatically anonymous. Payment details, account info, and other data can still expose you.

    With Tor → VPN, the website sees the VPN’s IP address instead of a Tor exit node. So the website may not know you’re using Tor.

    But here’s the catch: your VPN can see your connection. You’re shifting trust from the website to the VPN provider. Choose wisely, bestie.

    Final cheat code: 🧠

    • Tor only: Simple setup. No extra VPN provider to trust.
    • VPN → Tor: Hide Tor usage from your ISP.
    • Tor → VPN: Reach websites that block Tor exit nodes.

    And remember, besties: No setup makes you 100% invisible. Every tool has limits. Know your threat model before you go full cyberpunk mode. Class dismissed. 🖤💻

  29. This has been a rough week for cyber defenders. Colleagues, friends, sleepless zombies, I am writing to assure you - the week is dead and over. Good riddance.

    Things will be tough for a while, but as usual, good people get together and fix problems. The Sun rises, and we get stuff fixed.
    Vulnpocalypse or not, we got this. And, technology will catch up.

    Until then, risk leaders:
    1. We must make the case for an extreme landscape shift, and ask for significantly more budget. If we don't get it - I'd consider leaving for an org that does realize the change. You're in high demand.

    2. Stay relevant. Get yourself and your people on agents. Secure your agents.

    3. Prioritize, and reprioritize. We can't do everything.

    4. And while we will keep at it, self-care is not an effin' joke and should be a priority for our teams. Marathon != sprint.

    --
    And as always, when you want to secure your agents - do keep Knostic in mind.

Share on Mastodon

Enter the server where you have an account.