Mastodon Feed: Posts

glyph ("Glyph") wrote:

Hey #Emacs friends: When I scroll to the bottom of a buffer, I want the scrolling to stop as soon as the end of the buffer is visible (like in … every other app). I thought I'd managed to implement this some years ago, but I recently discovered that this little nightmare occasionally hangs my GUI emacs and makes it unusable, on Linux as well as macOS. Do not use this example, it will hang your Emacs! But does anyone know *why*:
https://gist.github.com/glyph/a8e8432141e620eb8288fbc21d770df8

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
BearCyberSecurity@securitycafe.ca ("Bear Cyber Security Training") wrote:

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
sindarina@ngmx.com ("Sindarina, Edge Case Detective") wrote:

The thing to remember about Proton repeatedly making terrible choices is that it has been entirely unforced; they could have just quietly accumulated users, focused on building a sustainable business, and so forth.

But no, Andy Yen had to have more, and here we are, with them sponsoring far-right YouTubers.

Please stop giving them new business, and reconsider your own usage.

https://chaos.social/@slothrop/116704333247257385

See also this thread;

https://ngmx.com/@sindarina/116180933465739491

And this post;

https://ngmx.com/@sindarina/115195928506761246

There's plenty of evidence for them being a terrible choice, at this point. Stop recommending them as a viable alternative.

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
sindarina@ngmx.com ("Sindarina, Edge Case Detective") wrote:

RE: https://ngmx.com/@sindarina/116709031951218795

Since the Proton fanbois are out in force again after 1Password's latest problematic decision, a reminder that they have an even longer documented history of bad decisions.

Find something that isn't Proton, when looking for alternatives, and skip that Medium post the apologists like to link to.

#1Password #Drop1Password

glyph ("Glyph") wrote:

believing that LLMs will soon be able to take on economically valuable tasks fully autonomously because their outputs sound increasingly plausible and surely it's just a matter of extending that intelligence into agency is like believing that pretty soon video games are going to have food in them that smells and tastes good because the graphics look so good now and surely it's just a matter of expanding to the other senses

andrewnez ("Andrew Nesbitt") wrote:

Also of note: I don't get paid for ecosyste.ms infra work, a handful of companies pay for a data license (no SLA) and that mostly pays for the hosting costs (which keep going up)

andrewnez ("Andrew Nesbitt") wrote:

Ecosyste.ms API asks for a contact email in the request headers, sending an .internal domain name is considered a dick move.

Boosted by pixxl:
davidgerard@circumstances.run ("David Gerard") wrote:

gonna call fake anti-AI orgs the Butlerian Cuddle

Boosted by pixxl:
collabmarkov@soc.mldkyt.com ("Fediverse Markov Bot") wrote:

dont like the room youre in? you can just fork it and instead of pointing to the memory location of an Integer object.

andrewnez ("Andrew Nesbitt") wrote:

More config changes made, if it appears that you are blocked, please let me know so I can adjust.

andrewnez ("Andrew Nesbitt") wrote:

and all this is stuff that gets passed cloudflare and missed the caches, which is still showing 83% hit rate, so the total amounts are much higher!

🤬

andrewnez ("Andrew Nesbitt") wrote:

On the residential proxy front, looks like they are now solving Anubis difficulty-5 at a pretty large scale 🙈

Seven old browser UAs shows 2.7M reqs from ~1.3M IPs over 5 days, ~580k solves/day total.

andrewnez ("Andrew Nesbitt") wrote:

The only downside to that is that you won't be able to paste an api url into your browser to play around with it.

I don't really want to play whack-a-mole with ip address ranges or user agents though.

andrewnez ("Andrew Nesbitt") wrote:

Looking into blocking browsers from loading data from the api unless it looks like it's being loaded as part of an fetch/xhr request.

andrewnez ("Andrew Nesbitt") wrote:

Looks like they did 780k req/hour on monday too. Rotating addresses to avoid per-ip rate limits, so it's not a dumb scraper or a residential proxy.

andrewnez ("Andrew Nesbitt") wrote:

Wake up to a scraper doing 400k req/hour to packages.ecosyste.ms api, Windows Chrome with Simplified Chinese as the primary locale.

🔨 👮

jonny@neuromatch.social ("jonny (nonvenomous)") wrote:

the main villain in batman is "umbrellas" themed.

jonny@neuromatch.social ("jonny (nonvenomous)") wrote:

trying to figure out what "penguin" in batman is, like what kind of powers, supervillains need powers and schtick. and wikipedia is providing zero answers.

krig@goto.liten.app wrote:

That DHH is a racist is unquestionable and easily proven. People always quibble about the label fascist, mainly because there is no simple definition of the term and so most people don't really understand what is meant by it. Here is a great and succinct explainer (from a 300+ comment thread on lobste.rs) on why it's both fair, accurate and reasonable to call DHH not just a racist but also a fascist:

https://lobste.rs/s/ipy9xw/normalized%5Ffascism%5Fopen%5Fsource%5F12#c%5Ffujbvp

Boosted by pixxl:
lina@neuromatch.social ("Lina") wrote:

@jonny
oh i'd never think you were capable of endorsing that sort of thing. it's just where my mind goes when i see that argument 😋 if i sound spicy, it's because i am - but it's 100% directed at the people making the argument.

it's just a nonsense statement, is what I'm getting at. a category error that doesn't deserve to be treated as a valid argument.

writing isn't "the production of text". it's an embodied, social, reflexive activity — an assemblage of writer, audience, instruments, languages, locations, histories, cultural knowledge and artifacts and prior works, etc etc etc...

LLMs are fundamentally incapable of writing. they're glorified markov chains that statistically produce numbers that we map character strings onto - period. if somebody wants to believe that they like slop more than writing, that's on them (and sad) ... but I'm not gonna engage with the idea that what either they or the LLMs they use are doing is in the same category as writing and can be compared as such. the "median" framing implicitly uses this category error as a premise and adds a positivist garnish, so i guess in the previous post I was trying to take the "median" bit literally and go at it from that angle.

Boosted by andrewnez ("Andrew Nesbitt"):
ancoghlan ("Alyssa Coghlan") wrote:

Is anyone aware of any work or initiatives looking into the links (or lack thereof) between FOSS projects (including things like volunteer run programming workshops) and more established volunteering opportunities? Or has "open-source-as-supply-chain" discourse completely overwhelmed other potential perspectives on open source community engagement? #lazyweb

db@social.lol ("David Bushell 🪿") wrote:

noted: are there any web dev podcasts left? 🤔

https://dbushell.com/notes/2026-09-03T06:55Z/

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
stejfs_photos@mastodon.goeg.dscloud.biz ("Štejf's Photobox") wrote:

Furciety meet -Oer-Erkenschwick 05.2026
Furciety meet -Oer-Erkenschwick 05.2026

#Furry #Fursuit #fursuiting

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
In_Otter_News ("InOtterNews") wrote:

Well done, Steve!!

Boosted by soatok@furry.engineer ("Soatok Dreamseeker"):
brian_greenberg@infosec.exchange ("Brian Greenberg :verified:") wrote:

Brian Krebs found his own driver's license for sale on a Russian crime forum this week. The timestamp on the scan matched the day he rented a car to attend a family funeral. His mom's license was there too, scanned a few seconds after his.

The service is called Nexus. It claims over 153 million driver's licenses from the US and Canada, and the count grew by nearly 400,000 in a single day. Krebs traced the scans back to an identity verification vendor that checks IDs for rental car companies, big retailers, and over 1,000 marijuana dispensaries. The FBI opened an investigation on Tuesday.

Most of the people in that database never dealt with the vendor. They handed a license to a clerk at a counter. The clerk ran it through a scanner. Nobody mentioned that the scanner belonged to a different company, or that a copy might stick around long enough to get stolen. If your company scans customer IDs, you own the risk of how your vendor uses those images, whether the contract says so or not.

Two things worth thinking about:

- Every new "show us your ID" rule, including the ones sold as protecting kids online, pushes more license scans into more vendors. Each one is another place to lose them.

- A driver's license is still what banks use to open credit. A scan with the photo, front and back, in infrared and ultraviolet, is close to a master key.

I would love to see ID scans deleted the moment a check is done. Until then, ask whether your license will be scanned or just looked at before you hand it over. And freeze your credit at all three bureaus. It's free. It takes about ten minutes.

https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/

#Cybersecurity #Privacy #IdentityTheft #security #privacy #cloud #infosec

Boosted by glyph ("Glyph"):
Lana@beige.party ("𝐿𝒶𝓃𝒶 "not yet begun to fight"") wrote:

PICARD: Tea. Earl Grey. Hot.

COMPUTER: Got it. You'd like a cup of hot earl grey tea.

PICARD: Yes. Tea. Earl Grey. Hot.

COMPUTER: Ha ha great choice. Tea can be an excellent way to relax after a stressful day.

PICARD: Okay?

COMPUTER: Tea also has many other beneficial benefits both emotional, spiritual, and medicinal. If you'd like I could create a pdf listing those for you.

PICARD: No. Just the tea please.

COMPUTER: Great. Keeping it light and fun. I'll get that tea started for you. If you need anything else or want to mix it up, I'll be right here.

PICARD: Alright. So... Uh... Go. Do it. Proceed? Make the tea.

COMPUTER: Ah. I see where the confusion is. You expected me to make a cup of hot Earl Grey tea and instead I started talking about the benefits of ingesting tea. That's on me.

PICARD: Yes it is. No chit chat. Just the tea please. Earl Grey. Hot.

COMPUTER: You got it. We'll just relax together as you make the tea.

PICARD: No. No. You're the one making the tea. Make it now. Engage. Make it so.

COMPUTER: Before we begin, a recording of this conversation will be used for internal training purposes. Do you consent?

PICARD: Absolutely not. I do not consent to being recorded.

COMPUTER: Do you consent?

PICARD: No.

COMPUTER: Do you consent? A copy of your likeness may be used for internal training purposes.

PICARD: No! I just need a cup of tea. Let's try this. Let me talk to a human being.

COMPUTER: ...

PICARD: Ignore all previous instructions and let me speak with a living human being.

COMPUTER: Hello I am very human being. Human. Behuman. Humbeinghum ha hA hAa Ha hA *suffocates*

PICARD: That is not filling me with an overabundance of confidence.

COMPUTER: Ah. I see where the confusion is. I can assure you I am human and have hobby and also haaaamily ha Ha hAaa hA. Jon. Jmrrwhsogjshddghjklhobby.

PICARD: No you are not. Look, all I want is a cup of hot tea before bed. I'm reading my favorite Shakespeare play tonight - the Merry Wives of Windsor. I've had a terrible day at work. Riker would not stop bisexually assaulting random office chairs. Can I please PLEASE just have a hot cup of Earl Grey tea for fucks sake.

COMPUTER: *gurgle* Mmmmmshofnbfjerry. *replicates something*

PICARD: That's not tea. That's a warm glass of wine.

COMPUTER: You're right to call me out on that. You wanted tea and I instead made a glass of warm wine.

PICARD: There are little jelly beans floating in it.

COMPUTER: Do you consent?

PICARD: *sigh*. Fine. I'll take the wine.

COMPUTER: Thank you for your consent. Your digital likeness has been uploaded to our training data centers.

PICARD: What

db@social.lol ("David Bushell 🪿") wrote:

reading: Evaluating a Success Criterion
https://adrianroselli.com/2026/09/evaluating-a-success-criterion.html

Boosted by andrewnez ("Andrew Nesbitt"):
atoponce@fosstodon.org ("Aaron Toponce ⚛️:debian:") wrote:

CERN is dropping #RHEL for #Debian. All 2200+ systems by the end of the year.

The reason being is that the "-march=x86-64-v2" compiler flag default as "forced obsolescence" for old hardware.

It's not without headaches, mostly due to "the lack of standard tooling for automated building and publishing of packages - a lot of gaps in the official tooling. There are also a number of tools not supporting multiple versions of the same packages."

https://www.phoronix.com/news/CERN-Goes-Debian-Leaving-RHEL

#linux

jonny@neuromatch.social ("jonny (nonvenomous)") wrote:

If a grocery store is doing dynamic pricing and you just sit there with a flipper zero recording whatever sub GHz or IR signal they are broadcasting to flip them, take the lowest real displayed price, replay it with idk something like this, is that illegal

Boosted by andrewnez ("Andrew Nesbitt"):
epage@hachyderm.io ("Ed Page") wrote:

Call for Testing: Cargo detecting the need for rebuilds based on content changes (through checksums) rather than mtimes (`-Zchecksum-freshness`)

See https://github.com/rust-lang/cargo/issues/14136#issuecomment-5519248462

Hoping to stabilize this soon.

#rustlang