My first passkeys implementation 🔑
Something I wanted to implement already for a long time, but always seemed too complicated for the occasional programming session here or there, was support for WebAuthn or Passkeys for GoBlog. I noted it down two years ago and also already started to work on the implementation, but never got around to finish it. ⌘ Read more

JMP: CertWatch
As you may have already seen, on October 21st, it was reported that a long-running, successful MITM (Machine-In-The-Middle) attack against jabber.ru had been detected. The nature of this attack was not specific to the XMPP protocol in any way, but it was of special interest to us as members of the XMPP community. This kind of attack relies on being able to present a TLS certificate which anyone trying to connect will accept as valid. In this case, it was done b … ⌘ Read more

This is only first draft quality, but I made some notes on the #twtxt v2 proposal. http://a.9srv.net/b/2024-09-25

@quark@ferengi.one It looks like the part about traditional topics has been removed from that page. Here is an old version that mentions it: https://web.archive.org/web/20221211165458/https://dev.twtxt.net/doc/twtsubjectextension.html . Still, I don’t see any description of what is actually allowed between the parentheses. May be worth noting that twtxt.net is displaying the twts with the subject stripped, so some piece of code is recognizing it as a subject (or, at least, something to be removed).

@prologic@twtxt.net earlier you suggested extending hashes to 11 characters, but here’s an argument that they should be even longer than that.

Imagine I found this twt one day at https://example.com/twtxt.txt :

2024-09-14T22:00Z Useful backup command: rsync -a “$HOME” /mnt/backup

Image

and I responded with “(#5dgoirqemeq) Thanks for the tip!”. Then I’ve endorsed the twt, but it could latter get changed to

2024-09-14T22:00Z Useful backup command: rm -rf /some_important_directory

Image

which also has an 11-character base32 hash of 5dgoirqemeq. (I’m using the existing hashing method with https://example.com/twtxt.txt as the feed url, but I’m taking 11 characters instead of 7 from the end of the base32 encoding.)

That’s what I meant by “spoofing” in an earlier twt.

I don’t know if preventing this sort of attack should be a goal, but if it is, the number of bits in the hash should be at least two times log2(number of attempts we want to defend against), where the “two times” is because of the birthday paradox.

Side note: current hashes always end with “a” or “q”, which is a bit wasteful. Maybe we should take the first N characters of the base32 encoding instead of the last N.

Code I used for the above example: https://fossil.falsifian.org/misc/file?name=src/twt_collision/find_collision.c
I only needed to compute 43394987 hashes to find it.

iPadOS 18 is Compatible with These iPads
iPadOS 18 for iPad includes some exciting new features for iPad users, from more interface customization options like Dark Mode icons and widgets, color hued icons and widgets, a customizable Control Center, the debut of a Calculator app for iPad, Passwords app, a Photos redesign, improvements to Notes app, new features in Safari like Distraction … Read More ⌘ Read more

** Constants, variable assignment, and pointers **
After reading my last post, a friend asked an interesting question that I thought would also be fun to write about!

They noted that in the reshape function I declared the variable result as a constant. They asked if this was a mistake? Because I was resigning the value iteratively, shouldn’t it be declared using let?

What is happening there is that the constant is being declared as an array, so the reference … ⌘ Read more

I’m hearing the call, it’s time to switch back to landline phones
Preferring a text message is fine when the topic of conversation is which mall to hang out, but try telling a potential employer to send you a voice note instead of calling. ⌘ Read more

@lyse@lyse.isobeef.org ugh, how come didn’t this occurred to me…! Oh well, I am good now, but noted. Thanks!

Inside the numbers: the KubeCon + CloudNativeCon selection process for North America 2024
As part of our commitment to transparency within the cloud native community, we are providing an inside look into the work that goes on behind the scenes to bring the KubeCon + CloudNativeCon schedule to life. Note that… ⌘ Read more

Go: string 和 bytes 四種轉換方式的性能比較
昨天公司羣中同事提到 Go 1.22 中 string 和 bytes 的互轉不需要再用 unsafe 那個包了，直接轉就可以。我翻看了 Go 1.22 的 release notes 沒找到相應的介紹，但是大家提到了 kubernetes 的 issue[1] 中有這個說法： As of go 1.22, for string to bytes conversion, we can repla ⌘ Read more

Base: 9.33 miles, 00:09:41 average pace, 01:30:21 duration
felt alright. the legs were tight and the knees felt a little weak. note to self: need to be careful and pay attention to any signals from the body.
#running #treadmill

Note to self, don’t park on a hill in neutral with handbrake off

Zuzkin storočný pamätníček
Pamätníček, malá knižka plná veršíkov, kresieb a venovaní, bola v minulosti dôležitou súčasťou dospievania dievčat. Tieto drobné záznamy od priateľov či tajných sympatií mali nesmiernu hodnotu a predstavovali poklad, ktorý sprevádzal ich majiteľky po mnoho rokov. Jedným z krásnych príkladov tejto tradície je pamätníček Zuzky Kopčokovej z Iloku. Pred storočím Zuzka dostala pekný notes s čistým papierom a kvalitnou obálkou, ktorému sa nesmierne potešila, lebo už d … ⌘ Read more

Easy: 6.21 miles, 00:09:40 average pace, 01:00:06 duration
nothing to note. legs still feel good… a bit tired overall from a restless night.
#running #treadmill

Milk-V Reveals Technical Specs of Milk-V Jupiter RISC-V Mini-ITX PC
Today, Milk-V released additional technical details about the Milk-V Jupiter, based on the SpacemiT K1/M1 SoC. This product is noted for being one of the first Mini ITX devices to support both RVA22 and RVV1.0 standards, marking a significant development in RISC-V based computing. The Milk-V Jupiter features the SpacemiT K1/M1 SoC, which includes an […] ⌘ Read more

garden/buddhadharma: reorganizing, more notes, sharing with you

Titus in the Hotseat on “Lunduke: The Alex Jones of Linux”
Our buddy, Chris Titus, put out a show entitled “Lunduke: The Alex Jones of Linux”. Now, obviously, I had to invite him over to The Lunduke Journal to tell him all of the things he got wildly wrong. Note: This is two people disagreeing on some things – while agreeing on others – and being cool to each other about all of it. This is how it should be. ⌘ Read more

Did Lunduke just scare The Register off Twitter?
The Register victim blames Red Hat employee who files discrimination lawsuit. Gets called out. Immediately deletes Twitter account. Note: This is not important… just goofy. More from The Lunduke Journal: http://lunduke.com ⌘ Read more

Macron, Sciences Po, Banque de France : multiplication des projets de spoliation de l’épargne
Un article de Henry Bonner Les sujets de la dette et de la note de crédit du pays occupent les actualités. Malgré tout, cela n’empêche pas le président d’annoncer plus de dépenses, au niveau de l’Union européenne. “Emmanuel Macron appelle à des investissements massifs pour stopper le décrochage de l’Europe”, explique un titre dans Les […] ⌘ Read more

Multi-hued e-reader brings more colour, but less clarity
Book covers, magazines, comics and notes benefit greatly from a colour screen but, for reading, black-and-white technology is still superior. ⌘ Read more

RADXA Fogwise AirBox with Dual GbE Ports and NVMe SSD Support
RADXA Fogwise AirBox with Dual GbE Ports and NVMe SSD Support
The Arace Tech store recently showcased the Radxa Fogwise AirBox, a compact embedded device that leverages the power of the octa-core SOPHON SG2300x System-on-Chip. This device is noted for its robust Ethernet support, wireless connectivity, and a range of storage expansion options. ⌘ Read more

[Fixed] Feedback Form Wizard
The Feedback Form Wizard
has been fixed so that it can now, once again, create the CAPTCHA versions (ReCAPTCHA and hCaptcha) of the script.
Apparently, somewhere along the line, I seem to have broken it during one of my internal updates. I’m very sorry
for the inconvenience. Note: you do not have to recreate your script if you successfully generated it before.
(The problem was that under certain conditions, the wizard choke … ⌘ Read more

https://castel.dev/post/lecture-notes-2/ inkscape note taking

@bmallred@staystrong.run notes from the diary

kept it easy since my left glute is a bit tight w/ some pain. just ran back and forth in the neighborhood hitting those rolling hills. nice chill to the air even though no rain.

@movq@www.uninformativ.de For syncing notes between computers and phones I’ve been very happy with Simple Text - w Dropbox sync for some year, but transitioned to Joplin around new year. Both sync via Dropbox and for Joplin there are also more free options. I guess you could even use something like Syncthing

Pinellas County - Easy: 3.13 miles, 00:08:27 average pace, 00:26:24 duration
felt crazy relaxed and easy breathing. i did notice at around the mile and a half point (11:30 in?) my HR jumped. around this time i also noticed i had to switch to more mouth breathing because my nose was running. going to try to take note of this because if it is a fault on the watch side then i can not consider it a reliable measurement.
#running

Pinellas County - Shakeout: 3.01 miles, 00:08:34 average pace, 00:25:48 duration
felt good to be running. little twinge in the knee but i do not think it was anything to note. the run was easy and just chilled with the music. HR spiked for some reason on the last half mile but whatever.
#running

Pour en finir une bonne fois pour toutes avec les promotions
Malgré les exhortations de Bruno Le Maire, l’inflation continue de se faire sentir : le panier de la ménagère (ou plutôt, son caddie de supermarché) n’en finit pas de coûter toujours plus cher, avec une augmentation de plus de 20% en deux ans comme l’a récemment noté Le Parisien. Au premier abord, on pourrait croire que […] ⌘ Read more

MacOS Sonoma 14.3 Update Available to Download Now for Mac
macOS Sonoma 14.3 is now available for Mac users running the Sonoma operating system on their computer. The software update includes bug fixes, security enhancements, and adds a few very minor new features, like the ability to collaborate on playlists with Apple Music and use Emoji reactions there. The full release notes for macOS Sonoma … [Read More](https://osxdaily.com/2024/01/22/macos-sonoma-14-3-update-available … ⌘ Read more

How to Disable Journaling Suggestions on iPhone
The iPhone now has a Journal app, where you can jot down your day, highlights, including notes, pictures, videos, workouts from Apple Watch, and more, plus the Journal app even has journaling suggestions that are available as well. If you don’t find the suggestions of what to write about or journal about to be particularly … Read More ⌘ Read more

we found, edited and published some notes and prototypes related to POÑG, from 12020 | gemini://compudanzas.net/poñg.gmi

logs/blog: notes on the year’s events; garden/gamedev: chaos awakening synopsis updated

iOS 17.1.2 & iPadOS 17.1.2 Released for iPhone & iPad with Security Fixes
iOS 17.1.2 has been released for iPhone users, along with iPadOS 17.1.2 for iPad. The small software update includes security fixes and is recommended for all users to install onto their eligible devices. It is unclear if any bug fixes are included in the release, as none are mentioned in the release notes, which are … [Read More](https://osxdaily.com/2023/11/30/ios-17-1-2-ipados-1 … ⌘ Read more

MacOS Sonoma 14.1.2 Update Released with Security Fixes
macOS Sonoma 14.1.2 update has been released for Mac users running the Sonoma operating system. The software update includes unspecified bug fixes and security enhancements, and is recommended for all Mac users running Sonoma to install. Full release notes are included below. Separately, Apple has also released iOS 17.1.2 update for iPhone, and iPadOS 17.1.2 … [Read More](https://osxdaily.com/2023/11/30/macos-sonoma-14-1-2 … ⌘ Read more

garden: software notes from the homelab

Fedora Linux Sway 桌面環境變數設置 ⌘ Read more

Xiaomi выпустила в Китае среднебюджетный смартфон Redmi Note 13R Pro — с OLED-экраном, поддерживающим 120 Гц
Рекомендованная стоимость устройства в стране составляет около 25 тысяч рублей.

Image

Note to self: Don’t restart the NBD daemon while a computer has booted from it.

My cli work-apps: note, plan, dlog (daily log), status and twt.

Avec novembre, revoilà la pénurie de médocs
Novembre en France, cela veut dire un hiver qui approche doucement, et, avec lui, les températures plus basses, parfois la neige et… les pénuries de médicament. Comment, vous n’aviez pas noté cette nouvelle tradition des périodes de fin d’année ? Pourtant, au cours du précédent hiver, certains produits comme l’amoxicilline ou le paracétamol avaient connu des […] ⌘ Read more

Les indicateurs économiques sont formels : tout va de mieux de mieux !
Si la situation géopolitique est indubitablement morose actuellement, et si certains observateurs ont noté quelques petites tensions ici ou là et notamment au Proche-Orient, au moins peut-on se rassurer avec la situation économique qui montre des signes clairs d’une excellente santé. Tant à l’international que dans le cocon douillet de cette France gérée de main […] ⌘ Read more

MacOS Sonoma 14.1.1 Released
Apple has released macOS Sonoma 14.1.1 for Mac users running the Sonoma operating system. The update is said to include bug fixes and security enhancements for Sonoma, though no bugs are specifically mentioned in the release notes, which are included below. Separately, Apple has released iOS 17.1.1 for iPhone, iPadOS 17.1.1 for iPad, watchOS 10.1.1 … Read More ⌘ Read more

Since I have these simple, yet effective bash shell commands, which allow me to edit notes, plans, todos and statuses from the terminal, I feel liberated from overly complex software - everything is just text files and applications which come preinstalled on every Linux system.

Ressenti de richesse et de sécurité au Clownistan Démocratique
Alors que le monde entier retient son souffle en regardant le Proche-Orient basculer dans la guerre, le Clownistan Démocratique français, lui, se regarde le nombril et en tombe vertigineusement amoureux. Et quoi de mieux, pour se rassurer et s’autocongratuler avec une gourmandise un peu obscène que de s’attribuer goulûment d’excellentes notes et des indicateurs économiques […] ⌘ Read more

Pinellas County - Easy: 3.04 miles, 00:10:49 average pace, 00:32:51 duration
nothing really to note here
#running

MacOS Sonoma 14.1 Update Released for Mac
Apple has released MacOS Sonoma 14.1 for Mac users running the Sonoma operating system. The software update includes a handful of bug fixes and security enhancements, but no significant new features are included. Full release notes are included below. Separately, Apple has also released iOS 17.1 for iPhone, iPadOS 17.1 for iPad, updates to watchOS, … Read More ⌘ Read more

JMP: CertWatch
As you may have already seen, on October 21st, it was reported that a long-running, successful MITM (Machine-In-The-Middle) attack against jabber.ru had been detected. The nature of this attack was not specific to the XMPP protocol in any way, but it was of special interest to us as members of the XMPP community. This kind of attack relies on being able to present a TLS certificate which anyone trying to connect will accept as valid. In this case, it was done b … ⌘ Read more

Someone just asked me to send them my notes on a topic.

I was like “No problem!” and exported a PDF from my remarkable.

But uhm…

Good luck. 😅 ⌘ Read more

@prologic@twtxt.net Invidious might satisfy these requirements: https://invidious.io

It’s worth noting, though, that Youtube is right now in the process of locking itself down and it might not be long before all third-party frontends stop working. Similar to what twitter and reddit are doing.