I made cron jobs for submitting HackerOne reports on CRLF injections, HTTP headers added by the user and the use of file:// urls to access local data accessible to the user already but with curl instead of notepad.
We could bundle these with the curl release tar ball for further reach. People seem to want those.๐๐ปโโ๏ธ
Would it be an option to add a small submission fee? That is of course unfair to researchers from developing countries. But $5 should dissuade the AI slop at least a little, I'd imagine.
Not sure if there was already a discussion in another thread about what could be done. Apologies if I have missed that.
Either way this current asymmetry of effort to report vs. effort to check is not sustainable. Thanks for putting up with it so far.
yay! I plan to hang out in the cafeterias too to get my daily dose of 5 espressos. I will seize the opportunity to thank you for your incredible work... and to get a sticker or two :)
BTW, I was once invited to moderate a DNS panel at #FOSDEM composed of the greats of the Internet: @bagder , @bortzmeyer , and @bert_hubert
Main reasons for my agreeing to moderate was a) so that I could actually enter the otherwise FULL DNS dev room, and b) to ask Daniel for a curl sticker.
Anyway, I had a fun time, and guess what I returned home without?! #trueStory
Here's the recording of the event: I'm the fat chap holding the mic.
by Daniel Stenberg, Stรฉphane Bortzmeyer, Bert Hubert and Jan-Piet MensAt: FOSDEM 2019https://video.fosdem.org/2019/K.4.601/dns_privacy_panel.webmDaniel Stenb...
instead of money you could promise stickers on Hacker One, maybe that will send the AI slop away and rally the hackers with free-space on their laptop ๐
I've just seen the following comment posted on Lemmy, and I'm reeling at the spiciness of their take. It feels like genuine bravery to straight up admit this in public:
"Dredd (2012) was a technically proficient, but ultimately mediocre piece of uncritical copaganda action schlock, and a vastly inferior film to Judge Dredd (1995). i will die on this hill."
@FreakyFwoof however, I do agree with your take on the comment, it's utterly bonkers. Dredd 95 was for the most part, pure comedy. 2012 is nasty, gritty, unforgiving and exactly what Dredd should be. You go and rapid fire on that hill. Or High ex! I don't mind :)
Hi @ebassi, if the plan to disable middle click paste by default was the reason for your post, then I don't agree with your post. It is a very useful feature, not a bug.
If it's true that newcomers are confused by it, consider a pop-up window on first-time triggering a paste-upon-middle-click: "This paste was triggered by a middle click. If unintended you may disable this feature here."
@GerryT youโre barking against the wrong tree, here: I fucking hate the primary selection, it has always been a mistake, and Iโd nuke it from orbit if I could. The โdisable by defaultโ approach is the middle of the road solution between people like me, who grew out of it 25 years ago, and the people with generational trauma that still think the world is an xterm window.
I am not barking. This feature is a very practical current feature and has nothing to do with IT history. Disabling it by default is the wrong solution. Informing the user is the better solution.
Anecdotal evidence: I am user (not having any programmer background) and use it everyday. I also know that my father who is 80+ (without any IT background) uses it everyday, as he has difficulties to identify an item in text lists (he does not easily find the term copy in the list of options).
I understand that you are grieving, but it really isnโt my problem. You are not going to convince me by talking about your father. What you want is leaving the status quo unaffected.
Indeed, the status quo is to have a very practical and useful feature, and some newcomers may be confused by it. Therefore, the status quo is very much okay, but we have to think about the people who may be confused.
BTW, I brought up the example of double-clicking shift that capitalizes everything. It really confused me at the beginning and I was not able to deactivate it. Then I learned that it is a useful feature and how to deactivate it.
@GerryT It was understandable back when apps implemented the other half of the protocol. Namely unselecting text once they lose ownership of PRIMARY.
Once apps started to keep showing selected text without owning PRIMARY, the model broke down. And I'm not sure the people asking for middle click paste would even want this part to change.
@GerryT Just because you dislike a feature doesnโt mean that itโs complete trash. Countless folk rely on this essential feature. I use this *hundreds* of times a day. Itโs incredibly useful for folks who donโt (or canโt) use a keyboard for everything.
The more serious issue however, is the attitude taken. Insulting and degrading people who rely on a feature you dislike is an absolutely unacceptable way to treat fellow humans.
Comparable case: When the user double-clicks shift it capitalizes characters permanently. For this reason, MS Windows introduced a pop-up asking newcomers if they actually wanted this to happen. Otherwise, it tells that it is possible to deactivate this feature.
This would be also appropriate in the case of paste-upon-middle-click. It is a very useful feature for *many* people, but some people are confused by it and may want to disable it.
@GerryT โletโs pop up something in the middle of some other behaviour that involves the mouse to placate the computer touchers with a weird fetishโ is the kind of โIโm at the bargaining stage of griefโ signal of mourning for a feature that is just getting disabled by default, and that Iโm sure a bunch of distros will try and re-enable anyway
Let's pop up something *once* (or more often if the user does not click "don't show anymore") could be a solution. This is helpful and does not disturb anyone.
Let's assume that this feature is useful for 50% and not useful for the other 50%. How can we satisfy both needs? Something like a gsetting is no solution. I have not idea how to do something like this.
@GerryT you have no idea because you don't know if this feature is actually used by people, and investing time to negotiate for it to continue to be enabled by default is how you cope with it.
As I said at the start: telemetry would be a great way to determine if this is just an easter egg that people are unreasonably attached to, or if it's really used. In the meantime, the folks doing the work see the downsides more accurately than the upsides, and get to decide.
I highly repect the people working on Gnome, that's why I use it. However, in this case, not one provide any form of evidence that this feature is not useful or not used, and no evidence that an unexpected number of people are confused by this feature. Yes, I agree Telemetry helps with this, but apparently it doesn't exist and it seems to be an educated guess by those who want to deactivate it. That's why I am telling that this guess might be incorrect this time.
Then just make it configurable. The "telemetry" way of thinking is ok for corporate people, but the idea that I cant use my PDP-11 anymore because nobody is doing the same in my building, to me is quite disturbing.
I think it is not configurable for the end user at the moment. To add it in Gnome Setting panel would be something helpful, if you go further with the plan to deactivate it.
The setting exists already, and it can be toggled in the CLI and using apps like Tweaks and Refine. The discussion in the merge request is: 1. disable by default and 2. add the toggle somewhere that's easy to find
Discussion is not tirade. There is no reasonable reason to deactivate it by default. No one has given a compelling reason, why to do so. People are actively using this feature, as you can see in the comments of all news sites that reported on this. There are good reasons to keep this practical and useful feature as default. Please reconsider your opinion on that.
closely related to โYou canโt change the defaults, theyโve been this way forever. Time means things are perfect. Also, I, of course, donโt use the defaults. Iโm a power user who changes everything because the defaults arenโt usable.โ
I want to speak about how we speak to each other. Mostly because I am as guilty as anyone else of generalising, and I suspect that even as my very intelligent American friends know that when I shit talk about โAmericansโ, I donโt necessarily mean them. It still stings on a visceral level - especially if they are fighting like hell personally to try and get their mad king out of power. 1/
Meanwhile, what a lot of Americans - even very well intentioned ones - probably cannot conceive of is that the rest of the world experiences the effects of American power as monolithic. We never get the opportunity to vote in your elections, but we pay in insecurity and financially when a terrible American president is elected.
When your president threatens other nations, we donโt (and canโt) stop to specify โnot all Americansโ. That is absurd - because we donโt experience you individually 2/
Is there a term for feeling productive through working on tools that will (might) make you more productive?
It's not procrastination, per se, because I am achieving something. But it's not ticking anything off of the to do list.
Basically, I'm describing Arnold Rimmer spending so much time devising a revision planner for taking his engineer's exam, that he doesn't actually do any revision. But it still *feels* productive.
Falls nicht und das euer Marketing ist, na dann ist es eher grottig schlecht und entspricht nicht eurem technischen Kรถnnen. Treibt mich als Long-Time Tuta-User eher weg von euch.
omg yeah. Just yesterday I was researching where headless cms were at and every single one now has "ai powered" at the top of their homepage.
The worst offender imo is Builder.io, who made their product of 10 years the "legacy" experience and push all new projects to an ai-only flow. The only way to edit content is to ask an AI to make a code update. You wait 5 minutes upon opening the web app because the CMS is cloud-only and must run its own dev server.
OK ,seriously, care to tell your audience what's the point of this shitposty trash? Like, you've got a pretty good product so I (and I'm sure many of your customers do so as well) highly doubt you need to stoop down to the corpo-fash "wannabe cool and hip brand account" bullshit. Ffs, you've got a pretty decent track record when it comes to relevant activism too. A little wobbly but you're at least trying to keep up a good fight. But this crap is kicking your reputation in the teeth. So kindly remind whoever is handling your socmed that the brand account is not their personal shitpost-copium playground
Adding to that, chances are that people following you are already your customers @Tutanota, exactly because they wanted to get away from all this stuff. I don't want to hear about Microsoft or Google or Facebook any more than I already have to, and I certainly don't need more of it pushed into my news feed here. Tuta is doing cool stuff, and I'd love to hear more about that.
Sounds like a good moment to donate again to #Libreoffice ๐ค๏ธ and a whole lot of other FOSS projects, thanks to whom I haven't seen MS Office ( nor Windows by the way) ( nor any Microsoft ekhm "product") for years
Microsoft 365 Copilot... ๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐๐
ยซPlease, pretty please, don't call it slop. Do you have any idea how much money we sunk on this thing? Can you imagine what kind of about-face I'll have to make if this thing tanks for good? Our investors are going to cry so hard when they figure outโฆ
BREAKING? This rename of the app (not Office itself) happened in February 2025, but hey, it's currently trending, so why not jump on that bandwagon, eh?
Lesen Sie die neuesten Informationen zum Thema "Anne Roth kehrt als Referentin fรผr Digitalpolitik zurรผck" aus unserem Tagesspiegel Briefing Digitalisierung & KI.
Prima. Svou zรกvislost na us big tech jsem za poslednรญ 2 roky srazil rapidnฤ. Oproti bฤลพnรฉ populaci mi v tom hodnฤ pomohla mรก technickรก znalost, vลกude jsem tak pลeลกel ma selfhostovanรฉ sluลพby.
Uลพ zรกvisรญm jen na: Google Maps pro auto navigaci Google Android pro mobilnรญ systรฉm Meta WhatsApp pro komunikaci Meta Messenger pro komunikaci
Ja nejvic bojuju s Google mapama. Ani OSM ani nic jineho zatim neni tak dobre pouzitelne. Waze zejo... Komunikaci mam vyresenou Slackem - firemni, Threema - soukroma komunikace. Whatsapp ani FB messenger nepouzivam uz roky. U Apple toho zas tak moc udelat nejde, treba jejich imessage, vubec system (ano na Macbooku jde Linux, ale na tablet a mobil...)
Okay #MedMastodon folks - The instance is now back up and running I'm pleased to share. Things might take a moment to catch-up and I have sent out an announcement so hopefully anyone that had accounts that doesn't see this will get the e-mail ping letting them know everything is currently back online.
I will post a bit more about the plan in the near future but the long story short is nothing is planned to change that folks will see, the main goal for me is to get the site up and running, catch up on the activities that look to be outstanding and get a plan together for migrating everything onto new infrastructure.
Also a huge shoutout to @mastohost who have been excellent at keeping the server "Paused" effectively without deleting data even when there was no confirmed migration path and a real big thanks to Nick for being willing to transfer the server and keep the community running!
I am literally in tears right now. I weep for the country we could have been.
The Corporation for Public Broadcastingโs board of directors voted to dissolve the organization, officials announced Monday, ending the 58-year-old agency that distributed federal funds to #NPR, #PBS and more than 1,500 local public radio and television stations.
This formalizes the shutdown after Republicans in Congress rescinded $1.1 billion in funding because of Trumpโs tantrum demand.
Created by Congress through the Public Broadcasting Act of 1967, #CPB served as a middleman between taxpayers and public media, distributing most of its appropriations directly to local stations. The funding was particularly crucial for small and rural stations, especially those in areas where internet isnโt. Most of them will be forced to close.
Washington, D.C. (January 5, 2026) โ The Corporation for Public Broadcasting (CPB), the private, nonprofit corporation created by Congress to steward the federal governmentโs investment in public broadcasting, announced today that its Board of Directโฆ
@Milu Jรก jsem uลพ 5 let vฤrnรฝ Weawow, asi je ale jen na google blej, coลพ vรกs nenadchne. U nฤj lze zvolit z vรญce poskytovatelลฏ pลedpovฤdรญ. Dokonce mu rok co rok poลกlu pรกr ลกuลกลลฏ, abych ho podpoลil.
I really tried, Microsoft, I honestly did. Me to copilot: please write all the comments in this document verbatim as well as quote the text the comment refers to, with its page number. Copilot: writes my comments and invents the text which doesn't exist in the document. What were we supposed to use this stuff for again?
I gave KDE Plasma 6 a really good try. It's great for people used to a "Windows" like interface but I really hate having to constantly resize, move, and arrange the windows.
So, back to i3wm.. which will stay out of my way and let me get on with the tasks I do.
A digital infrastructure plan - The latest from Bianca Wylie for the Canadian Centre for Policy Alternatives.
"The path weโre on instead is techno-solutionism: the cheapest, straightest line governments can choose towards efficiency and savings, and the most impoverished innovation strategy possible for a young country with every opportunity to do differently."
A hacker known as Martha Root broke in and deleted three white supremacist websites at the end of a talk during the annual hacker conference Chaos Communication Congress in Germany.
Reminder: Whistler, Blackcomb ski operations is owned by a US company. If you go there you are financially supporting the country that wants to invade Canada.
Over the weekend, did you see the much-shared story on Reddit by a supposed whistleblower?
It started like this: "Iโm a developer for a major food delivery app. The 'Priority Fee' and 'Driver Benefit Fee' go 100% to the company. The driver sees $0 of it. Iโm posting this from a library Wi-Fi on a burner laptop because I am technically under a massive NDA. I donโt care anymore."
A โwhistleblowerโ tried to corroborate his viral post with AI-generated evidence. This is how I caught him. PLUS: Grok's image-generation crisis, and the rapture over Claude Opus 4.5
Interesting commentary on the differences in voice preferences by screen reader users and typical sighted users. My step dad has his Apple Maps voice set to an Australian man because it's "nicer" to listen to and he enjoys the dialect differences (car park vs parking lot). Such a different approach from the efficiency screen reader users typically want.
The State of Modern AI Text To Speech Systems for Screen Reader Users: The past year has seen an explosion in new text to speech engines based on neural networks, large language models, and machine learning. But has any of this advancement offered anything to those using screen readers? stuff.interfree.ca/2026/01/05/ai-tts-for-screenreaders.html#ai#tts#llm#accessibility#a11y#screenreaders
To be fair to your step dad, Karen and Lee, the popular Australian voices found on most GPS devices, as well as on IOS, originally developed by Scansoft, later purchased by Nuance, then transferred to Cerence Automotive, before finally getting owned by Microsoft, are some of the nicest text to speech voices ever made for casual listening. Largely this is due to whomever was in charge of recording and curating the data back in 2002. They did an excellent job editing and aligning the recordings for use with the concatenative synthesis technology that was available at the time, resulting in the Australian voices sounding noticeably better than all of the other English options, even though they all used the same underlying methods. The fact the data capture was so high quality has meant that as technology and training methods improve, those voices have continued to remain a step ahead. The female version of the voice your father is almost certainly using is based on this woman: en.wikipedia.org/wiki/Karen_Jacobsen If all of my favourite, fast and efficient voices were ripped away from me, those Australian voices are probably what I'd revert to. They're not as fast as I would like, but at least they're clear and accurate. Your step dad has good taste.
A hacker known as Martha Root broke in and deleted three white supremacist websites at the end of a talk during the annual hacker conference Chaos Communication Congress in Germany.
BREAKING: After 58 years, Trump dissolves the Corporation for Public Broadcasting. CPB served as the primary funder for PBS, NPR and local TV and radio stations. Now it is no more.
Meanwhile, billionaires continue to buy up major legacy media to prevent criticism of Trump.
My human rights newsletter remains unapologetic in fact-checked research and justice-centered writing. No required paid sub. Never a paywall. Join us: lets-address-this-with-qasim-rโฆ
A deep dive into the human rights issues affecting humanity. Pulling from my experience as a human rights lawyerโI bring the receipts to disentangle fact from fiction and advance the fight for univers
Looking through a README in a repo on GitHub, it said it was inspired by an earlier project. The earlier project sounded like it would meet my requirements better, so I clicked on it and...
... it was my own project. An incomplete one from eight years ago.
A โwhistleblowerโ tried to corroborate his viral post with AI-generated evidence. This is how I caught him. PLUS: Grok's image-generation crisis, and the rapture over Claude Opus 4.5
The author of a viral Reddit thread alleging fraud at a food delivery company tried to back up his claim by sending me AI-generated documents. Today I'm publishing those documents in the hopes that it helps other reporter see what we're up against in the age of AI platformer.news/fake-uber-eatsโฆ
A โwhistleblowerโ tried to corroborate his viral post with AI-generated evidence. This is how I caught him. PLUS: Grok's image-generation crisis, and the rapture over Claude Opus 4.5
Join Liam and Alyssa for the first podcast of 2026. Learn about Guide dog schools, strange city names, and find out what the Ervens are looking forward to in the new year.
Completely different topic, so ripping this quote out of the context from the article I just boosted:
"I wonder how much Venezuelan sensitive information was in fact stored on Google/Microsoft services and accessed by the US military to prepare their recent strike."
This is indeed a pretty interesting question to ponder. And if you're, say, Greenland, maybe consider your use of US cloud services...
AFAIK Palantir has their own copy of everything. They scrape and buy any data they can get access to and aggregate it so they can make sure they can target you with a hellfire missile while you're on the toilet scrolling reddit
I should state for the record that I think LLMs and other forms of AI have some valid and worthwhile uses, and that *none* of them should be tied to big tech or capitalism.
See things like: - accessibility - some types of research - spell-check and predictive keyboards - spam/scam filtering
Olivia Vespera
in reply to daniel:// stenberg:// • • •daniel:// stenberg://
in reply to Olivia Vespera • • •Stefan Eissing
in reply to daniel:// stenberg:// • • •I made cron jobs for submitting HackerOne reports on CRLF injections, HTTP headers added by the user and the use of file:// urls to access local data accessible to the user already but with curl instead of notepad.
We could bundle these with the curl release tar ball for further reach. People seem to want those.๐๐ปโโ๏ธ
mormund
in reply to daniel:// stenberg:// • • •Would it be an option to add a small submission fee? That is of course unfair to researchers from developing countries. But $5 should dissuade the AI slop at least a little, I'd imagine.
Not sure if there was already a discussion in another thread about what could be done. Apologies if I have missed that.
Either way this current asymmetry of effort to report vs. effort to check is not sustainable. Thanks for putting up with it so far.