@alexonit@twtxt.alessandrocutolo.it Yhays kind of love you!! Stance and position on this. If we are going to make chicken changes in the threading model, let’s keep content based addressing, but also improve the use of experience. So in fact, in order to answer your question, I think yes, we can do some kind of combination of both.

@lyse@lyse.isobeef.org I don’t think there’s any point in continuing the discussion of Location vs. Content based addressing.

I want us to preserve Content based addressing.

Let’s improve the user experience and fix the hash commission problems.

Here is just a small list of things™ that I’m aware will break, some quite badly, others in minor ways:

1. Link rot & migrations: domain changes, path reshuffles, CDN/mirror use, or moving from txt → jsonfeed will orphan replies unless every reader implements perfect 301/410 history, which they won’t.
   
2. Duplication & forks: mirrors/relays produce multiple valid locations for the same post; readers see several “parents” and split the thread.
   
3. Verification & spam-resistance: content addressing lets you dedupe and verify you’re pointing at exactly the post you meant (hash matches bytes). Location anchors can be replayed or spoofed more easily unless you add signing and canonicalization.
   
4. Offline/cached reading: without the original URL being reachable, readers can’t resolve anchors; with hashes they can match against local caches/archives.
   
5. Ecosystem churn: all existing clients, archives, and tools that assume content-derived IDs need migrations, mapping layers, and fallback logic. Expect long-lived threads to fracture across implementations.

@lyse@lyse.isobeef.org a content warning is kind of like a forum spoiler cut, or like the <details> tag in HTML; it lets you write a sentence or so that someone can then click to expand to see the actual post. it’s called a CW because most people use it to warn for potentially triggering/harmful subjects, but you can really use it for anything, like spoilers in a TV show or even for joke punchlines

❤️ 🎶: It’s a lie to say that I love you and let you go by Ramit

JMP: Newsletter: (e)SIM nicknames, Cheogram Android updates, and Cheogram iOS alpha
Hi everyone!

Welcome to the latest edition of your pseudo-monthly JMP update! (it’s been 7 months since the last one 😨)

In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client. Among other things, JMP has these features: Y … ⌘ Read more

is there someone (ideally not in the opposite timezone to me) who’d be willing to let me bother them with technical questions abt twtxtv2 and/or yarn’s inner workings? :3

@lyse@lyse.isobeef.org hihi ^^ i did that at first, but i personally i don’t like it when websites don’t let me change my password when i am already authenticated — fwiw you can view and log out other sessions, if that diminishes this attack vector at all

@bender@twtxt.net The address is/was correct but probably got mangled by the Markdown renderer. Let’s try again in a code block:

gopher://uninformativ.de/0/phlog/2025/2025-09/2025-09-03--roophloch.txt

@lyse@lyse.isobeef.org Yeah, that was a lot of fun. 😃 Now let’s wait and see if I ever get to actually use this. 😂

Since 2020, I’ve been putting together one playlist every year, in which each track represents one month of that year. However, I also have assigned each season two specific songs, which does not change year-to-year: Spring: “A Little Bit Of Love” by Weezer and “Gretel” by Alex G; Summer: “Dumb” by Roe Kapara and “Endless Bummer” by Weezer; Autumn: “1979” by The Smashing Pumpkins and “The Dead Come Talking” by Roe Kapara; Winter: “Red Water (Christmas Mourning)” by Type O Negative and “Christmas Time (Don’t Let The Bells End)” by The Darkness

@eldersnake@we.loveprivacy.club Haha, yeah well “thinking” isn’t really something we even know how to define, let alone simulate 🤣

Sam Whited: Notes
I’ve recently been using the Mixxx software for DJs. This page includes some
personal notes on my own use cases, what’s good, what’s bad, etc.
It is not really made for general consumption, but is thrown up here anyways.
It will be a bit rambling and/or ranty at times, most likely.

Let’s get my overall impressions of the software out of the way up front: it’s
absolutely great and I recommend it over the commercial alternatives for DJs of
all stripes (except maybe Radio DJs, it’s not really for … ⌘ Read more

@movq@www.uninformativ.de having to go to a gopher proxy to see a text document better served on readily available web servers… 🤭, but I digress. Verbatim text:

What's Missing from "Retro"
~softwarepagan
------------------------------------------------------------------
You know, often, when I say I miss older ways of computing or
connecting online, people tell me "there's nothing stopping you
from doing that now!" and they are technicay correct in most cases
(though I can't, for example, chat with friends on MSN ever
again...) However, let me explain that while this type of thing can
*sort of* fill that hole in my heart, it isn't *the same.*

Say, for example, I wanted to connect with others over a BBS. This
wouldn't offer the same types of connections it used to. While
there are BBSes around with active users, they're no longer there
to discuss movies, Star Trek, D&D, games, etc. They're there to
discuss *BBSes.* The same can be said for Gopher, old-school forums
and all sorts of revival projects (such as Escargot, Spacehey,
etc.) Retrocomputing enthusiasts, while they have a variety of
interests, are often in these spaces to discuss the medium itself
and not other topics. This exists at a stark contrast from how
things were in the past, where a non-tech-inclined person may learn
the tech to connect with likeminded others (as I did as a
Zelda-obsessed kid.)

The same can be said of old media. People will say "well, nobody is
stopping you from watching old shows/movies now!" Again, they are
technically correct. I can go home right now and watch *Star Trek:
The Next Generation* to my heart's content. It will never again,
however, be current, or new. When something is new, it serves as a
shared cultural experience. Remember how "Game of Thrones* felt in
the mid-to-late 2010s? Yeah, that.

It's sad. I sustain myself on a mixed diet of old things, new
things, and new things intended for old millenials like me who like
old things. It can be bittersweet. 

** Make awk rawk **
A friend online recently replied to something I wrote about awk by saying:

[…] it’s a danged shame [awk] didn’t continue to evolve the way Ruby, Python, PHP have evolved over the decades.

I had exactly this thought while working on my slightly unhinged“lets see if I can implement a basic scheme using awk by writing an assembler and VM in awk,” skwak. Which eventually lead me to start noodling on how to layer in some modern niceties into awk, without breaking awk’s portability.
… ⌘ Read more

@kat@yarn.girlonthemoon.xyz @movq@www.uninformativ.de Sorry, I neither finished it nor in time. :-( That’s as good as it’s gonna get for the moment: https://git.isobeef.org/lyse/gelbariab/-/tree/master/rss-proxys?ref_type=heads

The README should hopefully provide a crude introduction. The example configuration file is documented fairly well, I believe (but maybe not). You probably still have to consult and maybe also modify the source code to fit your needs.

Let me know if you run into issues, have questions, wishes etc.

@kiwu@twtxt.net LETS GOOOOOOOOO BANGER

Of course, @kat@yarn.girlonthemoon.xyz! But I’ll first write some instructions (hopefully this week) and then let you know. :-) Should be much easier then.

@kat@yarn.girlonthemoon.xyz I have absolutely no idea, but I wouldn’t be surprised if it uses the closest full image after your cut point and not the one before. Hence, the deltas between the two full images have nothing to really refer to. So, the video player just shows the first full image it finds and “freezes” the image until the video stream actually hits it.

Let me try to visualize it, | represent full images, . just subsequent deltas:

Original start of video
↓
|......|.....|........|......|..
   ↑                      ↑
   Cut point      Cut point

Resulting video:

   ....|.....|........|....
   ↑↑↑↑
   This is where it freezes         

Could be complete bullshit, though. Wouldn’t be the first time that I’m wrong. :-)

I’m just curious, what exact command line do you use to cut the video?

I give up.

Let’s try again next year. I don’t have the stamina. Death by a thousand paper cuts.

Can’t set up a meaningful taskbar: https://github.com/labwc/labwc/discussions/2924 (This is not a labwc issue, it’s a generic issue in the broader Wayland ecosystem.)

@bender@twtxt.net Finally! Let’s wait and see how it turns out. :-D

@movq@www.uninformativ.de This is a really good example of “simplicity” but achieves the intent and goals 👌

(Now, I don’t know if your screen reader can work with this. Let me know if it doesn’t.)

I don’t use a screen reader fortunately (actually they’re pretty garbage). So all good 👍 (I juse use full-screen zoom).

@prologic@twtxt.net Yeah, this really could use a proper definition or a “manifest”. 😅 Many of these ideas are not very wide spread. And I haven’t come across similar projects in all these years.

Let’s take the farbfeld image format as an example again. I think this captures the “spirit” quite well, because this isn’t even about code.

This is the entire farbfeld spec:

farbfeld is a lossless image format which is easy to parse, pipe and compress. It has the following format:

╔════════╤═════════════════════════════════════════════════════════╗
║ Bytes  │ Description                                             ║
╠════════╪═════════════════════════════════════════════════════════╣
║ 8      │ "farbfeld" magic value                                  ║
╟────────┼─────────────────────────────────────────────────────────╢
║ 4      │ 32-Bit BE unsigned integer (width)                      ║
╟────────┼─────────────────────────────────────────────────────────╢
║ 4      │ 32-Bit BE unsigned integer (height)                     ║
╟────────┼─────────────────────────────────────────────────────────╢
║ [2222] │ 4x16-Bit BE unsigned integers [RGBA] / pixel, row-major ║
╚════════╧═════════════════════════════════════════════════════════╝

The RGB-data should be sRGB for best interoperability and not alpha-premultiplied.

(Now, I don’t know if your screen reader can work with this. Let me know if it doesn’t.)

I think these are some of the properties worth mentioning:

• The spec is extremely short. You can read this in under a minute and fully understand it. That alone is gold.
  
• There are no “knobs”: It’s just a single version, it’s not like there’s also an 8-bit color depth version and one for 16-bit and one for extra large images and one that supports layers and so on. This makes it much easier to implement a fully compliant program.
  
• Despite being so simple, it’s useful. I’ve used it in various programs, like my window manager, my status bars, some toy programs like “tuxeyes” (an Xeyes variant), or Advent of Code.
  
• The format does not include compression because it doesn’t need to. Just use something like bzip2 to get file sizes similar to PNG.
  
• It doesn’t cover every use case under the sun, but it does cover the most important ones (imho). They have discussed using something other than RGBA and decided it’s not worth the trouble.
  
• They refrained from adding extra baggage like metadata. It would have needlessly complicated things.

@eldersnake@we.loveprivacy.club Yeah for sure! The thing that annoys me about a lot of this, is the sheer fact you can’t really self-host let alone self-train these things I’ve been playing around with AI at home over the past few months and building my own neural networks from scratch (in Go) with genetic algorithms on a few tasks and training sets, but man it’s hard™ 🤣 I feel like we’re doing something wrong here…

hey! i asked this a while ago but i have to ask again – is anyone willing to offer space on their yarn pod to my friend? i would love to invite her to my own but she’s unable to access my site for personal reasons. she’s really interested in seeing what yarn is about so if anyone is willing and able, let me know!

What kind of half-assed nonsense is this? They only broadcast half of the current european soccer cup … (Let me guess, I’m supposed to subscribe to some streaming service if I want to watch every game, right?)

The lid is on and the first saw brackets are done. Let’s see how impractical they are. I might have to add heavy chamfers to better guide them in.

Image

Image

I added 07 to 11: https://lyse.isobeef.org/tmp/hobelbankschubladen/

#Meta to the #EU: “the focus should be on creating a regulatory infrastructure that ensures any licence that is sufficiently permissive for the user is considered open source, rather than anointing specific licences as “open source”.”

Brilliant, sure, let’s ignore existing definitions and go with gut feeling (incidently, Meta has a gut feeling generator).

Source: https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/14625-Apply-AI-Strategy-strengthening-the-AI-continent/F3563576_en

#OpenSource

Okay, here’s a thing I like about Rust: Returning things as Option and error handling. (Or the more complex Result, but it’s easier to explain with Option.)

fn mydiv(num: f64, denom: f64) -> Option<f64> {
    // (Let’s ignore precision issues for a second.)
    if denom == 0.0 {
        return None;
    } else {
        return Some(num / denom);
    }
}

fn main() {
    // Explicit, verbose version:
    let num: f64 = 123.0;
    let denom: f64 = 456.0;
    let wrapped_res = mydiv(num, denom);
    if wrapped_res.is_some() {
        println!("Unwrapped result: {}", wrapped_res.unwrap());
    }

    // Shorter version using "if let":
    if let Some(res) = mydiv(123.0, 456.0) {
        println!("Here’s a result: {}", res);
    }

    if let Some(res) = mydiv(123.0, 0.0) {
        println!("Huh, we divided by zero? This never happens. {}", res);
    }
}

You can’t divide by zero, so the function returns an “error” in that case. (Option isn’t really used for errors, IIUC, but the basic idea is the same for Result.)

Option is an enum. It can have the value Some or None. In the case of Some, you can attach additional data to the enum. In this case, we are attaching a floating point value.

The caller then has to decide: Is the value None or Some? Did the function succeed or not? If it is Some, the caller can do .unwrap() on this enum to get the inner value (the floating point value). If you do .unwrap() on a None value, the program will panic and die.

The if let version using destructuring is much shorter and, once you got used to it, actually quite nice.

Now the trick is that you must somehow handle these two cases. You must either call something like .unwrap() or do destructuring or something, otherwise you can’t access the attached value at all. As I understand it, it is impossible to just completely ignore error cases. And the compiler enforces it.

(In case of Result, the compiler would warn you if you ignore the return value entirely. So something like doing write() and then ignoring the return value would be caught as well.)

@movq@www.uninformativ.de Yeah. :-( But hey, there are at least six of us using mail as it should be™. :-)

I sent the dealer an e-mail about that with all sorts of other issues as well. Let’s see if they fix anything of that some day. Or yet just even read it.

fn sub(foo: &String) {
    println!("We got this string: [{}]", foo);
}

fn main() {
    // "Hello", 0x00, 0x00, "!"
    let buf: [u8; 8] = [0x48, 0x65, 0x6C, 0x6C, 0x6F, 0x00, 0x00, 0x21];

    // Create a string from the byte array above, interpret as UTF-8, ignore decoding errors.
    let lossy_unicode = String::from_utf8_lossy(&buf).to_string();

    sub(&lossy_unicode);
}

Create a string from a byte array, but the result isn’t a string, it’s a cow 🐮, so you need another to_string() to convert your “string” into a string.

• https://doc.rust-lang.org/std/string/struct.String.html#method.from_utf8_lossy
  
• https://doc.rust-lang.org/std/borrow/enum.Cow.html
  

I still have a lot to learn.

(into_owned() instead of to_string() also works and makes more sense to me, it’s just that the compiler suggested to_string() first, which led to this funny example.)

Lately (since there are AI summaries at the top), each time I Google for the answer to a question, the AI summary has at least a part of the answer wrong. It makes up laws that do not exist, books that were never published - in sum, well written sentences that make linguistic sense, but with made up content.

Let me repeat: each time. Maybe I only search for hard stuff, or fringe stuff, or this some other explanation - but seriously, it’s hard to understand how isn’t Google ashamed of its AI overviews… or not sued under some regulation regarding fake news.

PS: yes, I know, my fault for using Google as a search engine.

@bender@twtxt.net Let’s start a counter penguin feed! Or something along those whiskers. Should also at least mentally help with the heat.

“Later in the evening, posting on X, #Macron said: “I’m banning #socialmedia for #children under 15. Platforms have the ability to verify age. Let’s do it.”

French authorities are already progressing with efforts to force certain social media sites — including X, Reddit, Bluesky and #Mastodon — to introduce age verification, by classifying them as pornographic websites.

French measures forcing porn sites to verify their users’ ages came into effect on June 7, prompting the world’s largest porn website, Pornhub, to stop operating in France. Demand for virtual private network services, which allow users to trick websites into thinking they are in a different location, immediately surged.”

https://www.politico.eu/article/emmanuel-macron-social-media-ban-minors-france/

$560 Bounty: How Twitter’s Android App Leaked User Location

Image

A Silent Broadcast That Let Any App Spy on You Without Asking

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/560-bounty-how-twitters-android-app-leaked- … ⌘ Read more

watchOS 26 Features New Gesture to Dismiss Notifications
Apple in watchOS 26 has added a new one-handed wrist-flick gesture to easily dismiss notifications, but the gesture only works on newer Apple Watch models.

Image

When you raise your wrist to check a notification but aren’t ready to respond, you can now simply flick your wrist – turn it over and back – to dismiss it. The quick gesture lets you dism … ⌘ Read more

‘Let the alibi artists stand aside’ - why Oakmont is toughest US Open test
There are few, if any, tougher more uncompromising tests than Oakmont Country Club, the home of this week’s US Open, writes Iain Carter. ⌘ Read more

WebSocket Wizardry: How a Forgotten Channel Let Me Sniff Private Chats in Real-Time ️‍♂️

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »]( … ⌘ Read more

One of the all-time greatest matches? Alcaraz will ‘let the people decide’
Carlos Alcaraz says he will “let the people decide” if his French Open comeback over Jannik Sinner is one of the greatest matches of all-time. ⌘ Read more

$1,000 Bug: Firefox Account Deletion Without 2FA or Authorization

Image

How a Missing Backend Check Let Attackers Nuke Accounts With Just a Password

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/1-000-bu … ⌘ Read more

Securing Kubernetes Traffic with Calico Ingress Gateway
Kubernetes, Envoy, GatewayAPI, cert-manager, CNI, Calico If you’ve managed traffic in Kubernetes, you’ve likely navigated the world of Ingress controllers. For years, Ingress has been the standard way of getting our HTTP/S services exposed. But let’s… ⌘ Read more

I Let ChatGPT Make All My Architectural Decisions for a Month: The Surprising Results
Comments ⌘ Read more

Trump says it might be better to let Ukraine and Russia ‘fight for a while’ ⌘ Read more

**☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything **

Image

Free Link 🎈

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/%EF%B8%8F-cors-of-destruction-how-m … ⌘ Read more

How Let’s Encrypt reduced the impact of zombie clients
Comments ⌘ Read more

letting off some steam ! ⌘ Read more

JWT the Hell?! How Weak Tokens Let Me Become Admin with Just a Text Editor ️

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/jwt-the-hell-how-weak-to … ⌘ Read more

Deals: M4 MacBook Air for $812! MacBook Pro 16″ M4 Max 48GB/1TB for $3440, & More
Amazon isn’t letting up on the great deals, with the M4 Macbook Air 13″ model now being offered at just $812 for the base 13″ model with 16GB RAM, 256GB SSD, and Midnight color. You can also get great deals on other colors, but the cheapest by far is the dark Midnight color at the … [Read More](https://osxdaily.com/2025/06/03/deals-m4-macbook-air-for-812-macbook-pro-16 … ⌘ Read more

An Alfred workflow to open GCP services and browse resources within
An Alfred workflow that lets you instantly open Google Cloud services or search GCP resources—fast, simple, and right from your Alfred.

Comments ⌘ Read more

New doco lets us eavesdrop on John and Yoko’s conversations in the 70s
One To One: John & Yoko takes us inside the lives of the famous couple as they agitate for revolution in their new home city of New York. ⌘ Read more

@kat@yarn.girlonthemoon.xyz A blast from the past! 😅 And all of it still works, that’s quite the surprise. I mean, I’m making real phone calls here and let the modems talk over that connection … Almost like in the 90ies. 😅

How Telstra’s new satellite-to-mobile messaging lets you text using Starlink
Telstra has become the first Australian telco to activate “direct to cell” functionality with SpaceX’s Starlink satellites. ⌘ Read more

$540 Bounty: How a Misconfigured Warning Endpoint in Apache Airflow Exposed DAG Secrets

Image

CVE-2023–42780: An Improper Access Control Bug That Let Low-Privileged Users View DAG Impo … ⌘ Read more

**From Forgot Password to Forgot Validation: A Broken Flow That Let Me Take Over Accounts **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/from … ⌘ Read more

Letting Varesa have it ⌘ Read more

These Older College Girls won’t let Him Sleep (Artist: Wakamatsu) ⌘ Read more

Two fantastic weeks in Scotland
I am back from Scotland, and my first days back at work are behind me. Let me tell you about my awesome vacation! ⌘ Read more

Two fantastic weeks in Scotland
I am back from Scotland, and my first days back at work are behind me. Let me tell you about my awesome vacation! ⌘ Read more

Two fantastic weeks in Scotland
I am back from Scotland, and my first days back at work are behind me. Let me tell you about my awesome vacation! ⌘ Read more

How to fix email encryption
Comments ⌘ Read more

[$] Allowing BPF programs more access to the network
Mahé Tardy led two sessions about some of the challenges that he, Kornilios Kourtis,
and John Fastabend have run into in their work on
Tetragon (Apache-licensed BPF-based security monitoring software)
at the Linux Storage, Filesystem, Memory Management, and BPF Summit. The session
prompted discussion about the feasibility of letting BPF programs
send data over the network, as well as potential new kfuncs to let BPF firewalls
send TCP reset packets. Tardy pre … ⌘ Read more

**From CSP to OMG: How a Tiny Misconfigured Header Let Me Run JS Anywhere **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/from-csp-to-omg-how-a-tiny-misconfigured-header-let- … ⌘ Read more

Let me and my husband draw your cats terribly! ⌘ Read more

…why- just why. Let me pee in peace ⌘ Read more

@thecanine@twtxt.net right. Spell checkers are not AI. Full grammar checking, and correction? That one I have not seeing, but on AI. So, what I meant was, let the grammar gaffes show; we type as we speak (most of the time). About spelling mistakes, well, let them be corrected as we have done since 1971(?).

Let him cook ⌘ Read more

@prologic@twtxt.net to err is human, to forgive is divine, right? I say let us err, and forgive. My grammatical errors make me me. Misspellings? Well, we need no stinky AI for that!

should i let him in? he comes everyday and just stands there ⌘ Read more

iOS 19 Will Let Developers Use Apple’s AI Models in Their Apps
Apple will make its artificial intelligence models available to developers to use in their apps, reports Bloomberg. The company plans to introduce a new software development kit (SDK) in iOS 19 that will make it easier for app creators to add AI features.

![](htt … ⌘ Read more

I let the street cat into my apartment ⌘ Read more

Go Wails 桌面開發之 Go 與 Preact 如何協作通信?
上一篇文章裏我們簡單的瞭解了 Wails，在本篇文章裏將帶你從 0 開始，藉助 Wails 框架構建一個前後端分離的 Todo 應用，前端用 Preact，後端使用 Go，並講解它們之間的通信機制與數據傳遞方式。閒話少說，開始今天的內容，let’s go！！！Wails 框架如何工作？—————–在 Wails 中，前端通過 WebView 渲染頁面，後端通過 Go 提供邏輯 ⌘ Read more

Go Wails 桌面開發之 Go 與 Preact 如何協作通信?
上一篇文章裏我們簡單的瞭解了 Wails，在本篇文章裏將帶你從 0 開始，藉助 Wails 框架構建一個前後端分離的 Todo 應用，前端用 Preact，後端使用 Go，並講解它們之間的通信機制與數據傳遞方式。閒話少說，開始今天的內容，let’s go！！！Wails 框架如何工作？—————–在 Wails 中，前端通過 WebView 渲染頁面，後端通過 Go 提供邏輯 ⌘ Read more

**Token of Misfortune: How a Refresh Token Leak Let Me Regenerate Unlimited Sessions **

Image

Free Link 🎈

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/token-of-misfortune … ⌘ Read more

@bender@twtxt.net It’s still a straight-through to the Eris backend that itself uses a Let’s Encrypt cert now. Haven’t tried to also terminate TLS at the Edge yet.

$500 Bounty: Race Condition in Hacker101 CTF Group Join

Image

$500 for discovering a timing flaw in Hacker101’s invite system that let users join the same team multiple times

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/50 … ⌘ Read more

** Blog Title: Not Your File: How Misconfigured MIME Types Let Me Upload Evil Scripts **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/blog-title-not-your … ⌘ Read more

visionOS 3 Will Let Apple Vision Pro Users Scroll With Their Eyes
Apple Vision Pro users could soon be able to scroll through content with their eyes, according to Bloomberg. Apple is working on a visionOS 3 feature that would eliminate the need for hand gestures when browsing websites, reading, and more.

![](https://images. … ⌘ Read more

**Forget Me Not: How Broken Logout Functionality Let Me Ride Sessions Forever **

Image

Hey there!😁

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/forget-me-not-how-broken-logout-function … ⌘ Read more

@prologic@twtxt.net haven’t noticed anything weird in the logs! i’ll let you know if it happens again and monitor more closely though. it was def weird!

It’s more than a wind turbine for home — Unlimited, free energy at home with this 22-century invention
Laila A. ,  Contributing Writer  -  ECO NEWS

Stephan: Here is some potentially quite good news about renewable energy. I will follow this and let you know

Image

With the world moving toward the adopt … ⌘ Read more

Hidden HackerOne & Bugcrowd Programs: How to Get Private Invites

Image

“Private programs are where the real gold lies… but no one tells you how to get there. Let me break it down for you — with secrets most…

[Continue reading on In … ⌘ Read more

it’s mother’s day, let’s see a surprise ⌘ Read more

@bender@twtxt.net How do you explain mine then? Unless it was registered before me, then let go of and I re-registered it later? 🤔

Top 10 Ways Hackers Exploit Web Applications (and How to Prevent Them)

Image

Hackers don’t wait for big websites. They look for easy mistakes. Let’s fix them before they find yours.

[Continue reading on InfoSec Write- … ⌘ Read more

Unlimited Emails: A Bug That Let Me Spam Anyone =>$250

Image

Free Article Link: Click for free!

Continue reading on InfoSec Write-ups » ⌘ Read more

$100 Bounty: How a Spoofed Email Could Change Any Username on HackerOne

Image

A simple email spoofing trick could let anyone hijack your HackerOne username and profile link

[Continue reading on InfoSec Write-ups »] … ⌘ Read more

50% Off Monthly, Yearly, & Lifetime Subscriptions (Through Friday, May 9th)
Let’s make Big Tech grumpy. ⌘ Read more

50% off Monthly, Yearly Subscriptions! Lifetime Subs for $100! Let’s get everyone subscribing to The Lunduke Journal!
The number of free subscribers to The Lunduke Journal has absolutely exploded — across a bunch of platforms — which is truly amazing. ⌘ Read more

Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About

Image

Let’s Skip the “Sign Up on HackerOne” Talk

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/bug-hunting-for-real-tools-tactics-and-truths-no … ⌘ Read more

Kernel prepatch 6.15-rc5
Linus has released 6.15-rc5 for testing.
“So it all feels like things are just continuing to go well this
release. Let’s hope I didn’t jinx it by saying so.” ⌘ Read more

Let me see whose black cat has a white background ⌘ Read more

So, the “AI” bots have reached my website. Looks like they’re just slowly crawling everything at the moment – no DDoS-like attack yet. I wonder if that has something to do with my website being 100% static HTML. There are no GET parameters they can tweak and, at the end of the day, there’s not that much data on my server anyway … And maybe they have no idea what stagit is, so it doesn’t trigger “standard behavior”, like “this is a Gitea instance, let’s crawl this like crazy!”?

I’ve just released version 1.0 of twtxt.el (the Emacs client), the stable and final version with the current extensions. I’ll let the community maintain it, if there are interested in using it. I will also be open to fix small bugs.
I don’t know if this twt is a goodbye or a see you later. Maybe I will never come back, or maybe I will post a new twt this afternoon. But it’s always important to be grateful. Thanks to @prologic@twtxt.net @movq@www.uninformativ.de @eapl.me@eapl.me @bender@twtxt.net @aelaraji@aelaraji.com @arne@uplegger.eu @david@collantes.us @lyse@lyse.isobeef.org @doesnm@doesnm.p.psf.lt @xuu@txt.sour.is @sorenpeter@darch.dk for everything you have taught me. I’ve learned a lot about #twtxt, HTTP and working in community. It has been a fantastic adventure!
What will become of me? I have created a twtxt fork called Texudus (https://texudus.readthedocs.io/). I want to continue learning on my own without the legacy limitations or technologies that implement twtxt. It’s not a replacement for any technology, it’s just my own little lab. I have also made a fork of my own client and will be focusing on it for a while. I don’t expect anyone to use it, but feedback is always welcome.
Best regards to everyone.
#twtxt #emacs #twtxt-el #texudus

Let’s Encrypt: Why You should (and Shouldn’t) use free SSL certificates

Image

Free, fast, and secure — but is Let’s Encrypt the right SSL solution for your website?

[Continue reading on InfoSec Write-ups »](https://infosecwriteup … ⌘ Read more

The AI-Powered DevOps revolution: Redefining developer collaboration
Collaboration is crucial to successful software delivery. Let’s dive into how AI can help your development teams decrease their time to delivery, and foster better communication and collaboration using GitHub Copilot.

The post [The AI-Powered DevOps revolution: Redefining developer collaboration](https://github.blog/ai-and-ml/github-copilot/the-ai-powered-devops-revolution-redefining-de … ⌘ Read more

Windows RDP lets you log-in using revoked passwords. Microsoft is ok with that
Comments ⌘ Read more

that said, and reading to @sorenpeter@darch.dk and @andros@twtxt.andros.dev I have new thoughts. I assume that this won’t change anyone’s opinions or priorities, so it makes no harm sharing them.

It’s always tempting to use something that already exists (like X, Masto, Bsky, etc.) rather that building anything through effort and disagreement until reaching to something useful and valuable together. A ‘social service’ is only useful if people is using it.

I’ll add that I haven’t lost interest on the ‘hacky’ part of twtxt about developing tools, protocols, and extensions as a community. It’s the appealing part! It’s a nice hobby to have, shared with random people across the world.
But this is not the right way for me, and makes me feel that I’m unwelcome to propose something different (after watching replies to my previous twt). Feels like “If you don’t agree, you are free to leave, we’ll miss you.” Naah, not cool. I’ve lived that many times before, and nowadays I don’t have enough spare time and energy for a hobby like that.

Let’s see what happens next with the micro-community!

July 1st. 63 days from now to implement a backward-incompatible change, apparently not open to other ideas like replacing blake with SHA, or discussing implementation challenges for other languages and platforms.
Finally just closing #18, #19 and #20 without starting a proper discussion and ignoring a ‘micro consensus’ feels… not right.

I don’t know what to think rather than letting it rest (May will be busy here) and focus on other stuff in the future.

twt-hash-v2.md#implementation-timeline

Let’s Debug
Comments ⌘ Read more

LOL Amazon displaying tariff prices “hostile and political,” White House say is this the kettle calling the pot black? 🤣 Trump, pfft, what a fucking idiot. No clue how economies work, let alone countries.