home.social

Search

981 results for “don_kosak”

  1. 25th October 2026

    Hello,

    I started this blog 22 years ago now (I don’t recommend going back to the start), and for the last 5 years I wrote a monthly “status update” post, aiming to mainly write about interesting stuff I might have done in the world of open source software, which I hoped in turn would motivate me to do more interesting stuff in open source software.

    The world changed a lot in that time. If I started now this would probably be a podcast with 16 listeners, instead of being a WordPress blog with 16 subscribers.

    I’ve spent a lot of time this year reading and thinking about the impact of large language models on the tech industry and open source. Its interesting because this feels like the moment, whether we like it or not, hacker culture goes mainstream. This week the world’s major news outlets had to figure out what PHP is.

    That the BBC’s cyber correspondent didn’t know PHP existed has caused some joking and debate online.

    24 years ago I was figuring out what PHP is. Jonathan Atkinson, who I met in a forum that was nominally about writing video games in QBASIC, asked me to make a wiki in PHP. So I did.

    All I knew about wikis was that, it’s like a regular website except anyone can edit it. I named the project: Wiki! Here’s a quote from the README:

     How do I install it?  It's best run in its own directory. Create it one. You'll also want a directory for nodes,  or you could keep them in the base wiki dir. Either way, the nodes directory has to be  chmod'ed to 777. 

    You might raise your eyebrows at that comment if you aren’t yourself a teenage hacker discovering web development.

    Wiki! did have a login system, and the passwords were even stored as MD5 hashes rather than plain text, as I heard that was good practice. In hindsight, an attacker who knew how to set the HTTP Cookie header could impersonate anyone, like this: Cookie: wikiticket=admin.

    Here is a snippet of the file edit.php. Note that $node and $title are inputs you can set via a POST request, or even via URL parameters like edit.php?title="/etc/passwd":

     $t=$title;  if ($node) {   	// Write new data  	//  	$file=fopen($nodedir.$t.".wiki", "w+");  	$node=stripslashes(ereg_replace("(\r\n|\n|\r)","<br>", $node));	// Linebreak to <br>  	fputs($file, $node."\n"); 

    Even if you just learned what PHP is today, you might see that this is not an entirely secure design.

    Anyway, at the time I was proud of my work, and I needed somewhere to host it. So, as you would in 2002, I registered the name “wiki” on sourceforge.net and uploaded the project code.

    Sourceforge, for those who haven’t yet reached middle age, was the 2000’s equivalent of Github. It allowed projects to have their own website, as long as they included the Sourceforge logo somewhere, and the website could use PHP. Perfect, I thought, the project’s website will be a wiki!

    Looking back now through archive.org, I can see this code actually ran in public for many years.

    Here it is around launch day in 2002: https://web.archive.org/web/20021012080349/http://wiki.sourceforge.net/wiki

    I have a local copy from around this time, which includes indexjon.wiki:

    
    Sam, there are some serious bugs in this wiki. I keep on getting 'document contains no data' errors; get me on AIM.
    
    Welcome to grove.swoo.net. You may or may not be interested in the [weblog].
    JonathanA - 29/8/02 - 11:36 am
    JonathanA - 29/8/02 - 07:36 am

    Those bugs went unfixed forever, and six months later, the front page text had been replaced with two poems, one in Italian and one in Russian: https://web.archive.org/web/20030420205758/http://wiki.sourceforge.net

    One is “Non chiederci la parola che squadri da ogni lato” by Eugenio Montale, written in 1923, and presumably posted by a fan. Does anyone know what it’s about? A machine translation suggests it might discuss “the crisis of certainty faced by contemporary man”. The other is “Anecdote for Fathers” by William Wordsworth, in Russian via an unnamed translator.

    Let’s just sit with that for a moment. Imagine what happens in 2026 if a trivially exploitable PHP website hosted by a US corporation goes online: it’ll be mining bitcoin, serving pornography and drowning in racist and antisemitic spam, probably all within the same day.

    In 2003, over the course of six months, my naive implementation of a wiki was gifted with… two rather thoughtful poems.

    Fast forward another year. I was about to turn 18 years old, was studying for A levels and mostly concerned with hanging out in the park drinking cheap cider and learning to play the guitar. I was certainly not thinking about this rather flawed chunk of PHP code that I’d written two years earlier, but via the magic of archive.org we can see that various people were genuinely trying to use it as a wiki: https://web.archive.org/web/20041121113508/http://wiki.sourceforge.net

    In hindsight, perhaps it attracted so much attention because I’d literally taken the subdomain: http://wiki.sourceforge.net/, unintentionally boosting the SEO reach quite a bit. The site was still active right up until 2007.

    I can’t find it now, but I do remember receiving an email at some point from sourceforge.net noting that they’d taken down the wiki! website after discovering it was a major security risk. And at some point they must have (quite reasonably) reclaimed the project name as well, since http://sourceforge.net/projects/wiki no longer exists. It will always live on in my heart, though, and for the moment at: https://web.archive.org/web/20021014172056/http://sourceforge.net/projects/wiki/

    The world has changed significantly since I was a teenage hacker. Some of what I learned in those days is completely obsolete, such as the QBASIC programming language and VGA graphics. I am a world expert in these irrelevant topics.

    Other stuff that I picked up in the early 2000s has become the foundation of my career as an operating systems developer: C programming, Linux distributions and an gradual induction into open source desktop world via Planet GNOME. And good old PHP, of course. Who knew that, a quarter way through the 21st century, PHP would be front page news?

    Age 18, I didn’t tell anyone in the real world that I’d written a wiki because it’d be the first time they’d heard the word “wiki”. The word evoked exotic and mysterious feelings of Hawaii in 2002. Now it universally evokes Wikipedia. People are learning about password hygiene and PHP. The arrival of AI on the scene, to me, fits into this bigger picture that began in the last century: we, the Computer People, are becoming Mainstream.

    #ai #openSource
  2. 💪 "A difference-maker" When Hauss Hejny is a-rockin', don't bother tacklin'. 🐏 Why a 5-TD night from Colorado State's QB1 in his FoCo return just might get the #CSURams back on track, via @DPostSports: 👇

    denverpost.com/2026/10/24/csu-

    #Stalwart #ProudToBe #Pac12 #NCAA #football

  3. We're so stoked to open the Nox A Carnival on 5th of November. Don't miss this wicked doom warm up with Witchrot and Acid Throne – at our home base, Drugstore @ Berliner Rockhaus in Lichtenberg.

    Video material by Khaled Alshannan
    Band photo by Nancy Wappler

    #Music #WitchRot #AcidThrone #StonedMedusa #NoxACarnival #DoomMetal #PsychDoom #StonerDoom #PsychedelicRock #PsychedelicDoom #Sludge #Doom #Metal #Concerts #Concert #Festival #Gig #Berlin #FreeConcert #Drugstore #SJZDrugstore #Rockhaus #BerlinerRockhaus

  4. Burnham open to 'honest discussion' on EU free movement
    Good luck with that... the quitters don't know the meaning of the word!
    #FreedomOfMovement
    www.bbc.co.uk/news/article...

    Burnham open to 'honest discus...

  5. 💪 "A difference-maker" When Hauss Hejny is a-rockin', don't bother tacklin'. 🐏 Why a 5-TD night from Colorado State's QB1 in his FoCo return just might get the #CSURams back on track, via The @DenverPost: 👇

    denverpost.com/2026/10/24/csu-

    #Stalwart #ProudToBe #Pac12 #NCAA #football

  6. Steven Wilson thinks he knows why people love Angine de Poitrine... and why others don't |

    🔗 loudersound.com/bands-artists/

  7. Everybody in my timeline is talking about the switch to CET (or like) while I'm in Turkey where they don't switch. We should do the same.

  8. ⚡️The M-N- sound is one of the three I call cryptotypes. I don't use fancy words like that just out of fanciness. I arrived at the term cryptotype because I really needed it.

    Full podcast: powerofmana.net/p/podcast-find

  9. This is people confusing online life with real life.
    Some parents and grandparents don't even use smartphones — and a PC covers a lot of what an app-only phone can't do.
    It's feasible; it's just more friction than people who've never tried it assume. reddit.com/r/Living_in_Korea/c

  10. #MissKitty wishes for you everything that you wish for her. If you don't wish #health #care for her then she doesn't wish #healthcare for you. If you don't wish a #home for her she wishes #homelessness for you. It's #Old #Testament time people. No forgiving the unforgivable. #Repentance required.

  11. The Knicks phishing simulation is an object lesson on how to prove nothing and lose trust. Don’t do that, friends.
    #InfoSec
    #InformationSecurity

  12. Poopy Pumpkin

    bot by @davidaugust
    This is for tee hee, not treason: please don't extraordinarily rendition me to a black site.

    #satire #potus45 #funny #USpol

  13. made an oopsie. “'We’re getting calls that people don’t want him there,' a top Ohio tells us. This source adds that some business owners and event hosts have explicitly told them that they do not want the horrendous publicity – or angry phone calls, or social-media attacks, or customer complaints – that they would get for hosting Ramaswamy’s campaign tour at this juncture." zeteo.com/p/venues-start-cance

  14. I was sitting here trying to write something about You Can See Everything but, I don’t know, you better experience it yourself

    #Cinema

  15. Happy Meal Hussein

    bot by @davidaugust
    This is a joke, not a threat: don't send me to a camp, please.

    #satire #potus45 #funny #USpol

  16. Donald McRapesalot

    bot by @davidaugust
    This is a joke, not a threat: please don't extraordinarily rendition me to a black site.

    #satire #potus45 #funny #USpol

  17. Since the big 3.0 multilingual update Luminous users in the Microsoft Store have expanded from 50 countries to 81! I don't have stats on Linux or self-installed versions obviously, but that's ok. I'm happy more people are enjoying it.

  18. The other day I read someone very angrily go "<person> isn't rich because they spend their money, you can't be rich if you don't hoard even if you have a 6 figure job" and still can't get over it. Self-described anti-wealth folks out there thinking you're only rich if you got Scrooge McDuck's vault.

  19. I’ve lived with OCD since around age 9. Without medication, I cannot function. If I lose it because of some greedy, narcissistic pig, I don’t know what I’ll do.

    Thanks, racist white America. You’ve done a bang-up job “owning the libs.”

    I hope you’re next.

  20. For years I've been annoyed by the poor SEO of newspipe.org and the GitHub org. Mostly because of two other projects with very similar names. I don't want to rename my project.

    Recently, I realized that the current HTML leaves quite a bit to be desired in terms of SEO.

    So, following the improvements of the last week to the About page, here are some updates to the landing page and a few other related details. The landing page is actually entirely new!

  21. [en] "I am a #math professor, and my field is in crisis."

    "I’ve been trying not to talk like this."

    "Meanwhile, the wider public is confused. Don’t mathematicians want their problems to be solved?"

    "Yes and no."

    "... But for many “pure” mathematicians—those who look inward at math’s most #theoretical aspects, at its inner beauty and structure, using human creativity, imagination, and logic - AI feels more #ambiguous because machines can discover the truths we’re seeking, at the cost of robbing us of the struggle and joy of #discovering them ourselves."

    theatlantic.com/ideas/2026/10/

    #math #mathematical #mathematician #ai #artificialintelligence #stevenstrogatz
    #MediaHighlights

  22. 10.27 Stardate -296577.2

    We live toot episodes playing on the H&I network, using the hashtag . If you don’t get the H&I station, you can also stream or contact an Orion trader. Follow Capt Ayako( @MirrorAyako ) and @startrek for updates and all things Trek!

    *I encourage everyone interested to particularly follow the Captain, and the tag I think it's inherently more reliable than external groups. Hashtags are Mastodon's warp drive. Use them!

    1:3

  23. How to truncate a table in The Year of Our Lord, 2026?
    - figure, you don't have the right AWS role
    - but you can spin up an AWS EMR cluster
    - submit a one-off Spark job to the cluster that runs "TRUNCATE TABLE foo.bar"
    - fin

  24. 👋 SO LONG HACS... HELLO @homeassistant MARKETPLACE! 💙🏠

    HACS is being replaced in Home Assistant 2026.11! 😱

    But don't panic! Your favourite integrations, cards & themes aren't going anywhere!

    Here's everything you need to know! 👇

    youtu.be/RXIVwOicLaU

  25. RE: kolektiva.social/@Hex/11749226

    “‘AI’ companies…have something to prove, right now, or they don't exist. So now everything is critical.”

  26. 🔁 is an engine for pluggable data replication written in . It moves data from sources to sinks via full, incremental or change data capture (#CDC) replication

    🐘 Dear folks, please don't let the name confuse you :) This is not the admin panel, it's a data pipeline engine


    🧵👇

  27. One of the things you realize when you read a lot of research is that academics like to use a lot of weird words to describe things (to sound more accurate). Current example: kids don't "hang out"; they do "offline unstructured socializing".

Share on Mastodon

Enter the server where you have an account.