Searching txt.sour.is

Twts matching #HTML
Sort by: Newest, Oldest, Most Relevant

Julien Malka proposes method for detecting XZ-like backdoors
Julien Malka has
called for the NixOS project to use build-reproducibility to detect when a program has a maintainer-generated tarball that results in a different artifact than building from source. There are good reasons for projects to release maintainer-generated tarballs, but since the materials included in them are usually documentation, extra build scripts, and so on, it makes sense to check that they don’t … ⌘ Read more

⤋ Read More

@andros@twtxt.andros.dev Can you reproduce any of this outside of your client? I can’t spot a mistake here:

$ curl -sI 'http://movq.de/v/8684c7d264/.html%2Dindex%2Dthumb%2Dgimp11%2D1.png.jpg'
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 2615
Content-Type: image/jpeg
Date: Wed, 19 Mar 2025 19:53:17 GMT
Last-Modified: Wed, 19 Mar 2025 17:34:08 GMT
Server: OpenBSD httpd

$ curl -sI 'https://movq.de/v/8684c7d264/gimp11%2D1.png'
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 131798
Content-Type: image/png
Date: Wed, 19 Mar 2025 19:53:19 GMT
Last-Modified: Wed, 19 Mar 2025 17:18:07 GMT
Server: OpenBSD httpd

$ telnet movq.de 80
Trying 185.162.249.140...
Connected to movq.de.
Escape character is '^]'.
HEAD /v/8684c7d264/.html%2Dindex%2Dthumb%2Dgimp11%2D1.png.jpg HTTP/1.1
Host: movq.de
Connection: close

HTTP/1.1 200 OK
Connection: close
Content-Length: 2615
Content-Type: image/jpeg
Date: Wed, 19 Mar 2025 19:53:31 GMT
Last-Modified: Wed, 19 Mar 2025 17:34:08 GMT
Server: OpenBSD httpd

Connection closed by foreign host.
$ 

⤋ Read More

The tell-all memoir Mark Zuckerberg tried to stop you reading
It’s hard to know whether the Facebook boss’ symbolic ways of currying favour with China, such as asking President Xi Jinping to name his unborn child, are more remarkable than Meta’s apparent plan to let the Communist Party snoop on users outside the country. ⌘ Read more

⤋ Read More

Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.

— — —

Ändring
  • Första version: 2025-03-10 07:55
  • Ändrad: 2025-03-12 18:01 +0100: Listan i “En bugg?” hade automatiskt
    numrerats av blogverktyget och HTML så poängen försvann. Nu citerad
    mer korrekt där det framgår att “1.” är borttagen.
Inledning

Nytt lagförslag: Även chatsystem ska va … ⌘ Read more

⤋ Read More

Mathieu Pasquet: slixmpp v1.9.1
This is mostly a bugfix release over version 1.9.0.

The main fix is the rust JID implementation that would behave incorrectly when
hashed if the JID contained non-ascii characters. This is an important issue as
using a non-ascii JID was mostly broken, and interacting with one failed in
interesting ways.

Fixes
  • The previously mentioned JID hash issue
  • Various edge cases in the roster code
  • One edge case in the MUC ( [XEP-0045](https: … ⌘ Read more

⤋ Read More

Datalagring, igen!
Some of my usual readers will have to excuse me. This post will be in
Swedish. It’s about proposed Swedish legislation for forcing someone
who offers a message system to the public to cooperate with the law.

— — —

Inledning

Nytt lagförslag: Även chatsystem ska vara “anpassningsskyldiga” för
hemlig avlyssning och hemlig övervakning!

Det är väl ingen överraskning bland mina läsare vad jag tycker om det.
Går förslaget igenom gör vi det mer komplicerat för vanliga användare
att meddela sig med varan … ⌘ Read more

⤋ Read More
In-reply-to » (#tbyqv7a) @andros Do edits cause problems? I sometimes make them and didn't realize it may be an issue

@bmallred@staystrong.run Any edit automatically changes the twt hash, because the hash is built over the hash URL, message timestamp and message text. https://twtxt.dev/exts/twt-hash.html So, it is only a problem, if somebody replied to your original message with the old hash. The original message suddenly doesn’t exist anymore and the reply becomes detached, orphaned, whatever you wanna call it. Threading doesn’t break, though, if nobody replied to your message.

⤋ Read More

Mathieu Pasquet: slixmpp v1.9.0
It has not been too long since 1.8.6 and here we are with 1.9.0, which is kind of a major release (following the well-known pridever numbering scheme).

Long story short, there are at least two major changes warranting the new number (and plenty of other things, read on!):

  • switching the cython jid implementation for a rust one, which will be faster and more correct
  • removing the xmpp.process() method (planned since the 1.8.0 release)

Special thanks to nicoco … ⌘ Read more

⤋ Read More
In-reply-to » @andros, I am getting:

also @Andros, I see that if I open that URL on my browser, I see weird characters in the .txt file:
description = 🏗
Perhaps your nginx server is missing a Content-Type: text/html; charset=utf-8 header?
https://serverfault.com/a/975289

In timeline it looks OK however, I think it’s relying on

The file must be encoded with UTF-8
of the original spec:
https://twtxt.readthedocs.io/en/latest/user/twtxtfile.html

⤋ Read More
In-reply-to » Na, you're spot on, @movq! The result is an expected, terrible disaster. It just seems the absolute catastrophy is delayed for another four years.

@lyse@lyse.isobeef.org

To me it appeared that the failed attempts to ban NPD in the past actually helped them gain more supporters.

What makes AfD stronger for sure is just going “lol nah we’re not even going to try”:

https://www.tagesschau.de/inland/innenpolitik/afd-verbot-antrag-100.html

If they don’t try, then it means that “it can’t be that bad, it’s just a normal party”, right? 😡

⤋ Read More
In-reply-to » here is my progress so far: https://github.com/eapl-gemugami/twtxt-direct-message-php The encryption part seems to work, if I decrypt it the message with OpenSSL. I think it can help you for some key parts not well explained in OpenSSL documentation.

@eapl.me@eapl.me @andros@twtxt.andros.dev Eureka! It works! https://github.com/upputter/testing-twtxt-dm
PBKDF2_KEY_SIZE = 48 was the turning point! My dirty little crypt.class.php can en- and decrypt, accoridng to the OpenSSL standard and options used in https://twtxt.dev/exts/direct-message.html

⤋ Read More

Bloody hell 🤦‍♂️🤦‍♂️

$ jq -r --arg host "gopher.mills.io" '. | select(.request.host==$host) | "\(.request.client_ip) \(.request.uri) \(.request.headers["User-Agent"])"' mills.io.log-au | while IFS=$' ' read -r ip uri ua; do asn="$(geoip -a "$ip")"; echo "$asn $ip $uri $ua"; done | grep -E '^45102.*' | sort | head
45102 47.251.70.245 /gopher.floodgap.com/0/feeds/democracynow/2015/Oct/14/0 ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"]
45102 47.251.84.25 /gopher.floodgap.com/0/feeds/voaheadlines/2014/Mar/09/voanews.com-content-article-1867433.html ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]
45102 47.82.10.106 /gopher.viste.fr/1/OnlineTools/hangman.cgi%3F0692937396569A52972EB2 ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43"]
45102 47.82.10.106 /gopher.viste.fr/1/OnlineTools/hangman.cgi%3F9657307A96569A52974634 ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43"]
45102 47.82.10.106 /gopher.viste.fr/1/OnlineTools/hangman.cgi%3FB7571C7896569A529E6603 ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43"]
45102 47.82.10.106 /gopher.viste.fr/1/OnlineTools/hangman.cgi%3FB75EF81296569A529E6617 ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43"]
45102 47.82.10.106 /gopher.viste.fr/1/OnlineTools/hangman.cgi%3FC6564ADB96569A5A9E660C ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43"]

⤋ Read More

reviewing logs this morning and found i have been spammed hard by bots not respecting the robots.txt file. only noticed it because the OpenAI bot was hitting me with a lot of nonsensical requests. here is the list from last month:

i have placed some middleware to reject these for now but it is not a full proof solution.

⤋ Read More

Hands-on with upcoming Xbox game South of Midnight
South of Midnight is an upcoming action adventure game featuring mythical creatures and Deep South folklore. 9news.com.au recently went hands on with game, which is set to release on Xbox Series X|S and PC in April. ⌘ Read more

⤋ Read More

OLED MacBook Pro With Thinner Design on Track for 2026 Launch
Apple’s first OLED MacBook Pro remains on schedule for a 2026 release, featuring the new slimmer design Apple is rumored to be working on, based on a new report from The Elec.

Image

Samsung Display is said to be currently producing test samples of the OLED panels on its first deposition machine … ⌘ Read more

⤋ Read More

Mathieu Pasquet: XMPP Summit 27 and FOSDEM 25 Report
Here is an account of my trip to FOSDEM & XMPP Summit this year.
Note: for privacy reasons on the broader internet, I am keeping names out of
my description of the events, but my goal here is not to diminish anyone’s merit.

Glossary

I use a bit of acronyms and jargon in this article because it talks about technical things,
so I will define them here:

  • XMPP: eXtensible Messaging and Presence Protocol, the internet standard for
    instant messaging and much more. … ⌘ Read more

⤋ Read More
In-reply-to » @movq Whether in the office or at home, I get nothing done. ;-) Well, while this is almost true, I actually tried to respond to the other thread I started myself, but starting the editor it switched immediately to this one. Any idea why this happens?

@jost@jost.sdfeu.org Hmm, not really, no. Could you share your mutt config? (Are you using mutt?) Feel free to send me an email, if doing this over twtxt doesn’t work (yet). You can find the address on https://www.uninformativ.de/contact.html ✌️

⤋ Read More

Upcoming Products for M4 Mac mini - SONNETTECH Gonna buy myself one of these when they come out (hopefully soon™) and populate with 3 M4 Mac …
Upcoming Products for M4 Mac mini - SONNETTECH Gonna buy myself one of these when they come out ( hopefully soon™) and populate with 3 M4 Mac Mini(s) – Just the base model is enough. Purpose? Migrate Plex to one of them for better performance, and run CI/CD Runners on all 3 as well as other I/O intensive tasks like syncing Y … ⌘ Read more

⤋ Read More

Deep impact: China’s AI tidal wave hits Trump, and Australia
The cheap, open AI model has sent shockwaves through Silicon Valley. Has Australia already been left behind or does DeepSeek’s rapid rise, despite limited resources, mean something similar could emerge locally? ⌘ Read more

⤋ Read More