Trollolol, telnetd lets you log in without a password if you send the USER environment variable as "-f root" (which gets passed unsanitized to login(1)). (Yes, yes, telnet, but still. :-) https://www.openwall.com/lists/oss-security/2026/01/20/2 CVE-2026-24061

New rule: if your cli has a feature/option that can be specified by typing the word "update", you are required to support "udpate" as an alias for that. No exceptions.

By 2025 it became clear there are two types of software: 1. software that does such-and-such 2. exactly like 1 but in Rust addendum: Q. how do you know if any given piece of software is written in Rust? A. Oh they'll tell you. They'll tell you. #rustlang

I'm old. How can I tell, other than the usual aches and pains that come from a rapidly declining body? I'm hearing people pronounce the abbreviation Bros. as "bros" instead of "brothers." As a youth, I played Super Mario Bros.; I had to convince my kids a while ago that I wasn't trolling them […]

Normalizing accessibility is good! Doesn’t fit with every project (like mine) but I agree that it should be a standard review question, especially when going for an Architecture Review approval https://disabled.social/@A11yAwareness/115527173579603254

this forced SNAP cut is gonna trigger food riots, isn't it and then the crackdowns just white-knuckling it here

Being picked up by middleschool/highschool bands all across the globe - https://youtu.be/jGkvFglOZNI?si=A5DSiiE8O_lDhFmu

Word on the street is that this year's Advent of Code will have 12 puzzles instead of 25. I'm still very much looking forward to participating, and I'm grateful for the challenges. One change (see screenshot) is now, when you look at a list of all the events […] [Original post on mastodon.social]

SHA256 collision https://mastodon.social/@randahl/115394210022219069

“Enh, it’s just a documentation issue” https://mastodon.social/@nixCraft/115050091574814857

Sometimes your cards just work together really well

A quantum of English: There are two constructs with similar meanings: "What <something> <verb>s like" and "How <something> <verb>s" E.g. "what the building looks like" and "how the building looks". Note that "like" does not go with "How". In other words "how the building looks like" is […]

I'm supposed to go to Italy with my wife in May. At this point, I'm not sure Americans are going to be allowed in

Captured at 9pm local time

Went from nauseously optimistic to just nauseated in the span of 12 hours. Now what? The US lasted 248 years, not sure what's coming next, but I got a hint. This past Sunday, my wife and I had gone into Boston to see Ronnie Chieng live. While we were walking around the Common before the show […]

well, shit

Is it once again time to plot some gunpowder already?

Things You Run When You're Bored ---------------------- $ for i in a b c d e f g h i j k l m n o p q r s t u v w x y z; do echo $i$i $(grep -i $i$i /usr/dict/words | wc -l); done | sort -n +1 jj 0 qq 0 yy 0 xx 1 uu 3 ww 3 vv 5 kk 8 hh 10 ii 10 aa 20 zz 65 bb 130 dd 160 cc 176 gg 192 mm 225 pp […]

Anyone remember the “shellshock” bash vulnerability? That was 10 years ago. Yeah

Fox could’ve gone one to make the next Morse sequel and be set for life, but given his regressive and disgusting views, who would want to watch him? https://mastodon.scot/@ShredderLivesOn/112868878440936054

Who remembers the crazy days of the pc clones, where anyone with the slightest interest would set up a mail order business to sell IBM-compatible hardware? MidWest Micro lasted around 15 years and now they don’t even have a Wikipedia page

If I start reading from the beginning *right now*, will the last one be published by the time I get to it? Ready… steady…. GO! https://wandering.shop/@cstross/112689915520603820