I really want to port Cairo's internals to Rust.
It is going to take a fuckload of refactoring to make it unit-testable, anyway.
However, I don't yet know if it is worth it.
Is there an alternative to Cairo for projects that really use it to draw 2D stuff? Including librsvg? People tell me that Skia is not it, but I am eyeing tiny-skia as a Rust alternative for librsvg.
fyi to linux users, the unofficial signal desktop flatpak doesnt use the freedesktop Secrets API no matter what you do and leaves your keys completely unencrypted
you can just dump ~/.var/apps/org.signal.Signal and read everything stored
if you're concerned, you should probably use the native package
Huh? Not everybody wants their blog to be social media, let alone part of this particular social network. Blogs are older than social networks.
Hell, not everyone wants comments.
yes, i consider Atom a better fit than full AP or even full OStatus. I even added some classic ActivityStreams 1.0 metadata to them but I’m not enabling interactive features on the site that don’t have to do with reading and sending a network-neutral WebMention for me to approve.
I’m even thinking about disabling the Fedi-Webmention bridge tbh.
Fedi isn’t just a set of protocols; it’s also a group of people using the platform and I don’t want my home located in the middle of Time’s Square.
Low-volume Webmentions for interesting backlinks, WebSub and Atom for subscription, and Microformats/semantic markup for machine friendliness are more than enough to interoperate with any network; it’s on them to parse my posts (e.g. to generate a link preview).
What do I gain by enabling AP integration (with replies hopefully disabled) that I don’t have with links?
I’ve noticed that a lot of AP devs want to put AP in everything, despite few people actually being interested in putting everything they do online into one big social network. Not everybody wants social media all the time and everywhere.
CrowdStrike SVP Adam Meyers apologizes before Congress over the company's faulty update that caused a global IT outage, to largely sympathetic House lawmakers (Tim Starks/CyberScoop)
cyberscoop.com/crowdstrike-exe…
techmeme.com/240924/p45#a24092…
Frustrated, the woman walked up to the examiner and said, "I've answered this question in every way possible—wall, cliff, old man, and young man—yet I've failed all four times. How is this possible? What am I supposed to hit?"
The examiner smiled and replied, "The brakes!"
aws.amazon.com/about-aws/whats… #aws
Observation by a friend, which resonates with me: Regarding generative AI, I have never before seen a technology that has so polarized all the tech-intelligent people I know around *three* poles:
• "This is a useless gimmick and will pass like any other fad.”
• "This is pure evil and nobody should use it, ever.”
• "This is amazing and we can bend it towards great good.”
There’s room for nuance, but that space feels pretty lonely sometimes.
I’m at #Innotrans all day. I’ll sporadically post in this thread.
First impression: CRRC (Chinese manufacturer) has the main advert at Messe Süd
Cairo status: narrowed the bug down to a single 160-line function, so I'm comparing the executions of a case that works, and the case that crashes.
Time to extract some of this function's code and add some tests!
dx = p2->x - p1->x;
We have integer overflow; that difference is larger than 2^31 bits and the int32_t cannot represent it.
Roku unveils the $100 Roku Ultra, which is 30% faster than its other streaming players and has Wi-Fi 6, HDMI 2.1, Dolby Atmos, the Voice Remote Pro, and more (Chris Welch/The Verge)
theverge.com/2024/9/24/2425248…
techmeme.com/240924/p19#a24092…
reshared this
![Screenshot of a Node.js console session.
me: define an array called arr, [1,2,3]
node: ok. [ 1, 2, 3 ]
me: what's the type of arr
node: 'object'
me (thinking): whut
me: define an object called foo. foo = {"one": "I", "two": "II"}
node: ok. { one: 'I', two: 'II' }
me: what's the type of foo.
node: 'object'
me: what's the length of arr
node: 3
me: show me arr as a string
node: '1,2,3'
me: assign 'barney' to the "fred"th place in arr
node: ok. 'barney'
me: uhhhh. what's in arr now
node: [ 1, 2, 3, fred: 'barney' ]
me: and what's the length of arr now?
node: 3
me: and what's arr look like as a string now?
node: '1,2,3'
me: ok what's really in arr
node: [ [ '0', 1 ], [ '1', 2 ], [ '2', 3 ], [ 'fred', 'barney' ] ]](https://fedi.ml/photo/preview/640/593219 "Screenshot of a Node.js console session.
me: define an array called arr, [1,2,3]
node: ok. [ 1, 2, 3 ]
me: what's the type of arr
node: 'object'
me (thinking): whut
me: define an object called foo. foo = {\"one\": \"I\", \"two\": \"II\"}
node: ok. { one: 'I', two: 'II' }
me: what's the type of foo.
node: 'object'
me: what's the length of arr
node: 3
me: show me arr as a string
node: '1,2,3'
me: assign 'barney' to the \"fred\"th place in arr
node: ok. 'barney'
me: uhhhh. what's in arr now
node: [ 1, 2, 3, fred: 'barney' ]
me: and what's the length of arr now?
node: 3
me: and what's arr look like as a string now?
node: '1,2,3'
me: ok what's really in arr
node: [ [ '0', 1 ], [ '1', 2 ], [ '2', 3 ], [ 'fred', 'barney' ] ]")
Marcellus Williams was sent to Missouri’s death row in 2001 for a murder he swore he did not commit.
Forensic testing of the knife used to murder Felicia Anne Gayle Picus revealed male DNA that did not belong to Williams, but he is scheduled to be executed tonight at 6 PM CST.
Both the Missouri Supreme Court and Gov. Parson have refused to grant a stay of the execution, and now it's up to the U.S. Supreme Court to decide whether to allow Williams's execution by lethal injection tonight to proceed or not.
Make sure to follow Jordan Smith as she covers the latest developments as they happen tonight.
BREAKING: The U.S. Supreme Court has denied a stay of Marcellus Williams's execution, with Justices Kagan, Sotomayor and Jackson dissenting.
Williams is scheduled to be executed at 6 PM CST.
Authenticating to a website, 2010: Type in username and password
Authenticating to a website, 2024:
- Type in username
- Look up 20-character password in password keeper
- wait
- Prompt for 2FA token
- Dig out phone
- Unlock phone
- Scroll through 50 services to find 2FA token for website
- Type in 2FA token
- Success
- Receive email alerting you to the fact you've logged in
- Six weeks later: receive email telling you service had been compromised eight weeks ago and you must change password.
reshared this
Former Alameda Research CEO Caroline Ellison was just sentenced to 2 years imprisonment and 3 years of supervised release for her role in the FTX fraud.
1. Mozilla is removing their :// from the logo?
theverge.com/2024/9/24/2425302…
2. I learned that jetty (the open source webserver) has a :// in their logo these days. When did this happen?
Someone shared a comic I liked, but I noticed that somewhere in the chain, the artists name had been removed, so that stopped me. Reverse image searching proved surprisingly frustrating and involved diving into the cesspit of LinkedIn, but I eventually identified the artist as Irina Blok, but I can't link to the original image because its in Instagram jail, so here's her site.
That was a pain in the ass. Please don't trim credits. It's an asshole move.
Actual exchange that happened during my first marriage:
Brother In Law: [tells a racist "joke"]
Me: not cool. you won't say racist shit around me.
BIL: or what?
Me: or I won't be around you.
BIL: it wasn't even racist
Me: yes it was. you won't do it around me.
BIL: whatever. (under breath) bitch.
Later, at Thanksgiving dinner:
BIL: [tells a second racist "joke" at the dinner table]
Me: [gets up and gets my keys and prepares to leave]
Mother in Law: where's she going??
Husband: I don't know. Lana, where are you going?
Me: I'm leaving.
MIL: why??
Me: ask your son.
Then I left. Later that evening I got an apology from BIL, and a promise to not say racist shit, at least around me. He tested it a second time, at a different family get together. I got up and started for my car. I got an immediate apology from him for his behavior.
Look, it's not a lot. But it's a start. Stick to your guns, folks, particularly around the holidays. Hold them accountable for their racist words and actions. Deplatforming racists works.
Jamey Sharp
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Jamey Sharp • • •@jamey Oh, yeah, in terms of how to design a library it is really good. Awesome by C library standards.
I think Cairo's main flaws are its testsuite that does not pass by default, the undocumented internals - specialist code, and the lack of unit tests.
Edward Hervey
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Edward Hervey • • •@bilboed @jamey Already tried fixing the test suite twice. Maybe I should try it again 😄
But yeah, what I want to fix is very low-level, and there are practically no tests for the low-level bits ("do all the code paths in cairo-polygon get tested?"). Most of the test suite uses the public API, either to compare renders to reference images, or to try to exercise certain tricky code paths.
So I'm going to do the #ifdef TEST dance in the main sources and see if the maintainers like that.
Jamey Sharp
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Jamey Sharp • • •@jamey @bilboed Cairo *is* in oss-fuzz; the container images don't build - introspector.oss-fuzz.com/proj…
I haven't gotten there yet, and I don't know what the fuzz targets look like.
Federico Mena Quintero
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Federico Mena Quintero • • •Jamey Sharp
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Jamey Sharp • • •@jamey @bilboed Right now the librsvg fuzzing stuff (and by extension Cairo's) is stuck in the crashes in Cairo's path renderer. You feed it coordinates that are outside of cairo_fixed_t's representable range, or close to its bounds, and it crashes.
Unfortunately the SVG-based fuzzer has not yet gotten to the point where e.g. it generates a crazy clipping path for something else. Too much syntax to get right :)
(Cairo needs more fuzz targets, and testable algorithms - I'm on the latter.)
zbrown
in reply to Federico Mena Quintero • • •cairo's meson now, so sneaking in some std-only rust should even be fairly easy tooling-wise these days 🙈
Doubt it'd win us many friends though :/
Federico Mena Quintero
in reply to zbrown • • •zbrown
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to zbrown • • •@zbrown Probably people who can already compile librsvg, otherwise they can't compile the Cairo test suite 😃 😃 😃
More seriously, I'd love for someone to RTFS and write up how a variety of apps or libraries use Cairo directly. Do they Really Draw Interesting Stuff(tm) or is it something that they could do easily with e.g. GTK these days? How much work would it be to do that instead?
zbrown
in reply to Federico Mena Quintero • • •aha, didn't realise it was mildly circular like that, interesting.
That'd be quite the project, and at least in the context of gtk apps I wouldn't be surprised if a lot of it could even be CSS by now.
Federico Mena Quintero
in reply to zbrown • • •Sebastian Wick
in reply to Federico Mena Quintero • • •Federico Mena Quintero
in reply to Sebastian Wick • • •Sebastian Wick
in reply to Federico Mena Quintero • • •I'd rather say it's the product of previous research projects :)
It certainly isn't as mature as cairo or even skia but I do believe that it's the one thing that will dethrone cairo eventually. But who knows, I don't have a crystal ball...
Federico Mena Quintero
in reply to Sebastian Wick • • •@swick Oh, I mean, I wish them the best. It's very cool work.
But if you are an existing user of Cairo...
* Can you port your (certainly underfunded) app away from Cairo?
* Can you even use a GPU renderer without massive rearchitecting?
* Do you use pango/cairo for text? Can you switch to the lower-level layers, or something else?
Sebastian Wick
in reply to Federico Mena Quintero • • •