Linux Patched For Safe RET Interrupt Vulnerability
Made public minutes ago is the Safe RET Interrupt Vulnerability which is now patched in the newest Linux kernel Git code. The Safe RET Interrupt Vulnerability stems from improper handling within Linux’s Speculative Return Stack Overflow (SRSO) mitigation affecting AMD Zen 1 through Zen 4 processors… ⌘ Read more
The Performance Benefits To Upgrading Mesa With Intel Arc B390 On Ubuntu Linux
If you are an early customer of the Framework Laptop 13 Pro or other Intel Core Ultra Series 3 Panther Lake laptop and using Ubuntu 26.04 LTS, there can be real benefit from upgrading your Mesa stack for the newer Iris Gallium3D and ANV Vulkan drivers. In this article are some benchmarks of the Framework Laptop 13 Pro with Core Ultra X9 388H with Arc B390 Xe3 integrated graphics for looking at the performance impact of using Mesa Git on Ubuntu L … ⌘ Read more
Linux 7.3 Adding Support For MCTP-Over-USB v1.1
Within the Linux networking subsystem’s “net-next” Git branch there is now queued up support for MCTP-over-USB v1.1. This is the newest version of the standard for sending Management Component Transport Protocol (MCTP) packets over USB for tasks loike crash dumps, logging, and firmware updates… ⌘ Read more
Low stakes hot take: the most important good things in git were already in rcs. rcs→cvs→svn→git is better overall at each step, but the benefit/complexity ratio gets worse at each step and most things git gets used for would be fine with rcs+patch.
@prologic@twtxt.net Just out of curiosity, have you ever ran this on real hardware? 😃
Hm, interesting: https://git.mills.io/prologic/muos/src/branch/main/nucleus/nucleus.asm You’re clearing the VGA buffer in each mode (real mode, protected mode, long mode). Why’s that? Wouldn’t it be good enough to only do that after you’ve reached long mode? 🤔
So… my little experimental Mu (µ) OS is now ~8.7k of Mu and ~2k of Assembly, which makes this about an ~80/20 split. I’ve managed to achieve most of the goals I had set out, by ensuring a tiny Nucleus of only ~2k Assembly and all Policy, Services and Userland written entirely in Mu (a language I also deisnged and created, which still has no support for floats LOL)
Dunno if anyone will find this interesting… But some ~6 months or so ago I experimented briefly with creating a whole bootloader + kernel + userland – Basically an entire OS in the Mu programming language (which as you know I also designed and created) – 6 months later I’ve worked on it some more after spending the last week working on improvements to Mu itself, which is now able to compile itself with its own Mu implemented compiler and now have an os/arch backend called muos/amd64 that boots into a running shell, with a tiny little vfs, UNIX-like semantics, syscalls, read/write, etc. It works pretty nicely, and aside from a small Assembly “nucleus”, most of the Kernel and Userspace is written in Mu.
@dce@hashnix.club Was it ever really empty on the Codeberg side in the Git repo? 🤔
@david@daiwei.me Go down to “Releases”, there’s a link to the CHANGES: https://movq.de/git/jenny/CHANGES.html
@david@daiwei.me Is this better? 🤔 Pretty hard to keep this concise but also not miss anything. 🤔 https://movq.de/git/jenny/
Hmm …
My project pages have this “Downloads” section and I offer tarballs for each release:
https://movq.de/git/jenny/#downloads
I added this many years ago because an OpenBSD dev asked for it (but the project in question didn’t end up in their ports after all).
What are your thoughts on this? Is it necessary to offer tarballs?
I noticed that some distributions have already moved away from using tarballs and instead always clone from Git. 🤔
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
@prologic@twtxt.net Oh, yes, just for clarity: This wasn’t a “pro GitHub” argument. 😅 I won’t go back there (or to another “forge”).
I think we’re totally on the same page: Decentralized Git hosting is good, but we haven’t solved the “collaboration” part yet. Or rather: We have to modernize it. The tools are already there, but (many) people don’t want to use them and think they’re clunky.
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
How many tickets and merge requests did you get before moving to your own server?
Hm, these were probably some of the more active projects:
- https://github.com/vain/lariza/issues?q=is%3Aissue%20state%3Aclosed
- https://github.com/vain/pdfPres/issues?q=is%3Aissue%20state%3Aclosed
- https://github.com/vain/xiate/issues?q=is%3Aissue%20state%3Aclosed
So it’s not a ton of stuff and there are many “issues” I opened myself, but it’s certainly more than these days.
Haven’t used
git send-emaileven once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.
git send-email is good for sending patches to a mailing list (because then the individual patches can be discussed easily), but since those are dying out as well, it loses its appeal. If you want to send patches to a single person, just sending the link to your repo is far easier. 🤔
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
@movq@www.uninformativ.de Finally, your software is just perfect and finished by now, no need to report non-existing bugs or send in code changes. :-) How many tickets and merge requests did you get before moving to your own server?
I have to admit that I use git format-patch so rarely, I always have to pull it up from my shell history. Haven’t used git send-email even once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.
Maybe I was just very unlucky, but my experience is that you can perfectly ignore people and their work who only do it for the “fame”. It’s almost always been from inferior quality to say the least.
@prologic@twtxt.net Hmmm, I have no idea how to solve that problem. 😅 Some jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
I thought I had made that super easy, because you can just send me an email – no sign-up process, nothing. But that’s way too old-school, people don’t know how to use git format-patch (let alone git send-email) and they also don’t understand that they can just send me a link to their forked Git repo (which can be hosted anywhere). Git is super flexible and powerful, but those features are hardly ever used.
Maybe people even need some kind “reward”, or “fame”. Like those “achievements” that you can unlock on GitHub. (Something to put in their CV … ?)
Oh god 🤣 I mean I had this idea to re-invent “Git hosting”, but failed. Maybe I’ll try it again. I dunno. The thing is I hardly get “Issues” really, only when I ask nicely, of folks I know every well 🤣 So think at much “smaller scale” we need a different solution, and I think @movq@www.uninformativ.de is on to something, but not to the extend implemented, somewhere in the middle I think? 🤔
Okay, so this is live now under https://movq.de/git/. („Kurzen Prozess gemacht.“)
Okay, so, my website also includes my code / git repos, and those are made browsable by stagit. What I don’t like about this (these days) is that this includes all the diffs of my commits. In other words: All my code.
This makes it super easy for malicious crawlers to slurp up valuable data. I don’t like that.
I’m thinking about switching to this instead:
It still shows project infos and there are Atom feeds, but to get the code, you have to actually clone the repos.
🤔
(If you spot any bugs, let me know.)
@dce@hashnix.club You may also be interested in the Twtxt App and the little tiny twtd publishing backend? 🤔
So just because I enjoy this kind of thing (looking into laws and trying to understand them…):
GDPR is about roles, not ownership
There’s no property right in personal data under GDPR. The whole regime hangs on three roles:
- Data subject — the person the data is about.
- Controller (Art. 4(7)) — “the natural or legal person … which, alone or jointly with others, determines the purposes and means of the processing of personal data.”
- The rights in Arts. 16 and 17 are exercised by a data subject against a controller. They compel a third party to rectify or erase. They are not self-executing duties that a piece of software must expose.
That’s the key. In your architecture, for a user’s own posts about themselves sitting in their own feed on their own device:
- the user is the data subject, and
- the user is also the only person “determining the purposes and means” of that data.
There is no third party controller to compel. The “right to erasure” is a right to make someone else delete — and there is no someone else. It is satisfied the instant the user can change the file. A UI button is a convenience, not a legal requirement. Omitting it removes zero rights, because the data is a plain-text file the user can edit or delete by any means — editor, sed, git, their file manager. Full practical control is retained; nobody is being denied anything by anyone.
@itsericwoodward@itsericwoodward.com Wrote it up 👌 Single-user twtd API is now documented (plain JSON, one bearer token) — posting, uploads, profile, followers + WebFinger: https://git.mills.io/yarnsocial/twtd/src/branch/main/API.md 🎉 Shout if anything’s unclear for TwtKpr 🙏
twtpub.com is just the default instance tho — it’s a multi-tenant twtd, AGPLv3. Run your own and I’ll list it in the app’s picker so folks choose where to land 🤗 keeps it decentralised + spreads the load. Docs → https://git.mills.io/yarnsocial/twtd
🥳 Finally! After nearly 4 years, yarnd v0.16.0 “Silver Sojourner” is out! 🚀 Twt Hash v2, SQLite FTS5 search, HTMX-powered UI, first-time setup wizard and literally hundreds of bug fixes 🐛
Release notes: https://git.mills.io/yarnsocial/yarn/releases/tag/0.16.0
Upgrading is fully automatic — the Twt Hash v2 migration re-fetches all feeds on first start, so expect the first cycle to be a bit heavier. Images on Docker Hub as prologic/yarnd:0.16.0 👌
cc @kat@yarn.girlonthemoon.xyz @abucci@anthony.buc.ci @shinyoukai@yume.laidback.moe @eldersnake@we.loveprivacy.club 🙏
So… Quick count. Hands up those who are using the Twtxt App? 🤔 – And who’s also pairing this with the twtd publishing backend?
@prologic@twtxt.net done: https://git.mills.io/yarnsocial/feeds/issues/41
@david@daiwei.me as you alter ego, I seriously recommend you stop creating feeds left and right. But whom am I kidding, right?! 😅
I wonder how long will it take to show a follower on twtd. It only shows the feed’s owner, so far.
I wish I could connect this with git.mills.io. I think there is a network issue preventing me from bring able to do it.
Hello everyone ! 👋 Behold I bring you (after many years) the launch of the Twtxt App 😅 – Ye, this is a Desktop and Mobile app built as a Progressive Web App (PWA) using a little framework (Swag) I put together iafter some experiments @xuu@txt.sour.is and I did in Go and HTMX and Service Workers.
The App is offline-first and supports installing to Desktop and Mobile (add to Home screen) and supports a number of publishing backends, including Yarn.social’s yarnd Pod, Github, Codeberg/Gitea, and a little tiny twtd Twtxt server (See: https://git.mills.io/yarnsocial/twtd).
Please try it out, no need for any account(s) or such, works with your existing feed(s) (as long as the publishing backends work well enough for you!). Please give me feedback! 🙏
Also, did you know the Twtxt Search Engine is back? 🎉
Linux 7.2-rc2 Raising The Default RISC-V 64-bit CPU Limit To 256 Cores
A post merge-window change that landed in Linux Git overnight ahead of tomorrow’s Linux 7.2-rc2 release is bumping the default limit on the number of supported CPU cores for RISC-V 64-bit. Now by default Linux will support up to 256 cores with RISC-V 64-bit kernel builds… ⌘ Read more
@balloonfu-sen@yarn.girlonthemoon.xyz Do you mind git pull && make build and updating your yarnd instance so it’s in-line with the new Hash v2 spec 🙏
Git 2.55 Released With Rust Support Enabled By Default, git history fixup
Git 2.55 is out today as the latest stable update to this distributed version control system… ⌘ Read more
MGLRU Improvement Yielding Nice Gains On Linux 7.2: MongoDB 30~100% Higher Throughput
The many memory management “MM” related improvements were recently merged to Git for the Linux 7.2 kernel. As typical most kernel cycles, some of the low-level improvements can yield nice efficiency wins and better performance in different areas… ⌘ Read more
@movq@www.uninformativ.de Here you go 🤣 https://git.mills.io/prologic/gonix/src/branch/main/cmd/imgview/main.go
So I’ve been working on GoNIX the last few days… Which is derived from µLinux – At least it’s entire build process. GoNIX however has a 100% Go userland, including the init process, package and service management.
Now… As an experiment, because I was able to make much process on enhancing the build tools and package management, I decided to see if I could build a “Desktop” Gui of sorts…
I still wanted it to be fairly minimal and lightweight. So I went with wayland (of course) and labwc and yambar. So far I’m liking the result 👌 42 packages in the wayland-desktop meta port. Not too bad. Not sure if I can slim that down anymore… But trying to avoid Mesa/GL as that drags in far too much “cruft”.
What’s your motivation for running this, btw? 🤔
Basically, two things a) feeling generous for folks that either can’t afford or find it hard to have a little place to call home (webpage, feed, whatever) and b) a real opportunity to test some of the components that make it possible sshbox, which I know works well as it fronts my Gitea instance’s Git+SSH service and box, a container runtime I wrote a while ago, recently improved, hardened and polished.
Oh come on! Why such a stupid anti-feature!?
WARNING: Your yt-dlp version (2026.03.17) is older than 90 days!
It is strongly recommended to always use the latest version. You cannot update when running from source code; Use git to pull the latest changes. To suppress this warning, add --no-update to your command/config.
Epic Games Announces Lore Open-Source Version Control System
Epic Games has released Lore, an MIT-licensed version control system written in Rust and designed specifically for “games and entertainment purposes with large file sizes,” reports Phoronix. From the report: While there is Git LFS for large file storage with Git, Epic Games has crated Lore as a version control system designed entirely around the large fi … ⌘ Read more
Epic Games Announces Lore Open-Source Version Control System
Epic Games announced today they have created a new version control system that is now open-source as Lore. Given the proliferation and excellence of Git, you may be wondering why Epic Games is pursuing another VCS option… They are specifically catering Lore to games and entertainment purposes with large file sizes… ⌘ Read more
GCC 17 Lands Initial Infrastructure For C++29
Merged yesterday to the GCC Git development codebase for next year’s GCC 17 release is the initial infrastructure laying out support for -std=c++29 and the like for targeting the C++29 standard not anticipated for release until around 2029… ⌘ Read more
@movq@www.uninformativ.de Just working on swag 😅 And….. Building an Offline-first Yarn/twtxt client that has no server requirements (_other than you need to publish your feed somewhere…)
Git 2.55-rc0 Released With Rust Enabled By Default
Git 2.55-rc0 is out today as the first tagged test version of the forthcoming Git 2.55 distributed version control system. Most notable with Git 2.55 is that Rust support is being enabled by default… ⌘ Read more
Got absolutely jack and sick of all the fucking useless bots, C&C and shit™ hitting my Git server tonight 🤬 So I sat down and built a lightweight version of Anubis, called caddy-pow. So now going forward, you’ll have to (sorry) have a HS-enabled browser to hit git.mills.io which will hopefully make most (if not all) bots just go the fuck away 🤦♂️ #Hostile #Web
小米发布 MiMo Code,基于 OpenCode,限免 MiMo-V2.5
MiMoCode 是一个终端原生的 AI 编程助手,基于 OpenCode fork 构建,能读写代码、执行命令、管理 Git,通过持久化记忆系统,在多次会话间保持对你项目的深度理解,并自我进化。@Appinn 上面的内容不重要,重要的是 MiMoCode 内置了一个可以直接使用的免费 MiMo A ⌘ Read more
Linux Firmware Repository Preps For AI Coding Agents
The linux-firmware.git repository that serves as the de facto home of all the binary blobs used by the mainline Linux kernel open-source drivers has now introduced AGENTS.md documentation and other preparations for embracing AI coding agents… ⌘ Read more
@lyse@lyse.isobeef.org Oh, no, he was the one providing the feedback. 😅
mgk appears to be everywhere. His Unicode box drawing demo has been part of my unicode-test script for a long time: https://movq.de/git/bin-pub/file/unicode-test.html#l23
h5i Radio – 利用 Git,让 Claude 和 Codex 进行实时对话
例如,我们现在可以问 Claude:“你能否与 Codex 通过 h5i 一起想出一个更好的下一代深度学习框架设计?”,也可以问 Codex:“你能否与 Claude 通过 h5i 一起想出一个更好的下一代深度学习框架设计?” h5i 是一个开源工具,它把 AI Agent 的任务、消息、记忆和协作 ⌘ Read more
GCC Git Enables Additional Tuning For AMD Zen 6
In addition to Intel adjusting their Nova Lake and Diamond Rapids targets in GCC this week to deal with APX realities, AMD this week also adjusted some tuning bits for their Zen 6 “znver6” target… ⌘ Read more
Security updates for Monday
Security updates have been issued by AlmaLinux (.NET 10.0, .NET 9.0, firefox, flatpak, httpd, and thunderbird), Debian (chromium, corosync, cyborg, dovecot, exim4, git-lfs, imagemagick, kernel, keystone, linux-6.1, php-twig, python-aiohttp, sentry-python, swift, and symfony), Fedora (chromium, djvulibre, docker-compose, giflib, haveged, libsoup3, libssh2, mingw-objfw, netatalk, nginx, nginx-mod-brotli, nginx-mod-fancyindex, nginx-mod-headers-more, nginx-mod-modsecurity, nginx-mod-naxsi, nginx-m … ⌘ Read more
It’s one of the reasons in fact I’ve been working on bob so I have a very concrete and strong foundation for how these things work, how they behave and how bad or good they can be. I am on-purpose building bob to be not only a decent coding tool and general task completion tool, but with serious security boundaries, sanitation, auditing and compliance. If I’m going to succeed at building autoonmous agents that can cope with a wider array of varying inputs (mostly natural language, some structural language) then it needs to be both a) Safe and b) Robust
Security updates for Wednesday
Security updates have been issued by AlmaLinux (bind, buildah, compat-libtiff3, compat-openssl11, containernetworking-plugins, crun, delve, dnsmasq, dovecot, edk2, firefox, freeipmi, gdk-pixbuf2, giflib, git-lfs, glib2, go-fdo-client, go-fdo-server, golang, grafana, grafana-pcp, gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free, iputils, jq, kernel, krb5, libcap, LibRaw, libsndfile, libsoup, libsoup3, libssh, libtiff, libvirt, linux-sgx, … ⌘ Read more