This time Dax gets back in the punishment box on Vegon XII yet can't remember the last 24 hours.
UBUNTU TOUCH in 2026: it's really close!
TikTok has started censoring searches for popular peptides https://www.theverge.com/science/1014825/peptide-tiktok-search-ban
Having some landscape gardening going on under the direction of my wife. I obviously wasnt paying enough attention to the extent of the work needed to be done. Now the small digger they brought has efficiently cut the incoming fibre to our house. No internet, no telly. Ah well…😆
you know, supernatural stuff. zombies. vampires. werewolves. those robots that build cars.
literally "the assets we could find on the asset store"
okay, I’m way too late to post xkcd “4” comic and still be funny, so instead I will have to write a serious post
Could this disturbingly severe mistake be because someone asked The Cat for a certificate? Hypothetically, yes. But there’s absolutely no reason to jump to that conclusion with self-righteous confidence when all serious infosec experts have been screaming for THIRTY YEARS that our programming languages are designed to maximize the probability of catastrophic mistakes in cryptographic code even when handled with care by experienced professionals.
Here’s what we know: several signing certificates from the same issuer with private keys that are, in their entirety, just a number below 256, all the way down to the comical “4, just 4, that’s not a typo, the private key is 4.” This strongly suggests a bug where the first byte of the intended key, treated as an array, was used rather than the whole key. A bug that’s absolutely, positively trivial to write in C and its descendants. I’ve seen proposals for how to gotcha yourself like this in Go as well.
I’m not saying The Cat isn’t involved, it could be. But you absolutely, positively do not have to ask a mischievous clawed agent for a random number for it to go this horribly wrong. We’ve always had the human strength within us to fuck up this bad all along
(And I do assume it’s a fuckup and not a backdoor, because there’s no reason to design a backdoor such that the next random enthusiast to run a sanity check script on public certificates will instantly spot it and start screaming)
eMudhra says they used an HSM for the keys:
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c11
> The hardware used for each of the issuers is in the attached file. These HSMs are FIPS 140-2 Level 3 compliant.
> The Ultimaco devices were used to generate the ECC, RSA key pairs for the issuers.
@q3k funny how literally everyone always introduces an "l" into "Utimaco".
ah yes, just what I need right before I travel, the fan dying on my media server.
just gonna swap its nvme drive into my other Linux server which isn't actively being used for anything right now and which has a better GPU for transcoding anyway, maybe this is what I should have done to begin with
I do appreciate how on Linux you can usually just swap out the main storage device into another computer and it'll continue to Just Work
I did have to install the nVidia drivers of course but that's not a huge deal
if I do keep things this way I'll probably want to do some renaming, but like, yeah this AMD+nVidia box is way more powerful than the Intel NUC it's standing in for anyway, maybe I just keep it like this
Framework Laptop 12 (2026) Review: The Linux MacBook Neo alternative?
in a world where not everything is shit this would be a comedy game where you do all the boring parts of owning a business and having a human body
you know, supernatural stuff. zombies. vampires. werewolves. those robots that build cars.
omfg they're ALL FUCKING <255
4 EM OV TLS CA - G3C OV TLS
56 EM EV TLS CA - G3C EV TLS
66 EM OV CS CA - G3B Code signing
115 EM EV TLS CA - G3B EV TLS
155 EM OV TLS CA - G3B OV TLS
156 EM DV TLS CA - G3B DV TLS
230 EM DV TLS CA - G3C DV TLS
237 EM OV CS CA - G3C Code signing
Posted in
Fediverse
I mean, just how many instances are gonna ping the URL? Several hundred, low thousands at worst?
Unless it happens to be some very large media content or a dynamic page with no caching, I’d think the automated federation hits shouldn’t be too bad.
The influx of users that might come after a viral post though, that’s rough…
Posted in
Fediverse
There are two proposed solutions I have seen. I do not claim that this is exhaustive, just only limited to the proposals that I have stumbled across.
FASP - Fediverse Auxiliary Service Provider
The idea that mastodon has is to have a third-party service that does something like generate a link preview once and then share that to fediverse instances that need it. They have a whole spec they wrote up about these kinds of services that can be run to help out fediverse instances with different things like this, search, or discoverability. They call these FASPs - the repo with the spec is here.
I don’t yet know of any FASP that is live and running, so it is kind of a paper spec at the moment. I don’t do too much on the microblogging side of the fediverse though, so I very well could be wrong.
Federate link metadata and the post at the same time
This comes from an issue on PieFed’s repo. It is basically just an idea at this point, but it is a pretty basic one; have the originating instance fetch the link preview information and simply federate it out alongside the post itself.
if you can read this, you should upgrade your system ASAP
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
"I keep coming back to this graph because it’s so eye-popping, almost impossible to believe. As you see in the legend, the blue line is data centers. The grey line is everything else. Everything else. Commercial properties. Rental properties. Single family homes. Multiple family homes. Pick your preferred flavor of development, NIMBY, YIMBY, urban, rural, it’s in there. You basically have rapid data center growth and everything else contracting."
Posted in
Fediverse
GNUnet helps building a new Internet
GNUnet is a network protocol stack for building secure, distributed, and privacy-preserving applications.
With strong roots in academic research, our goal is to replace the old insecure Internet protocol stack.
GNUnet provides privacy-by design
It provides [improving addressing, routing, naming and content distribution](https://www.w3.org/2014/strint/papers/65.pdf) in a technically robust manner - as opposed to ad-hoc designs in place today.
Posted in
Fediverse
is there something that makes this different to 17 other proposals for a new internet or is it just a case of
