"Wie Merz und die EU auf Trumps Staatsterrorismus reagieren ist erbärmlich. Ein völkerrechtswidriger Überfall ist ein völkerrechtswidriger Überfall." https://taz.de/Intervention-der-USA-in-Venezuela/!6142589/

„Lesen ist Denken mit fremdem Gehirn.“ - Borges, frei nach Schopenhauer “AI ist Denken ohne Gehirn.🧠 “ - Claude, frei nach Grok

Every day I wake up and check if perhaps this is the day that IT HAPPENED. And even if its’s not today, “The important thing to remember, though, is that IT will HAPPEN.” https://www.mcsweeneys.net/articles/when-it-happens

Mein Weihnachtsgeschenk war, dass der Laden einmal richtiges Bier hatte. 🎄🍺

'Twas the night of the moratorium, and all through the cloud not a pager was beeping: no deploys were allowed. The packages frozen on the servers with care, In hopes that an outage would strike nowhere; The developers still pondering code to embed, While visions of monads danced in their heads […]

I'm unhappy with my Sonos Playbase (TV audio is out of sync, streaming radio is time delayed, can no longer access my SMB 1.0 media library) and looking for recommendations. Ideally, I'd want: - TV sound is actually in sync - actual FM radio - clock display - airplay capability - SMB 1.0 media […]

Oh gack, we have a whole new ouroboros of plagiarism happening now: Students put their completed coding assignment solutions on GitHub. AI consumes GitHub code. When presented with a coding assignment, AI regurgitates students' code from GitHub. Students copy the AI result into their program […]

For my fellow Log4j victims celebrating 4 years #Log4Shell PTSD: CVE-2025-68161 "The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName configuration attribute or the log4j2 […]

The number of times I engage with SREs or service owners during an incident and _they_ ask _me_ how to make a basic configuration change in _their_ app or service is astonishing. And it seems to be going up with time, suggesting service owners increasingly simply don't understand what they're […]

If during the holiday season you put up some electric light chains, go ahead and replace the old ones with LED chains - those use 40 (!) times less energy.

Seen on the agenda for a very formal-looking business event: "Dress Code: Theme: Hackers Meet Caribbean Pirates" Well, ok then.

"Note the other 159 kernel CVEs issued today..." is one hell of a statement. https://mstdn.social/@[email protected]/115730113546366659 But since the Linux kernel developers decided to "assign CVE numbers to any bugfix that they identify", it's become de-facto impossible to meaningfully […]

Ugh. Let's Encrypt API disruption. ``` [Tue Dec 16 11:18:30 EST 2025] Create new order error. Le_OrderFinalize not found. { "type": "urn:ietf:params:acme:error:serverInternal", "detail": "Unable to validate JWS", "status": 500 } ``` https://letsencrypt.status.io/

I finally jotted down a table of in how far the big three browsers currently support RFC9460 HTTPS records. In summary: - All browsers support ALPN - Safari has the best support; it's the only browser that supports AliasMode, but Safari doesn't support ECH - […] [Original post on mstdn.social]

"My First Time Hearing Rage Against The Machine!" https://youtu.be/LWUEL6ecqlM

Ugh. New conference speaker agreement terms appear: "I acknowledge and agree that [company] uses and/or may in the future use Artificial Intelligence, and the foregoing license expressly includes the right to use the presentation and/or the other Speaker Content and Derivative Content to train […]

A nice stroll down #Unix memory lane, by way of various old Usenet messages: https://blog.gabornyeki.com/2025-12-usenet/

Here's another funny generational divide: students no longer understand public_html directories and /~user/ URLs because apparently nowadays shared fileserver access is no longer a thing. Smh, fist, yells at cloud.

This entire "oh, uhm, mmmmmaaaaaaaaybe that _second_ strike was perhaps every so slightly less than ideal" hohumming in Congress is so infuriating because it implicitly grants legitimacy to the first strike. The second strike was not a war crime -- there is no war. It was murder. Just like the […]

Oof, this hits hard. "AI is Destroying the University and Learning Itself" https://www.currentaffairs.org/news/ai-is-destroying-the-university-and-learning-itself Choice quotes: "The result isn’t augmented intelligence but simulated learning: a paint-by-numbers approach to thought." […]

You have a bug bounty program - nice. You have a .well-known/security.txt - great! You have an eager and useless clippy "assistant" on your website, because of course you do. It's useless. But you still need a simple email address for folks to be able to reach out to you. No "log in to […]

💡 Updated guide to quickly ignore AI Slop: 🧠 github lists, e.g., Claude as a collaborator ✅ README or write-up contains stupid emoji everywhere 🚀 God this is so stupid *headdesk*

Today in "AI ruins everything": AI generated "PoC" for the React RCE CVE-2025-55182, wasting countless defenders' hours, now get included in the CVE references. 🤦‍♂️ At least the co-author alongside the AI has updated the README now: https://github.com/ejpir/CVE-2025-55182-poc Looks like the […]

"We did a number of refactors [...] This also fixes a critical security vulnerability." 👀 CVE-2025-55182, an RCE in React Server Components just landed: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components Enjoy your patching, and make sure to check […]

RE: https://mstdn.social/@jschauma/115634054717097772 I don’t know, man. Y’all are a lot more optimistic than me. I don’t see universal IPv6 adoption on this time horizon…

RE: https://federate.social/@mattblaze/115630395903319664 Reminding military personnel that they must disobey an illegal order is simultaneously critically important and apparently futile. Commanders and top brass who _might_ be in a position to disobey an order by SecDef are being eliminated […]

The ICC should issue an arrest warrant for Hegseth, and at least start an investigation into Trump.

In about a year, Voyager 1 will reach a distance of 1 light-year from Earth: https://eyes.nasa.gov/apps/solar-system/#/sc_voyager_1/distance?time=2026-11-15T16:21:15.692+00:00&rate=0&to=earth https://science.nasa.gov/mission/voyager/where-are-voyager-1-and-voyager-2-now/#mission-status Also […]

I'm seeing people more frequently prefix comments in discussions with some version of "I asked AI, and it said...". I don't get it. It feels like "This might be complete bullshit but I'm sharing it anyway", in which case: why? And, yes, I'm likely going to judge future comments not prefixed […]

I'm unhappy with my Sonos Playbase (TV audio is out of sync, streaming radio is time delayed, can no longer access my SMB 1.0 media library) and looking for recommendations. Ideally, I'd want: - TV sound is actually in sync - actual FM radio - clock display - airplay capability - SMB 1.0 media […]

Amazon S3 now supports TLS 1.3 hybrid post-quantum key exchange: https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryptionInTransit.PQ-TLS.html Note again that Amazon supports both X25519MLKEM768 _and_ SecP256r1MLKEM768. #tls #PQC

Good news!: Gandi now supports HTTPS DNS records! 🎉 Bad news: Adding HTTPS DNS records breaks your auths. 🤦‍♂️

Does Safari on macOS use Private Relay for DNS lookups even if "Hide IP Address from trackers" is _not_ enabled in Safari prefs? Despite `sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder` and "Empty Caches", I can't get Safari to make a DNS lookup to my resolver for a domain I've […]

🎉 56 years ago today, "the first permanent ARPANET link was established between the IMP at UCLA and the IMP at the Stanford Research Institute. By 12/5 1969, the initial four-node network was established." https://en.wikipedia.org/wiki/ARPANET From there, it's […] [Original post on mstdn.social]

France, man. Really messing up your geography understanding, what with it's land border to the Netherlands located in the Carribean (Saint Martin / Sint Maarten), forming the EU's largest land border to Brazil via French Guiana, and letting the EU neighbor Canada (Saint Pierre and Miquelon) […]

Cloudflare outage root cause: not checking the return value of a function that may fail. In C, that would be calling something on NULL and segfaulting; in Rust it's calling a function on an Err val and panic. thread fl2_worker_thread panicked: called Result […] [Original post on mstdn.social]

One assignment I give students in my "Advanced Programming in the UNIX Environment" class includes reading data from a pipe into a fixed-size buffer. A clever approach for that is ``` total = 0; while ((n = read(fd, buf + total, len - total)) > 0) total += n; ``` This is a common construct […]

TIL: "OrpheanBeholderScryDoubt" This string is used by the bcrypt password hashing function to produce a deterministic hash from the (expensive key setup) Blowfish P-array and S-boxes. Supposedly, it was picked to match the "_O_pen _B_S_D_" initials; the earliest implementation used the string […]

I just wasted a good 20 minutes trying to remember and find that stupid Scumbag Steve meme pic, but I think you'll agree that was time well spent. #shitposting

"Always comment your code!" ... 🤦

Working in tech, I'm profoundly torn based on my belief that the internet is one of the fundamentally best things we've accomplished, full of promise and possibility, and at the same time knowing that we've completely fucked it up in how we're using it and the effect technology has on us and our […]

In the previous post above, I looked at the arrangement of thread stacks in virtual memory. That leads to the question: can one thread reach over into the other thread and monkey with its local variables? And how is that different from a forked process, which has the same memory layout as its […]

R: If you don't let us take away people's health insurance, we'll literally starve them. D: That seems bad. R: Also, we'll fire people and not have backpay for those we keep. D: As a compromise, can you pinky promise not to fire more people, and then we'll let you take away people's health […]

I'm grading student papers, and I can report that one effect of generative AI is that I now suspect everything my students submit. And that's not a good place to be in while grading. #bangenaifromuniversities

Not every time a computer is involved in an algorithmic decision is that necessarily “AI”. That’s all. Thanks for coming to my TED talk.

Why, yes, nuking >470 lines of code and replacing them with a comment can make passing tests easier. AI generated pull requests FTW […]

You know, if you consider containers a security boundary, then you've pretty much already lost. I mean, they're useful and all, but maybe think of them more like crowd line dividers or barriers, not like concrete walls.

If you're using `runc` for your containers: congrats! You get to patch three new vulnerabilities that could allow for a full container break-out: CVE-2025-31133: symlink attack on bind-mount of /dev/null for masked paths […]

Oh,fuck yeah! A day starting with the grim reaper coming for an old, evil fuck and ending with young democrats being elected! I like it, gimme more of both!

Happy "Even if you sell your soul to the devil, he will eventually come and collect it." Day to all who celebrate! 🎉 There's hope yet!