Mastodon Feed: Posts

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
karl@infosec.exchange ("Karl") wrote:

@FritzAdalis @whyrl @pq1r @inex @soatok @paco in line with "personally, I would avoid the check"

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Face it, once you reach a certain age, the news is one big serving of cancer. And you always feel like the wrong person is suffering.

https://freethoughtblogs.com/pharyngula/2026/03/03/goddamn-cancer-3/

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
FritzAdalis@infosec.exchange ("Fritz Adalis") wrote:

@whyrl @pq1r @inex @soatok @paco
> The absence of input validation is core to the design of Monocypher

WAT.

jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:

truth

pzmyers@freethought.online ("pzmyers 🕷") wrote:

DO YOUR FUCKING JOB, WHITE HOUSE CORRESPONDENTS ASSOCIATION. They won't. Expect a boring evening of pandering, suck-uppery, and cowardice.

https://freethoughtblogs.com/pharyngula/2026/03/03/the-greatest-hottest-and-most-spectacular-ego-ever/

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
SiteRelEnby@transfem.social ("Site Reliability Enby") wrote:

@lain@lain.com @soatok@furry.engineer @inex@pony.social

Sloccount counts under 2000 lines of code, small enough to allow audits. The binaries can be under 50KB, small enough for many embedded targets.

"Measuring software development by lines of code is like measuring aircraft design by weight"

Just that in this case, proving that too few is just as bad as too many.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
lain@lain.com ("lain, author of the quixote") wrote:

@inex @soatok
> The absence of input validation is core to the design of Monocypher

???? why???

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
wordshaper@weatherishappening.network ("Dan Sugalski") wrote:

@soatok good thing this code doesn’t have to operate in an adversarial environment. Something unfortunate could happen.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
charlotte@akko.chir.rs ("Charlotte :lotteheartplural:/Cinny :cinny_heart_plural: :thetadelta: :ursaminor: :treblesand: ") wrote:

@rusty__shackleford @soatok personally my raccryptography libraries should just randomly silently explode because i didn’t check something it extremely trivially could check itself

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
wordshaper@weatherishappening.network ("Dan Sugalski") wrote:

@soatok Wait, so the entire input validation scheme is "don't call it wrong?"

That's... well, that's a choice you can make, I guess.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
mttaggart@infosec.exchange ("Taggart") wrote:

Claude is down again and I am seeing people basically go through withdrawal.

If you are feeling it, recognize it for what it is.

soatok@furry.engineer ("Soatok Dreamseeker") wrote:

tfw you report issues, get dismissed by the maintainer, and then several other people go "wtf?" to the maintainer so you don't feel alone

EDIT: context -- https://furry.engineer/@soatok/116161297413483269

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
rusty__shackleford ("Rusty Shackleford") wrote:

@soatok

Holy shit

Attachments:

• gifv: e32eca397c430663.mp4

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
f4grx@chaos.social ("F4GRX Sébastien") wrote:

@lady_alys @soatok using crypto is difficult, even more so when you voluntarily don't validate inputs. Oh my dog. This lib should be in a kind of oss security blacklist!

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
f4grx@chaos.social ("F4GRX Sébastien") wrote:

@soatok
> closed as not planned.
Lmao.

> The absence of input validation is core to the design of Monocypher, and Well documented. This allows Monocypher to simplify error handling and maximise portability. What you found was normal and expected.

Oh my dog

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
7heo@mastodon.sdf.org wrote:

@lady_alys @soatok

fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷") wrote:

For an ideology that accuses the other side for being incapable of nuance, I can think of a dozen or more issues where we brush aside inconvenient truths simply because everything must be black and white, and only one thing can be true at a time.

fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷") wrote:

Like, I hadn't considered that these glasses have practical applications for the disabled community.

Who the fuck am I, then, to demand they find an alternative when A. An affordable alternative likely doesn't exist. B. able-bodied people only ever think about these alternatives when we realize that companies like Meta are exploiting our lack of accommodations.

fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷") wrote:

Someone in the comments brought up the possibility that blind people are using Meta Raybands due to a lack of other options and infrastructure.

And because that's an inconvenient truth, people framed the problem as something disabled people must solve.

If blind folks are, or will be, relying on products like Meta Raybands, then the failing is with our society, not the disabled community.

This is always the problem with our discourse. We don't participate to learn, but to preach.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
hosford42@techhub.social ("Aaron") wrote:

They don't know it, but this article is also about autism.

https://dmnews.com/j-a-p-psychologists-say-people-who-need-to-be-alone-after-socializing-arent-recharging-from-exhaustion-their-brains-are-doing-post-processing-work-on-every-emotional-signal-they-absorbed-and-the-more/

#ActuallyAutistic
#autism
#introversion

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
FediTips@social.growyourown.services ("Fedi.Tips") wrote:

p.s. Another couple of scams to watch out for as well:

- Scammers saying you need to verify by clicking on a link. Admins will NEVER demand you verify. The verification system on Mastodon is optional and does not involve credit cards or any kind of payment.

- Scammers saying you need to temporarily change your account's email address. Admins will NEVER do this. This is done by scammers who want to take over your account, which is possible if you change your email to match theirs.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
campuscodi ("Catalin Cimpanu") wrote:

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
tinker@infosec.exchange ("Tinker ☀️") wrote:

If @signalapp put up a crowd-sourced project fund to create a native app for linux (to support the many linux phone initiatives), I guarantee it would be funded quickly.

#signal #linux #linuxphone #privacy

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Makes me want to shed a tear of pride, it does.

https://freethoughtblogs.com/pharyngula/2026/03/03/on-a-cheery-optimistic-note/

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Would you pay $30,000 to watch Ken Ham eat? Only if you're in a cult.

https://www.smbc-comics.com/comic/athenian

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
whyrl@furry.engineer ("Whyrl") wrote:

@pq1r @inex @soatok Survivorship Bias, but for programmers

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
finalstaticfox@pounced-on.me ("Goupilleau") wrote:

@soatok It's kind of crazy how there's crypto library devs that think non-crypto devs want to use something that will silently ruin the lives of users and end your whole career if you look at it wrong.
I know enough about crypto to know that I don't want to fiddle with crypto directly and I want boring libraries that will instead explicitly tell me to fuck off and try something else if I look at it wrong.

Boosted by fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷"):
lokigwyn@vintagepropagand.art ("Loki Gwynbleidd 😷🏴🎨") wrote:

🦔💨

#FediArt #Antifa #Herisson #ArtNouveau

fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷") wrote:

#3GoodThings

1. Luxardo Maraschino cherries, plus a bit of the syrup mixed into a Coke Zero. Perfection. A friend and I would sit at the bar of this Italian restaurant and order appetizers and the bartender would make us cherry Cokes using Luxardo syrup. It was delightful.

2. Being the first to wake up in a household of family. This is an old-people pleasure lol but it's nice to sit with a cup of coffee and greet everyone as they wake up.

3. The tactile sensation of lighting a match.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
pq1r@tech.lgbt ("Arik") wrote:

@inex @soatok "Look, I only gave the user a foot-gun. Most users know how to not use the foot-gun. I mean yes, it is a gun; and yes, it is pointed automatically at their foot; and yes, it is loaded and has a hair trigger; but users should know better. I mean they are programmers, for heaven's sake, they should know about trigger discipline."