@b0rk @icing it is a certainly a pile of legacy... things that keep it together. Anything particular you get stuck on that I might be able to help with?
The Royal Swedish Academy of Sciences (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl.
I use curl all over the place, but for quick CLI usage, I had been using HTTPie, for its simple API and pretty output. But, now, they’re even going the way of Postman and adding tons of unnecessary features and AI to their tools. 😮💨
@b0rk @icing oh right. Do this: in the 'cvssource' directory that is a curl source tree: build curl there, using configure or cmake. The website build looks for some artifacts from a "real" curl build, for example the rendered manpage curl.1
@b0rk @icing oh no, you’re maintaining parallel build systems. Are you attempting to migrate away from autotools to CMake (or vice versa), or does curl just build so many places that a complete migration in either direction is impractical-to-impossible?
Huh, somehow never thought of putting curl into scripts inside a directory for documentation instead of postman/insomnia collections. I could also > the response into response files so that I can check them anytime without running the request again.
mh, I have no information on this but Brad Sprengler of grsecurity is a person that's been permanently at war with the Linux kernel community for many years, so I wouldn't really trust anything he posts about the Linux kernel without hearing it from another source. 🤷♀️
This October, the Internet Archive’s Wayback Machine is projected to hit a once-in-a-generation milestone: 1 trillion web pages archived. That’s one trillion memories, moments, and movements—preserved for the public and available to access […]\n
Just received an email from YouTube that they'll soon enable autodubbing on the OctoPrint channel for new and soon also old videos. Hell no, every time I run into this AI shit when watching YouTube I just want to scream, it's THAT bad.
Thankfully, there's a way to opt-out, and I just did that. And if you upload stuff to YouTube, for the love of all that is holy, PLEASE disable that too!
That something like that ever ended up as a feature just tells you a lot about the product manager there.
Only someone who doesn't watch stuff in several languages - because they only speak one - can come up with the idea to force AI voices per default on everyone else.
I haven't yet found a way to opt out of that shit on the consumer side, but using patched and third party apps helps... (and also helps with some other bits of the whole enshittifying experience)
As many have already pointed out the outage at Amazon Web Services & its impact have shown the extent of dependence (for internet services) on a small number of companies.
As in other markets (national & global) oligopoly is the defining characteristic of this market;
while effective monopolies are rare, oligopolies are so common that one might want to call the current period the 'age of Oligopolistic Capitalism'.
That this has significant social costs is pretty clear!
The irony here is that the internet as a whole is massively resilient and it's only through the imposition of cloud monopolies that we've built in points of failure.
As a developer, I love solving problems. But when I leaned into accessibility, I discovered a new appreciation for the elegance of HTML. All the layers of backend and frontend engineering are...
It took about a month, but the box running FX Radio has hard crashed again. Kernel panic or something else, I don't know yet.
I guess it's time to move it to a more robust host, which I don't currently have. I'll try to debug it when I can get that machine back online (requires manual intervention, because stupid me didn't install a remote switch).
For context, FX Radio is currently running on an old Intel NUC5i3RYH from 2015, which has been upgraded with a 2TB SSD, most of which is used, and 16GB of RAM, running Debian Bookworm. I may just buy another MiniPC to replace it, and stick the current SSD in there... unless the SSD is the problem, in which... yeah. New one of those, too, I guess.
The last version of FX Radio ran on a Raspberry Pi 3 model B Plus with an external USB hard drive connected to it. While it did work, Liquidsoap crashed every couple of days. This time, Liquidsoap is pretty stable, but the machine itself falls over every now and then.
The box has been rebooted, and ... uh... it isn't coming back online.
Righty then. That's a possibly dead project for a couple of months, until I can get down there to do something about it. This also takes @NoiseBox offline.
...
or not. The machine is visible to me again, several minutes later. Let's do some debugging. WOOHOO!
OK... FX Radio is back online. Unfortunately, previous kernel panic or whatever was not logged, so I have fixed logging. Hopefully, next time it crashes, I can better understand what's going on.
bych řekl ať to uděláš z patentového drátu (je v něm dost uhlíku aby šel zakalit ale je vyžíhaný abys ho mohl naohýbat a až potom ho necháš zakalit) ale zase když je v tom dost uhlíku aby to šlo zakalit tak se to blbě svařuje :D No potom se pochlub co jsi stvořil.
@FoxVK budem to "konzultovať" na praxi, keď sa tam konečne vyberiem (čo počítam že bude budúci týždeň). Čo som si tak všimol v škole sú radi za aktivitu. Díky (pamätám si to len som bol mimo vtedy)
Way too many bytes in one basket makes for one very big single point of failure. This is the cost of an absurdly hyper-centralised fast-food-like data center culture.
Signal++ down, sucks, but it's seeing fundamentals like banks & public sector services break that stings most.
But hey, maybe this is what it tales to push more govs to actual #datasovereignty, investing in locally owned data centers or building out their team & hosting on-prem
"The list includes McDonald's, DisneyPlus, Snapchat, Signal, Roblox, Verizon, Fortnite, Venmo, Perplexity, Hulu, Duolingo, Perplexity, Reddit and Coinbase. Even Amazon.com was offline at one point, and some users have also reported that their Alexa smart speakers and Ring doorbells had stopped working.
Banks and even some government websites have been affected"
Disappointing to see nothing on Signal's blog as to the mass outage due to their dependence on AWS. Solely very specific social accounts. Their AWS use for serverside has not been a secret, but it would be good to have a detailed, transparent description of how far this relationship goes, if they have plans to add more resilience, decentering.
Their server side code is OSS yes, but just for audit purposes. To use it you'd need to rebuild the client apps, pointed to your instance.
With Signal proving to have no failure tolerance server side, we have effectively seen Amazon could switch off Signal. Not that they would necessarily do that, but it is an extraordinary power to hold, even a lever to wield.
I'm not slighting Signal here. I use it in my work. Family, friends all use it. Folk invested trust, & depend on it.
Signal have popularised E2EE chat, brought it to the masses (spurred Meta to Double Ratchet WhatsApp). A huge contrib
zaujímavé ako dlho vydržalo naše priateľstvo, spoznali sme na stránke o Androide XDA Developers kde sme flašovali kernels and custom roms, riadne dávno tvl
It is available free from 'ISO/IEC 40500:2025 - Information technology — W3C Web Content Accessibility Guidelines (WCAG) 2.2' at iso.org/standard/91029.html
Introduces the Web Content Accessibility Guidelines (WCAG) international standard, including WCAG 2.0, WCAG 2.1, and WCAG 2.2. WCAG documents explain how to make web content more accessible to people with disabilities.
Does anybody know how to get cyclepath to play properly? When I play the game, it acts like it's speedhacked or something. everything comes at me abnormaly fast
@talon Yeah. It seems to happen on all my machines, at least the windows ones. Imagine if you were to enable a cheat engine speedhack, that's how it plays. Note that I don't have cheat engine. But It's like that, really really fast. I even tried ajusting my keyboard delay settings but no luck
This makes sense, you only mention what's distinctive about a person.
If there's a news report about domestic violence, the report won't emphasize that the couple had no kids, was not religious, was not famous, or that neither of the participants had any mental illness. If the couple has nine kids, are scientologists, are well-known celebrities and the man is known to have addiction issues, all of those will appear in the news report.
If a German commits a crime in Germany, there's no need to say that a German committed the crime, that is implied. If it's a foreigner doing it, that's something distinctive about the situation.
It's true that it causes people to draw the wrong conclusions though, just as news reporting on plane crashes and nuclear disasters causes people to have the wrong ideas about the safety of aviation and nuclear reactors.
@GLaDTheresCake Nobody mentioned skin color here, this discussion is about German vs. foreigner. At least here (Poland), that info is usually available in police reports, and doesn't have to be implied from skin color.
@miki @GLaDTheresCake Unlike over here in america.. jeeez I wish we would get over it already! This country (america) is so racist and has continued to be since it was created 😿
@em_and_future_cats @GLaDTheresCake I don't know what you're refering to specifically, but America is actually a lot more transparent about crime (to its detriment).
Whereas in Europe, a lot of information is withheld for privacy reasons, in the US, any somewhat competent reporter can access most police reports in their entirety, including mugshots and unredacted names of the accused, which they're allowed to publish *before* that person is convicted by a jurry of their peers.
@miki @GLaDTheresCake True… I think what I’m referring to is frequently you hear a report over here talking about a crime they will *very often* say what their skin color or ethnicity is. I’ve noticed that when the person is “white” they (reporters) often just refer to their age and gender … that’s what I think I was trying to get at … however this is just what I’ve observed and could be skewed just in the observation.
## Summary:
Buffer overflow vulnerability in curl's WebSocket implementation due to unsafe use of strcpy() in the handshake process. The vulnerability is located at lib/ws.c:1287 where...
@piggo @alefunguju strncpy() is almost never the right answer and is more often than not rather leading to bad code, to the extent that we ban that function in curl since a while back
If the target buffer fits the data we copy to it, there is no point in using strncpy. Period.
while it's kinda funny to watch clueless AI users get dunked on, this must be a real pain to deal with. I remember your blog posts on slop bounty reports, and I have a bad feeling they're not going anywhere.
just said "hell yeah!" out loud, in public, when I saw your reply to "I'll be more careful next time"
I'm not a programmer but can vaguely read it and I'm looking through that code snippet and thinking "but isn't this...working entirely as its meant to?". Also, step 4? Perfect slop right there.
@_aD this time it took me about five seconds to dismiss the report. It didn't feel or smell right and a quick glance on the pointed out code immediately confirmed that to me...
Včerejší výpadek AWS zase ukázal, jak moc je internet závislý na pár velkých hráčích. Stačí jeden region Amazonu a spadne půlka webu – od messengerů po streamovací služby.
A pak se někdo diví, proč má smysl decentralizace – Mastodon, MXChat, celý Fediverse 💬
For you activist folk that still use Google services, get your shit off google and do it now. Don't store your files there and move your email to @Tutanota
If you can't make that effort you're not to be trusted. Look at the last item on the list in the linked article. Given the current fascist admin, it's clear your files are not safe, secure or private if stored on Google. Likely other US services too.
follow-up question: I have an old iPad that I still use (because I don't want to be wasteful with hardware because it still works, you know?). However, it doesn't update anymore, not supported, and I really don't want to support Apple at all. I'm also not sure about Samsung. I don't know what tablet to buy next. I want to avoid American cloud/tech based, and I'm guessing Huawei is off the table? I know nothing about Linux either. I'm a bit lost really. Any help would be appreciated and boosts welcome too. Thank you 😊
We've just fought #ChatControl & we'll continue to fight wherever #encryption is under threat. But today we'd like to celebrate that 61% of all Tuta emails are sent end-to-end encrypted - a huge win for privacy. 🔥
Your excellence, we have fashioned these high tech garments for the common people that are only transparent to the those in power who themselves are completely honest and trustworthy. In fact we are wearing them right now. As you your righteous selves can obviously see, this is the perfect solution. Now if we could only receive a small compensation for our tremendous contribution to society…
We are delighted to share that the President of European Open Source Academy (EOSA), Daniel Stenberg, has been awarded a gold medal for his contributions to society by theRoyal Swedish Academy of Sciences).
While this may not be Daniel's first gold medal, it's certainly just as special.
One of the many, many reasons I love Thai: Gender is a self spoken expression. We end our sentences with the gender marker we feel to, ka for female or krub for male, we are free to use either as we wish to. In conversation we would never assume the gender of another person, though we would make a guess about whether they were older or younger than us. In Thai culture an age based honorific is used, addressing our elders as P’ or Ba or Yai, etc or someone younger than us as Nong.
When I first encountered this, I didn’t want to disclose my age, my American self had some inner ageism at play. But the longer I’m here the more I love it, to be someone’s P’Lek 😻 is some serious Auntie love. Or to be tucked into the kindness of Nong Lek, I know that I’m being cared for.
And, to be able to end my sentences on my own terms, a “ka” when I’m feeling in my ladyness or a gentle “kub” when I’m just a little guy. No gender imposed except what I speak it to be, this is a kindness I didn’t know existed. #thailand #thai #genderbend
Polish does something similar, past tense verbs are declinated based on the gender of the subject. A sentence like "I went to the bank today" declinates differently depending on whether it's a woman or a man going to the bank.
It's very hard to adapt this for non-binary (people have tried, but there's no universally accepted system.)
It also makes software translation (and sometimes all other kinds of translation) literally hell.
Today's AWS debacle is the perfect example of the reason why in the last few years I started to be less enthusiastic about Signal, and more oriented to federated or even P2P solutions like XMPP and Jami. I wrote about it already:
Let's ignore for a second the blind reliance on AWS or any other cloud provider. In a decentralized system, this would not have happened, or at least it would have not impacted so many users.
Yes, I am a cryptographer myself, I know that Signal's encryption is the best. But encryption is not everything. Availability issues, geopolitical troubles, risk of enshittification, limitations on users' freedom to use and control the software lead to a lack of trust, even in a supersecure solution. And I say that with honest admiration for the folks at Signal, who are doing a great job.
Since the next version of #FeatherWiki won't be ready for release until the full test suite is written and writing the tests is taking forever, I'll be releasing one more patch version in the lark family (1.8.x) to fix a couple of minor bugs later this week.
The Royal Swedish Academy of Sciences (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl.
مرحبًا بك في مدونة "قدرتك المالية" — وجهتك الأولى للربح من الإنترنت في السعودية والعالم العربي! في عالم يتغير بسرعة، نُبسّط لك أفضل طرق الدخل الرقمي لعام 2025، خطوة بخطوة، بدون وعود فارغة أو مصطلحات معقدة. نقدّم محتوى عملي، واقعي، ومُوجّه خصيصًا للمبتدئين، يشمل: ✅ التسويق بالعمولة (Affiliate Marketing)
✅ البيع عبر إنستقرام وتيك توك ✅ إنشاء مدونات رابحة مع جوجل أدسنس ✅ مشاريع استيراد وتجارة إلكترونية اكتشف عالم الربح الذكي اليوم: 🌐 www.badooory8.org
Kungliga Vetenskapsakademien har kva.se/ så jag tycker det är rimligt att anta att de kallar sig KVA.
> Kungl. Vetenskapsakademien grundades 1739 och är en oberoende organisation vars övergripande mål är att främja vetenskaperna och stärka deras inflytande i samhället. @MrShark
Ja, Kungl. ingenjörsvetenskapsakademi kallar sig IVA, men Kungl. Vetenskapsakademien (utan ingenjör) kallarsig KVA och det är KVA som utser nobellprisen inte IVA
Many many thanks and huge congratulations for the award.
I read your blog post on your 2017 prize. Loved the authentic "blog" voice of that article. The way you described every moment and what it felt. Good motivation.
congratulations, both on receiving that award and on living in a country that sees and values the work you do. You make me very proud of this wacky open source pursuit.
"To be honest, I often use wget to download files" ... some people tell me in a lowered voice, like if they were revealing one of their deepest family secrets to me.
This little hobby project of yours is getting serious. Maybe you should consider switching it up and doing something more straightforward like running a public cloud provider.
congratulations! And hold on to it, the financial system will probably collapse soonish and gold will be good to have. After the apocalypse, you can pinch off pieces of it to buy food.
I appreciate the greatest technical minds on Earth taking a communications network that was designed to withstand a nuclear exchange, and turning that network into something that can't survive a DNS error from a single company.
Boy, this brings back memories! | JAWS for DOS 2.3 Basic Training Tapes : Henter-Joyce, Inc : Free Download, Borrow, and Streaming : Internet Archive archive.org/details/jfd-2.3-ba…
In 1993, Henter-Joyce released version 2.3 of its JAWS screen reader for DOS operating systems. The four tapes in this upload are the basic training tapes that...
Screen readers are an assistive technology that interprets the information on a screen and translates it to either synthesized speech or Braille output. This helps blind people, people with low vision, and people with cognitive or learning disabilities.
Google Maps lets drivers mark “Unplowed Roads.” These warnings are now popping up in Southern California to warn of ICE agents on the loose… because of the “icy” conditions. I love users!
Jonathan Yu
in reply to daniel:// stenberg:// • • •Alex
in reply to daniel:// stenberg:// • • •marque d'apéritifs
Contributeurs aux projets Wikimedia (Fondation Wikimedia, Inc.)