after talking about it during yesterday's #permacomputing event here in berlin i realized that having a custom nginx module that requires compiling nginx isn't really going to cut it.

so i implemented a subset of the features (server-side bot mitigation without proof-of-work or client-side JS) as an #openresty / nginx module in roughly 60 lines of lua. you can find it here, the README has installation instructions: https://codeberg.org/notfar/lua-resty-papersplease

it's still very fresh, and i would welcome any feedback. if you can get stats that would be nice to have, too.

i'm still planning to write a longer blogpost to explain the design decisions and how it works.

Rita Revell - X'd in Stone (2026)

https://ritarevell.bandcamp.com/album/xd-in-stone

#ambient #IDM #ElectronicMusic #ExperimentalMusic #music #musodon

@dlb Bah c'est comme ça que Warren Buffet est devenu riche y paraît. La légende veut qu'il a commencé avec 1$ en poche 👀

@Dewines @irina I don't like the gore and splatter type but more on the psychological side I like sometimes. For me there are certain themes I enjoy regardless of genre. I gather that for many horror fans it's a safe way to be scared, kind of cathartic, I guess like rollercoaster rides. Which I also don't like but in *theory* I get it. Probably various other reasons too.

my new crib is designed for bonkwave 👌
(unfortunately only 2 of these are in tune)

Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/

This is an interesting bug for a few reasons:
- In part of the code that was heavily fuzzed (but ICMP was skipped)
- In the reference SDK used by huge amounts of downstream firmware
- Exploitable before the PCH check (can attack BitLocker keys in TPM)
- A forever-vulnerability in out-of-support hardware

Great work by Alex Matrosov (Anthropic) and Dan Holmes-Mitra (Google)!

@pattykimura @Alice@gram.social I love that you're asking these questions because I sometimes feel like my cropping choices appear questionable, but it's really me just doing my best with whatever I have to work with.

Here is the full shot. A lot of my composition is based off my obsession with needing to fit things within squares and wanting to exclude as much external noise as possible.

In this case, I cropped out the sides because I didn't think it was adding value and then I was left with the street, the building, and the sky, and I decided that the sky was adding more value than the street so I shifted everything downward until the balance felt right.

@possumeveryhour if anyone is reading this, please make your posts quotable or use alt text. It's like torture to see these cuties and not be able to share

@ai6yr I'm sure Ted Cruz has this all under control from his bunker in Cancun....

@errant seems broken too, it tries to pull the lowest res video and gets 0 often for audio only

Describing my music is a nuisance. Indie rock with electronics? Industrial-ish psychedelic dance music? A collection of thumping noises with the occasional song hiding in it? I've gone with 'Limnetic Villains'. There's plenty on Bandcamp. https://limneticvillains.bandcamp.com

I always forget birthdays. Turns out my first album turned 3 years old 🎉 last week, and I didn't notice.

https://mirlo.space/default-media-transmitter/release/transmit::simulations

~~~ Strange Vibrations ~~~

Like Desire Paths, this track also engages with the unusual sounds that resulted from holding a neck massager to the pickups on an electric guitar.

Strange Vibrations is taken from For The Setting Sun, the album CommsBreakdown and I made together. We're releasing it this Friday, Oct. 30th!

https://socool.bandcamp.com/album/for-the-setting-sun

PS. I captured this video during the same sunset that I took the photo we used for the album cover :)

#NewMusic #TripHop #ChillOut #downtempo #Vancouver

Fun story coming:

#libsodium has a #NoAI policy: https://github.com/jedisct1/libsodium/blob/master/AI-POLICY.md

The author made a commit using Claude: https://github.com/jedisct1/libsodium/commit/4f44abfed4c5ee7e1667e3fdf46d9253342cca69

Someone pointed it out in a discussion. The commit got force-pushed over, and the discussion was deleted: https://github.com/jedisct1/libsodium/discussions/1564.

Funny enough, GitHub still flags the repo.

I suppose at this point libsodium should be assumed to be #slop, with author sweeping the fact under the carpet.

By the way, does anyone have any clue why there's no "archive the page" button when I paste the commit URL to Internet Archive?

Using curl, because I'm playing hard to wget.

@randulo my family communicates on Whatsapp

A preview of tomorrow's Stuff Keeps Happening

@errant YES