my week: lists.haxx.se/pipermail/daniel…
Security, rc3, graphs, MQTTS, 2025, OpenSSL 1
my week: lists.haxx.se/pipermail/daniel…
Security, rc3, graphs, MQTTS, 2025, OpenSSL 1
*Twelve* Hackerone submissions against #curl within the last seven days.
Zero of them turned out a confirmed vulnerability.
Several of them found, reported, phrased-in-far-too-many-words and mislead by stupid word completion machines.
What do these instances of AI-slop look like? (I tried hunting through the "Issues" and "Pull requests" in the curl/curl GitHub project, but I can't see any mention of HackerOne.)
And is this nonsense built into GitHub? I keep hearing of projects moving from GitHub to Codeberg to avoid AI harassment which is seemingly now part of the GitHub experience.
Thank you for these regular reports on HackerOne.
I always get a good chuckle out of them as I read Hackerone as in Toblerone (with the swiss german pronounciation as in youtu.be/wyLXR8EgDrc?t=6) before correcting myself.
And it is hilarious and makes me think of chocolate, which is so much nicer than thinking about bug-bounties.
📖 TRANSKRIPTE: Das Transkript von diesem Video auf Schweizerdeutsch und Hochdeutsch findet ihr auf meiner Patreon-Seite: https://www.patreon.com/posts/b1-h...YouTube
Mannheim Steamroller has several Christmas recordings out there. Pretty sure i have all their CDs.
S
(then figure out the remaining three letters yourself)
yeah! aye? Hopefully instead of ,hallucination’ the world is switching towards SH*T aka SLOP AI…
Then at which point hackr1 cves etc will start thanking it properly and implement proper signal-to-noise measures ?
I didn't need this distraction today @prism, so yeah. Thanks for that... Now I won't get anything else done the rest of the day haha.
'Two stories of local legend in which I was unfortunately not involved:
Producer:
"What's that hi-pitched tinny thing?"
Engineer:
"What? Where?"
Producer:
"Right there!"
Engineer begins soloing tracks.
Producer:
"There! That's it!"
Engineer:
"That's a hi hat, Nick.'
Also, from notoriously difficult female singer:
"I have GOT to have more SMPTE in the headphones?"
Needless to say, this engineer gave it to her LOUD AND CLEAR before pressing play again.'
Source: gearspace.com/board/gear-free-…
Jingle session, "A Team" session guys with Asshole Client. 30 second spot with a drum fill in the middle. They do a take and the A.C. says NO! the drum fill has to be boom wacka boom boom. So they do another take and when they get to the fill, the A.C. pushes the talkback and says NO! not boom wacka boom boom, boom boom wacka wacka wacka! This goes on for half an hour until the A.C. says " oh for f*ck sake, just play whatever Steve Gadd would play!". The drummer leans into the OH and says "I AM Steve Gadd".
Stupidest things you've heard during a session | Gearspace gearspace.com/board/gear-free-…
michael brecker was doing an overdub session around the late 80's. he does a pass and the producer says, "Great, but could you play harder?- really wail!!!" Apparently MB just nods his head and does another pass. The Prod says, "That's getting closer, but can you give it even more? I want it to sound like the Big Man- Clarence Clemens!". MB nods and says that he needs to really get the vibe, and could they dim the lights. the AE dims the lights and MB says, "No, man i need them totally off. You, know, get the vibe." lights go off, and they roll tape. when they get to the solo section all they hear is silence. tape stops, lights up. MB has left the building.
MB- one of the greatest.
Imagine your two options for a display driver are as follows:
* A $1000+ software package that you have to pay $200-$300 to upgrade;
* Or a completely free and open source project that's ran mostly by volunteers and a small charity, but it will sometimes make your screen black out if you try to load too much text onto it at once.
Now stop imagining, and become blind. This is now your reality.
reshared this
Dear Geeks:
This code is hard to read (Every line requires translating abbreviations into english) & all of these variable names will be fucking obnoxious for any programmer who needs a screen reader.
This hurts maintainability & emergency bug hunting.
src_endp → source_endpoint
dst_addr_mode → destination_address_mode probably. I'm guessing WTF they meant by "dst"
dst_endp → destination_endpoint
req_dst_addr → request_destination_address
🤔 Hadn't considered that, but unfortunately that's not really something we have much say over, as their use is either hardcoded into the language spec OR you'd be making non-idiomatic code and everyone who saw it would hate you. 😉
We can abolish the practice of prefacing private methods with underscores in most languages, but… 🤷♀️
Kinda sucks to have the only real accommodation option be to use a different language.
Get the PowerPoint notes here: https://storage.sardius.media/E41A88258AfdE5b/archives/8AdD8062a7F9Dc803e3AA133BF1F/static/FDCaF6/eC6F3c5925CD.pptxConnect wit...YouTube
One really cool NVDA feature that I'm absolutely loving is the thing it does where if I run scoop update * or another command that gives me a fuckton of console output, it'll just lock up and freeze, often continuing to read terminal messages while I'm focused on the desktop, and sometimes even crash if I'm unlucky. I'm sure an insane amount of development time went into this, so kudos! Loving it!
To be clear, I don't begrudge NV Access this too hard. I still donate to them and realize how hard making a free and open source Windows screen reader is. But this has happened to me at least 10 times this week, so I'm annoyed.
Today's #FreeSoftwareAdvent appreciation is for some of the Free Software languages that bring me both joy and income: Python & Golang
I've used Python at $DAYJOB since version 2.3 (it got woefully stuck at 2.4 for WAAAAY too long, and finally switched to 3.x some time in the last 2–3 years) and it simplified so many automation tasks there. I've used dozens of programming languages in my life for various tasks, and the hard part is rarely *writing* the code, but rather *reading* the code. And I find it a LOT easier to come back and read old Python code than just about any other language.
Meanwhile, Golang saved my bacon on a short-term contracting project where TB of (simple) CSV files needed to be processed, cross-referenced. Being able to spin up a pool of multithreading Go processes, have built in locking and hash-map structures, and operate on raw input buffers of bytes shaved a 3-day manual process down to about an hour involving running a single command. I find it pretty readable too, feeling a bit like C while ditching some of the most cumbersome aspects.
Microsoft Scales Back AI Goals Because Almost Nobody Is Using Copilot
tech.yahoo.com/ai/copilot/arti…
Haaaa haaaa haaaa haaaa haaa!
В России заблокировали приложение для слепых Be My Eyes
Все, что оно делало — помогало незрячим ориентироваться в пространстве.
В нем можно было связываться с волонтерами через видеосвязь или просить ИИ описывать происходящее вокруг — видеозвонки внутри сервиса как раз и могли стать причиной блокировки.
Официально в реестр оно пока не внесено, но в Be My Eyes подтвердили, что доступ из России ограничен
hi-tech.mail.ru/news/139605-v-…
Пользователи Be My Eyes столкнулись с блокировкой в России. Узнайте, как сервис помогал незрячим людям, и какие альтернативы доступны.Никита Лактюшин (Hi-Tech Mail)
The Inclusive Design Principles (IDP) were first published in 2016 by myself, Ian Pouncey, Léonie Watson, and Heydon Pickering.TetraLogical
Na sítích SPD je po tiskovce jejich ministra veselo 😂😂
novinky.cz/clanek/domaci-na-si…
Fanoušky a voliče SPD rozlítilo vyjádření ministra obrany Jaromíra Zůny (za SPD) týkající se pokračování pomoci napadené Ukrajině.Marie Kuželová (Novinky)
Just helped someone on Be My Eyes, he was walking from his house to a shop about 10 minutes away.
Helped him navigate the streets and cross the road and so on. Luckily he lived in the UK so I knew what I was seeing 😅
He was wearing Meta’s AI glasses, which help him a lot but don’t currently describe things like lamp posts/scaffolding etc, which was where I was needed.
He made the call from the glasses also, and it was great that I could see what he could see also.
One of my favourite things is helping people on Be My Eyes 😍
Such a great app.
reshared this
On Dec 27th at 3PM Eastern, one week from today, REAPER Made Easy's end of year wrap up/live listening party will be happening. This is where we hang out on a live stream and listen to a bunch of the productions people have done with REAPER and OSARA throughout the year.
If you've got something you'd like to share, we're all ears! Send it in here:
dropbox.com/request/mB2KhxVunz…
Anything you've made this year, anywhere in the world, in any language, with any amount of experience is welcome. The only limitations are one production per person so we can play as many of them as possible, and the majority of what we're listening to needs to have been made using REAPER/OSARA.
Feel free to post questions in this thread or via DM if there's anything you're not sure of. Boosts for reach appreciated.
Looking forward to hearing what everyone's been cookin'!
Scott and Jen
As an Open Source developer in Germany, I'd greatly benefit if our work was officially recognized as voluntary service (Ehrenamt).
If you are located in Germany, please help by signing this petition: openpetition.de/petition/blog/…
Thank you for your support! (Please do not sign if you are not living in Germany.)
Yes it's an ad for Big Tech, but it's really beautifully done and artful.
youtube.com/watch?v=KmFPWxjmnq…
Apple products are designed for every student. Accessibility features like Magnifier on Mac, Accessibility Reader, Braille Access, VoiceOver, Sound & Name Re...YouTube
Polygon just posted:
Unbeatable, Rhythm Doctor, and Bits & Bops just made December much groovier
If you love rhythm games, this is a surprisingly beefy month for the genr
polygon.com/unbeatable-rhythm-…
If you love rhythm games, this is a surprisingly beefy month for the genreGiovanni Colantonio (Polygon.com)
Jan Johannesson
in reply to daniel:// stenberg:// • • •Daniel
in reply to daniel:// stenberg:// • • •