in reply to Toni Barth

I played quite a bit Slay The Spire this year too, since I was able to pick up the SayTheSpire mod and add support for Downfall and fix some other things as well. The original dev also merged my changes, and its great to give something back to the community. I also played a bit Doki Doki Literature Club and Sequence Storm this year, as well as Final Fantasy VI and IX, which i'm also looking forward to playing more in the future. 15/X

Numbers and algorithms are so messed up for my brain.
I have a YouTube channel with 97K subscribers and if I publish a video that does below 1K it feels like a failure, even tho I get dozens of positive comments, I'm proud of the video, and I had fun during the time I spent making it.
Fuck numbers and algorithms, dude.
I need to go back to how I was pre-internet, just making things for my own pleasure, and being happy if only a handful of people like it

Welp ... I was just informed through a Slack DM that I will no longer be working at the place I'm working at in two weeks' time. That is, evidently, how we handle that now. Not entirely unexpected as the writing on the wall was evident, but still not loving that approach for reasons I haven't quite worked out yet.
If anyone needs help with their #accessibility from someone with both native #screenReader experience and a coding background, keep me in mind I guess :) #fediHired #layoffs

reshared this

It's both sad and refreshing to see that "made by people" is now considered a wonderful and welcome surprise.

Public Rejoices as Porsche Releases Beautiful Ad Not Made Using AI share.google/RVC3BhA404ciJWZnR

Okay, I am thinking about doing Jamuary this year, but maybe with a twist? Would any of you mutuals be interested in creating a prompt for me?

This could be anything, with the stipulation YOU create it. A text prompt of any kind; a visual score; a drawing, painting or photograph; a set of instructions such as tempo, key, timbres, etc; a brief sound recording for me to react to or even incorporate; a mood board or collage; etc/et al.

So, does that interest anyone?

Just had a great 3 hours music session with @ZBennoui, going through my recently installed ample guitar, and coming so far with a project of mine on which he's been helping me, that now I can finally resume some work on it myself! Yes, that old forgotten instrumental I posted once upon a time in july. Either way as a little shoutout, this ongoing cooperation is amazing looking back and listening to the first tracks, comparing them to what we have now. Really appreciate your help man!
This entry was edited (12 hours ago)

Welcome trxvorr as #curl commit author 1427: github.com/curl/curl/pull/2010…
#curl

We should talk about Werner Koch's response gpg.fail on the oss-security mailing list.

openwall.com/lists/oss-securit…

Yes, and actually the only serious bug from their list.


Koch either didn't watch the talk, he is in such defense of his own ego that he can't see how serious the bugs were, or he's tacitly admitting that PGP is not a serious recommendation.

Can you distinguish between these three explanations?

Could it be all of them are true?

Impact

While this may allow remote code execution (RCE), it definitively causes memory corruption.


Good research.


I think this sarcastic quip is what reveals Werner Koch's opinion about the security researchers and their work.

The rest of his email is measured (and partly responding to other mailing list participants rather than the disclosure directly).

One of my favorite "Star Sightings" was one my ex-wife had. She and her boyfriend at the time went to a Broadway show. Sitting in front of them was Patrick Stewart. My ex says to her boyfriend, that's Patrick Stewart. He replied, not it's not. At intermission Patrick Stewart turned around and said to her boyfriend in his baritone voice, "But he is."

I've discovered this gem only today! #Music #Hebrew #Kaveret #כוורת youtube.com/watch?v=zAaHhoNMXS…

I thought the CCC FreeBSD jail escape exploit would be cooler than it was, but instead it's blocked by basic security hygiene when running jails I guess. I've never seen jails deployed in prod without securelevel elevated. But maybe there are a lot of completely unaware people out there. Who knows.
This entry was edited (11 hours ago)

Slop drives me crazy and it feels like 95+% of bug reports, but man, AI code analysis is getting really good. There are users out there reporting bugs that don't know ANYTHING about our stack, but are great AI drivers and producing some high quality issue reports.

This person (linked below) was experiencing Ghostty crashes and took it upon themselves to use AI to write a python script that can decode our crash files, match them up with our dsym files, and analyze the codebase for attempting to find the root cause, and extracted that into an Agent Skill.

They then came into Discord, warned us they don't know Zig at all, don't know macOS dev at all, don't know terminals at all, and that they used AI, but that they thought critically about the issues and believed they were real and asked if we'd accept them. I took a look at one, was impressed, and said send them all.

This fixed 4 real crashing cases that I was able to manually verify and write a fix for from someone who -- on paper -- had no fucking clue what they were talking about. And yet, they drove an AI with expert skill.

I want to call out that in addition to driving AI with expert skill, they navigated the terrain with expert skill as well. They didn't just toss slop up on our repo. They came to Discord as a human, reached out as a human, and talked to other humans about what they've done. They were careful and thoughtful about the process.

People like this give me hope for what is possible. But it really, really depends on high quality people like this. Most today -- to continue the analogy -- are unfortunately driving like a teenager who has only driven toy go-karts.

Examples: github.com/ghostty-org/ghostty…

This entry was edited (12 hours ago)

reshared this

in reply to Mitchell Hashimoto

This is the first open source story I am hearing w/ a positive results from someone using LLMs to generate bug reports.

We have been struggling in LLVM w/ low quality LLM submissions. Curl completely banned them b/c it was so bad: mastodon.social/@LukaszOlejnik…

My biggest issue is how ridiculously verbose LLM submissions can be. Even ones that don't have obvious errors are soo long that if every submission was that long it would have significant impact on throughput.

Clearly someone using it thoughtfully can do excellent work but I am seeing very little evidence this is happening much.


AI vulnerability/bug founds and reports is a huge problem. Curl has banned the use of AI-generated submissions via HackerOne because none of it made any sense, and is a waste of resources and time. "We are effectively being DDoSed. If we could, we would charge them for this waste of our time" hackerone.com/reports/3125832
in reply to Shafik Yaghmour

curl devs changed their mind last October iirc? mastodon.social/@bagder/115241…


Joshua Rogers sent us a *massive* list of potential issues in #curl that he found using his set of AI assisted tools. Code analyzer style nits all over. Mostly smaller bugs, but still bugs and there could be one or two actual security flaws in there. Actually truly awesome findings.

I have already landed 22(![url=https://onlycasino.legal/users/MostlyHarmless])[/url] bugfixes thanks to this, and I have over twice that amount of issues left to go through. Wade through perhaps.

Credited "Reported in Joshua's sarif data" if you want to look for yourself


My cat loves to play this "damsel in distress" game, where he runs outside in the rain and waits until he gets soaked, and then runs back in and bellows until I fluff him with a towel. Then he's in heaven. He loves it so much, that as soon as he's done, runs back outside and does it again. He LIVES for drama.

But the best part for me is saying in a German-type accent, "I am here to fluff (clap) YOU up!" But he doesn't get the reference. Because he's Gen Alpha.

I will most likely be picking up an electric guitar for the first time in ages soon. All my guitars are still in storage, possibly forever.

Thus, any recommendations on cool electric guitar processing plugins would be appreciated. Cheap or free would be great, since I don't really have a budget right now, but whatever.

I'll primarily be working in Reaper and Logic, both on Mac OS.

in reply to Borris

Other than NAM, nothing that's been mentioned so far is any good accessibility-wise. There's a JUCE-based fork of NAM that's probably the easiest to navigate, NAM Universal from WaveMind also has an accessible GUI and comes with a bunch of profiles/cabs. Seeing as you're a tweaker though, I don't know whether NAM would scratch any of your itches. Grab the free stuff from Nembrini Audio instead, decent emulations and more adjustable.

I really wish everyone would stop making fun of the people they don't like based on their physical appearance.

We really need to collectively grow up from this high-school bully mindset.

When you use appearance instead of ideas and behaviors to criticize someone, even someone deserving mockery, you are also shooting at everyone who might look like them, even the ones that might be incredibly good people.

There is more than enough content to talk against when it comes to the tyrants that currently surround us. Talk against their ideas, their words, and their actions. Be relentless for that. But their physical appearance is irrelevant to their moral deficiencies.

Mock their words, but not their looks.

reshared this

Cruising Party #flintaparty2 at #39c3 sure was an experience.

First we're way over capacity for the small conference room 6.
Relocating to a bigger conference room.
There are too many people on the escalator, escalator shuts off.
Bigger conference room is closed.
Relocate to yet another conference room.
Communists who are at that conference room are nice to switch rooms with us.

Commence gay activities.

So out of the blue I got a request for access to a 10 year old Google Docs file. This request also came from someone who actually might be interested in that file, so I contacted him. Turns out he was making **exercise schedules** and had asked Google Gemini for help, and Gemini decided it needed access to my document on a new government law (from 2015). So be careful out there!
in reply to Micr0byte

It depends. On the web an alt text must be concise. Everything that is important, makes sense, is mentioned somewhere in the text, is to be conveyed. but conciseness is first.
Here on social networks, I'd say, completeness is the first and even more important than conciseness. For instance, if you post a meme, describe it even if it's super lengthy. Like: "Three panels from left to right, on the first panel there is a man..." and on and on you go. It's important because *the image* is the unique thing you share, I have to laugh, to think, to be angry or emotional about *the image* itself, without any context basically.
Ask further questions, I'm glad to answer everything.
in reply to ∴7700e6 `Violet`

@0x7700e6 Because if you are reading an article, you generally don't want a huge alt text that would distract you from your reading. Even less you want it for images like logos, avatars, social network badges and so on. Also, both in and out of social networks avoid phrasing like "This is an image depicting..." (I know it's an image, my screen reader tells me about it); "This is the avatar of Jane Doe" ("Jane Doe" is enough).
in reply to André Polykanine

@menelion
If I post a well-known meme, is it OK to just say, for example "the Drake meme, with X then Y" or should I be doing "a four panel meme. On the first row left panel a man reacts negatively to the panel on the right showing X, then on the next row he reacts positively to the panel on the right showing Y".
@0x7700e6 @micr0
in reply to stib

@stib @0x7700e6 I'd do the second, sorry to bother you with that. Because we blindies are kinda... behind the graphic memes. You could probably possibly put a link to a description but rather don't because different clients and different browsers don't allow clicking links in alt, it would be plain text so... unfortunately probably you have to describe, at least for the first time.
in reply to ⠠⠵ avuko

@avuko @stib @0x7700e6 It's helpful for the deaf, at least a rough description so they could probably send the video to a software for captions (I'm not sure but I imagine this is possible). For us blindies it's helpful when the video is super visual, like only music and kitties playing, for example, or a guy/girl is assembling, drawing, painting, knitting something etc., where there are no words.
in reply to ⠠⠵ avuko

@avuko @stib @0x7700e6 For example, my sighted wife likes to watch videos where a Japanese guy shows small apartments in Japan. He never speaks, only sometimes he adds some subtitles in very simple English, as my wife has just said. Maybe he is ashamed of his English pronunciation, maybe he's simply a shy person, I don't know, but he does amazing videos, but super visual. There ideally audio description or at least a decent alt text would work, especially if you share it for a reason (for example, you liked a particular apartment he was showing).
in reply to André Polykanine

Oh! Thank you for this: I (wrongly) thought that conciseness on social media would be preferred, except where maybe the post contains only an image, of the image is particularly detailed.

I sometimes also might add a commentary or a quip in my alt text - perhaps in response to the post's text, or to add context, or my own reaction. Is this poor practice, though, do you think?

@stib @0x7700e6 @micr0

in reply to André Polykanine

@menelion @0x7700e6 There are dozens of sites where you can overlay your text on popular images to create memes without having to use an image editing program, I wonder if there are any that come with #AltText pre-generated. Eg. in the "Drake meme" format it would supply the image description and substitute your text for X and Y. If not there's my next billion dollar startup, ready to go.