Self-Hosted Human and Machine Identities in Keycloak 26.4
Keycloak is a leading open source solution in the cloud-native ecosystem for Identity and Access Management, a key component of accessing applications and their data. With the release of Keycloak 26.4, we’ve added features for both… ⌘ Read more

Digital map lets you explore the Roman Empire’s vast road network
Archaeologists have compiled the most detailed map yet of roads throughout the Roman Empire in AD 150, totalling almost 300,000 kilometres in length ⌘ Read more

FreeDesktop.org Adopts The Filesystem Hierarchy Standard
Adding to the array of software projects and specifications under the FreeDesktop.org umbrella, the Filesystem Hierarchy Standard “FHS” has been adopted by these desktop-focused open-source developers… ⌘ Read more

The Microsoft SoftCard for the Apple II: getting two processors to share the same memory
We talked about the Z80 SoftCard, Microsoft’s first hardware product, back in 2023, but thanks to Raymond Chen and Nicole Branagan, we’ve got some more insights. The Microsoft Z-80 SoftCard was a plug-in expansion card for the Apple II that added the ability to run CP/M software. According to Wikipedia, it was Microsoft’s first hardware product and in 1980 … ⌘ Read more

iLabs Challenger+ RP2040 LoRa Mk II Adds Upgraded Power Architecture and BConnect Expansion
iLabs has released the Challenger+ RP2040 LoRa Mk II, an upgraded Feather-format microcontroller board that combines the Raspberry Pi RP2040 with an RFM95W LoRa radio module. The new revision refines the original design with improved noise isolation, enhanced power distribution, and added modular connectivity options. The board features a redesigned power supply … ⌘ Read more

Debian Adding “Hard Dependency” on Rust, May Abandon Some PC Architectures
APT, Debian’s package manager also used by Ubuntu, to have a hard Rust requirement. ⌘ Read more

It is always awesome to have a few minutes to converse, at least once I month. I will not miss one, adding it to my calendar. I mean, if we were neighbours you (or wife) would probably have to kick me out of your house, so it’s good I am really far, and a once a month call suffices. 🤣

SUSE Bets The Farm on AI-Powered Linux Administration
SUSE, in a race with Red Hat to add Al features nobody wants, has added “Al-powered administration” to Linux servers. ⌘ Read more

I had a looksie (just to be sure) at the database, and they were thankfully legit test events. But this did spark/trigger me to make sure I have some form of anti-spam measures in place. So I added some per-event / per-rsvp rate-limiting and honeypot(s).

Fevela.me – A newsreader-like client for the Nostr social network
I created Fevela, a fork of the great Jumble, because I wanted a Nostr social client that would give me back full control of my attention and time. So I designed an interface similar to that of old good newsreaders, which for me is perfect to encourage exploration of interesting content rather than doomscrolling. I then added some ad hoc filters that can help reduce noise and improve the signal.

Unlike traditional social media that’s designed to maximize your time on t … ⌘ Read more

Cool. I think I’ve improved this abit. Update going out shortly… Also added optional support for displaying gravatar(s) if you supply your email address (optional of course).

Adding Customizable Frame Contrast to KDE Plasma
Comments ⌘ Read more

Prehistoric crayons provide clues to how Neanderthals created art
Ochre artefacts found in Crimea show signs of having been used for drawing, adding to evidence that Neanderthals used pigments in symbolic ways ⌘ Read more

Samsung’s $2000 smart fridges are getting ads
Comments ⌘ Read more

ProcessOne: 🚀 ejabberd 25.10

Image

Release Highlights:

• Added more Ad-Hoc Commands from XEP-0133
  
• Updated support for XEP-0317 Hats
  

If you are upgrading from a previous version, there are no mandatory changes in SQL schemas, configuration, API commands or hooks.

Other contents:

• **[New option archive_muc_as_mucsub in mod_mam]( … ⌘ Read more

B.C. to launch anti-tariff ads as Ontario pauses controversial campaign ⌘ Read more

Trump punishing Canada with 10% extra tariffs for not pulling down anti-tariff ad sooner ⌘ Read more

‘They played dirty, I can play dirtier’: Trump blasts Canada, won’t meet Carney over Reagan ad ⌘ Read more

Ontario to pause Reagan tariffs ad after Trump terminated Canada trade talks ⌘ Read more

I finally took a closer look at OpenRouter today, added some credits, and used it with the Kilo Code VS Code extension to vibe code (or at least guide the LLM to code) a bit on the wedding website I’m building for next year. I used the Grok Code Fast 1 model most of the time. Furthermore, I also switched this blog’s AI plugins to use Mistral Small 3.2 for summary generation and image caption generation. ⌘ Read more

Trump says he’s terminating trade negotiations with Canada over Ontario anti-tariff ad ⌘ Read more

Trump says he’s ending trade talks with Canada over TV ad ⌘ Read more

Triad Prague, is perhaps the only mainstream “Contemporary advertising” company, who fucking AI generates “pixelart” and everyone there is either too blind, dumb, or lazy, to at the very least, align the pixels, to a grid (or even check they’re square, the same size,…anything really).

I guess they must have some remains of shame and self preservation instinct, that made them sweep these off their portfolio website and set the video ads with them, to “Private” on YouTube.
https://youtu.be/s7GZK8FGRvA
But sadly not enough shame, to stop putting these on billboards, I have to see on daily basis and making new versions of them, with different inconsistent styles, of badly AI generated “pixelart”!

I checked their website, this is their footer, with the text that always overlaps - maybe they also never heard about CSS, can’t blame them, it’s only been a thing, since 1996.

OpenBSD 7.8 released
Like clockwork, every six months, we have a new OpenBSD release. OpenBSD 7.8 adds support for the Raspberry Pi 5, tons of improvements to sleep, wake, and hibernate, the TCP stack can now run in parallel on multiple processors, and so much more. DRM has been updated to match Linux 6.12.50, and drivers for the Qualcomm Snapdragon DRM subsystem and Qualcomm DisplayPort controller were added as well. The changelog is, as always, long and detailed, so head on over for the finer details. OpenBS … ⌘ Read more

The early Unix history of chown() being restricted to root
Chris Siebenmann with another interesting look at a tiny detail of UNIX history. A few years ago I wrote about the divide in chown() about who got to give away files, where BSD and V7 were on one side, restricting it to root, while System III and System V were on the other, allowing the owner to give them away too. The answer is that the restriction was added in V6, where the V6 chown(2) manual page has the same word … ⌘ Read more

Adding distributed tracing to AI Gateway: My LFX mentorship journey
In today’s rapidly evolving AI landscape, effectively monitoring and debugging AI Gateways has become a critical challenge. This article shares my complete experience through the LFX Mentorship program, where I added OpenTelemetry distributed tracing support to… ⌘ Read more

Bible and Quran apps flagged NSFW by F-Droid
Comments ⌘ Read more

Republicans use deepfake video of Chuck Schumer in new attack ad
Comments ⌘ Read more

Microsoft Adding AI Facial Recognition, “You can only turn off 3 times a year.”
Al Notepad, Al Paint, Al Excel, Al Word, Al GitHub… ⌘ Read more

Google runs Israel’s ads: ‘There is food in Gaza’
Comments ⌘ Read more

Google changes how ads in Search are shown, and surprisingly it doesn’t make things worse
Text ads on the search results page will now be grouped with a single “Sponsored results” label. This new, larger label stays visible as people scroll, making it clear which results are sponsored — upholding our industry-leading standards for ad label prominence. We’re also adding a new “Hide sponsored results” control that allows you to collapse text ads … ⌘ Read more

Bypass 403 Response Code by Adding Creative String | IRSYADSEC

Image

HTTP 403 is a response code indicating that access to the requested resource is forbidden. This can happen due to various reasons, such as…

[Continue reading on Inf … ⌘ Read more

Adding Support for BlueSky to IndieLogin.com
Today I just launched support for BlueSky as a new authentication option in IndieLogin.com! ⌘ Read more

Welcome to our new babies Ade 🖤and Persefone 🤍 ⌘ Read more

HTB AD Track: Sauna Walkthrough

Image

Hello Everyone!! Here’s my writeup for the machine Sauna.

Continue reading on InfoSec Write-ups » ⌘ Read more

Honest Government Ad | Visit New Zealand! ⌘ Read more

Getting Hands-On with Kerbrute: Practical AD Enumeration & Attack Tactics ⌘ Read more

My open letter, to the European Commission digital markets act team:

Hello,

I am joining other developers, concerned about Googles new plan, to approve every app and effectively destroy most of the competing 3rd party stores this way. The biggest one of these alternative stores, most known for their focus on user and developer privacy, already states, this would make it impossible for them to operate: https://f-droid.org/cs/2025/09/29/google-developer-registration-decree.html
Even communities like the XDA forum, where new developers are often introduced to the world of Android development, would likely be strongly impacted, as making, publishing and installing Android apps is made less accessible.

I am not just writing on their behalf, I run a small website myself (https://thecanine.ueuo.com/), that both provides legal modifications, for some android apps - for example adding an amoled dark theme, to the most popular XMPP chat client for Android, or increasing one of Androids keyboard apps height. This all comes after Googles previous changes to the Android operating system, that prevent users from installing old apps (old to Google, can mean only a couple of months, without an update - https://developer.android.com/google/play/requirements/target-sdk and the target version gets increased every year). I rely on apps developed by a single developer, even for things like making the pixel art presented on my website and sideloading as a way to make these apps work, before developers can catch up to Google’s new requirements - if Google is allowed to slowly kill these options, us digital artists will soon lose the tools we need to create digital art.

Adding Stride Scheduling to xv6
Comments ⌘ Read more

@lyse@lyse.isobeef.org Yeah, those are my bad.

A couple of weeks ago, I added CORS support, which is the source of the OPTIONS call. What I didn’t do was store the result so it stops trying to make further attempts. I’ll get that in tomorrow.

As for the “If-Modified-Since” header, the server-based component of TwtStrm should be sending that (along with its user-agent tag and my user info). I wasn’t sure if that could be sent with CORS requests, so I’ll need to look into that a bit more.

Thanks, I appreciate the feedback!

@prologic@twtxt.net considering other alternatives we have seeing (of which I have lost track already), yes. Why don’t you guys (client makers) take a step at a time and, for now, increase the hash length to deal with the collisions. Then location-based addressing can be added… or not, you know. 😅

Raspberry Pi Updates Keyboard PC with New 500+ Model
Raspberry Pi 500+ is the newest all-in-one personal computer in the Raspberry Pi family. It combines the Raspberry Pi 5 platform with a mechanical keyboard, upgraded memory, and integrated storage. The design builds on the earlier Raspberry Pi 400 and 500 models while adding higher specifications and new input features. The Raspberry Pi 500+ is […] ⌘ Read more

@bender@twtxt.net Thanks for asking!

So, I’ve been working on 2 main twtxt-related projects.

The first is small Node / express application that serves up a twtxt file while allowing its owner to add twts to it (or edit it outright), and I’ve been testing it on my site since the night I made that post. It’s still very much an MVP, and I’ve been intermittently adding features, improving security, and streamlining the code, with an eye to release it after I get an MVP done of project #2 (the reader).

But that’s where I’ve been struggling. The idea seems simple enough - another Node / express app (this one with a Vite-powered front-end) that reads a public twtxt file, parses the “follow” list, grabs (and parses) those twtxt files, and then creates a river of twts out of the result. The pieces work fine in seclusion (and with dummy data), but I keep running into weird issues when reading real-live twtxt files, so some twts come through, while others get lost in the ether. I’ll figure it out eventually, but for now, I’ve been spending far more time than I anticipated just trying to get it to work end-to-end.

On top of it, the 2 projects wound up turning into 4 (so far), as I’ve been spinning out little libraries to use across both apps (like https://jsr.io/@itsericwoodward/fluent-dom-esm, and a forthcoming twtxt helper library).

In the end, I’m hoping to have project 1 (the editor) into beta by the end of October, and project 2 (the reader) into beta sometime after that, but we’ll see.

I hope this has satisfied your curiosity, but if you’d like to know more, please reach out!

@movq@www.uninformativ.de better than in the US. Our lasts only 10 years, and you need to go through the vision test, and, of course, pay). Recently they added a little gold star denoting “real ID” compliance, and we had to pay $10 to get the old one replaced—out of the regular renew “schedule”.

In here it is all about control, and money.

@kat@yarn.girlonthemoon.xyz, see this one, regarding “Anubis” (which I believe you use, right?): https://github.com/eternal-flame-AD/pow-buster

Adding too this. The configuration example at the repository reads:

{
	"nick": "Example",
	"description": "alice's twtxt instance!",
	"host": "twtxt.example.com",
	"admin": "alice"
}

Would it make more sense changing nick to instance_name or similar? Usually nick is reserved for users, like here, quark. Right? Also, is host the same FQDN to be used while proxying traffic to the application? That is, using the above configuration, it’s Caddy configuration would be:

twtxt.example.com {
	encode
	reverse_proxy :31212
}

Is that correct?

XMPP Interop Testing: Lots More Options
Since the last update, we’ve added a lot more options on how to run your tests. We’ve added a slew of new CI systems, this time focussing on freedom-respecting, open source CI systems for your open source projects.

Recent additions include Jenkins, Drone, Harness and Woodpecker.

This brings our total number of CI systems in which you can run XMPP interop tests up to a whopping ELEVEN, plus anywhere else you can run containers!

Whether you’re building … ⌘ Read more

Honest Government Ad | Global Sumud Flotilla ⌘ Read more

good afternoon yarnverse i have done nothing productive so far. except edit my fandom site a little bit (i added tag pages!). does that count lol

Since Google announced their intentions to heavily limit sideloading on Android, starting end of 2026, I’ve been looking for potential solutions, for this policy change, that threatens the majority of projects I maintain, in some way. Google already killed my browser project years ago, but I have no other choice, than to fight this, any way I can.

The best choice to deal with this, will probably be the Android Debug Bridge, which can be used not only to install apps unrestricted, but also to uninstall, or remove, almost any unnecessary part of the OS. Shizuku, combined with Canta Debloater, is the winning combination for now.

I’ve already removed most Google apps from my device: the annoying AI assistant, the stupid Google app adding the annoying articles, left of your homes screen, Google One, Gboard, Safety app… it’s amazing, no distracting Google slopware, like in the good old Android 2 days! And I absolutely intend to keep it this way, from now on, no new Google apps or services on my devices, unless Google can give me a good enough reason, to allow them there and whenever the app that verifies signatures, to block installing apps not approved by Google, I’ll just remove it from my device and advocate others do so too.