Thanks to @kat@yarn.girlonthemoon.xyz and her shelf I finally spent several hours in the woodshop. I wanted to build two drawers for the workbench and thought that I will complete this project in no time. I’ve been so wrong again. ;-)

I didn’t draw any plans, just measured a few times and then went to cutting a bunch of particle board leftovers at the table saw. I routed rebates on the sides, fronts and backs to lap the boxes and sink in the bottom. It turned out that having no plans was a stupid idea. I cut exactly on the lines as I calculated and measured, however, the math in my head fell apart when it eventually met reality. The bottoms are too short, so I gotta glue on some strips. Also, with the longer fronts, the sides won’t work either, I have to fix them as well. :-D

Finally, the lid of my cyclone bucket broke when the negative pressure got too large. Oh well. It was just an old wood glue bucket, I’ve got another empty one, so I can use that lid but strengthen it first with some plywood. Something for future Lyse to deal with.

All in all, it was still good fun. Wood (haha) do it again, but at least with some sketches on paper. ;-)

⤋ Read More

The thing about upright bass is that you must play it on a regular basis. At least several times a week, ideally daily. It requires quite a bit of strength and it’s very easy to lose those muscles again – at least I don’t use them that much otherwise. 🤣 I’ve been through several cycles of “gain strength → lose strength → goto 0” now …

⤋ Read More
In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

@prologic@twtxt.net anubis is THE BESTTTTTTTTTTTTTT

⤋ Read More
In-reply-to » What do you think I just learned about in this awesome Computerphile video with Matt Godbolt called "Subroutines in Low Level Code"? https://www.youtube.com/watch?v=1su3lAh-k4o

@lyse@lyse.isobeef.org … and I realized only now that that’s the guy behind godbolt.org? I never assumed “godbolt” to be a human name, more like some kind of wordplay. 🥴

⤋ Read More
In-reply-to » Sometimes things go wrong when buying CDs second-hand. I bought an album quite cheap – but as it turned out, they only checked the cover, not the content, so I got something else instead which is actually much more expensive. 🤣

None of the above. 🤣 Just a more recent album.

⤋ Read More
In-reply-to » My main domain name turned 24 years old today. That feels weird.

According to a very old email one of my more personal family domains was registered in 2013 making it 12 years old, so I was closed 🤣 my public facing one is much much older 🤣

⤋ Read More
In-reply-to » (#5qkg37q) One thing about my design here is that it would no longer incorporate "regex"-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I'm not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively printf?!)

@lyse@lyse.isobeef.org I agree with this sentiment 🙌

⤋ Read More
In-reply-to » (#5qkg37q) One thing about my design here is that it would no longer incorporate "regex"-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I'm not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively printf?!)

@prologic@twtxt.net There have always been and there will always be people who have absolutely no clue what they’re doing. I’ve been 100% one of them when I started. Guaranteed, heaps of new SQL injections are born every single day, numbers rising.

That doesn’t justify all the WAF crap in the first place, though. In my opinion it’s just a filthy plaster applied to an injected wound. The software itself must be secure. Otherwise, don’t put that shit on the internet. Probably not even operate it at all. Nowhere. Fix it or throw it in the bin.

⤋ Read More
In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

And yes I’m taking some inspiration from Anubis here 😅

⤋ Read More
In-reply-to » Also spent the morning continuing to think about a new design for EdgeGuard's WAF. I'm basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

One thing about my design here is that it would no longer incorporate “regex”-based rules like OWASP, mostly because my experience thus far has taught me that these rules are kind of overly sensitive, produce false positives and I’m not sure they are really very effective. For example, why is the point of performing SQL injection detection at the Edge using a WAF if you already handle SQL properly in the first place? (seriously does anyone still construct SQL queries by hand with effectively printf?!)

⤋ Read More

Also spent the morning continuing to think about a new design for EdgeGuard’s WAF. I’m basically going to build an entirely new pluggable WAF that will be designed to only consider Rate Limiting, IP/ASN-based filtering, JavaScript challenge handling, Basic behavioral analysis and Anomaly detection.

The only part of this design I’m not 100% sure about is the Javascript-based challenge handling? 🤔 I’m also considering making this into a “proof of work” requirement too, but I also don’t want to falsely block folks that a) turn Javascript™ off or b) Use a browser like links, elinks or lynx for example.

Hmmm 🧐

⤋ Read More
In-reply-to » I've been poking around with #Crowdsec for the past couple of days, had to deal with a lot of false paositives but I'm starting to get it. I've even hooked it up with #Ntfy just because I can. Now I should try making my own scenarios and see how it goes.

Ok, now I’ll have to print a Paositive vibes T-Shirt 😅🤣

⤋ Read More

@terron@duque-terron.cat este gato habla Castellano, o Catalan? Esa oracion suena extranya en Castellano. Yo hubiera escrito:

“En estos momentos, no sé si le está pidiendo a un dios que libere su pueblo felino, o está mirando una paloma.”

⤋ Read More
In-reply-to » Sometimes things go wrong when buying CDs second-hand. I bought an album quite cheap – but as it turned out, they only checked the cover, not the content, so I got something else instead which is actually much more expensive. 🤣

@movq@www.uninformativ.de a first edition signed Superman comic book, carefully folded just to fit, but not damaged enough to have lost its value?

⤋ Read More
In-reply-to » i got a shelf for all my cassette tapes! from a lovely person on facebook marketplace :] i don't think they produce these anymore, i think i got a good deal Media

@lyse@lyse.isobeef.org oooh that’s a good point! woodworking is scary and i don’t have much room for it but i do have SOME room in mind that could work for it… i feel like i’d just hurt myself in the process though LOL

⤋ Read More
In-reply-to » i got a shelf for all my cassette tapes! from a lovely person on facebook marketplace :] i don't think they produce these anymore, i think i got a good deal Media

@kat@yarn.girlonthemoon.xyz That’s cool. Also, looks like a fun woodworking project in case you exceed the hundred slots. :-) The plywood lap joints might be quite repetetive, but gang cutting them with a story stick or some other fixture shouldn’t be too terrible.

⤋ Read More

What do you think I just learned about in this awesome Computerphile video with Matt Godbolt called “Subroutines in Low Level Code”? https://www.youtube.com/watch?v=1su3lAh-k4o

Here’s the plot twist, the phrase “till the cows come home”. Hahaha, I never heard this before, but I love it! It’s always interesting to me to hear English sayings. Sometimes we have the same in German, sometimes – like in this case – entirely different ones. It’s fascinating that even though one hasn’t come across proverbs, it’s typically still clear from the context what’s meant.

Yep, some unexpected language stuff. ;-)

⤋ Read More
In-reply-to » (#honab3q) @lyse Nice! Next up: Passing file descriptors over Unix sockets. 😃

Thanks, @movq@www.uninformativ.de! That seems to be much easier. It’s already implemented in the Python docs as examples of recvmsg(…) and sendmsg(…):

I looked at them sooo many times in order to figure out why my SCM_CREDENTIALS sending code didn’t work. :-D

⤋ Read More

Sometimes things go wrong when buying CDs second-hand. I bought an album quite cheap – but as it turned out, they only checked the cover, not the content, so I got something else instead which is actually much more expensive. 🤣

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

@kat@yarn.girlonthemoon.xyz Ahh I see ! 😅

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

@prologic@twtxt.net ah that’s alright! the banner is just for fun :] it might be easier to skip to the comments with this link if you want (it’s in the site view mode rather than my page’s theme) https://luckyzukky.dreamwidth.org/98451.html?style=site#comments

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

Love all the funky colors though 😎

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

@kat@yarn.girlonthemoon.xyz You’ll have to forgive me 🙏 My vision impairment is getting in the way of seeing this “prompt box” thingy 🤣

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

@prologic@twtxt.net yeah, the post is here! you can check the comments to see my friends and i talking and stuff it’s so fun https://luckyzukky.dreamwidth.org/98451.html

⤋ Read More
In-reply-to » i started a little thing on my dreamwidth and called it a flash prompt box. basically it's a limited time thing where people can prompt me for stuff i'm offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i'm having sooo much fun with it so far it's been a blast just making stuff for friends :)

@kat@yarn.girlonthemoon.xyz This sounds cool! 😎 Can you show me? 🤔

⤋ Read More

i started a little thing on my dreamwidth and called it a flash prompt box. basically it’s a limited time thing where people can prompt me for stuff i’m offering, like short fanfiction, photoshop-edited user icons, music recs, and a bit more! i’m having sooo much fun with it so far it’s been a blast just making stuff for friends :)

also more friends are making their own posts with the same concept which is SO cool to see

⤋ Read More
In-reply-to » grafana is confusing af i deployed it again for my job (that is so wild to say...) and i'm like HOW DO THESE ALERTS WORK

@prologic@twtxt.net noted! that all sounds very scary to me but i should lock in for the best experience for my users! (the best experience for my users is my server not crashing most of the time though so i guess the next best experience LOL)

⤋ Read More
In-reply-to » grafana is confusing af i deployed it again for my job (that is so wild to say...) and i'm like HOW DO THESE ALERTS WORK

Move beyond basic threshold alerts! Define clear Service Level Objectives (SLOs) and measure Service Level Indicators (SLIs) to track real user impact. Use Prometheus to alert when your SLOs are at risk, ensuring you focus on what truly matters to your users. #Monitoring #SRE #Prometheus

⤋ Read More
In-reply-to » Watched the third installment of Andor for last night. That was some intense story telling. When it finished I was shaking from how much it had brought me into it all. Just wow.

@xuu@txt.sour.is a Star Wars series, eh? Never been a fan. I am Trekkie instead; it comes across as more science fiction, less fantasy. Still, I would see it if only we had Disney+. 😩

⤋ Read More

Watched the third installment of Andor for last night. That was some intense story telling. When it finished I was shaking from how much it had brought me into it all. Just wow.

⤋ Read More
In-reply-to » (#22qxisq) @andros Thanks for consolidating a lot of good ideas. Especially how you have deiced to just extend the mention syntax for location-based treads. This might even be backward compatible with older (pre-yarn) clients. What about using Z for UTC +00:00- is that allowed in your specs? Regarding url = I would suggest to only allow one and the maybe add url_old = or url_alt = !? I'm still not a fan of a DM feature, even thou it helps that i have now been split out into a separate feed file. Instead if would suggest a contact = field for where people can put an email or other id/link for an established chat protocol like signal or matrix.

@prologic@twtxt.net @movq@www.uninformativ.de @bender@twtxt.net That would be fantastic! I encourage you to give feedback or give your experience as an issue: https://codeberg.org/Texudus/website/issues
The specification gives the feeling that it is complete, but there is always gap for small adjustments.

⤋ Read More
In-reply-to » https://alex.party/posts/2025-05-05-the-future-of-web-development-is-ai-get-on-or-get-left-behind/

And on a similar note, cross-post from Mastodon:

What I love about HTML and HTTP is that it can degrade rather gracefully on old browsers.

My website isn’t spectacular but I don’t think it looks horrible, either. And it’s still usable just fine all the way down to WfW 3.11:

It’s not perfect, but it’s usable. And that makes me happy. Almost 30 years of compatibilty.

The biggest sacrifice is probably that I don’t enforce TLS and that HTTP 1.0 has no Host: header, so no vhosts (or rather, everything must come from the default vhost). (Yes, some old browsers send Host:, even though they predate HTTP 1.1. Netscape does, but not IBM WebExplorer, for example.)

(On the other hand, it might completely suck on modern mobile devices. Dunno, I barely use those. 🤪)

⤋ Read More
In-reply-to » one of my servers (the one that hosts yarn!) crashed while i was asleep and i woke up to several discord pings telling me it's down T__T AND my terminal stopped working and i had to install new drivers! i am half asleep!!!!

@lyse@lyse.isobeef.org it’s thankfully sorted out now but i literally turned on my PC and was like WTF IS GOING ON

⤋ Read More