pleroma - Link to source

> Even it were possible, changing from a one-hour to a four-hour confirmation would have significant negative impacts on the Bitcoin ecosystem.

how? What negative impact? The Bitcoin blockchain is a payment rails, not a trading platform. On-chain trading does not have to happen; only final settlement. Layers have been built on top of it for a long time now because even 1 hour sucks for some use cases.

It's like pretending that when you trade stocks they're in your name. No they're not, unless you purchase them and they're direct registered. When you're on eTrade, Vanguard, etc trading stocks they're just changing values in a database inside that company. If you want to direct register your MSFT stocks that you're holding on eTrade it's going to take several days (near a week last I saw) for that to "settle" too.

mastodon - Link to source

Billionaires with $1 salaries
– and other legal tax dodges the ultrawealthy use to keep their riches

Billionaires can enjoy growing wealth entirely free of income tax and reporting

Mark Zuckerberg was the lowest-paid employee at Meta in 2024,
and he made US$1.

But he is not the only very rich person who has collected $1 for a year’s work.

Why would incredibly rich CEOs make only $1 a year when they could pay themselves millions?

The reason is taxes.

Income from work is the most heavily taxed type of income,
as it is subject to both income and payroll taxes.

A self-employed person who makes a modest income of $60,000 will pay over $13,000 of it in payroll and income taxes.

Meanwhile, high-income earners who earn a $400,000 salary can pay about 30% of their income in payroll and income taxes.

So the first step in avoiding taxes is avoiding salary,
and that is what our richest Americans often do.

salon.com/2025/12/28/billionai…


Billionaires with $1 salaries – and other legal tax dodges the ultrawealthy use to keep their riches

Billionaires can enjoy growing wealth entirely free of income tax and reporting.
Ray Madoff (Salon.com)
This entry was edited (3 days ago)
in reply to Chuck Darwin

pleroma - Link to source

feld

> A self-employed person who makes a modest income of $60,000 will pay over $13,000 of it in payroll and income taxes.

oh this is easy, register a single-member LLC and pay yourself a salary of only $20,000. You only do the full payroll taxes on that $20k, and the remaining $40k you can take as equity disbursements

if you get a good accountant they'll coach you through this

pleroma - Link to source

apparently someone or something is trying to screw with my server

Limiting tcp reset response from 521 to 213 packets/sec
Limiting tcp reset response from 482 to 215 packets/sec
Limiting tcp reset response from 1158 to 190 packets/sec
Limiting tcp reset response from 1354 to 184 packets/sec
Limiting tcp reset response from 664 to 213 packets/sec
Limiting tcp reset response from 890 to 210 packets/sec
Limiting tcp reset response from 643 to 213 packets/sec
Limiting tcp reset response from 278 to 195 packets/sec
Limiting tcp reset response from 501 to 204 packets/sec
Limiting tcp reset response from 659 to 212 packets/sec
Limiting tcp reset response from 1281 to 214 packets/sec
Limiting tcp reset response from 641 to 209 packets/sec
Limiting tcp reset response from 349 to 213 packets/sec
Limiting tcp reset response from 692 to 215 packets/sec
Limiting tcp reset response from 1597 to 189 packets/sec
Limiting tcp reset response from 1370 to 208 packets/sec
Limiting tcp reset response from 610 to 210 packets/sec
Limiting tcp reset response from 426 to 214 packets/sec
Limiting tcp reset response from 1011 to 209 packets/sec
Limiting tcp reset response from 609 to 207 packets/sec
Limiting tcp reset response from 354 to 200 packets/sec
Limiting tcp reset response from 228 to 216 packets/sec
Limiting tcp reset response from 353 to 203 packets/sec
Limiting tcp reset response from 1277 to 199 packets/sec
Limiting tcp reset response from 1311 to 205 packets/sec
Limiting tcp reset response from 799 to 210 packets/sec
Limiting tcp reset response from 423 to 203 packets/sec
Limiting tcp reset response from 392 to 206 packets/sec
Limiting tcp reset response from 334 to 198 packets/sec
Limiting tcp reset response from 678 to 185 packets/sec
Limiting tcp reset response from 2004 to 185 packets/sec
Limiting tcp reset response from 1069 to 214 packets/sec
Limiting tcp reset response from 1201 to 187 packets/sec
Limiting tcp reset response from 1124 to 207 packets/sec
Limiting tcp reset response from 275 to 195 packets/sec
Limiting tcp reset response from 299 to 214 packets/sec
Limiting tcp reset response from 793 to 188 packets/sec
Limiting tcp reset response from 1841 to 187 packets/sec
Limiting tcp reset response from 1647 to 202 packets/sec
Limiting tcp reset response from 818 to 197 packets/sec
Limiting tcp reset response from 1034 to 204 packets/sec
Limiting tcp reset response from 885 to 209 packets/sec
Limiting tcp reset response from 354 to 184 packets/sec
Limiting tcp reset response from 721 to 210 packets/sec
Limiting tcp reset response from 1479 to 184 packets/sec
Limiting tcp reset response from 560 to 194 packets/sec
Limiting tcp reset response from 541 to 190 packets/sec
Limiting tcp reset response from 762 to 186 packets/sec
Limiting tcp reset response from 335 to 204 packets/sec
Limiting tcp reset response from 448 to 186 packets/sec
Limiting tcp reset response from 686 to 196 packets/sec
Limiting tcp reset response from 588 to 212 packets/sec
Limiting tcp reset response from 1136 to 208 packets/sec
Limiting tcp reset response from 1066 to 190 packets/sec
Limiting tcp reset response from 353 to 206 packets/sec
Limiting tcp reset response from 502 to 211 packets/sec
Limiting tcp reset response from 416 to 190 packets/sec
Limiting tcp reset response from 614 to 214 packets/sec
Limiting tcp reset response from 912 to 200 packets/sec
Limiting tcp reset response from 968 to 186 packets/sec
Limiting tcp reset response from 1153 to 207 packets/sec
Limiting tcp reset response from 1312 to 191 packets/sec
Limiting tcp reset response from 484 to 196 packets/sec
Limiting tcp reset response from 605 to 186 packets/sec
Limiting tcp reset response from 583 to 215 packets/sec
Limiting tcp reset response from 258 to 214 packets/sec

mastodon - Link to source

Please Fund My Continued Accessibility Work on GNOME!

tesk.page/2025/12/16/please-fu…

#Accessibility #a11y #GNOME #GTK #GTK4


Please Fund My Continued Accessibility Work on GNOME!

I have been under distress lately due to personal circumstances that are outside my control. I cannot find a permanent job that allows me to function, I am not eligible for government benefits, my grant proposals to work on free and open-source proje…
TheEvilSkeleton
#a11y #Accessibility #gnome #gtk #GTK4

Federico Mena Quintero reshared this.

in reply to Toni Barth

mastodon - Link to source

Toni Barth

I played quite a bit Slay The Spire this year too, since I was able to pick up the SayTheSpire mod and add support for Downfall and fix some other things as well. The original dev also merged my changes, and its great to give something back to the community. I also played a bit Doki Doki Literature Club and Sequence Storm this year, as well as Final Fantasy VI and IX, which i'm also looking forward to playing more in the future. 15/X

mastodon - Link to source
Numbers and algorithms are so messed up for my brain.
I have a YouTube channel with 97K subscribers and if I publish a video that does below 1K it feels like a failure, even tho I get dozens of positive comments, I'm proud of the video, and I had fun during the time I spent making it.
Fuck numbers and algorithms, dude.
I need to go back to how I was pre-internet, just making things for my own pleasure, and being happy if only a handful of people like it
in reply to Castopod

mastodon - Link to source

Daniel J. Lewis

The site pulls the data from the apps JSON in Podcast Index: github.com/Podcastindex-org/we…

It's weird, I know. When I can finish populating canipodcast.com's data, I'll switch to it as a data source.


web-ui/server/data/apps.json at master · Podcastindex-org/web-ui

The public home page of podcastindex.org. Contribute to Podcastindex-org/web-ui development by creating an account on GitHub.
GitHub

mastodon - Link to source
Welp ... I was just informed through a Slack DM that I will no longer be working at the place I'm working at in two weeks' time. That is, evidently, how we handle that now. Not entirely unexpected as the writing on the wall was evident, but still not loving that approach for reasons I haven't quite worked out yet.
If anyone needs help with their #accessibility from someone with both native #screenReader experience and a coding background, keep me in mind I guess :)
Located in the eastern Netherlands, primarily interested in remote opportunities.
#fediHired #layoffs
#Accessibility #screenreader #fedihired #layoffs
This entry was edited (12 hours ago)

reshared this

mastodon - Link to source

It's both sad and refreshing to see that "made by people" is now considered a wonderful and welcome surprise.

Public Rejoices as Porsche Releases Beautiful Ad Not Made Using AI share.google/RVC3BhA404ciJWZnR


Public Rejoices as Porsche Releases Beautiful Ad Not Made Using AI

Porsche made the incredibly bold decision of releasing an ad that seemingly isn't made with AI, and the internet rejoiced.
Frank Landymore (Futurism)

mastodon - Link to source

EDIT: ALL DAYS NOW PROMPTED

Okay, I am thinking about doing Jamuary this year, but maybe with a twist? Would any of you mutuals be interested in creating a prompt for me?

This could be anything, with the stipulation YOU create it. A text prompt of any kind; a visual score; a drawing, painting or photograph; a set of instructions such as tempo, key, timbres, etc; a brief sound recording for me to react to or even incorporate; a mood board or collage; etc/et al.

So, does that interest anyone?

This entry was edited (3 hours ago)

mastodon - Link to source
Just had a great 3 hours music session with @ZBennoui, going through my recently installed ample guitar, and coming so far with a project of mine on which he's been helping me, that now I can finally resume some work on it myself! Yes, that old forgotten instrumental I posted once upon a time in july. Either way as a little shoutout, this ongoing cooperation is amazing looking back and listening to the first tracks, comparing them to what we have now. Really appreciate your help man!
@Zach Bennoui
This entry was edited (1 day ago)

mastodon - Link to source
Welcome trxvorr as #curl commit author 1427: github.com/curl/curl/pull/2010…

digest: fix OWS and escaped quote handling by trxvorr · Pull Request #20102 · curl/curl

The migration to the strparse API introduced regressions in Digest authentication parsing where Optional Whitespace (OWS) after commas was not skipped, and escaped quotes in values were not correct...
GitHub
#curl

glitchsoc - Link to source

We should talk about Werner Koch's response gpg.fail on the oss-security mailing list.

openwall.com/lists/oss-securit…

Yes, and actually the only serious bug from their list.


Koch either didn't watch the talk, he is in such defense of his own ego that he can't see how serious the bugs were, or he's tacitly admitting that PGP is not a serious recommendation.

Can you distinguish between these three explanations?

Could it be all of them are true?

Impact

While this may allow remote code execution (RCE), it definitively causes memory corruption.


Good research.


I think this sarcastic quip is what reveals Werner Koch's opinion about the security researchers and their work.

The rest of his email is measured (and partly responding to other mailing list participants rather than the disclosure directly).

gpg.fail

gpg.fail

mastodon - Link to source
One of my favorite "Star Sightings" was one my ex-wife had. She and her boyfriend at the time went to a Broadway show. Sitting in front of them was Patrick Stewart. My ex says to her boyfriend, that's Patrick Stewart. He replied, not it's not. At intermission Patrick Stewart turned around and said to her boyfriend in his baritone voice, "But he is."

mastodon - Link to source
I've discovered this gem only today! #Music #Hebrew #Kaveret #כוורת youtube.com/watch?v=zAaHhoNMXS…

כוורת - היא כל כך יפה

ללהיטים הגדולים של כוורת להאזנה ברצף:https://www.youtube.com/watch?v=PHxYIcFyBVwמילים: דני סנדרסוןלחן: יצחק קלפטרהיא כל כך יפה זה צובט בלב שלך, אך בכאב עצום....
YouTube
#music #hebrew #kaveret #כוורת

pleroma - Link to source
I thought the CCC FreeBSD jail escape exploit would be cooler than it was, but instead it's blocked by basic security hygiene when running jails I guess. I've never seen jails deployed in prod without securelevel elevated. But maybe there are a lot of completely unaware people out there. Who knows.
This entry was edited (1 day ago)

mastodon - Link to source

Slop drives me crazy and it feels like 95+% of bug reports, but man, AI code analysis is getting really good. There are users out there reporting bugs that don't know ANYTHING about our stack, but are great AI drivers and producing some high quality issue reports.

This person (linked below) was experiencing Ghostty crashes and took it upon themselves to use AI to write a python script that can decode our crash files, match them up with our dsym files, and analyze the codebase for attempting to find the root cause, and extracted that into an Agent Skill.

They then came into Discord, warned us they don't know Zig at all, don't know macOS dev at all, don't know terminals at all, and that they used AI, but that they thought critically about the issues and believed they were real and asked if we'd accept them. I took a look at one, was impressed, and said send them all.

This fixed 4 real crashing cases that I was able to manually verify and write a fix for from someone who -- on paper -- had no fucking clue what they were talking about. And yet, they drove an AI with expert skill.

I want to call out that in addition to driving AI with expert skill, they navigated the terrain with expert skill as well. They didn't just toss slop up on our repo. They came to Discord as a human, reached out as a human, and talked to other humans about what they've done. They were careful and thoughtful about the process.

People like this give me hope for what is possible. But it really, really depends on high quality people like this. Most today -- to continue the analogy -- are unfortunately driving like a teenager who has only driven toy go-karts.

Examples: github.com/ghostty-org/ghostty…


ghostty-org ghostty · Discussions

Explore the GitHub Discussions forum for ghostty-org ghostty. Discuss code, ask questions & collaborate with the developer community.
GitHub
This entry was edited (1 day ago)

reshared this

in reply to Mitchell Hashimoto

mastodon - Link to source

Shafik Yaghmour

This is the first open source story I am hearing w/ a positive results from someone using LLMs to generate bug reports.

We have been struggling in LLVM w/ low quality LLM submissions. Curl completely banned them b/c it was so bad: mastodon.social/@LukaszOlejnik…

My biggest issue is how ridiculously verbose LLM submissions can be. Even ones that don't have obvious errors are soo long that if every submission was that long it would have significant impact on throughput.

Clearly someone using it thoughtfully can do excellent work but I am seeing very little evidence this is happening much.

Lukasz Olejnik

2025-05-05 08:27:57

mastodon - Link to source

AI vulnerability/bug founds and reports is a huge problem. Curl has banned the use of AI-generated submissions via HackerOne because none of it made any sense, and is a waste of resources and time. "We are effectively being DDoSed. If we could, we would charge them for this waste of our time" hackerone.com/reports/3125832

curl disclosed on HackerOne: HTTP/3 Stream Dependency Cycle Exploit

**Penetration Testing Report: HTTP/3 Stream Dependency Cycle Exploit** --- # **0x00 Overview** A novel exploit leveraging stream dependency cycles in the HTTP/3 protocol stack was discovered,...
HackerOne
in reply to Shafik Yaghmour

gotosocial - Link to source

modulux

curl devs changed their mind last October iirc? mastodon.social/@bagder/115241…

daniel:// stenberg://

2025-09-21 08:03:08

mastodon - Link to source

Joshua Rogers sent us a *massive* list of potential issues in #curl that he found using his set of AI assisted tools. Code analyzer style nits all over. Mostly smaller bugs, but still bugs and there could be one or two actual security flaws in there. Actually truly awesome findings.

I have already landed 22(![url=https://onlycasino.legal/users/MostlyHarmless])[/url] bugfixes thanks to this, and I have over twice that amount of issues left to go through. Wade through perhaps.

Credited "Reported in Joshua's sarif data" if you want to look for yourself


mastodon - Link to source

My cat loves to play this "damsel in distress" game, where he runs outside in the rain and waits until he gets soaked, and then runs back in and bellows until I fluff him with a towel. Then he's in heaven. He loves it so much, that as soon as he's done, runs back outside and does it again. He LIVES for drama.

But the best part for me is saying in a German-type accent, "I am here to fluff (clap) YOU up!" But he doesn't get the reference. Because he's Gen Alpha.

mastodon - Link to source

I will most likely be picking up an electric guitar for the first time in ages soon. All my guitars are still in storage, possibly forever.

Thus, any recommendations on cool electric guitar processing plugins would be appreciated. Cheap or free would be great, since I don't really have a budget right now, but whatever.

I'll primarily be working in Reaper and Logic, both on Mac OS.

in reply to Borris

mastodon - Link to source

Scott

Other than NAM, nothing that's been mentioned so far is any good accessibility-wise. There's a JUCE-based fork of NAM that's probably the easiest to navigate, NAM Universal from WaveMind also has an accessible GUI and comes with a bunch of profiles/cabs. Seeing as you're a tweaker though, I don't know whether NAM would scratch any of your itches. Grab the free stuff from Nembrini Audio instead, decent emulations and more adjustable.
⇧