I should prepare a personal bulletin board somewhere to announce professional and some personal stuff. The first would be "UK callers, unless I have you in my contact list, I'll not take your calls and will block you." I currently get 2-3 calls per week from random UK numbers with (probably) classic tech support scam. I stopped taking them like a year ago, but the attempts intensified recently for some reason. I wonder what list I ended up on for it to be so intense.
A few weeks ago I started getting calls from an UK number, never answered them and then I received an email from Zoho where I host my email that they detected some activity of mine and wanted to learn what I was trying to accomplish and that I never answer their calls. Calls that should have been an email in the first place. 🙂
Having ongoing discussions about URL parsing differences as a basis for a #curl security vulnerability report made me check when I wrote my "my URL isn't your URL" blog post.
*Nine years ago*. And we have not made a single move towards a solution in all this time.
When I started the precursor to the curl project, httpget, back in 1996, I wrote my first URL parser. Back then, the universal address was still called URL: Uniform Resource Locators. That spec was published by the IETF in 1994.
I've said it before. The WHATWG won't fix this because they are happy with a spec that works for them and they don't care about URLs for the rest of the world.
The IETF has given up the topic, partly I think because WHATWG already has stated that they run their own race and making a unified spec that works would be next to impossible.
My perception of WHATWG (as a traumatized but recovering browser engineer) is that they aren't / weren't issuing specifications, they are / were issuing documentation (for existing behaviors).
The distinction is important, because, when implementation and specifications disagree, the implementation is wrong; however, when implementation and documentation disagree, the documentation is wrong.
@jbqueru I've been told in discussions with WHATWG people that their specs (they call them specs) are both: documents how browsers work and they say how browsers should work. When I've pointed out discrepancies in the past (browsers that didn't follow their spec), the answer have usually been that it will be fixed in a future browser release and that the spec is right.
I personally disagree with the approach, because the so-called "spec" ends up ossifying the behavior of a prototype, instead of learning from it and creating a cleaner spec. WHATWG doesn't learn from mistakes or fix them, it propagates and perpetuates mistakes.
@suzannealdrich @jbqueru and its impossible to be perfectly compliant because then suddenly the "spec" changes and you're not anymore. Not a way to build things like URLs that are supposed to in theory be possible to outlive us all.
I know I'm coming at URL parsing from a clean brain, but can't we specify the base things in an actually parseable way? Surely it's not *that* hard to parse a URL?
url ::= protocol '://' [ name [ ':' name ] '@' ] [ server ] [ '/' [ path ] [ '?' arg { '&' arg } ] ] protocol ::= name server ::= name { '.' name } path ::= name { '/' name } arg ::= name [ '=' name ]
name = ([^:/@?&=.%]|%[0-9a-f][0-9a-f])+
I understand that whatwg makes that :// not a required part ... but this kinda matches what my naive brain thinks of as a URL and how to read it.
If Curl and Firefox start by advocating "this is the spec for URIs, and other things might work or might not" that would already be a good start for the free internet.
Then we only have Chromium to convince, and the rest follows implicitly.
@dascandy @suzannealdrich @jbqueru I'm sorry but already while I worked at Mozilla and Firefox my colleagues were in team WHATWG and I'm pretty sure they still are.
And doing a standard for URLs without having the super powers involved and interested is obviously not going to make a successful spec
also I note from your post that you find the WHATWG URL spec hard to read but I have to say that in general I find all WHATWG specifications nigh-unreadable
English but precisely defined pseudocode has to be one of the worst possible ways to write a specification
draw a line between all existing implementations and 'call that the spec' ... was always a race to the bottom. I think the only way forward is a new addressing scheme. Yes I just said that.
@hsivonen @jimfuller I'm not sure. I have not monitored where the WHATWG spec has gone the last few years. Generally, we want to support the same URLs we supported back in the late 1990s.
@jimfuller The complaint would be technically stronger and potentially actionable, if it came with concrete points that curl can’t implement the spec without breaking compatibility constraint X with Y.
@hsivonen @jimfuller the few times I tried to talk to whatwg I ended up against a wall (understandably so because all supporters are there and no so many doubters like myself) so I gave up. I agree and understand that's not providing technical details, but I have never felt even an inch of willingness to actually discuss the details.
The '@' in the userinfo is probably a specific detail WHATWG changed from RFC3986.
@hsivonen @jimfuller I'm also concerned about making a parser for (almost) general URLs like curl's as lenient as the WHATWG spec is, as then we would accept countless URLs that today would just be rejected. Primarily non-http(s):// ones I mean, even if we presume that people in general are fine with the WHATWG anything-goes style for http(s).
If they do, that's a shame but there's not a lot I can do. Anyone who can verify this claim? (probably by scanning the binaries for known names or similar)
Hi, I just want to let you know (and have there be a record) of the fact that Digital Extremes, a Canadian video-game-developer-turned-GaaS-developer, are using cURL (statically linked alongside Op...
this is why I consider software licenses from the perspective of an open-source dev to be theatre, purely performative. i wish that in cases like this there was anything sensible to do :/
running strings on the binary and grepping for known strings from curl. Usually very helpful from a reverse engineering perspective, "strings program.exe | grep Copyright" can usually say quite a bit about an executable :D
it's downloading 45GB of stuff. Stopped it now, need to work first :D Found e.g. openssl folder with License.txt file, but until now no curl related folders appeared.
Keeping track of all the licences and acknowledgements for a non-trivial software product is a large undertaking and, so far as I have seen throughout my career, is at best hit and miss.
Every now and then a customer and/or legal ask for an audit, which drags on for a few months with a few dozen or hundred or thousand documents located, at which point everyone loses interest again, until the next time. Yes you can spend even more money on tools to assist the process, but it seems you can't just switch them on and have a complete database of licences and acknowledgments kept automagically up to date, the tools just aren't that good.
That's at best. At worst it's not astonishing that some people decide they just can't be arsed with the hassle and expense and simply do nothing.
Just for the heck of it, I decided to try #AI to fix an addon to run in the latest #NVDA alpha. I knew exactly what was wrong with it: it was importing a module included for #Python 3.11, and new alphas of NVDA are built with Python 3.13. I gave chat GPT the addon file, with this instruction: "In the latest alphas of NVDA, NVDA is now built with Python 3.13. That means this addon won't work. Please fix it." The simple solution would be to go get the right precompiled module from pip. But I didn't know if it would even be able to figure out what a .nvda-addon file was or how to fix it. Turns out it did. It spent six minutes, unpacked the addon, did things to the python code, then gave me back a new .nvda-addon file. But instead of just getting the right version of the module, it...rewrote the entire addon to not use that module. And its rewrite included some new features, while removing some existing ones. I'm kind of both impressed that it was able to handle the entire task on its own, and baffled that it did it in the hardest possible way. It even updated the manifest file correctly. It also left commented out sections of code, and created some Python files it never wound up using for anything. You could kind of see it doing something, forgetting what it was doing, then going to do the same thing a different way, but not deleting the half-completed evidence of the first attempt it abandoned for some reason. If more and more people use AI, code is going to get really, really weird and organic, y'all.
I’d like to give a shoutout to the Mozilla Italia community (anyone knows if they’re on Mastodon?). What a passionate and active community, such a shame I discovered them after leaving the country and I get to interact with them just remotely. The internet is a good place sometimes
Presidente Francesco Lodolo Vicepresidente Iacopo Benesperi Segretario Giovanni Francesco Solone Consiglieri Luca Casali Simone Lando Roberto Principiano Michele Rodaro Stefano Tintorini Soci effet…
If you get 15M users on your "product" The money you get from said product is more than enough. You're already more privileged that 90% of people if you make money with a job like that, so no, you don't deserve a thank you. In the same way, I don't think you thank the people filling the shops you go to, or the people working for your city's basic infrastructure, because you assume payment is all that's needed.
You are a very big strong brave boy and we're all very proud of you and love you very much. The way you undertook your paid employment was admirable, an example to us all.
Tak jsem se dva roky před padesátkou rozhodl odejít z firmy s dobrým týmem a skvělým šéfem, abych se věnoval – opět na volné noze – svému projektu, který sice český průmysl potřebuje jako 🐖 drbání, ale za to to může být hezká finanční polízanice pro mě. ;)
Jenže, poslání. A nový impuls. A vůbec. 🏃🏻➡️
Víc (možná i tady, jestli se osmělím) tak za 10 dní.
Also don't forget that validating the certificate is not the same as validating the hostname you're connecting is actually covered by the certificate! That's why this had to be made:
I need to call HTTP API verifying SSL or not. However, I found both httpc and hackney behave strange - ssl option stay across different functions. See this code: bad_url1 = "https://expired.badssl.com/" bad_url2 = "https://wrong.host.badssl.
OTP has some catching up to do, that's the core issue IMHO. But they've come a long way in the last few years. As Erlang/Elixir have been experiencing huge growth these issues that nobody cared about are being solved with each new OTP release.
The next issue that will drive you nuts is no dual stack / Happy Eyeballs support. But you can get halfway there with this hack:
This will make all your connections try IPv6 first then fall back to IPv4. I'm pretty sure your httpc usage would not be able to connect to an IPv6-only website right now because httpc is hardcoded to only try an inet_tcp socket, never an inet6_tcp
@feld Finally had some time to look at this (was way too tired last night). These additions aren't as bad as I thought. I'll update my post with these libraries now. Thanks again for knowledge sharing!
There's a nearly complete Happy Eyeballs implementation for Gun that's not public. I need to chase the dev down who was making it because I offered him money for it ...
Happy Eyeballs tries both simultaneously and picks the fastest path. If many A or AAAA values are published for the same record, it is somewhat smart about trying them in groups. (according to latest v3 spec I think?)
If someone has a broken AAAA record published for example, inet64_tcp will try the IPv6 host and then give up with a failure. It won't fall back to the A record because an AAAA record existed. That's all this does -- check for AAAA first and then connect if it exists, otherwise do the normal A record lookup and IPv4 socket connection.
You could probably modify that inet64_tcp to have error handling and be much more intelligent though! It's not complicated code, the trick is just knowing how to overwrite the OTP inet_tcp function which the library is already configured to do for you. You could definitely enhance the logic to make it more robust.
It finally connected for me. All the people saying Bitcoin and AI will destroy the planet by consuming too much energy are the tech-left mirror opposite of the right wing people who say "I did my own research" about stuff like vaccines or whatever.
@gnomon Everything looks super sharp, indeed! They are giving me a small headache, as per usual, but it should go away in a couple of days.
My problem with multifocals is that I have my laptop raised over my desk, and I need to tilt my head back. My old monofocals weren't cutting it anymore.
Now let's see if I can get used to changing them when I sit up and down...
> The shopkeeps who are also the owners are so appreciative [of customers paying with cash] as it's essentially a 5-7% "tip".
wtf? How high do you think transaction fees are? Cash is EXPENSIVE to deal with as a business. And paying with cards tricks people into tipping more than they normally would.
Orange site lunatics should lose their posting privileges
Interesting, we'll see if this happens, certainly hope so. Announcing Eternal Dusk, an Audio MMO Attempt (via Austin Hicks): eternaldusk.games/posts/eterna…
@austinnix LOL maybe you can join forces with him on the moderation team, two Austins, call yourselves the "Austin Powers" mod team! :D ahahahaha. But yeah, wouldn't be surprised if you got asked about this especially if people read the tagline with fast speech and associate the name to yours.
COVID, in some ways, is less like the flu and more like HIV. We haven't even begun to understand the long-term effects of COVID, just as we hadn't with HIV. Meanwhile, society has moved so quickly to normalize a novel, airborne virus that has killed and disabled many. That shows to me a deep denial, rooted in fear and control.
LOL for some reason I wanna assemble the newly-released Microsoft 6502 BASIC for an Apple II and throw it on a disk and run it. Yeah I know there's no point but I think it'd be cool! Only problem is, I have no clue what assembler to use or whether it would be accessible.
“Regrettably, Dr. Roberts’ office indicated that he can no longer join us to present today,” the PMO said in a statement distributed at the forum. “Our team will continue further engagement and discussions with him and other leading U.S.
And just so we're clear: What happened was that the fascist architect of Project 2025 opted out, not that our government wouldn't have taken the meeting had he been available.
They're still looking for "further engagement and discussions with him and other leading U.S. policy figures soon."
I keep telling people:
💩 💩 💩 💩 💩 Shitlibs are just fascists who are afraid they won't get any more dinner party invites if they say the words out loud. 💩 💩 💩 💩 💩
Inviting the literal fascist masterminds to Canada as an expert on the country? The ones who are also likely behind why the US wants to annex Canada? I'll bet you Canada's paying for this guy to be here too.
Tell me, Liberals, how is this elbows up, or sovereignty, or building Canada Strong?
We shouldn't be negotiating with fascists. Period. It's this constant capitulation to try to appease people who obviously cannot be reasoned with. Why are we even consulting with people who are literally bringing back child labour, slavery and concentration camps?
And just so we're clear: What happened was that the fascist architect of Project 2025 opted out, not that our government wouldn't have taken the meeting had he been available.
They're still looking for "further engagement and discussions with him and other leading U.S. policy figures soon."
I keep telling people:
💩 💩 💩 💩 💩 Shitlibs are just fascists who are afraid they won't get any more dinner party invites if they say the words out loud. 💩 💩 💩 💩 💩
> The PMO added it would be beneficial for cabinet to hear Roberts's perspective and understand the White House's priorities as the government prepares for the Canada-U.S.-Mexico Agreement (CUSMA) review next year.
Riiiiight. Because they have no idea. Are they stupid or what?
A man, growing frustrated with his daily routine, began resenting his wife for staying home while he worked long hours. One evening, he knelt in prayer and said:
"Dear Lord, I work tirelessly every day while my wife stays home. She has no idea how hard my life is. Please, let us trade places for just one day so she can see what I go through."
In His infinite wisdom, God granted the man’s wish.
The next morning, the man woke up in his wife’s body. Determined to prove his point, he jumped right into the day.
He cooked breakfast, woke the kids, picked out their school clothes, packed lunches, and dropped them off at school. Returning home, he picked up the dry cleaning, ran errands at the bank, and did the grocery shopping—then came home to unload and organize it all.
By mid-morning, he was already feeling frazzled, but the tasks didn’t stop. He paid bills, balanced the checkbook, cleaned the litter box, bathed the dog, and tidied up the house.
At 1 P.M., he realized he was barely halfway through. He made the beds, tackled piles of laundry, vacuumed, dusted, and mopped the kitchen floor. Then it was time to race back to the school to pick up the kids, argue with them on the ride home, and serve milk and cookies while juggling their homework struggles.
At 4:30, he started dinner prep: peeling potatoes, washing vegetables, snapping beans, and breading pork chops. After supper, he cleaned the kitchen, loaded the dishwasher, folded more laundry, bathed the kids, and wrangled them into their pajamas before tucking them into bed.
By 9 P.M., completely exhausted, he climbed into bed, ready to finally call it a day. But of course, there was still one more duty expected of him—making love. He managed without a word of complaint, then collapsed into the deepest sleep of his life.
The next morning, he woke up in a panic and dropped to his knees, praying:
"Lord, I don’t know what I was thinking! I was so wrong to envy my wife. Please, I beg you, let us switch back!"
God, in His infinite wisdom, replied,
"My son, I’m glad you’ve learned your lesson. I will change things back—but you’ll have to wait nine months."
Living organisms are assumed to produce same-#species #offspring.
But this is not the case for Messor ibericus, an #ant that lays individuals from two distinct #species.
In this life cycle, females must clone males of another species because they require their sperm to produce the worker caste.
As a result, males from the same mother exhibit distinct genomes and morphologies, as they belong to species that diverged over 5 million years ago.
The evolutionary history of this system appears as sexual parasitism that evolved into a natural case of cross-species cloning, resulting in the maintenance of a male-only lineage cloned through distinct species’ ova.
In a case of obligate cross-species cloning, female ants of Messor ibericus need to clone males of Messor structor to obtain sperm for producing the worker caste, resulting in males from the same mother having distinct genomes and morphologies.
Hi everyone. I would like to sincerely thank everyone for their best wishes during my recent illness. Particularly Sunday, Monday and Tuesday morning were very grim times. I could barely put one foot in front of the other, I was in constant pain, and the swelling had also spread to my arms which were extremely soar. I could not think about much else. I didn't even want to hear my music. I didn't want L to play music in the flat. People who know me will also know how much I love my music and how unusual that would be. I could also barely eat food.
We have very little in the way of support here, so it is important that my health is especially good and the future did look bleak, particularly as it was suggested to me that the illness may not go away.
With the help of our Assistant, I went to the Doctor yesterday morning. The nurse took different types of blood tests and the Doctor changed the medication completely.
I came home and began taking the new meds. I went to sleep for a while, woke up, and it was like a switch had been flicked and the pain had been turned off. Perhaps not as dramatic as that but I began to feel much more like myself. I am able to walk properly again. Yesterday I could eat properly.
There is still a long way to go obviously. The results of the tests have to come back, and that may mean me going to hospital as an outpatient to see a Specialist. There are still parts of me which are a bit swollen, and I do lose my balance sometimes, but it's a huge improvement. I would hope that if I continue to rest for a good part of this month I can return to how things used to be. But this has been a serious warning to me: slow, down.
Again, thanks to everyone for keeping me in their prayers.
Glad you're feeling better, Brian. I know what that's like when you don't want to hear or do anything while sick; I had a similar experience a couple months ago when I got hit with a nasty flu or virus that was going around. Definitely not fun.
(not very clear for the current website web.archive.org/web/2017071122…)
Oskar
in reply to Oskar • • •tube.pilgerweg-21.de/w/sSLjJFu…
FediVerseExplorer likes this.