Searching We.Love.Privacy.Club

Twts matching #updates
Sort by: Newest, Oldest, Most Relevant
abucci
anthony.buc.ci
 (1y ago)
↳ In-reply-to » Hack of the day: running watch -n 60 rm -rf /tmp/yarn-avatar-* in a tmux because all of a sudden, without warning, yarnd started throwing hundreds of gigabytes of files with names like yarn-avatar-62582554 into /tmp, which filled up the entire disk and started crashing other services.

@prologic@twtxt.net Aha, got it. Thanks for looking into it. I’m updating now and we’ll see if that stops it.

⤋ Read More
github_blog
feeds.twtxt.net
 (1y ago)

A policy proposal on our approach to deepfake tools and responsible AI
We’re asking for feedback on a proposed Acceptable Use Policy update to address the use of synthetic and manipulated media tools for non-consensual intimate imagery and disinformation while protecting valuable research.

The post [A policy proposal on our approach to deepfake tools and responsible AI](https://github.blog/2024-04-18-a-policy-proposal-on-our-approach-to-deepfake-tools-and-responsib … ⌘ Read more

⤋ Read More
xuu
txt.sour.is
 (1y ago)

@lyse@lyse.isobeef.org its a hierarchy key value format. I designed it for the network peering tools i use.. I can grant access to different parts of the tree to other users.. kinda like directory permissions. a basic example of the format is:

@namespace
# multi
# line
# comment
root :value

# example space comment
@namespace.name space-tag 

# attribute comments
attribute attr-tag  :value for attribute

# attribute with multiple 
# lines of values
foo :bar
      :bin
      :baz

repeated :value1
repeated :value2

each @ starts the definition of a namespace kinda like [name] in ini format. It can have comments that show up before. then each attribute is key :value and can have their own # comment lines.
Values can be multi line.. and also repeated..

the namespaces and values can also have little meta data tags added to them.

the service can define webhooks/mqtt topics to be notified when the configs are updated. That way it can deploy the changes out when they are updated.

⤋ Read More
github_blog
feeds.twtxt.net
 (1y ago)

Get started with v4 of GitHub Actions Artifacts
We listened to your feedback and released new versions (v4) of actions/upload-artifact and actions/download-artifact. While this version of the actions to upload and download artifacts includes up to 10x performance improvements and several new features, there are also key differences from previous versions that may require updates to your workflows.

The post [Get started with v4 of GitHub Actions Artifacts](https://github.blog/2024-02-12-g … ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (1y ago)

Release Radar · January 2024 Edition
The new year has kicked off, and developers are hard at work. We hope all our open source community members had a lovely holiday break and, we’re looking forward to seeing what you ship this year. 2024 is already off to a great start with open source projects releasing major updates. There’s everything here from […]

The post Release Radar · January 2024 Edition appeared first on The GitHub Blog. ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Release Radar · Hacktoberfest 2023 Edition
As Hacktoberfest comes to a close, you still have a day or so left to complete and submit your pull requests. If you’re struggling to think of projects to contribute to, our picks below might help you. This edition of the Release Radar covers a few projects that shipped major version updates this August and […]

The post Release Radar · Hacktoberfest 2023 Edition appeared first on [The GitHub Blog](https://github.bl … ⌘ Read more

⤋ Read More
abucci
anthony.buc.ci
 (2y ago)
↳ In-reply-to » (#7dxtvnq) @adi @prologic It's worth bearing in mind that

@adi@twtxt.net I think it is, and one benefit they have is that you can add third-party repositories to the F-Droid app as you discover them. So, for instance, if you know of a developer who pushes builds to an F-Droid compatible repository, you can add that to your F-Droid app and start tracking updates like you would for any other app in there. Can’t do that with Google Play!

F-Droid tends to focus on open source applications that can be built in a reproducible way, which limits the inventory (though of course tends to mean the apps are safer and don’t spy on you). There are non-free apps in there as well but they come with warnings so you’re informed about what you might be sacrificing by using them.

That said if you have a favorite app you get through Google Play, there’s a decent chance it won’t be in F-Droid. Many “big corporate” apps aren’t, and vendor-specific apps tend not to be either. But for most of the major functions you might want, like email clients, calendar apps, weather apps, etc etc, there are very good substitutes now in F-Droid. You’re definitely making a trade-off though.

What I did was go through the apps I had installed on my last phone, found as many substitutes in F-Droid as I could, started using those instead to see how they worked, and bit by bit replaced as much as I could from Google Play with a comparable app from F-Droid. I still have a few apps (mostly vendor-specific things that don’t have substitutes) that come from Google Play but I’m aiming to be rid of those before I need to replace this phone.

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Release Radar · July 2023 Edition
After the last Release Radar, I promised the next one wouldn’t be far away, so here it is. This is the low down on some of the best open source projects that shipped major version updates in July. There’s lots of cool stuff from natural language processing, to APIs, money, and SDKs. I won’t spoil […]

The post Release Radar · July 2023 Edition appeared first on The GitHub Blog. ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Smarter, more efficient coding: GitHub Copilot goes beyond Codex with improved AI model
We’re thrilled to announce two major updates to GitHub Copilot Code Complete’s AI capabilities that will help developers work even more efficiently and effectively. ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform
This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation. Both vulnerabilities were addressed by the Decidim team with corresponding update releases for the supported versions in May 2023. ⌘ Read more

⤋ Read More
xuu
txt.sour.is
 (2y ago)
↳ In-reply-to » (#khu32eq) @xuu "yet"? It's supported ipv6 for like 6 years now.

My home ISP has had a few prefixes allocated. They haven’t rolled of out yet because their custom CRM system needs to be updated to be able to allocate/bill for it. Along other reasons they gave when I asked last.

⤋ Read More
marcos-marado-atmind_booster
feeds.twtxt.net
 (2y ago)

“give access to repair and maintenance information and spare parts to professional repairers and end-users for at least 7 years after retiring a product […] Software updates will also have to be made available for at least 5 years after retiring a product from the market”
“give access to repair and maintenance information and spare parts to professional repairers and end-users for at least 7 years after retiring a product […] Software updates will also have to be made available for at least 5 years afte … ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

GitHub’s revamped VIP Bug Bounty Program
GitHub’s VIP Bug Bounty Program has been updated to include a clear and accessible criteria for receiving an invitation to the program and more. Learn more about the program and how you can become a Hacktocat, and join our community of researchers who are contributing to GitHub’s security with fun perks and access to staff and beta features! ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Unlocking inclusive design: how Primer’s color system is making GitHub.com more inclusive
How Primer’s updated light and dark theme color contrast strategy resolved hundreds of color-contrast-related accessibility issues over one thousand use cases. ⌘ Read more

⤋ Read More
marcos-marado-atmind_booster
feeds.twtxt.net
 (2y ago)

**Speaking of supervillains…

I was expecting the twitter game bots to stop updating after meeting the new policy threshold or something… I did not expect them to be banned.

Well, finally I have one less reason to peek on twitter so often.**
Speaking of supervillains…

I was expecting the twitter game bots to stop updating after meeting the new policy threshold or something… I did not expect them to be banned.

Well, finally I have one less reason to peek on twitter so often.

[nitter.net/EmojiPrincess … ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

Pwning Pixel 6 with a leftover patch
In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes. ⌘ Read more

⤋ Read More
github_blog
feeds.twtxt.net
 (2y ago)

GitHub Enterprise Server 3.8 is now generally available
With updates to GitHub Actions, repositories, and GitHub Advanced Security, this new version of GitHub Enterprise Server is focused on bringing the best developer experience to companies. ⌘ Read more

⤋ Read More
xuu
txt.sour.is
 (2y ago)

@prologic@twtxt.net I have updated to kinda follow this. It now redirects to other webfingers if the resource has a different hostname. I’m still not sure what I should put multiple services with the same domain name. Like if they were to have conflicting properties.

⤋ Read More
xuu
txt.sour.is
 (2y ago)
↳ In-reply-to » I made a thing. Its a multi password type checker. Using the PHC string format we can identify a password hashing format from the prefix $name$ and then dispatch the hashing or checking to its specific format.

Circling back to the IsPreferred method. A hasher can define its own IsPreferred method that will be called to check if the current hash meets the complexity requirements. This is good for updating the password hashes to be more secure over time.

func (p *Passwd) IsPreferred(hash string) bool {
	_, algo := p.getAlgo(hash)
	if algo != nil && algo == p.d {

		// if the algorithm defines its own check for preference.
		if ck, ok := algo.(interface{ IsPreferred(string) bool }); ok {
			return ck.IsPreferred(hash)
		}

		return true
	}
	return false
}

https://github.com/sour-is/go-passwd/blob/main/passwd.go#L62-L74

example: https://github.com/sour-is/go-passwd/blob/main/pkg/argon2/argon2.go#L104-L133

⤋ Read More
xuu
txt.sour.is
 (2y ago)
↳ In-reply-to » I made a thing. Its a multi password type checker. Using the PHC string format we can identify a password hashing format from the prefix $name$ and then dispatch the hashing or checking to its specific format.

Here is an example of usage:

func Example() {
	pass := "my_pass"
	hash := "my_pass"

	pwd := passwd.New(
		&unix.MD5{}, // first is preferred type.
		&plainPasswd{},
	)

	_, err := pwd.Passwd(pass, hash)
	if err != nil {
		fmt.Println("fail: ", err)
	}

	// Check if we want to update.
	if !pwd.IsPreferred(hash) {
		newHash, err := pwd.Passwd(pass, "")
		if err != nil {
			fmt.Println("fail: ", err)
		}

		fmt.Println("new hash:", newHash)
	}

	// Output:
	//  new hash: $1$81ed91e1131a3a5a50d8a68e8ef85fa0
}

This shows how one would set a preferred hashing type and if the current version of ones password is not the preferred type updates it to enhance the security of the hashed password when someone logs in.

https://github.com/sour-is/go-passwd/blob/main/passwd_test.go#L33-L59

⤋ Read More
github_blog
feeds.twtxt.net
 (3y ago)

To infinity and beyond: enabling the future of GitHub’s REST API with API versioning
We’re introducing calendar-based versioning for our REST API, so we can keep evolving our API, whilst still giving integrators a smooth migration path and plenty of time to update their integrations. ⌘ Read more

⤋ Read More