Searching We Love Privacy Club

Twts matching #blog
Sort by: Newest, Oldest, Most Relevant
slashdot
feeds.twtxt.net
 (8w ago)

Ruby Fights Supply-Chain Attacks With Filter Offering ‘Cooldown’ Before Installing New Packages
Most supply-chain attacks using Ruby’s package hosting site “exploit a narrow window,” according to a new blog post form Ruby core maintainer Hiroshi Shibata.

So its packaging-managing Bundler tool now offers a filter that blocks new version until it’s been public “for at least N … ⌘ Read more

⤋ Read More
movq
www.uninformativ.de
 (8w ago)
↳ In-reply-to » @lyse By the way, which site generator are you using? I kind of miss having code blocks with syntax highlighting and that generic yellow highlighting thing is pretty cool, too.

@lyse@lyse.isobeef.org Ah, I almost thought so (that you wrote it by hand), but then I looked at the source code and saw the TOC and I was like: “Naah, probably not. I would be way too lazy to do that manually.” 😅 And indeed … ha.

Oh god, yeah, that’s a lot of <span>. 🤔 Can’t really avoid that, I guess, especially if you want to do syntax highlighting of code blocks.

You wrote your own site generator, didn’t you?

In parts. I write everything in Markdown (it’s online, even: https://movq.de/blog/postings/2026-05-29/0/POSTING-en.md), plus a few Vim shortcuts (to generate thumbnails, for example), and then python-markdown renders it: https://pypi.org/project/Markdown/ This process is wrapped in a shell script, like “re-render every page if the .md file is newer than the .html file” and that’s mostly it. And the Atom feed generator is completely custom. 🤔

⤋ Read More
lwn-net
feeds.twtxt.net
 (9w ago)

One step forward, two steps back on CA age bill (EFF Deeplinks Blog)
The EFF has a blog\
post looking at a new bill in California that would exempt
open-source operating systems from the Digital Age Assurance Act
passed last year, but has problems of its own:

While the open source exemption, if passed, would improve the law, the
remaining amendments proposed by AB 1856 would require all web
browsers and w … ⌘ Read more

⤋ Read More
slashdot
feeds.twtxt.net
 (9w ago)

Fedora Linux 43 Exposes 20-Year-Old Microsoft Outlook Security Failure
BrianFagioli writes: Fedora Linux 43 users upgrading to the latest Dovecot mail server discovered something rather unsettling: some older Microsoft Outlook configurations may have been silently ignoring SSL/TLS settings for POP3 email connections for years. According to a Fedora community blog post, affected Outlook clients reportedl … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (9w ago)

Tridgell: rsync and outrage
Andrew Tridgell has written a blog\
post responding to complaints that he has begun using LLM tools in
his work maintaining rsync:

Like many developers of open source packages I’ve been hit by a
flood of security reports lately in my role as the rsync
maintainer. Many of those reports are AI generated (not all though,
there are some notable ones with very careful and high quality manual
analysis).

As t … ⌘ Read more

⤋ Read More
slashdot
feeds.twtxt.net
 (9w ago)

Adafruit Pauses Blog After Demand Letter From Flux.ai’s Lawyers
Longtime Slashdot reader Matt_Bennett shares a blog post from Adafruit: Adafruit received at 10:38 p.m. ET on May 22, 2026 a letter from former FBI chief of staff, Jonathan F. Lenzner, and partner at Fenwick & West LLP, counsel for Flux, demanding, among other things, that Adafruit refrain from publishing an article addressing what the letter charact … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (9w ago)

Vim Classic 8.3 released
Version\
8.3 of Vim Classic has been
released. This is the first release of the Vim fork since the project
was announced
in March.

This release is based on Vim 8.2.0148, with a number of bug fixes
and patches conservatively backported from future versions of Vim
upstream. We elected to clean up this version of Vim, prepare it for a
release, and imagine an alternate history wh … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (9w ago)

Ombredanne: An AI agent ported our codebase from Python to Rust
Over on the AboutCode blog, lead
maintainer Philippe Ombredanne writes
about an agentic LLM system porting the ScanCode\
Toolkit to Rust. In the process, the LLM (or the people behind it)
infringed the ScanCode trademark, stripped copyright and license notices,
“and started an outreach campaign, without ev … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (9w ago)

Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
StepSecurity is reporting
that a number of npm packages in the @redhat-cloud-services
scope include malware that runs automatically on every npm install:

The payload is a multi-stage credential harvester that sweeps
GitHub Actions secrets along with AWS, GCP, Azure, Kubernetes,
HashiCorp Vault, npm, and CircleCI tokens, and it is purpose-built to
evade det … ⌘ Read more

⤋ Read More