Mastodon Feed: Posts

Reblogged by kornel ("Kornel"):

tommorris ("Tom Morris") wrote:

How to solve software supply chain concerns (management edition)

- require everyone fill in a form explaining why Python devs have Python on their laptops
- have OSS contributors send passport scans, use wallet names, and fill in tiresome CLAs
- corporate spyware on everything because MDM and AV wouldn’t be an attack vector
- if it is in a docker container it can’t ever harm us
- pay cloud supplier to tell us vulns don’t exist
- bring back password rotation policies
- another e-learning course

Reblogged by fromjason ("fromjason.xyz 🖤"):

fromjason ("fromjason.xyz 🖤") wrote:

For Google, Amazon, Microsoft and Meta ( #GAMM ), the old cloud sync-and-share business model wasn’t working anymore.

So what did they do?

They convinced us that our notetaking apps require an internet connection and forty thousand dollar GPUs located on a server three hundred miles away. That's the future they've made for us.

#SmallWeb #IndieWeb #Fediverse #ActivityPub

https://fromjason.xyz/p/notebook/any-technology-indistinguishable-from-magic-is-hiding-something/

collinsworth@hachyderm.io ("Josh Collinsworth") wrote:

Today I discovered if you put the name "Booger" on a Chipotle order they will censor it and just print a generic name like "Meal 1" on the sticker instead, and I'm pretty sure my civil liberties are being violated.

Reblogged by rmrenner ("The Old Gay Gristle Fest"):

larrybob@octodon.social ("Larry-bob") wrote:

Just found out that Rumi Missabu passed on last night. Rumi’s amazing archive, which documents Rumi’s artistic endeavors as one of the founders of the #Cockettes, is held at the NY Public #Library for the Performing Arts at Lincoln Center: https://archives.nypl.org/the/23269

Attachments:

• Rumi Missabu sitting in a wheelchair wearing a red and gold feathered costume designed by Machine Dazzle, with a music stand and microphone stand. (remote)

xor@tech.intersects.art ("Parker Higgins") wrote:

if every 501c3 could get together and standardize on a phrase that would appear in their emailed donation receipts.........

cstanhope@social.coop ("Your friendly 'net denizen") wrote:

I logged in briefly to perform a quick task, and I am greeted with the news of the passing of @craigmaloney

I always found him to be a positive influence here, and he dealt with the circumstances in his life with a bravery and transparency that I can only aspire to. I will miss him and his strong opinions on music...

Fuck cancer.

https://www.mug.org/2024/04/sorry-to-report-the-passing-of-craig-maloney/

https://octodon.social/@kattni/112202546947731897

fromjason ("fromjason.xyz 🖤") wrote:

I have a confession.
.
.
.
.
.
I have never watched The Godfather all the way through.

Reblogged by nadim@symbolic.software ("Nadim Kobeissi"):

fj ("Frederic Jacobs") wrote:

By 2013, Netflix had begun entering into a series of “Facebook Extended API” agreements, including a so-called “Inbox API” agreement that allowed Netflix programmatic access to Facebook’s users' private message inboxes, in exchange for which Netflix would “provide to FB a written report every two weeks that shows daily counts of recommendation sends and recipient clicks by interface, initiation surface, and/or implementation variant.
https://arstechnica.com/gadgets/2024/03/netflix-ad-spend-led-to-facebook-dm-access-end-of-facebook-streaming-biz-lawsuit/

slightlyoff@toot.cafe ("Alex Russell") wrote:

The CSS OM is pure masochism. What a dumpster fire.

nadim@symbolic.software ("Nadim Kobeissi") wrote:

“The United States, Israel's closest ally, said that there was no evidence Israel deliberately targeted the aid workers”

That’s pretty funny considering that the targeted vehicle had a giant WORLD CENTAL KITCHEN logo all over it, which would have been clearly visible from above. The bomb went right through the logo!

Attachments:

• b55cf9434c77aea2.jpeg (remote)

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

evmar@inuh.net ("Evan Martin") wrote:

New blog post: Moving data from Rust to JS
A dive into Rust's wasm bridge.

https://neugierig.org/software/blog/2024/04/rust-wasm-to-js.html

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

ryantownsend@webperf.social ("Ryan Townsend") wrote:

@slightlyoff and before anyone gives the "you're most productive in whatever you know best" excuse, I should clarify: I'm not talking about myself in isolation, I'm describing being someone managing multiple dev teams, not being hands-on, and optimising their *net* productivity over *years*.

We tried Big JS™ and it failed to deliver for both our developers AND our users.

slightlyoff@toot.cafe ("Alex Russell") wrote:

*"Oh no! But now I can't have exactly the same code on the client as the server!"*

Um, yes. That's the point.

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

tammy@webperf.social ("Tammy Everts") wrote:

Every year I revisit the topic of web performance budgets. Here's my updated guide, including:

✅ What are performance budgets?
✅ Why are they a crucial tool in fighting page speed regression?
✅ Best metrics to track
✅ Determining thresholds
✅ Pro tips

https://www.speedcurve.com/blog/performance-budgets/
#ux #pagespeed #corewebvitals #webperf #webperformance

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

craigmaloney@octodon.social ("Craig Maloney ☕") wrote:

Billie Jean is Not a Number
She's just a variable who claims that I am the one
But, combined we're NaN.

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

brucelawson@vivaldi.net ("Bruce Lawson") wrote:

Making myself happy by stripping out loads of JS and replacing it with declarative markup and modern CSS, which will work in modern (evergreen) browsers, and Safari too.

slightlyoff@toot.cafe ("Alex Russell") wrote:

The promise of frontend frameworks was that a local snapshot of the app's data model would be faster to operate on than a server round-trip.

This is a measurable question, and for nearly every class of app, the reality is that you should keep your data on the server and send partials to innerHTML if you want "interactivity".

Attachments:

• The spectrum of data model locality & session depth. Almost no apps have deep enough sessions to justify local data models, which means the frameworks designed to work from them are dangerously redundant. (remote)

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

exchgr@mastodon.world ("elle mundy") wrote:

i get why people think AI is Actually Intelligent. when i was 4 years old, i thought GUIs were mechanical, kind of like how etch-a-sketch is mechanical. people don’t know how computers work

Reblogged by slightlyoff@toot.cafe ("Alex Russell"):

tylersticka@social.lol ("Tyler Sticka") wrote:

Fun facts about this article:

- It includes the word “file” 162 times 💾
- The footnotes have little context summaries 🦶
- I drew a goat 🐐
https://mastodon.cloud/@spaceninja/112202378188184862

nadim@symbolic.software ("Nadim Kobeissi") wrote:

Two good, productive takeaways from xz backdoor saga:

1. No source code needs to be inscrutable,

2. No build system needs to be Turing-complete.

xor@tech.intersects.art ("Parker Higgins") wrote:

always fun when I think of a weird project I could work on and in the course of researching discover it's already been done by a guy who looks like me and lives in my neighborhood

collinsworth@hachyderm.io ("Josh Collinsworth") wrote:

I like a lot of things about Android, but it is absolutely baffling to me that simply *rotating a photo* is a minimum of five goddamn steps.

pzmyers@octodon.social ("pzmyers 🦑") wrote:

Every month I have to call up my credit card company to pay my bill. This month, I get an announcement that they have made "improvements" to their phone service. And yes, the machine voice definitely sounds somewhat more natural.

But now it sounds like a woman doped to the gills on benzos and cannabis. SO SLOW. Agonizingly unresponsive. It's always a pain to deal with these machines, but now it's far, far worse.

Welcome to our AI future!

pzmyers@octodon.social ("pzmyers 🦑") wrote:

I am so fed up with anti-"wokeness" and anti-DEI nonsense. Diversity is good. Equity is good. Inclusion is good. Universities ought to be supporting those initiatives.

https://freethoughtblogs.com/pharyngula/2024/04/02/demographically-entitled-idiots/

Attachments:

• Mocking the anti-DEI conservatives. (remote)

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

I got most of these wrong ;^{

https://www.nytimes.com/interactive/2024/04/01/well/eat/salt-sodium-diet-quiz.html?unlocked_article_code=1.hU0.FOir.YtnGZKZ13ky7&smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

“Still, the account paying Mr. Trump’s legal bills will most likely be out of money by summer at the current spending pace.

Then, Mr. Trump will have to decide: Whose money will he use to pay his lawyers?”

https://www.nytimes.com/interactive/2024/03/27/us/politics/trump-cases-legal-fund.html?smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb

nadim@symbolic.software ("Nadim Kobeissi") wrote:

I feel like people who are switching to BlueSky because they like the CEO are very much missing the point of decentralized platforms. 😬

Reblogged by nadim@symbolic.software ("Nadim Kobeissi"):

rsc@hachyderm.io ("Russ Cox") wrote:

I put together a timeline of the xz attack, dating back to 2021. Corrections or additions welcome here on Mastodon. https://research.swtch.com/xz-timeline

Reblogged by nadim@symbolic.software ("Nadim Kobeissi"):

rsc@hachyderm.io ("Russ Cox") wrote:

A walkthrough of the xz attack shell script.
An RC4 variant in Awk, what more could you want?
https://research.swtch.com/xz-script

nadim@symbolic.software ("Nadim Kobeissi") wrote:

Question to cryptography friends: what is a cool new cryptographic primitive that doesn’t have a Rust implementation but could use a good one?