[47Β°09β²35β³S, 126Β°43β²36β³W] Reading: 1.44000 PPM
Open Sauce is nearly here!! β Read more
setpriv on Linux supports Landlock.
@prologic@twtxt.net Yeah, itβs not a strong sandbox in jennyβs case, it could still read my SSH private key (in case of an exploit of some sort). But I still like it.
I think my main takeaway is this: Knowing that technologies like Landlock/pledge/unveil exist and knowing that they are very easy to use, will probably nudge me into writing software differently in the future.
jenny was never meant to be sandboxed, so it canβt make great use of it. Future software might be different.
(And this is finally a strong argument for static linking.)
setpriv on Linux supports Landlock.
Another example:
$ setpriv \
--landlock-access fs \
--landlock-rule path-beneath:execute,read-file:/bin/ls-static \
--landlock-rule path-beneath:read-dir:/tmp \
/bin/ls-static /tmp/tmp/xorg.atom
The first argument --landlock-access fs says that nothing is allowed.
--landlock-rule path-beneath:execute,read-file:/bin/ls-static says that reading and executing that file is allowed. Itβs a statically linked ls program (not GNU ls).
--landlock-rule path-beneath:read-dir:/tmp says that reading the /tmp directory and everything below it is allowed.
The output of the ls-static program is this line:
βrwβrββrββββx 3000 200 07-12 09:19 22'491 β /tmp/tmp/xorg.atom
It was able to read the directory, see the file, do stat() on it and everything, the little x indicates that getting xattrs also worked.
3000 and 200 are user name and group name β they are shown as numeric, because the program does not have access to /etc/passwd and /etc/group.
Adding --landlock-rule path-beneath:read-file:/etc/passwd, for example, allows resolving users and yields this:
βrwβrββrββββx cathy 200 07-12 09:19 22'491 β /tmp/tmp/xorg.atom
ProcessOne: ejabberd 25.07
Release Highlights:
This release focus on integration in a wider federated network, with support for spam fighting features, better compliance with Matrix network and native support for PubSub Server Information to have your server count as part of the wider XMPP network (for example, you can register your server on XMPP Network Graph).
- **Spam filter β¦ β Read more
CPU Kernel Mode - Computerphile β Read more
[47Β°09β²50β³S, 126Β°43β²12β³W] Reading: 1.94 Sv
[47Β°09β²53β³S, 126Β°43β²13β³W] Reading: 0.99 Sv
@prologic@twtxt.net Yeah, this really could use a proper definition or a βmanifestβ. π Many of these ideas are not very wide spread. And I havenβt come across similar projects in all these years.
Letβs take the farbfeld image format as an example again. I think this captures the βspiritβ quite well, because this isnβt even about code.
This is the entire farbfeld spec:
farbfeld is a lossless image format which is easy to parse, pipe and compress. It has the following format:
ββββββββββ€ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Bytes β Description β
β βββββββββͺββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ£
β 8 β "farbfeld" magic value β
ββββββββββΌββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ’
β 4 β 32-Bit BE unsigned integer (width) β
ββββββββββΌββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ’
β 4 β 32-Bit BE unsigned integer (height) β
ββββββββββΌββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ’
β [2222] β 4x16-Bit BE unsigned integers [RGBA] / pixel, row-major β
ββββββββββ§ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
The RGB-data should be sRGB for best interoperability and not alpha-premultiplied.
(Now, I donβt know if your screen reader can work with this. Let me know if it doesnβt.)
I think these are some of the properties worth mentioning:
- The spec is extremely short. You can read this in under a minute and fully understand it. That alone is gold.
- There are no βknobsβ: Itβs just a single version, itβs not like thereβs also an 8-bit color depth version and one for 16-bit and one for extra large images and one that supports layers and so on. This makes it much easier to implement a fully compliant program.
- Despite being so simple, itβs useful. Iβve used it in various programs, like my window manager, my status bars, some toy programs like βtuxeyesβ (an Xeyes variant), or Advent of Code.
- The format does not include compression because it doesnβt need to. Just use something like bzip2 to get file sizes similar to PNG.
- It doesnβt cover every use case under the sun, but it does cover the most important ones (imho). They have discussed using something other than RGBA and decided itβs not worth the trouble.
- They refrained from adding extra baggage like metadata. It would have needlessly complicated things.
@movq@www.uninformativ.de Yeah thatβs why Iβm striking this conversation with you π Not only do I respect your opinion quite highly π€£ But like you say (and Iβve read their philipshpy) it can be a bit βelitismβ for sure. Iβm genuinely interested in what we think of as software that βdoesnβt suckβ. Tb be honest I havenβt really put thought to paper myself, but I reckon if I did, Iβd have some opinions/ideasβ¦
Ignite Realtime Blog: Empowering Digital Sovereignty with Openfire: A Secure and Customizable Communication Platform
In todayβs interconnected world, digital sovereignty has become increasingly important for individuals and organizations seeking to maintain control over their data, infrastructure, and technologies. Openfire, an open-source, real-time collaboration (RTC) server that uses the XMPP (Extensible Messaging and Presence β¦ β Read more
@eldersnake@we.loveprivacy.club This was an interesting read for sure! π I donβt think it had anything I hadnβt already considered in terms of the ethical/moral points of view. Iβm not sure where I stand myself either to be honest. Iβve forced myself to get familiar with the ecosystem and tooling, because in my line of work as a tech lead (staff engineer in sre) you donβt want to be that one guy that ya know π Ethically/Morally though, Iβm definitely with the sentiment of this post π Much like the whole Crypto hype yaers back (if yβall remember?!) this is also one of the most energy hungry pieces of βtechβ (if you can call it that?) in a while. Then thereβs these other issues βstealing peopleβs workβ, βreliance is causing humans to become cognitively weak and neural connections to shrinkβ, to name a fewβ¦
[47Β°09β²47β³S, 126Β°43β²12β³W] Raw reading: 0x686A9D81, offset +/-5
[47Β°09β²32β³S, 126Β°43β²31β³W] Raw reading: 0x686A1EF1, offset +/-1
World Foundation Models - Computerphile β Read more
How does Yorick levitate? β Read more
** Om nom nom LLMs, in which I respond to Simon Willisonβs analogy **
I am hesitant to wade into the tumultuous waters that are the discourse around generative AI and LLMs, but this morning I came across a thing that so thoroughly melted my brain I feel uncontrollably compelled to respond.
This morning, at evidently 4:10 AM (no mention of timezone), Simon Willison shared the following blog post, quoted here in full:
Quitting programming as β¦ β Read more
Why Iβm still a minimalist after 14 years β Read more
[47Β°09β²35β³S, 126Β°43β²25β³W] Reading: 0.83 Sv
[47Β°09β²52β³S, 126Β°43β²06β³W] Raw reading: 0x6864BCD1, offset +/-4
[47Β°09β²57β³S, 126Β°43β²52β³W] Raw reading: 0x68643031, offset +/-2
[47Β°09β²51β³S, 126Β°43β²21β³W] Reading: 1.91000 PPM
[47Β°09β²46β³S, 126Β°43β²48β³W] Reading: 0.18 Sv
Vimconf 2025 Small Tickets β Read more
@prologic@twtxt.net I like the last two, on the first three you sent. I looked up βCanarvon Gorgeβ, and read more about it. Thanks for introducing me to it!
[47Β°09β²37β³S, 126Β°43β²07β³W] Reading: 1.99000 PPM
Our new LEVITATING Servo Skull Secretary β Read more
[47Β°09β²48β³S, 126Β°43β²55β³W] Raw reading: 0x685EEA31, offset +/-5
[47Β°09β²49β³S, 126Β°43β²48β³W] Reading: 0.74 Sv
[47Β°09β²30β³S, 126Β°43β²18β³W] Reading: 1.61000 PPM
Thanks @bender@twtxt.net! Yeah, so super cute. I couldnβt pet them, though. Despite very curious, they were also very restless.
I persuaded my dad to check out the fireflies with me tonight. He only wanted to go for a short trip, so we came just across a couple hundred of them. Otherwise, the thousands mark would have been exceeded in no time. He was super glad I talked him into that. :-)
It was also my first time to see them over the meadows. Those numbers donβt compare to the ones inside the forest, no question, but we probably saw 60 or so. Havenβt come across them there before, I only heard and read about that.
Note to future-Lyse next year: Leaving at 21:45 seems like a good time. We left earlier and had to wait just a few more minutes for them to come out in masses.
Too bad itβs impossible to share photos or videos. My camera isnβt made for that at all, not even close.
Reinforcement Learning - Computerphile β Read more
I built a Talking, Levitating Servo Skull from Warhammer 40k β Read more
[47Β°09β²21β³S, 126Β°43β²14β³W] Reading: 1.25000 PPM
[47Β°09β²17β³S, 126Β°43β²30β³W] Raw reading: 0x685AF5B2, offset +/-3
[47Β°09β²35β³S, 126Β°43β²09β³W] Raw reading: 0x685A4CF2, offset +/-4
Read Lukas 1, the announciation and birth of the prophet John the Baptist. bible.com
[47Β°09β²23β³S, 126Β°43β²34β³W] Reading: 1.72 Sv
** Of fairies, compost, and computers **
Lately Iβve buried myself in reading fiction. Stand outs from among the crowd are, of course, Middlemarch but also a lot of sort of scholarly fairy fiction; works that follow the scholastic adventures of studious professorial types in vaugely magical settings. Namely Emily Wildeβs Encyclopedia of Faeriesβ, Heather Fawcett and The Ten Thousand Doors of January, Alix E. Harrow.
Iβve also been working on a handful of personal utility programs. I β¦ β Read more
** My measurer **
My dad is an electrical engineer and physicist. Measuring things is a core part of his professional life, and something he seems to spend a lot of time doing around the house. This is all to say my dad is relatively expert in the ways of measuring things so I think itβs hilarious that he calls absolutely anything he is using to measure anything elseβmy measurer.β Measuring tape, oscilloscope, scale, volt meter, bubble level, table spoons, whatever. Theyβre allβmy measurer.β β Read more
Giving your house plants genetic super powers β Read more
[47Β°09β²47β³S, 126Β°43β²52β³W] Reading: 1.68 Sv
** growing good **
ββ¦for the growing good of the world is partly dependent on unhistoric acts; and that things are not so ill with you and me as they might have been, is half owing to the number who lived faithfully a hidden life, and rest in unvisited tombs.β
George Eliot, Middlemarch β Read more
Unless your Terms of use update email looks and reads the same as the one I got yesterday from mastodon.social, I donβt wanna know about it, nor do I agree to it.
@kat@yarn.girlonthemoon.xyz Ooh, Iβve got to bookmark that page. π
@aelaraji@aelaraji.com I wish I had the luxury of not reading that junk. π But instead, I have a Mutt hotkey that pipes an HTML mail through elinks β¦ Bah.
@movq@www.uninformativ.de > That guy over there in the cornerβ¦
Iβm literally sitting in a corner chuckles. I rarely get any emails nowadays. But if I do and it is not plain-text, then my Mutt gets to bark at it and I, justβ¦ wonβt read it. π€·π½ββοΈ
@movq@www.uninformativ.de Yeah. :-( But hey, there are at least six of us using mail as it should beβ’. :-)
I sent the dealer an e-mail about that with all sorts of other issues as well. Letβs see if they fix anything of that some day. Or yet just even read it.
It all started in New York in the early 1980s. Click, now 85, and his friends were sitting at the long bar of the New York Athletic club reading magazine articles about boxing, fencing, judo and wrestling. βOne of my mates said, βDude, we donβt do any of those things.ββ They had to face it. They were dull. They decided to embrace their dullness.
As a joke, they started The Dull Menβs Club, which involved some very silly, dull activities. They chartered a tour bus but didnβt go anywhere. βWe toured the bus. We walked around the outside of the bus a few times. And the driver explained the tyre pressures and turned on the windscreen wipers.β
OpenBSD has the wonderful pledge() and unveil() syscalls:
https://www.youtube.com/watch?v=bXO6nelFt-E
Not only are they super useful (the program itself can drop privileges β like, it can initialize itself, read some files, whatever, and then tell the kernel that it will never do anything like that again; if it does, e.g. by being exploited through a bug, it gets killed by the kernel), but they are also extremely easy to use.
Imagine a server program with a connected socket in file descriptor 0. Before reading any data from the client, the program can do this:
unveil("/var/www/whatever", "r");
unveil(NULL, NULL);
pledge("stdio rpath", NULL);
Done. Itβs now limited to reading files from that directory, communicating with the existing socket, stuff like that. But it cannot ever read any other files or exec() into something else.
I canβt wait for the day when we have something like this on Linux. There have been some attempts, but itβs not that easy. And itβs certainly not mainstream, yet.
I need to have a closer look at Linuxβs Landlock soon (βsoonβ), but this is considerably more complicated than pledge()/unveil():
@bender@twtxt.net Both Gopher and Mastodon are a way for me to βbabbleβ. π I basically shut down Gopher in favor of Mastodon/Fedi last year. But the Fediverse doesnβt really work for me. Itβs too focused on people (I prefer topics) and I dislike the addictive nature of likes and boosts (Iβm not disciplined enough to ignore them). Self-hosting some Fedi thing is also out of the question (the minimalistic daemons donβt really support following hashtags, which is a must-have for me).
Iβll probably keep reading Fedi stuff, I just wonβt post that much, I think.
@prologic@twtxt.net Yeah, itβs difficult, you often donβt get what youβd expect. They also make heavy use of 3rd party libraries. IIUC, for random numbers, they refer to this library. Iβve read many times that the Rust stdlib is intentionally minimalistic (to make it easier to maintain and port and all that).
Iβm struggling with this, using 3rd party libs for so many things isnβt really my cup of tea. Iβll probably make my own tiny little βstandard libraryβ. Itβs silly, but I donβt see any other options. π€·
How many human eggs to make an omelet? β Read more
[47Β°09β²13β³S, 126Β°43β²20β³W] Raw reading: 0x684880B1, offset +/-1
Raducanu sees off Bucsa βin styleβ to win Queenβs opener
Watch the moment Emma Raducanu defeats Spaniard Cristina to advance into the second round of the Womenβs Singles at Queenβs. β Read more
Amoklauf in Graz: Weitere Frau im Spital verstorben β Read more
My Journey to KubeCon + CloudNativeCon 2024: A Story of Volunteering and Growth
My name is Oscar Ayra and I am from Lima, Peru. In 2024, I had the privilege of being part of the volunteer team at Kubernetes Community Days (KCD) Lima. It was an enriching experience whereβ¦ β Read more
Sizewell C pledged to lower bills but will take at least 10 years
Sir Keir Starmer says the development of Sizewell C on the Suffolk coastline will create 10,000 jobs over the next decade. β Read more
Amoklauf beispiellos fΓΌr Γsterreich
Nach einer bisher fΓΌr das Land beispiellosen Amoktat, bei der es am Dienstag in einer Grazer Schule mindestens zehn Todesopfer gab, ist in Γsterreich eine dreitΓ€gige Staatstrauer ausgerufen worden. Wie am Nachmittag bei einer Pressekonferenz bekanntgegeben wurde, handelt es sich beim TΓ€ter um einen 21-jΓ€hrigen ehemaligen SchΓΌler der Grazer Schule. Neben den Toten gibt es nach Angaben von Innenminister Gerhard Karner (ΓVP) zwΓΆlf Verletzte, manche davon schwer. β Read more
Newbie No More: Lessons from My First KubeCon + CloudNativeCon as a Speaker
Introduction April in London has never felt so electric. From the first footstep in the ExCeL halls to the hallway conversations, KubeCon + CloudNativeCon Europe 2025 was a whirlwind of new ideas, familiar faces, and thoseβ¦ β Read more
Greta Thunberg deported, Israel says, after Gaza aid boat intercepted
The activistsβ yacht, which was trying to carry aid to Gaza, was intercepted by Israeli forces in the early hours of Monday. β Read more
Passing of Jean-Raymond Abrial
Jean-Raymond Abrial, father (in particular!) of the Z notation, but also of the B method, and then Event-B, passed away on May 26. I was surprised to see that this piece of news, which may be of some interest to formal method folks, doesnβt seem to be very well known (thereβs not much material on the web).
Here are some links (on LinkedIn, sorry):
[by Bertrand Meyer](https://www.linkedin.com/posts/bertrandmeyer_i-am-saddened-to-report-from-todays-print-activity-7335684948974034944-SJf1? β¦ β Read more
UK sanctions far-right Israeli ministers for βinciting violenceβ against Palestinians
Security Minister Itamar Ben-Gvir and Finance Minister Bezalel Smotrich will both face a travel ban, the UK says. β Read more
**PM denies bowing to political pressure over winter fuel **
Sir Keir Starmer says his decision to give more pensioners the payment was the result of an improving economy. β Read more
Russian intelligence document calls China βthe enemyβ, leak exposes Moscowβs deep fear | Today News β Read more
[$] Improving iov_iter
The iov_iter interface is used to
describe and iterate through buffers in the kernel. David Howells led a combined storage and
filesystem session at
the 2025 Linux Storage,
Filesystem, Memory Management, and BPF Summit (LSFMM+BPF) to discuss ways
to improve iov_iter. His topic\β¨proposal listed a few different ideas including replacing some
iov_iter types and possibly allowing mixed types in chains of β¦ β Read more
Sizewell C pledged to lower bills but will take at least 10 years
Sir Keir Starmer says the development of Sizewell C on the Suffolk coastline will create 10,000 jobs over the next decade. β Read more
**Foreign Office staff told to consider resigning if they disagree over Gaza **
More than 300 Foreign Office staff had raised concerns about potential UK βcomplicityβ in Israelβs conduct in Gaza. β Read more
Julcher und Perner als VfGH-Mitglieder angelobt β Read more
Rio in bed [Blue Archive] β Read more
No blank cheque for Sizewell C nuclear project, says PM
Sir Keir Starmer says the development of Sizewell C on the Suffolk coastline will create 10,000 jobs over the next decade. β Read more
Neue Spiele: Dune Awakening schlΓ€gt GTA-MΓΆchtegern-Klon
Zwei NeuverΓΆffentlichungen mit sehr unterschiedlichen Reaktionen der Community: Ab sofort sind Dune Awakening und Mindseye erhΓ€ltlich. ( Dune Awakening, Steam)
Neom: BrΓΌcke ΓΌber das Rote Meer zu The Line geplant
Saudi-Arabien und die Halbinsel Sinai sollen mit einer 20 km langen BrΓΌcke verbunden werden. Das Megaprojekt Neom wΓΌrde damit eine Bahnverbindung bekommen. ( Infrastruktur, Energie & Klima)
UK firms hold off on hiring as job vacancies fall
The employment market is βweakeningβ official figures suggest, as cautious businesses delay recruitment. β Read more
[$] An end to uniprocessor configurations
The Linux kernel famously scales from the smallest of systems to massive
servers with thousands of CPUs. It was not always that way, though; the
initial version of the kernel could only manage a single processor. That
limitation was lifted, obviously, but single-processor machines have always
been treated specially in the scheduler. That longstanding situation may
soon come to an end, though, if this patch\β¨series from Ingo M β¦ β Read more
Studie: Sport ist nach wie vor eine MΓ€nnerdomΓ€ne β Read more
Huawei-GrΓΌnder: US-Chip-Handelskrieg fΓΌr China βkein Grund zur Sorgeβ
Ren Zhengfei ruft dazu auf, hart zu arbeiten, um den RΓΌckstand gegenΓΌber den USA aufzuholen. Huawei liege nur noch um eine Chipgeneration hinter den USA. ( Huawei, Prozessor)
Breaking: Australia sanctions against two far-right Israeli ministers over Gaza comments
Foreign Minister Penny Wong says Australia will join the UK, Canada and New Zealand in sanctioning Itamar Ben-Gvir and Bezalel Smotrich over comments they have made about Gaza. β Read more
Tearlaments squirting hard (YugiOh) β Read more
Weltbank senkt wegen ZΓΆllen Konjunkturprognosen β Read more
Griechische Justiz geht gegen extrem Rechte im Parlament vor β Read more
No blank cheque for Sizewell C nuclear project, says PM
Sir Keir Starmer says the development of Sizewell C on the Suffolk coastline will create 10,000 jobs over the next decade. β Read more
**PM denies bowing to political pressure over winter fuel **
Sir Keir Starmer says his decision to give more pensioners the payment was the result of an improving economy. β Read more
UK sanctions far-right Israeli ministers over Gaza comments
Security Minister Itamar Ben-Gvir and Finance Minister Bezalel Smotrich will both face a travel ban, the UK says. β Read more
Kommission legt 18. Sanktionspaket gegen Russland vor β Read more
Emperor penguin populations shrinks by almost a quarter
Emperor penguin populations in Antarctica have shrunk by almost a quarter as global warming melts their icy habitat, researchers say. β Read more
California governor says Trump βderangedβ as thousands more troops sent to LA
Protests against immigration raids by the Trump administration spring up in at least nine other US cities. β Read more
Anzeige: Fahrradtrainer bei Amazon mit 34 Prozent Rabatt im Angebot
Bei Amazon gibt es derzeit ein attraktives Angebot zu einem Fahrradergometer von Tretmann. Es ist mit 34 Prozent Rabatt erhΓ€ltlich. ( Sport, Amazon)
βRussians are too weakβ β Orban questions Moscowβs ability to attack NATO β Read more
TV presenter David Bull named new Reform chairman
The TalkTV host replaces Zia Yusuf, who quit last week after clashing with Reform UK colleagues. β Read more
How do I perform partial acceptance of Copilot recommendations? β Read more