Mastodon Feed: Posts

Mastodon Feed

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
pojntfx ("Felicitas Pojtinger 🌅") wrote:

https://www.stvn.sh/writing/programming-still-sucks-fqffhyp

Everyone should read this.

Mastodon Feed

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
web3isgreat@indieweb.social ("web3 is going just great") wrote:

TrustedVolumes suffers $6.7 million exploit

May 6, 2026
https://www.web3isgoinggreat.com/?id=trustedvolumes-exploit

TrustedVolumes suffers $6.7 million exploit TrustedVolumes, a resolver and market maker used by 1inch and other defi platforms, suffered a $6.7 million exploit after an attacker was able to steal funds without proper validation. The thief then swapped the stolen wETH, USDT, wBTC, and USDC through ChangeNow and converted them to ETH to evade freezes. Blockchain research firm Blockaid has linked the attacker to a similar exploit in March 2025 that saw $5 million drained from 1inch. This time, 1inch has asserted that although they use TrustedVolumes as a resolver, the exploit did not involve any of their systems.

Mastodon Feed

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
patrickcmiller@infosec.exchange ("Patrick C Miller :donor:") wrote:

Microsoft's bad obsession is showing up in shabby services and slipshod software. Here's proof https://www.theregister.com/2026/05/05/microsoft%5Fopinion%5Fcolumn/

Mastodon Feed

aredridel@kolektiva.social ("Mx. Aria Stewart") wrote:

There it is, the good take about Gemini Nano being included in Chrome.

https://wil.to/posts/googles-prompt-api/

Google is behaving abominably here, and acting as always like they own the web.

Mastodon Feed

pzmyers@freethought.online ("pzmyers 🕷") wrote:

Now that classes are over, it's time to face the chaos of my lab and office.

https://freethoughtblogs.com/pharyngula/2026/05/07/the-drudgery-beginsnow/

books

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

i don't even know where it's getting this key from. i've deleted every copy i can find. i am currently doing a find on / ...

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

i am having tremendous fun(tm) trying to get abuild to use the keys i have generated for this purpose to sign the damn package index.

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
sue@glasgow.social ("Sue Smith") wrote:

This one prompted a blog post https://www.sue.codes/blog/convenienceunderstanding/

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
tante@tldr.nettime.org wrote:

"There are no more juniors. There was a funeral for their passing in 2024. Nobody came. The machine does what they do now, but cheaper. Of course, juniors weren't valuable for what they produced, they were valuable for who they would become: the senior engineer who knows where the bodies are buried. We optimized for output, and abolished apprenticeship. A few years from now, we'll wonder where all the seniors are. We shot them. Nobody will remember."

https://www.stvn.sh/writing/programming-still-sucks-fqffhyp

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
glecharles@gardenstate.social ("Guy LeCharles Gonzalez") wrote:

For the first time since 2015, I’m on the open market, looking for my next gig!

Details in the post, but tl;dr, I’m taking on some short-term consulting gigs while exploring opportunities for a full-time role.

If you’ve ever wanted to work with me, or have been curious about what I’m actually good at, let’s talk.

If you have or know of something that might be a good fit, drop me an email or pass along my LinkedIn profile to anyone you think should know about me.

https://loudpoet.com/2026/05/07/personal-news-open-to-work/

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
davidgerard@circumstances.run ("David Gerard") wrote:

we joke that when the AI bubble pops and the managers can't afford the chatbot any more, the surviving companies will hire the people who know how shit works to clean up

but this is of course optimistic. observed behaviour is that they will instead do the stupidest and shortest-term thing they can do instead of ever doing it properly.

so what do you envision this might be?

for clarity, i think when the AI bubble pops, which I place as some time next year at the latest - and you can hear the screeching noises in 2026 - the current recession signs will turn into a full Great Depression 2, so those surviving companies will also be doing not so great

Mastodon Feed

adele@social.pollux.casa ("Adële 🐁!") wrote:

#SmolFedi is a lightweight, no-JavaScript Fediverse web client written in PHP.

v1.2.7 is available

  • Add thread indentation and goto parent link
  • Better page style
  • Add profile banner ratio in prefs
  • Add missing translation in aria
  • Add RSS feeds discovery for profiles and tags
  • Add instance info page
  • Stay on profile and post pages when switching account

Source/download

Demo instance

#smolweb #fediverse #nojs

Mastodon Feed

Boosted by kornel ("Kornel"):
FabMusacchio ("Fabrizio Musacchio") wrote:

#Deepfakes are everywhere, but #DigitalForensics investigators are fighting back:

🌍 https://scim.ag/42dMPBg

To verify images, digital forensics investigators will often check whether the geometry of the scene is realistic. In a real photo, lines that run parallel in reality—like floor tiles—should meet at a single vanishing point. In this image, however, the dotted lines do not meet in a single point, indicating it is a fake. Image: an AI-generated image of soldiers marching down a hallway in three lines, wearing fatigues and carrying rifles. Four dotted white lines have been added over the image, running along the floor tiles visible in the foreground and extending back to where the vanishing point should be, behind the soldiers. Instead of meeting in a single point, the lines all cross at different points.
Investigators also examine reflections. The lines connecting points on an object to matching points in its mirror image run parallel in reality, so similarly should meet at a vanishing point. In this image, the lines again do not converge on one point, revealing it to be a fake. Image: An AI-generated image of a plastic cartoon dinosaur toy with its reflection visible in a small mirror. Four dotted white lines are layered over the image, connecting points on the toy with the same points on its reflection: the top of its eye, the end of its jaw, its hand, and its foot. The lines extend out to the side of the image, where they all cross at different points rather than meeting at a single point.
Shadows can be a giveaway, too. Because the Sun is so far away, its rays are essentially parallel when they reach Earth's surface. That means that the lines connecting points on an object to the shadows they cast in sunlight should also intersect at a vanishing point. In this Al-generated image, that is clearly not the case. Image: An AI-generated image of colorful, semi-transparent plastic cubes arranged in a group in a city plaza. Six dotted white lines are layered over the image, connecting corners of several cubes with the corresponding corners in their shadows. The lines extend upward off the edge of the image, toward where a vanishing point should be. Three of them converge on roughly the same point, but two extend further, and one cuts across all the others at an angle.

Mastodon Feed

Boosted by kornel ("Kornel"):
webstandards_dev ("Web Standards") wrote:

Using safe-area-inset to build mobile-safe layouts. Modern phones have notches, cutouts, and floating buttons that overlap your UI unless you account for them. The Polypane blog walks through env(safe-area-inset-*), why you need viewport-fit=cover in the , combining insets with calc() for extra spacing, and the new safe-area-max-inset-* values that stay stable even when the address bar hides on scroll. #css #layout

https://polypane.app/blog/using-safe-area-inset-to-build-mobile-safe-layouts/

Polypane logo, “Using safe-area-inset to build mobile-safe layouts” title, code block setting body padding with env(safe-area-inset-*), and a phone mockup with a “Safe action area” button.

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

This genuinely looks like a recipe for a US federal wire fraud charge down the line.

Mastodon Feed

pzmyers@freethought.online ("pzmyers 🕷") wrote:

May the murderous freak suffer a thousand more spider bites. May the invisible communists crawl out from under his bed and pummel him with pig's bladders. What a pathetic little man.

https://freethoughtblogs.com/pharyngula/2026/05/07/i-had-nothing-to-do-with-kyle-rittenhouses-recent-hospitalization/

Rittenhouse: "The communists couldn’t take me out and i’ll be damned if I let a brown recluse take me out"

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

The fact that many payment companies seem to be all-in on "AI" feels iffy. Even iffier when most of them were all-in on cryptocoins.

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

In today's "surely this is a bad idea?" news, as a part of my ongoing search for a non-shitty Merchant-of-Record service, I came across one called Kelviq that runs it's business verification (i.e. the bit that weeds out scammers, fraud, etc) entirely using OpenClaw

https://www.indiehackers.com/post/we-automated-our-business-vetting-with-openclaw-788b285744

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

“The language is leaving me – Hi, I'm Heather Burns”

https://heatherburns.tech/2026/05/07/the-language-is-leaving-me/

> Hence renaming it parasocial media, as a phenomenon which “creates the conditions for people to objectify one another at a distance as mediatized objects, helping realize the different layers of toxicity that social media scholars document.”

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
inthehands@hachyderm.io ("Paul Cantrell") wrote:

This is hilarious, crushing, zany, bleak, beautiful, and true.

https://www.stvn.sh/writing/programming-still-sucks-fqffhyp

(ht @drahardja)

Mastodon Feed

db@social.lol ("David Bushell 🪿") wrote:

new bio: all opinions are those of my own LLM and not those of my employer's LLM — I mean, I do use my employer's LLM 'cause hell if I'm paying for it — but I prompt for my own opinions — contractually they're owned by my employer but not endorsed — is what I'm trying to say

Mastodon Feed

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
EdinburghGreens@mastodon.scot ("Edinburgh Greens") wrote:

Today's polls show that if enough people vote Green then we can stop Reform, with many regions facing a Greens vs Reform contest for that final 7th seat on the regional list, elected with the peach ballot.

And if you have a Scottish Greens constituency candidate, it’s Both Votes Green to get us over the threshold to win our first-ever constituencies. Let’s do this!

Mastodon Feed

db@social.lol ("David Bushell 🪿") wrote:

"there's thousands of those, but this one is mine" — love it, best way to learn IMO

https://thatalexguy.dev/building-with-intent

Mastodon Feed

baldur@toot.cafe ("Baldur Bjarnason") wrote:

Happy ‘vote strategically to keep nationalists from controlling your local area’ day to the Brits. We’re having one here in Iceland next week.

Mastodon Feed

Boosted by typst ("Typst"):
erou@mathstodon.xyz ("erou ⏚") wrote:

I am discovering @typst and it looks fabulous. Very beautiful, versatile, and way more intuitive than LaTeX. I just read the tutorial really, but now I am looking for things to write with it.

#typst

Mastodon Feed

typst ("Typst") wrote:

You can enable 2FA by signing in to Typst and going to the "Multi-factor authentication" section of your account settings.

Mastodon Feed

typst ("Typst") wrote:

A second authentication factor protects your Typst account even if a hacker has your password or access to your email inbox. To enable 2FA, you need a code generator app. Your password manager or device may already include one. Alternatively, you can download one from your phone's app store.

Mastodon Feed

typst ("Typst") wrote:

We know that many of you are doing some of your best work with Typst. To prevent hackers from hijacking your Typst account, you should enable the new two-factor authentication feature.

#Typst

Modal "Enable two-factor authentication" with an enrolment QR code and a text field to enter a code.

Mastodon Feed

dysfun@treehouse.systems ("gaytabase") wrote:

dutch isn't real, i'm not sure why they pretend it is.

Mastodon Feed

db@social.lol ("David Bushell 🪿") wrote:

*screams into the void*