Mastodon Feed: Posts

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

just to be clear, i do mean accidentally. i was typing a shitpost and then noticed something that absolutely shouldn't happen after i submitted it.

Mastodon Feed

ChrisWere@toot.wales ("Chris Were ⁂🐧🌱☕") wrote:

It's been a while, so I thought I might make a #PeerTube video for you all.

https://video.thepolarbear.co.uk/w/d8fZ2CeJebpr1N5yAAETC6

#gaming #vlog

Mastodon Feed

Boosted by ChrisWere@toot.wales ("Chris Were ⁂🐧🌱☕"):
chris@video.thepolarbear.co.uk ("Chris Were but on PeerTube") wrote:

Tea, transport, and a life update

https://video.thepolarbear.co.uk/w/d8fZ2CeJebpr1N5yAAETC6

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

can i be arsed to turn this into a more serious security problem?

this probably wouldn't take long, but the obligatory snappy name and website obviously takes longer.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

on reflection it's not that surprising that mastodon validates input badly

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

holy shit i just accidentally hacked mastodon

Mastodon Feed

aredridel@kolektiva.social ("Mx. Aria Stewart") wrote:

I've had ideas rattling around in my head for a while but not quite hitting coherence.

What does a "rich terminal" mean to you as a developer? We're in a really weird place right now with regards to UI and UX, with chat as a normal mode of operation being everywhere, yet we're constrained to two major paradigms: the terminal user interface, and the instant message. Both come with really weird limits to their affordances.

And there's prior art here — light table, jupyter notebooks, observable hq, rich REPLs — but they're usually this weird hybrid of not quite transcript not quite live program that I find somewhere between unsettling and frustrating.

I do however think it's well past time we abandoned monospaced type as the core way we think about source code, and at the same time, built better user interfaces than that allows, without going full "this is a program with its own interface”

It's weird uncharted territory.

Mastodon Feed

Boosted by glyph ("Glyph"):
jonny@neuromatch.social ("jonny (good kind)") wrote:

FOR EXAMPLE:

In the claude code remote feature it is sometimes possible for the means of passing auth credentials to fail. So claude code has a fallback of writing the API key or OAUTH token to a single well-known file because sometimes one of the several means of inheriting the fucking most important secret information in the entire thing doesn't work.

I'm not a security person but that seems like a pretty bad thing to do that maybe someone should look into.

/** * Well-known token file locations in CCR. The Go environment-manager creates * /home/claude/.claude/remote/ and will (eventually) write these files too. * Until then, this module writes them on successful FD read so subprocesses * spawned inside the CCR container can find the token without inheriting * the FD — which they can't: pipe FDs don't cross tmux/shell boundaries. / const CCR_TOKEN_DIR = '/home/claude/.claude/remote' export const CCR_OAUTH_TOKEN_PATH = ${CCR_TOKEN_DIR}/.oauth_token export const CCR_API_KEY_PATH = ${CCR_TOKEN_DIR}/.api_key export const CCR_SESSION_INGRESS_TOKEN_PATH = ${CCR_TOKEN_DIR}/.session_ingress_token /* * Best-effort write of the token to a well-known location for subprocess * access. CCR-gated: outside CCR there's no /home/claude/ and no reason to * put a token on disk that the FD was meant to keep off disk. */ export function maybePersistTokenForSubprocesses( path: string, token: string, tokenName: string, ): void { if (!isEnvTruthy(process.env.CLAUDE_CODE_REMOTE)) { return } try { mkdirSync(CCR_TOKEN_DIR, { recursive: true, mode: 0o700 }) writeFileSync(path, token, { encoding: 'utf8', mode: 0o600 }) logForDebugging(Persisted ${tokenName} to ${path} for subprocess access) } catch (error) { logForDebugging( Failed to persist ${tokenName} to disk (non-fatal): ${errorMessage(error)}, { level: 'error' }, ) } }
/** * Fallback read from a well-known file. The path only exists in CCR (env-manager * creates the directory), so file-not-found is the expected outcome everywhere * else — treated as "no fallback", not an error. */ export function readTokenFromWellKnownFile( path: string, tokenName: string, ): string | null { try { const fsOps = getFsImplementation() const token = fsOps.readFileSync(path, { encoding: 'utf8' }).trim() if (!token) { return null } logForDebugging(Read ${tokenName} from well-known file ${path}) return token } catch (error) { // ENOENT is the expected outcome outside CCR — stay silent. Anything // else (EACCES from perm misconfig, etc.) is worth surfacing in the // debug log so subprocess auth failures aren't mysterious. if (!isENOENT(error)) { logForDebugging( Failed to read ${tokenName} from ${path}: ${errorMessage(error)}, { level: 'debug' }, ) } return null } }

Mastodon Feed

jscalzi@threads.net ("John Scalzi") wrote:

Unlike most people, this year I have two actual and totally legit birthdays. There's my usual one, which happens next month, and then there's my birthday determined by the orbit of the asteroid named for me, which is... today! Happy Space Potato Birthday to me!

https://whatever.scalzi.com/2026/04/04/today-i-am-ten-or-the-miracle-of-scalziyears/

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

i apologise in advance to any german people i may offend

look if they can cope with being german, i'm sure they can handle you mangling a few names.

Mastodon Feed

adam@social.lol ("Adam") wrote:

Greenhouse cats

Two cats hanging out near a sink in a large greenhouse
A larger cat inspects a smaller cat

Mastodon Feed

pzmyers@freethought.online ("pzmyers 🕷") wrote:

The "anti-war president" now says the only thing the federal government should do is war. Definitely not child care. Or medicaid/medicare. Or science.

https://freethoughtblogs.com/pharyngula/2026/04/04/the-man-is-insane/

https://www.youtube.com/watch?v=%5FGpxR8D3wK0

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

as they say,, a good landing is one you can walk away from, a great landing is one where they can reuse the plane afterwards.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

(yes of course the plane was a write-off)

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

nobody died though. nobody even suffered any injuries somehow. incredible

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

LOL, most boeing story ever. they positioned some circuit breakers where they could easily get knocked, saw it happened and offered a solution only as an optional extra. this later caused a crash landing.

Mastodon Feed

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Minnesota…"April". It does not mean what you think it means.

https://freethoughtblogs.com/pharyngula/2026/04/04/this-was-the-morning-i-was-supposed-to-sleep-in-then-grade-papers/

snowy yard

Mastodon Feed

EmilyEnough@hachyderm.io ("Emily 🏳️‍🌈🏳️‍⚧️") wrote:

I have never heard of Ethel Cain before her tdov instagram post, but my takeaway is this:

Damn I wish I could sound like that when I sing. I was singing bass in the choir at 14 though, so I don’t think there’s any amount of voice training in the world that could get me into her range.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

state nomad

Mastodon Feed

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
yuril@furry.engineer ("挧日 | Yuril") wrote:

RE: https://mastodon.sakura-star.net/@KitsuneofInari/116336733010511672

"No programmer really fully understands the code they are working with" is the most truest part of this

Mastodon Feed

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
halcy@icosahedron.website ("halcy​ @ :revision_ol:") wrote:

on this laptop, I have a choice of many WSL distros, such as Round Ubuntu and also Square Ubuntu

two WSL distros in Windows Terminal, one uses a round logo and one a square one, both Ubuntu (they are in fact actually the same)

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

it's been a week since i wrote code and i'm getting a hankering to do something.

tempted to get back to the HOT, even though c is kinda impossible for data structures.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

inadvertently lewd graph, youtube

diagram of performance vs arousal. it's a semicircle through under arousal, optimum arousal and over arousal.

Mastodon Feed

Boosted by slightlyoff@toot.cafe ("Alex Russell"):
maxleibman@beige.party ("Max Leibman") wrote:

Between the conservatives’ desire to avoid giving anything to the undeserving poor and the liberals’ desire to avoid giving anything to the undeserving rich, there is no social good we can’t come together as a nation to stop.

Mastodon Feed

Boosted by slightlyoff@toot.cafe ("Alex Russell"):
SeanCasten ("Sean Casten") wrote:

I will stop quoting Ozymandias in relation to the Trump administration when they stop running their administration as a direct rip off of Shelley's pithier more thought-provoking original work.

Mastodon Feed

Boosted by slightlyoff@toot.cafe ("Alex Russell"):
filippo@abyssdomain.expert ("Filippo Valsorda") wrote:

There was no good way to see what CT logs are actually used by CAs, so I made a dashboard of Censys data on exe.dev.

There are some interesting patterns, but the main one is that Let's Encrypt is the only CA that evenly spreads load. Other CAs are mostly using older logs, or their own logs and Google's.

(Of course, LE is 50% of issuance, and GTS is 25%, so the rest don't matter much.)

https://groups.google.com/a/chromium.org/d/msgid/ct-policy/718571cb-a841-4102-bcfa-3fe3feab63ae%40app.fastmail.com

Mastodon Feed

Gargron ("Eugen Rochko") wrote:

RE: https://mastodon.social/@pojntfx/116345677794218793

This is not acceptable, plain and simple.

Mastodon Feed

aredridel@kolektiva.social ("Mx. Aria Stewart") wrote:

You can also tell that the text will be bland and inoffensive and say nothing of interest beyond those facts.

Mastodon Feed

aredridel@kolektiva.social ("Mx. Aria Stewart") wrote:

I love how “high quality, topical AI generated image" means factually accurate and completely oblivious to social context in an article. You can see someone's epistemic position so nakedly now.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

built by clowns

you will never guess which aeroplane manufacturer this is about