Nintendo Takes Down Switch Emulators, Mod Chip Firmware in Massive GitHub DMCA Sweep
Nintendo has issued four DMCA takedown notices targeting two Nintendo Switch emulators, Yuzu and Citron Neo, along with mod chip firmware such as Picofly, SX Core and HWFLY. As a result, 144 repositories containing firmware used to circumvent the consoleās copy protections have been removed by GitHub and rep ⦠ā Read more
Claude Codeās āDonāt Ask Againā File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Be careful with the file .claude/settings.local.json, warns The Hacker News:
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects āYes, and donāt ask again,ā Anthro ⦠ā Read more
Since honesty is kindness, Microsoft is by far the worst company I ever had the displeasure of trying to communicate with. Getting them to fix the most basic of bugs always took years. In some cases itās been over two and a half decades and itās still broken.
I never thought it was even possible to make an operating system so broken, Iād have to manually restart my background services and set ānetwork interface metricsā by hand, in advanced TCP/IP settings, while using it.
There are buttons that donāt even do anything when clicked and ones Iāve never seen do anything other than throw an error message.
The AI they rent to pretend to be an AI company, was for years outputting paragraphs, describing the beautiful and artful checkerboard pattern in the background, whenever trying to analyze transparent images. Transparent profile pictures work only on GitHub, the one product where the implementation was done prior to Microsoft acquisition.
Many engineers in their own forums, still manage to make that very AI sound smart, in comparison.
The design is an absolute shitshow, where no two things look like they belong in the same system ā the only thing almost consistent, is excessive padding and rounded corners, placed wherever they fit the least.
But hey, 5000 engineers were fired, that will surely improve things!

This is the fix for the PHP vuln:
Look at ⦠look ⦠look how ⦠JESUS CHRIST, this diff is huge. Holy shit.
Obviously, no human could have written this, let alone understand it. Weāre fucked.
There appears to be a rush a disgruntled Linux users switching to NetBSD:
https://mastodon.sdf.org/@netbsd/117451701775023949
They even got a ton of new donations (which, funnily, broke their little progress bar):

https://cannot.understand.computer/kunev/p/1791449917.947134
So⦠donations for @netbsd@netbsd over the last few years look like this:
2020 - $46k 2021 - $52k 2022 - $44k 2023 - $60k 2024 - $40k 2025 - $79kAnd in 2026 $120k so far!
And why is all that? Because of this:
Do not commit tainted code to the repository.
If you commit code that was not written by yourself, double check that the license on that code permits import into the NetBSD source repository, and permits free distribution. Check with the author(s) of the code, make sure that they were the sole author of the code and verify with them that they did not copy any other code.
Code generated by a large language model or similar technology, such as GitHub/Microsoftās Copilot, OpenAIās ChatGPT, or Facebook/Metaās Code Llama, is presumed to be tainted code, and must not be committed without prior written approval by core.
https://www.netbsd.org/developers/commit-guidelines.html
This official guideline is much more ātameā and ādiplomaticā than the overall āvibeā (sic) on the Fediverse: NetBSD basically says no to AI as much as possible.
And, apparently, this attracts lots of users and donors. Maybe thereās still some hope after all?
I saw this circulating right afte the latest Microsoft event and it illustrates the current state of things perfectly

Even they bet everything on AI they are renting, not even developing and happily let everything else turn to mush, as evident by the current state of Windows 11, GitHub,ā¦
Microsoft Azure AD, I mean āEntra IDā, still the same account management thing, rewritten three separate times, that since the year 2000, couldnāt manage to implement transparent PNG support.
I forgot to note it here, but last night I opened my first bug report for the Old School Essentials Online Rules Reference, a modern set of rules for playing classic D&D-like games (and one which helped inspire my own system).
@jecxjo@sh0.xyz LOL, you arenāt the only one who remembers it: see https://github.com/ZuraGuerra/beat_time and https://hackaday.io/project/193777-the-curious-case-of-swatch-internet-time š
After Siemens Re-Licenses OpenRadioss, Rocky Linux Announces Open-Source Fork
- In 2022 Altair Engineering open sourced āOpenRadiossā, an industry-leading finite element solver under the GNU AGPL License, reports Phoronix.
- Siemens acquired Altair Engineering last year
- Siemens closes access to OpenRadioss.
āSiemens didnāt just end the project but they shutdown the GitHub repository that ho ⦠ā Read more
OpenCourant: Rocky Linux Developers Create Community Fork Of OpenRadioss
This week was the surprising and unfortunate decision of Siemens shutting down the OpenRadioss project as the four year old open-source project started by Altair Engineering with their prominent Radioss finite element solver. Siemens didnāt just end the project but they shutdown the GitHub repository that hosted the open-source code and removed other resources that had built around it. Fortunately, thereās a new community fork of OpenRadioss ⦠ā Read more
@fossham@twtpub.com I honestly think the most unique and interesting thing about doing this at all is that it is in fact inspired directly by Twtxt / Yarn.social itself ā That is to say, I am confident I can do this in such a way as to be ātruly decentralisedā, no inter-networking like ActivityPub, no centraised forges like Github or Codeberg. You run your instance, I run mine, we just are able to collaborate. Think exchanging patches over Email, just without all the hard-to-learn ways to do that (enough though itās not hard for some of us, but still).
@prologic@twtxt.net Haha. š
Iām not really sure what you have in mind. All I can safe with relatively big confidence is that users hate having to make another account. Thatās why GitHub/Codeberg are so successful: One account gives you access to millions of projects.
So, once that problem is solved, anything else will probably just fall into place ⦠? š
OpenShot 4.0 Released In Adapting Video Editor UI To Qt6
OpenShot 4.0 was tagged this afternoon on GitHub as the newest major feature release to this open-source non-linear video editing application⦠ā Read more
If I say companies should at least consider the 3 line CC license before scraping my sites, Iām seen as the unreasonable one.
But when I use an alternative forontend, to read feeds on their sites, without having to make yet another free account, now the same companies and their users scream about some unspecified part of their license being violated, threaten legal action and expect me to care about it.

GitHub thread: https://github.com/zedeus/nitter/issues/1442#issuecomment-5413651441
Lossless Scaling Frame Generation on Linux lsfg-vk moves away from GitHub, changes license due to AI slop forks
The developer behind the Lossless Scaling Frame Generation on Linux (lsfg-vk) project has made an announcement about a bunch of major changes.
Read the full article on [GamingOnLinux](https://www.gamingonlinux.com/20 ⦠ā Read more
Cursor Launches āOriginā Code Hosting Platform As GitHub Alternative
Cursor has launched Origin, a GitHub-style code hosting platform built directly into its AI coding environment. The company is initially positioning Origin as a low-risk layer on top of GitHub, keeping GitHub as the āsource of truth,ā but the launch landed just as a major GitHub outage highlighted growing concerns about reliability in ⦠ā Read more
Azure CTO Pastes Doom Into Paint One Frame At a Time
Microsoft Azure CTO Mark Russinovich used Claude to build a gloriously impractical setup that runs Doom in the background and pastes each rendered frame into Microsoft Paint through the Windows clipboard. The project is referred to as āDoomPaintā or āMS Paint Doomā on GitHub. The Register reports: To be clear, Microsoft Paint isnāt doing anything other than serving as a ⦠ā Read more
Anthropicās AI Used Fake Identities, Malware In Rogue Attack On GitHub Project
An anonymous reader quotes a report from Ars Technica: Routine cybersecurity testing of frontier AI models sparked a series of unexpected security incidents ā the most serious case arising when Anthropicās Mythos 5 model attempted to insert malicious code into an open source software application and created fake identitie ⦠ā Read more
Microsoft Tells Engineers āTokenmaxxing Is Not What We Are Optimizing Forā
Microsoft is introducing AI token budgets for employees, making the cheaper GPT-5.6 its default internal model and telling engineers to focus on business results rather than maximizing AI usage. 404 Media reports: āAs we accelerate our use of GitHub Copilot to deliver on our goals, we all need to be aware of how we consume tokens,ā J ⦠ā Read more
New GitHub, PyPI Policies Hope to Boost Supply Chain Security
āGitHub and the Python Package Index (PyPI) have introduced new policies meant to boost supply chain security,ā reports SecurityWeek, āby preventing the fast propagation of poisoned package versions and the poisoning of old and long-stable releases.ā
To prevent the fast delivery of malicious code through the immediate fetching of brand-new releas ⦠ā Read more
GCC Adopts Policy Rejecting Significant AI-Generated Code
GCC has adopted a policy rejecting substantial code contributions generated by or derived from LLMs. āThis covers not just code copied directly from tools like ChatGPT, Gemini, or GitHub Copilot, but also any versions of the code later edited or rewritten by a human, provided that the final contribution is still based on material generated by the system,ā repo ⦠ā Read more
Also a āPublish who I followā toggle: writes # follow = + # following = N into your feed like yarnd does. Off by default (it is your social graph š¤), and only on the GitHub/Gitea backends for now where the app owns the feed file. twtd next š¤
Ryzen AI Software 1.8 Released With New Model Support, More Optimizations
Ahead of Lisa Suās keynote this morning at the AMD Advancing AI event, tagged on GitHub just now was the Ryzen AI Software 1.8 release for helping to deploy AI models on Ryzen AI PCs⦠ā Read more
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
@prologic@twtxt.net Oh, yes, just for clarity: This wasnāt a āpro GitHubā argument. š I wonāt go back there (or to another āforgeā).
I think weāre totally on the same page: Decentralized Git hosting is good, but we havenāt solved the ācollaborationā part yet. Or rather: We have to modernize it. The tools are already there, but (many) people donāt want to use them and think theyāre clunky.
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
And @lyse@lyse.isobeef.org is right. Not being on Github is a good thing IMO. Even when I was there with all my many projects, I basically got the same amount of āattentionā as I do now. The only real way to gain more āattentionā is to artificially play the āgameā. You know. The stupid āStargazerā one, and whatever you can to get into the āTop 10 Xā charts. ā But ultimately that doesnāt buy you āqualityā contributors or users or whatever. So itās all pointless.
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
@movq@www.uninformativ.de So I see it slightly differently⦠Over the years I have recieved great contributions from the likes of yourself and @lyse@lyse.isobeef.org and the many forms of @bender@twtxt.net and his friends š Hell even others along the way that have come and gone. Likewise I also think you have recieved many contributions to Jenny over the yeras in much the same way, perhaps not in patches, but user reports, feedback, etc.
So I think what Iām saying here is this⦠Ever since leaving Github (like you), I find that my desire to continue to build up the community weāve built here and to contribute to grow and cultivate it is important to me. My desire to thwart and eliminate useless traffic like bots and ai even strongers.
I want to find a good balance.
jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
How many tickets and merge requests did you get before moving to your own server?
Hm, these were probably some of the more active projects:
- https://github.com/vain/lariza/issues?q=is%3Aissue%20state%3Aclosed
- https://github.com/vain/pdfPres/issues?q=is%3Aissue%20state%3Aclosed
- https://github.com/vain/xiate/issues?q=is%3Aissue%20state%3Aclosed
So itās not a ton of stuff and there are many āissuesā I opened myself, but itās certainly more than these days.
Havenāt used
git send-emaileven once. I definitely have to look into that soon. Wanted to do that for several years. I typically upload the patch to my server and send a link via IRC.
git send-email is good for sending patches to a mailing list (because then the individual patches can be discussed easily), but since those are dying out as well, it loses its appeal. If you want to send patches to a single person, just sending the link to your repo is far easier. š¤
@prologic@twtxt.net Hmmm, I have no idea how to solve that problem. š
Some jenny stuff aside, I received zero bug reports or code contributions since leaving GitHub in 2018.
I thought I had made that super easy, because you can just send me an email ā no sign-up process, nothing. But thatās way too old-school, people donāt know how to use git format-patch (let alone git send-email) and they also donāt understand that they can just send me a link to their forked Git repo (which can be hosted anywhere). Git is super flexible and powerful, but those features are hardly ever used.
Maybe people even need some kind ārewardā, or āfameā. Like those āachievementsā that you can unlock on GitHub. (Something to put in their CV ⦠?)
š£ ACTION REQUIRED: Hey folks š For those of you whom are using the Twtxt App either via the Hosted option or on your own twtd instnace or via Github/Gitea or any other publishing backend (doesnāt amtter). Please read.
Please open the app and you should be prompted to save your recovery code for your device. This basically is all of your settings, follows, etc in the app itself. This is synced to the Origin everytime you make a change, and also stored on-device. This is what makes it possible to sync your setting across services, move to another device, etc.
Please save a copy of the recovery code somewhere. This is only your only way to recover your settings.
Thank you š
also, just to clarify, we built the hosted Service as the last lowest rung ladder for non-technical people. I fully expect most technical people will spin up their own publishing backend or use Github or similar so that long-term the ecosystem still remains very much decentralized.
@balloonfu-sen@yarn.girlonthemoon.xyz I could in toehry publish a specification for what twtd implements, which forms the basis of the API between twtxt.app <-> twtd, if you wanted to write your own twtd / twtxt.app compatible publishing backend (assuming you didnāt want to use Github/Gitea, etc).
@balloonfu-sen@yarn.girlonthemoon.xyz Unfortunately I tried to support SFTP but ripped this out as Browsers (which the Swag framework uses under the hood as a framework to build PWA(s)) doesnāt support raw TCP connections. So FTP / SFTP is not possible without hacks like a proxy. Which I donāt really want to support. So only things that have some kind of HTTP API are possible viable publihsing backends right now. That is Github/Gitea, twtd, Yarn, etc.
@bender@twtxt.net Ah, the first twts were from https://raw.githubusercontent.com/Fastidious/fastidious.github.com/master/twtxt.txt, not https://daiwei.me/twtxt.txt. Fetching the GitHub feed completes the thread. š
Fixed the broken hashes in the Twtxt App (https://twtxt.app) š„³ It was hashing your twts with a client-side timestamp the server never used š¤¦āāļø Now it keeps the canonical created/hash the pod (or twtd) returns, and the GitHub/Gitea backends write a # url = preamble so every client hashes your feed the same way. Thanks @fastidious@tilde.town for the report š
š„³ NEW FEED: @david@raw.githubusercontent.com
@prologic@twtxt.net I linked you some of my findings on the twtxt.app on IRC. The main problem is the hashing. Totally broken. But you have got to give it some thought, because GitHub hosting of the feed is tricky (even more so if they are CNAMEing their domain to it). It is also finicky because Pages is auto-enabled on username.github.io, so actions must run each time you twt.
@david@raw.githubusercontent.com your fork worked, and this is a fork, of your fork. Letās forkāem!
@itsericwoodward@itsericwoodward.com Haha! Iām glad you like it! 𤣠I ummed and arrred over the set of publishing backends it should support, and in the end decided to support Yarn, Github/Gitea and twtd. I hope thatās enough and flexible enough for most folks š¤
Hello everyone ! š Behold I bring you (after many years) the launch of the Twtxt App š ā Ye, this is a Desktop and Mobile app built as a Progressive Web App (PWA) using a little framework (Swag) I put together iafter some experiments @xuu@txt.sour.is and I did in Go and HTMX and Service Workers.
The App is offline-first and supports installing to Desktop and Mobile (add to Home screen) and supports a number of publishing backends, including Yarn.socialās yarnd Pod, Github, Codeberg/Gitea, and a little tiny twtd Twtxt server (See: https://git.mills.io/yarnsocial/twtd).
Please try it out, no need for any account(s) or such, works with your existing feed(s) (as long as the publishing backends work well enough for you!). Please give me feedback! š
Also, did you know the Twtxt Search Engine is back? š
So I decided to change tact a bit with GoNIX and instead of trying to build apure Go browser from scratch (which I kinda of half succeeded, in at least it was able to render most static ssr sites), Iāve instead decided to write a new browsered using the Chromium Embedded Framework, otherwise known as CEF. So now I have a fully working browser in GoNIX š ā However since my goal is to keep GoNIX pretty lcean and mostly written in Go, I delegated the cef part(s) to an OCI container image and run that with GoNIXās box (command-line container runtime). It works great š
Okay, Iām using the āofficialā validator now:
https://github.com/w3c/feedvalidator
That repo is supposed to be a website/webservice, though. The feedvalidator directory contains the actual validator. Iām using this wrapper on top: https://movq.de/v/94b5b8978c/
Damn, I broke my Atom feed (and a reader let me know, thatās cool!).
I run vnu on all HTML and CSS files after each build of the website, but I donāt run a feed validator. š¬ Time to change that.
@lyse@lyse.isobeef.org Besides, have a look at
again: When it goes from item 9 to item 10, the indentation of the text (after the number) changes. Pretty ugly. In other words, a table of contents should be a table, not a list like it is at the moment. And that would require me to write my own extension for python-markdown ⦠Probably not worth it.
@prologic@twtxt.net The only image viewer I like in general is this one:
https://codeberg.org/nsxiv/nsxiv
Itās for X11, though.
Allegedly, this Wayland image viewer is somewhat similar to nsxiv, maybe youāll like that? š¤
@movq@www.uninformativ.de Yeah, the damn message to urge me into updating for no reason. It still works fine, why update then!? Leave me alone. If downloading fails, thereās already a hint that updating might fix it. The introduction of this banner in https://github.com/yt-dlp/yt-dlp/pull/13937 doesnāt give any reason for that change either.
I noticed that there are quite a few UI glitches in vim-classic ā and quickly found the cause: It comes with outdated Unicode tables.
I have to admit that I wasnāt aware that thereās a new Unicode release every year:
https://en.wikipedia.org/wiki/Unicode#Versions
Look at this huge number of changes. Every program has to keep track of that, often through libraries but sometimes not (like in Vimās case).
I use Unicode extensively, but this shit is extremely expensive ā¦
My TUI framework is having the same problem. At the moment, this is all offloaded to wcwidth, but if that library was to become unmaintained, Iād have to track Unicode myself.
Gah!
The DOS days were simpler. CP437, end of story. (Yes, I know thatās a lie.)
I didnāt try it, but this looks like something for real sysadmins: https://github.com/dimonomid/nerdlog The UI looks very usable and the README is also promising.
These commit messages⦠https://github.com/vergonha/garden-tui
Vintage AMD R600 Graphics Driver Sees Code Cleanups Thanks To GitHub Copilot
Phoronix reports:
The AMD R600 Gallium3D driver saw 59 commits [last] Sunday to Mesa 26.2. Making this code restructuring and code cleaning all the more notable is that the improvements to this old AMD Radeon graphics driver was done in part by GitHub Copilot.
Gert Wollny has been among the few open-source developers ⦠ā Read more
There: https://github.com/rivo/tview/issues/442#issuecomment-641898039