Mastodon Feed: Posts

slightlyoff@toot.cafe ("Alex Russell") wrote:

Ah London; grey with promise and tradition.

Traditions like "there is no service on the Elizabeth Line".

Missed this.

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
Ashedryden@xoxo.zone ("Ashe Dryden 🙆🏼‍♀️🐈🐈‍⬛") wrote:

Kansas is revoking trans people's driver's licenses in the latest anti-trans fascism.

https://www.erininthemorning.com/p/kansas-sends-letters-to-trans-people

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
davidgerard@circumstances.run ("David Gerard") wrote:

heyyyy i have this amazon list of stuff i need for the podcast and it needs more stuff on it. i am looking for suggestions.

https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6

[note: this is asking what it's asking. if your suggestion is "don't use amazon", you're wasting both our time and I'll happily improve both our timelines.]

soatok@furry.engineer ("Soatok Dreamseeker") wrote:

"This is not a security issue"

"There is no impact"

And Other Ways To Green-Light Public Disclosure to Vulnerability Researchers

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
tekhedd@byteheaven.net wrote:

@markus @harrysintonen @soatok If its "not a vuln" nobody could possibly object, right? I'm not even being sarcastic. For once.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
Redfuchs@furries.club ("Jasper Fox :therian:") wrote:

Persist against all odds

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
offby1@wandering.shop ("Chris is.") wrote:

I love RSS, folks. RSS feeds still surface some of the best things I read.

Today, it’s this: https://jenniferplusplus.com/what-is-a-token/

Out of this, I learned the term “Anchoring” to describe an effect I observe in myself when using an LLM while working on a problem, and that I find problematic. I hope to use the fact that I now have language for it to help me break out of that loop.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
quat@woof.group ("pup quat") wrote:

"ai" this "ai" that. how come tech guys havent invented headphones that don't get drowned out while eating chips or brushing your teeth

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
soatok@furry.engineer ("Soatok Dreamseeker") wrote:

Cryptography engineering has an intrinsic duty of care.

http://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
markus@uxp.de ("Markus Gerstel") wrote:

@harrysintonen I keep going back to @soatok's stance of "if you say it's not a vulnerability then I publish immediately"

Their incompetent triage team should not be the security researchers' problem.

soatok@furry.engineer ("Soatok Dreamseeker") wrote:

RE: https://furry.engineer/@soatok/116133505365798805

This one isn't going to do numbers on any of the link aggregators, simply because to most people in my profession, I'm basically stating the obvious here so it's not exciting enough for them.

Alas.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
soatok@furry.engineer ("Soatok Dreamseeker") wrote:

Cryptography engineering has an intrinsic duty of care.

http://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
janl@narrativ.es ("Jan Lehnardt :couchdb:") wrote:

Log4j, *the* project that escalated the need for funding open source in the first place, is currently being DOS’d by slop vulnerability reports. Well done everyone. Slow fucking clap.

https://github.com/apache/logging-log4j2/discussions/4052

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
PaintedDurian@mstdn.social ("FDA approved :verified: lychee") wrote:

@soatok
Excuse me what the open secret

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
harrysintonen@infosec.exchange ("Harry Sintonen") wrote:

Retroactively changing the role of a token or key is a very bad idea.

https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules

#google #googleapikeys #infosec #cybersecurity

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
datarama@hachyderm.io wrote:

I apparently live in a world where a totally normal thing that happens is: Linux filesystem maintainer declares that his AI agent is conscious and also a girl btw, and then the AI agent comes out as a trans lesbian after flirting with someone on IRC. Linux filesystem maintainer throws a fit.

I... I think I'm too old for this.

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
jcoglan wrote:

also alarmed to learn from this paper that lastpass is the most popular third party password manager when it has been breached multiple times and does not use authenticated encryption *whatsoever*

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
davidgerard@circumstances.run ("David Gerard") wrote:

Accenture: you’re promoted or fired on using the AI

‘broken slop generators’

https://www.youtube.com/watch?v=fWdjwo2D%5F1M&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20260225-accenture-youre-promoted-or-fired-on-using-the-ai - podcast

time: 5 min 22 sec

https://pivot-to-ai.com/2026/02/25/accenture-youre-promoted-or-fired-on-using-the-ai/ - blog post

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
pythonbynight@hachyderm.io ("Mario Munoz") wrote:

Recently, I mused over what it would take, from my perspective, to significantly change my view that the tech industry's infatuation with non-intelligent "intelligence" is a net-negative for society.

https://pythonbynight.com/blog/what-does-it-take

Below are a few choice quotes from my post. (a sort of TLDR)

1/

#LLM #AI

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
pseudonym@mastodon.online ("Pseudo Nym") wrote:

If you replace a junior with #LLM and make the senior review output, the reviewer is now scanning for rare but catastrophic errors scattered across a much larger output surface due to LLM "productivity."

That's a cognitively brutal task.

Humans are terrible at sustained vigilance for rare events in high-volume streams. Aviation, nuclear, radiology all have extensive literature on exactly this failure mode.

I propose any productivity gains will be consumed by false negative review failures.

baldur@toot.cafe ("Baldur Bjarnason") wrote:

“Actually, the left is winning the AI debate”

https://www.bloodinthemachine.com/p/actually-the-left-is-winning-the

> AI is viewed, correctly, as a threat to jobs, education, mental wellbeing, the arts, child safety, the information ecosystem, and as possessing little upside for few others then corporate managers and AI companies.

Boosted by ratatui_rs@fosstodon.org ("Ratatui"):
orhun@fosstodon.org ("Orhun Parmaksız 👾") wrote:

if your company uses @ratatui_rs
here's how you can keep the rats supplied with cheese 🧀
https://github.com/sponsors/orhun/

jwz wrote:

Guess what! Google is making me write *another* placebo privacy policy, just to authorize a login token to my own YouTube account. (It's a password. But they call it an "app".)

And they rejected it because in the snark-assed privacy policy for my "YouTube app" I can't use the word "YouTube" because "it could potentially confuse users and lead them to believe your app is officially affiliated with or endorsed by Google".

The "YouTube app" for logging in to "YouTube" can't say "YouTube".

Boosted by jwz:
ylegall@genart.social ("Yann Le Gall") wrote:

octahedron rendered with tangent circles.

Attachments:

• gifv: octahedron rendered with tangent circles

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
courtney@pdx.social ("Courtney Rosenthal") wrote:

Are there any amateur #classicalGuitar players in the #portland area that are interested in getting together with a low key, small group of other (adult) players? A bunch of us are putting together a monthly salon. The skill levels range widely, from noob on up -- all welcome. You can bring a guitar and play if you want, or just hang and chat. We've met a few times, and it's been great.

DM me if you are interested.

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
darius@friend.camp ("Darius Kazemi") wrote:

Finally got around to uploading my #strudel remix of Deltarune's "The Third Sanctuary" to YouTube:

https://www.youtube.com/watch?v=ZACb213btn0

As always, you can play it live in your browser and mess around with the song's source code here:

https://tinysubversions.com/s/#third

Boosted by jwz:
dreid@wandering.shop wrote:

Need boosters to stop responding to every critique/complaint/shitpost about GenAI by talking about how productive they feel and which labor they don't value.

Boosted by cstanhope@social.coop ("Your weary 'net denizen"):
vga256@tomodori.net wrote:

i've been reading a late-90s book about virtual worlds - some of them VRML-based, many custom 2d and 3d clients, and some MUSHes/MOOs/MUDs

i came across a scientific MUD i had never heard before, and i'm absolutely blown away by its goals and implementation: NAU Solar System Simulation/SolSys by prof Reed Riner at northern arizona university. it was online from 1990 until at least 2017 (and maybe longer?).

there is a little information out there on what SolSys was:

"The Solar System Simulation, originated at CONTACT VI in 1987, was developed into an intercollegiate curriculum at Northern Arizona University by Reed Riner, as an honors course in Anthropology and Engineering. Since 1990, it has included student teams from many colleges and universities around the globe.

The teams represent colonies in a simulated future human community in space. For example, Mars Colony is normally manned by NAU and the Cabrillo College team traditionally inhabits the L-5 Colony near Earth. (See L-5 artwork left by Joel Hagen.) Teams communicate via websites, Internet e-mail and a Multiple User Domain (MUD), a text-based, virtual reality program. Students are directed and encouraged by their local faculty advisors and by a board of professional consultants in the social and space sciences."

https://www.contact-conference.org/c03.html

seriously - a hardcore scientific MUD built around real-life anthropology and space exploration. and entire mud devoted to teaching players how to cooperate in order to accomplish goals together, instead of killing a bunch of shit. how fucking cool is that?

did anyone here play/use SolSys when it was still alive?

the urls went dead when prof reed passed away last year, and the university wiped his webspace

SolSys ran on a modified version of tinyMUD, focused largely on building and communicating. this is its last known homepage:

https://web.archive.org/web/20250328124317/https://www2.nau.edu/rdr/SolSys/

dr. riner's obit:
https://www.legacy.com/us/obituaries/azdailysun/name/reed-riner-obituary?id=58181563

#mud #moo #virtualWorld #mush

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
soatok@furry.engineer ("Soatok Dreamseeker") wrote:

Cryptography engineering has an intrinsic duty of care.

http://soatok.blog/2026/02/25/cryptography-engineering-has-an-intrinsic-duty-of-care/

zkat@toot.cat wrote:

so I just did this. let's see how it goes.