So @FreakyFwoof went to a hotel in Bristol, and recorded a nice "ding" sound from the bathroom.
As soon as I heard it, my weird brain went "Oh, hey ,that could easily be turned into a fire alarm." So I did just that, minus adding a bunch of distortion and compression to actually make it more realistic.

reshared this

Este tiene que ser @modulux. Vamos, es que estoy seguro. Todos los días saluda diciendo lo que hace y lo que no hace, pero nunca habla del sueño, y eso es demasiado sospechoso.
Un funcionario no entiende por qué últimamente le cuesta tanto conciliar el sueño durante su jornada laboral

elmundotoday.com/2025/11/un-fu…

Lol we're not the only people complaining about crappy web version for an app: Meta just killed native WhatsApp on Windows 11, now it opens WebView, uses 1GB RAM all the time windowslatest.com/2025/11/12/m…

reshared this

Oops, seems the BBC didn't quite proofread their alt text on their live page regarding the US gov shutdown and the impact on flights. Image: A TSA agent in blue shit, blue gloves and short brown hair reaches over to pick up the bag of a passenger going through security. bbc.co.uk/news/live/c20ez8y0dv…

Hey, people who design OTP systems: why only accept the most recent code? If there are delays in SMS or email, and you request two codes, and then enter the first one, it will never work. What possible security interest is served by only accepting the most recent code within some timeframe (say, 30 minutes).

So often, I just don't understand how the people who design these systems think about the world.

I think @stefano convinced me to replace my one minio server with SeaweedFS just because the way you configure the buckets and ACLs is so much simpler for the normal case

it-notes.dragas.net/2025/11/06…

GrapheneOS Foundation Announces New ASN (UPDATED: 11-14-2025)


We received an ASN and IPv6 space for GrapheneOS from ARIN: AS40806 and 2602:f4d9::/40.

We've deployed 2 anycast IPv6 networks for our authoritative DNS servers to replace our existing setup: 2602:f4d9::/48 for ns1 and 2602:f4d9:1::/48 for ns2. BGP/RPKI setup is propagating.

We applied for an IPv4 /24 for ns2 via NRPM 4.10 and can apply for one for ns1 after we obtain that one.

Our ns1 network has New Jersey, Miami, Los Angeles, Seattle, Frankfurt and Singapore. Our ns2 network currently has New York, Las Vegas and Bern. We'll be expanding both.

This provides an overview of worldwide latency for our ns1 cluster via the Rage4 anycast service we currently use for IPv4+IPv6 with ns1:

ping6.ping.pe/2a05:b0c4:1::8

Here's ns1 via our own IPv6 /48:

ping6.ping.pe/2602:f4d9::1

Here's ns2 via our own IPv6 /48:

ping6.ping.pe/2602:f4d9:1::1

In the future, we plan to use these 2 anycast networks to provide recursive DNS resolvers as an option for our users. For now, it's only for the authoritative DNS used to provide other GrapheneOS services which is what DNS resolver servers query after the root and TLD servers.

ARIN gave us an IPv4 /24 based on our NRPM 4.10 request in under 24 hours. It's being announced from our ns2 network:

github.com/GrapheneOS/ns1.grap…

It will take a long time to propagate since the RPKI IRR/ROA data gets fetched via timed jobs rather than pushed hop-by-hop like BGP.

It cost us US$50 to register with ARIN as an organization and US$262.50/year paid in advance to become an 3X-Small network. It'll be US$525/year when we get a 2nd IPv4 since we'll get pushed into 2X-Small. 2X-Small covers IPv4 /22, i.e. 4x /24, which we can get via the waitlist.

We've deployed our IPv4 /24 and IPv6 /48 for ns2 in production to replace the IPv4-only anycast tunnel system it relied on before. It has somewhat better latency and significantly better reliability now. We're waiting a bit longer for production deployment of our ns1 IPv6 /48.

We need to choose a host in Singapore with IPv4+IPv6 BGP support to extend ns2 with a location in Asia. Once that's added, it will be good enough for our current needs. The subset of our dedicated/colocated update servers with BGP could be used as extra ns2 locations eventually.

This entry was edited (1 week ago)

AOSP 16 QPR1 Released


Android 16 QPR1 is finally being pushed to the Android Open Source Project. This should have happened on 2025-09-03. We migrated to full Android 16 QPR1 kernel code (GPLv2 tarball) and firmware in September. We couldn't migrate userspace to QPR1 without it being pushed to AOSP.

Vanadium version 142.0.7444.158.0 released


Changes in version 142.0.7444.158.0:

  • update to Chromium 142.0.7444.158

A full list of changes from the previous release (version 142.0.7444.138.1) is available through the Git commit log between the releases.

This update is available to GrapheneOS users via our app repository and will also be bundled into the next OS release. Vanadium isn't yet officially available for users outside GrapheneOS, although we plan to do that eventually. It won't be able to provide the WebView outside GrapheneOS and will have missing hardening and other features.

If you still think microplastics are irrelevant, they have been recently found in blood, clouds, but even in the breath of dolphins. The more you do to make your life microplastic-free, the better. For you and for the environment. This is not meant to be an endorsement, but rather a reaction to the very sad state of things.

Here's an article about this: ibbi.io/mp

Start by swapping out something that you use daily, for example your water bottle to a fully stainless steel one (including the cap). Yes, there are caps that have a stainless steel coating on the outside, while what goes into the mouth of the bottle is plastic.

Personally, Blockhütte is the only company I found in the EU where this is not the case and the entire bottle is stainless steel, wood and it has a food-grade silicone ring for a better seal.

Winter blue tardis reshared this.

I was reading through the two SBOM specifications today (as you do), and noticed that both have fields that impose a "supplier" field on packages.

Couldn't help but think of @https://hachyderm.io/@Di4na's blog post softwaremaxims.com/blog/not-a-… and how it's literally in the standards now 🤦

in reply to daniel:// stenberg://

To me FOSS/FLOSS/Name-your-open-source-whatever is basically someone planting a plant in a public garden for anyone to pick tomatoes from it. So who is the supplier there? The one planting or the one distributing it or the shop owner selling it in their tomato soup?

That's at least my personal simplification of this thought. I am also aware this is not a perfect metaphor. Furthermore, I guess I am coming more from an individual small-project POV rather than something as largely used as curl, linux kernel or similar projects.

I hate that I can basically recycle my posts about Chat Control every month or so. These lobbyists are extremely motivated.

Let's show them that we are
even more motivated than them to protect privacy rights, human rights, and democracy! ✊🔒

You know what you have to do:
👉 fightchatcontrol.eu/

Recent news:
"Just before a decisive meeting in Brussels, digital rights expert and former Member of the European Parliament Dr. Patrick Breyer is sounding the alarm. Using a “deceptive sleight of hand,” a mandatory and expanded Chat Control is being pushed through the back door, in a form even more intrusive than the originally rejected plan. The legislative package could be greenlit tomorrow in a closed-door EU working group session."

#ChatControl #Privacy #HumanRights #DigitalRights #Democracy #EUpol

reshared this

> In contrast, if you infuse saline down an occluded vessel, you push the blood through the myocardial vasculature and replace it with fluid containing no oxygen. That is a recipe for cardiac arrest because the myocardium is very sensitive to short periods of ischaemia. I like all cardiologists have done it occasionally inadvertently and caused ventricular fibrillation (fortunately always successfully defibrillated in my patients).

I feel better about crashing production now

This entry was edited (1 week ago)