← Feed

Posts

• View post

  So if you're wondering, #Stripe cares about your #security a lot. That's why they bundle CA certificates in their binding packages and expertly wait a week before updating them. You can't remove compromised certificates just like that, that would be unprofessional. Needless to say, I've unbundled them in #Gentoo now. And I'm ashamed I didn't notice before. I really need to check everything for *.pem, *.crt, and whatever other suffix people come up...

• View post

  I need to replace "everyone and their grandmother" (prejudiced, sexist) with "everyone and their chatbot". #NoAI

• View post

  Recall os-release, the #systemd de facto standard for identifying the operating system name and version? And then, recall "bootloader specification", the systemd-originated (now apparently #UAPI) standard for UEFI bootloader data? Well, apparently the authors didn't want to proliferate standards, so Type 2 entries have: > Of these sections, the .osrel section is used to generate boot entries. The PRETTY_NAME= and VERSION_ID= fields in the embedded os-release f...

• View post

  #Microsoft #Windows, 1990s: it is now safe to turn off your computer. Microsoft Windows, 2010s: it is never safe to turn off your computer. There's always a grue lurking around the corner, ready to install updates and mess up whatever was still working.

• View post

  Another short note on the #blog: The next circle of #security hell. https://blogs.gentoo.org/mgorny/2026/10/27/the-next-circle-of-security-hell/ """ A few years back I wrote “The modern packager’s security nightmare”. Have things improved since? On the contrary, I feel like we’re slipping down a well-oiled slope with no end in sight. Vulnerabilities are reported at unprecedented rates. A lot of people are doing everything they can to patch them up, which doesn’t nece...

• View post

  """ The story of the curse of Ham, or rather his son, is one of the earliest Eurasian myths. It wasn't known only in Hebrew and Christian culture, but also in the world of Islam. […] In an Irish commentary to the Bible from VIII century, we can read that Celtic people, presented as monstrous bodies: monsters, giants or elfs, were the descendants of Ham. The Arabs conquering India in the Middle Ages called the Hindi "sons of Ham". In the Modern...

• View post

  I see #Microsoft #GitHub is now experimenting with rate-limiting #git. $ git fetch fatal: remote error: This request was rate-limited due to too many requests. Reduce the frequency of your requests or try again later. For more on scraping GitHub and how it may affect your rights, please review our Terms of Service (https://docs.github.com/en/site-policy/github-terms/github-terms-of-service). …which is quite ironic, given it's my first "git fetch" in… an hour? But we...

• View post

  FYI, I've just learned that #Microsoft #GitHub has "authorized" "#Copilot SWE Agent" app without asking me. Of course it is "never used", but the security log is full of SlopHub regenerating access tokens for it.

• View post

  #Gentoo has a strict #NoAI policy, so our projects are slop-free. Unfortunately, these days you cannot run an up-to-date system without tons of random slop packages, because everyone insists on using that crap. Gentoo supports a whole bunch of architectures that probably every other distribution dumped so far. Unfortunately, these days the available software list is shrinking, as everyone insists on adding some random meaningless dependencies on #RustLang (like using uv-build, which is the sing...

• View post

  Does crossfitness mean exercising while hanging on a cross? #shitposting

• View post

  #Python in a nutshell: 1. Let's use this new fancy #TOML thing for everything, it's so cool! 2. Everyone starts depending on third-party TOML libraries. 3. TOML library is finally added to the standard library, so people are moving to conditionally using it. 4. As old versions of Python become irrelevant, people are finally dropping fallbacks to the third-party library. 5. TOML 1.1 is introduced, and everyone has to start using a third-party library again… (at least until Python 3.15)...

• View post

  Sigh at ensloppification of random software you use. Soon you discover that #Vim maintainers consider it a good idea to use black text on blue background now. In dark theme.

• View post

  Zero days since it turned out that #GnuPG has arbitrarily changed behavior between versions in the name of "safe default", and required you to pass an additional option to make it behave properly in the rare cases it matters. Of course we still need to support old versions and alternative implementations without that option. And of course there is no clean way of checking whether it's available or not. https://bugs.gentoo.org/983021 #OpenPGP #GPG #Gentoo

• View post

  Remember the time when I took #security vulnerabilities seriously, rather than shrugged and whatever'd? #Linux

• View post

  Okay, let's get this straight. I have trouble taking compliments for my work. I was raised in 1990s Poland, you could say it was on the border between two eras. It was a time of newly realized freedom, when people thought that the possibilities were now endless and you had to grab them, you had to compete for them. You didn't compliment kids for their work, that would spoil them. You could compliment kids for their looks (not me, though, I apparently had "other qualities"). B...

• View post

  If anyone's wondering, #Xfce is a #slop junk now too, and the author is busy writing long excuses for them, with full realization of how harmful they are. https://www.spurint.org/journal/2026/07/llms-and-xfwl4 #NoAI #NoLLM

• View post

  2000s: big game companies publish their old games for free download, because they aren't selling them anymore, and who would buy them anyway? Also, that's good marketing to sell new games. 2020s: big game companies are impotent to make new games that aren't crap. Instead, they keep selling old games, remasters of old games (both "enhancing" and "retro" remasters) and reboots of old games. #games

• View post

  Today in things that couldn't have aged well: "Unpin flit-core dependency" 2 years ago without actually updating the metadata to use the newer pyproject.toml format. https://github.com/sethmlarson/socksio/commit/b326406915fd98a8185c1c160165c5b8963b30c1 #Python #flit

• View post

  #TIL that another way to make #tar (GNU and libarchive) create an empty archive is to pass a file and --exclude that same file. tar -c --exclude=README.md README.md

• View post

  PSA: I've just removed 344 #Gentoo #GURU committers who haven't connected to the git server in the last 6 months. This is specifically related to the change of rules. We have 205 regular committers now, plus 6 trusted contributors.

• View post

  Okay, it's still rough around the edges, needs documentation, tests and other stuff I'll slowly be adding but here it is: gagit, or #Gentoo #AGit workflow tool. https://gitweb.gentoo.org/proj/gagit.git/ #NamingIsMyPassion

• View post

  Today's earworm: riffs from Strange Horizons by #ReverendBizarre. The best part is I didn't listen to it in a while, yet it randomly attacked my brain around the morning.

• View post

  Did I ever announce gentoo-kernel-modprep? It's the newest variation on #Gentoo Distribution Kernels: the absolute minimum kernel tree necessary for building modules. Ideal for package-building containers where a full kernel is unnecessary, yet you need to be able to build kernel modules.

• View post

  Do people actually understand #RustLang types and borrowing and whatever, or do you just write the first approximation and then follow compiler errors like me?

• View post

  I know that some car people need big cars to compensate for their insecurity, but naming a company "cis cars"…

• View post

  I recommend getting an #aronia shrub. • you don't have to do anything about it most of the year • after a few years it gives enough fruit to add to ice cream the whole year round • the fruits come in large bunches and have relatively tough skin, so it's easy to collect • most of people are prejudiced against it, so you have it all to yourself #gardening

• View post

  I've added a "contributing" file to #Gemato: https://github.com/gentoo/gemato/blob/master/CONTRIBUTING.rst I guess I'm going to use this as a template for other projects of mine, hosted on the #Gentoo infrastructure and mirrored to GitHub or Codeberg.

• View post

  I'm trying to keep an open mind. When someone I used to respect starts using LLMs, I'm thinking: okay, their moral compass is bad, but at least they're putting an effort to review that stuff and they're trying to improve other projects. When that person writes a pro-AI blog post, complaining that people aren't respecting them anymore, I'm still trying to stay neutral. But honestly, when said person starts ranting that Codeberg dared ban vibecoded shit, I can't but...

• View post

  Neoliberals: "We agree with all what you said, but this needs to be handled via regulation. We won't be inconveniencing ourselves with boycotting it." Neoliberals when regulation occurs: "They're taking our freedom!" #NoAI #NoLLM

• View post

  Zero days since I've discovered a random #CPython bug that triggers in very specific circumstances and I don't really have time to report it, nor can expect anyone to do it for me. This time it's a test failure and refcounts being broken while running fastjsonschema's test suite on #Python 3.15 freethreading with pytest's --junit-xml option enabled 😱. And of course removing --junit-xml makes all tests pass.