heredos
@heredos@heredos.net
Location: 48.776396,2.335207
49 following, 28 followers
PSA: The Astrovials Canary was truncated: https://astrovials.com/canary.txt https://web.archive.org/web/20250124100435/https://astrovials.com/canary.txt
@geheimorga saving people some time: the new version no longer says that there is no data exfiltration to third parties and they weren't forced to add code to leak data.
@neverpanic @geheimorga it also doesnt say "i have no knowledge of backdoors" anymore
@4censord @neverpanic @geheimorga for the past 6 or so months their message was truncated by some folding program, i.e. it ended with > on each line. It looks like they hotpatched the problem by shortening the lines, instead of actually fixing whatever was causing that.
I don’t know them / the site, but maybe let’s not jump to conclusions too soon?
@domi @geheimorga @neverpanic @4censord
hm, i noticed that too; isn't that the kind of word-wrapping is what you'd see if you just copy pasted the output from ``nano``
with your terminal window being too small, atleast that's what it reminded me of
now question is .. .. why exactly?
@Li The signature verifies (tested the one from archive.org on Jan 13th), so it seems to have been copy/paste from a terminal window into whatever signing interface they use.
Guessing doesn't help here, though. The only way to resolve the ambiguity is to wait and see if they re-publish a new canary with the full text.
@Li @geheimorga @neverpanic @4censord what man in the middle would result in word-wrapping of all things?
i think it resulted from being lazy or not knowing how to do this proper. same with the fix, canaries usually expire, not vaguely change wording.
@domi @geheimorga @neverpanic @4censord
if you were to have MITM to SSH, and the user ran 'nano' on the file to the terminal, your logs would only show the output of nano and not the full contents of the file,
admittidly, its kind of far fetched;
@Li Again, the signature verifies, so what was signed is exactly what's in the file. If the original thing without truncation had been signed and then stolen from a partial display using nano via SSH, the signature wouldn't verify.
If what would have been extracted using nano via a hypothetical SSH exploit wasn't signed, then there's no point in stealing it in the first place.
It's not far-fetched, it's wrong.
@neverpanic @domi @geheimorga @4censord yeah that is a good point ^ its probably not how it happened then :3
ignore me im thinking up crazy scenarios here xS :)
@Li @geheimorga @neverpanic @4censord
the user ran ‘nano’ on the file to the terminal
this is nonsense. at this point you have full root access, and the victim is pasting the thing into a publicly-accessible file anyways. not to mention that it got signed with the line breaks.
@domi @geheimorga @neverpanic @4censord yeah i kinda realized afterwards, (granted if it was just logging, maybe-) but as you said it validates; so 
it cant be that :)
Tomorrow marks the 15 year anniversary of the first release of Apparatus! Apparatus was the prequel to Principia, releasing back in 2011 for Android. It was revolutionary for mobile gaming at the time, and is fonly remembered by us who played it before Principia.
To celebrate this monumental milestone there will be a new contest tomorrow with a fitting theme... Stay tuned!
#foss #opensource #contest #sandbox
Alt...
A contraption in Principia recreating a classic level from Apparatus, a kind of vehicle that can drive and shoot out marbles with a piston
Cette fille est en colere et elle a bien raison! Ca ne se fait pas ce truc!!
https://www.youtube.com/shorts/jtHKN9x4RtE
PS: j'ai essayé et ca marche parfaitement!
merci d'avoir prévenu, je vais absolument éviter de le faire à l'avenir
on more useful views on software
there are two kinds of programs: spreadsheets and videogames
social media? videogame
banking? spreadsheet
ai? you may think it's spreadsheet but it's actually videogame
@heredos Je vais devoir porter un Marcel?
@Kingu Canada joining the EU is a monkey paw I don’t think Canadians understand. Make no mistake, Canada would be expected to follow EU law, regulations, etc, with almost no influence practically. All the other member states will vote for European centric everything.
In fact, EU has too many states already, several which are more of a liability than anything else. Weak economies, far right governments, don’t hate Russia nearly as much as everyone should, etc.
If any Canadian asked me I’d say look towards Norway. I’d love to see Canada and Europe (not EU) cooperate closer and have closer ties. Norway has done this without being a member state. (We don’t talk about the UK, that was just dumb beyond dumb!)
Starting up military (Gripen!), economical, trade, scientific, humanitarian, space, etc agreements can be done right now. Mutual benefits can start now.
(Ukraine joining the EU is a very different beast, for so many reasons.)
@yon And using Euro would be weird :-)
@Kingu Well that’s the Economic and Monetary Union. Which not all countries in the EU belongs to. No Euro in Sweden! And not joining was 110% the right choice now that we have hindsight.
But it’s also stuff like regulations around *everything*, like food and electronics.
You’ll have The Netherlands pushing for policies around a country their size, which we in North America refer to as “a backyard”.
The French will French (and they don’t like anyone not speaking their French).
Plus I’m sure lots of people won’t be fond of anyone from inside of a EU country (citizen etc) can freely move and live in the other states. And it’s a lot easier to gain citizenship over there.
Nah. Stay away from the EU, it’s generations away from stabilizing. Talk to Europe instead.
Ended up at my university's main website for the first time in a while to read the status update about Canvas, and noticed they've added a chat support AI agent fixed to the bottom of the page like I'm on some SaaS website.
Annoyed at it begging for my attention, I ask it a simple question: Why the hell does [the university] need a chat robot?
(Thinking, thinking, thinking...)
"I understand your frustration — here's a short direct explanation!"
Oh my god shut up, you don't understand anything!
Also reminds me of this blog post I read recently:
https://adele.pages.casa/md/blog/all-my-clients-wanted-a-carousel-now-it-s-an-ai-chatbot.md
Now that I am acutely aware of the junk that's in the corners of the page I also went into the cookie consent dialog and actually read what's in there, and noticed there is a section about accepting Google Doubleclick cookies for targeted advertising.
What? My university doesn't have ads on their site. There are no such cookies either. Something tells me nobody noticed that's even there.
@ROllerozxa Talk about enshittification. To the best of my knowledge, this (luckily) hasn't happened yet to my university, but I don't see it being far fetched.
A similar thing happened with one of my professors: he kept suggesting we use his chatbot modeled after him to help with our homework...
guess what also loads with js after the chatbot? that's right, the f'ing menu that everyone goes to the website for.
and that menu cannot start loading while the chatbot hasn't.
that chatbot addition truly is something we really needed. now the website works much better with the right ublock rules
Alt...
(null)
A tous les gens qui ont dit qu'ils se débarasseraient de leur voitures si l'essence atteint 1$ le litre
L'essence vient d'atteindre 2$ le litre.
accidentally infodumping about animal crossing trivia in youtube comments while logged in as the principia channel
"ai lets me write code way faster"
did you know!? programming is not a speedrun
@Li for me, it makes coding way slower, but I can turn my brain off for things that I can immediately test for correctness
how many times have i seen oops ! 'some big popular ai goes and deletes everything in big company database'
smh, the big ai made by fascists is doing direct action better than any of us; how sad.
Après la dissolution, Jordan Bardella a proposé à Cyril Hanouna la tête de l’Arcom en cas de victoire
Alors qu’il se voyait à Matignon à l’été 2024, le président du RN a proposé à son ami animateur de prendre la présidence du gendarme de l’audiovisuel, selon des informations de « Mediapart ». Cyril Hanouna assure aujourd’hui que l’offre n’était pas sérieuse.
Par @AnttonRouget › https://l.mediapart.fr/k15
@heredos effectivement, on dirait Trump qui met ses potes alcooliques à la tête du FBI. On voit ce que ça donne aux USA, pas besoin de tester chez nous... @mediapart
Meanwhile, in the USA
Parisian Garcon de café is always a premium experience! 😂
"Wait this APK has no classes.dex inside of it"
"It's one of those fancy AI apps, it vibe codes itself anew on each startup based on a prompt in res/prompt/"
@heredos well yes, but we're thinking just-in-time vibe coding rather than ahead-of-time vibe coding, so to speak. like, compress the codebase into an AI prompt and send them to the user to generate client-side to save on bandwidth when sending JS! don't think about how it will be generated, that's outside the scope of our benchmarks
After the apocalypse there are still computers but only two OSes remain.
Which one do your pick for your own machine?
| Windows 11: | 4 |
| TempleOS: | 4 |
Closed
transphobia is just a phase and a passing trend, you'll grow out of it;
@heredos the thing is for transphobia this is probably closer to the truth tbh
yknow the security argument for open source is kinda weak, given source-avalible would also mean people can read the code and validate its not backdoored and look for bugs and stuff,
@Li@tech.lgbt I think usually they're contrasting open source with closed source, instead of source available. Though, imo, source available without openess is likely to have a cooling effect on contributions, but I suppose any genuinely security critical software would overcome that effect. Other problem with source available is that you can't necessarily build it, so you need to trust their specific build. Validation about backdoors would be theoretical at best in that situation. Though I will say source available projects /usually/ don't prevent you from building it if you want. So maybe that's just a theoretical concern.
@natalie i mean im not saying this to say source avalible is good, merely that it meets that case; but yes. my actual take is that you should just ignore whatever license says and do what you want forever
@natalie
but i mean to resolve this you can just say source-available to the point where you can only use it for security stuff and nothing else,
@heredos i mean you can still report it to the vendor even say what exactly to fix (though if you want you can make this point as explicitly source avalible for the sake of fixing security bugs and nothing else)
i accidentally posted media made by a transphobe and didn't get heavily canceled, whao, how does she do it..
+++ BLENDER NEWS +++ Blender wins coveted Self Ownage award In what can only be described as a stroke of genius, the Blender Foundation leadership has successfully eliminated all the good will it has gathered over more than 20 years, all with a single message. "We had no idea it would be THIS successful", an unnamed member of their team said, "I mean we really did try to win the award when we let Adobe sponsor us, but it wasn't quite enough, but got a little angry, but they forgave us, i mean we ARE Blender after all. So while we were wondering how to top it, we got an offer for a sponsorship from Anthropic. It was a match made in heaven and it worked so much better than we could have ever hoped." We could not get any further comments from the team member, as they were dragged away and publicly stoned by an angry mob. FNR - All the Fedi News you need!
@fnr 'creative people wouldnt forgive us if we went for an adobe sponsorship, so lets go for an ai sponsorship instead"
@Li@tech.lgbt Why not just all of them?
@fnr i dont know who blenderkit, superhive, hyper3d or arrowhead, or chaos are, but the others yeah pretty much,
Gave a talk analyzing 22,000 commits across 74 repos to understand what agentic coding actually changed in our codebase. The answer: more output, yes. But asked if we measure quality the right way
Right after my talk, someone presented their own agentic framework. 20 agents. type in a ticket number. The agents write the code. just watch your usage limits.
And I sat there thinking: I just spent weeks asking "is the code getting better?" and the next talk asks "how do I stop writing code entirely?"
Here's what bothers me most: this isn't even sustainable. The tokens powering these agents cost far more than what subscriptions charge right now. They’re building workflows on subsidized infrastructure and pretending this is the new normal. And when leadership sees a demo like that, what they hear is: "we don't need as many developers." Based on pricing that won't last.
They’re speedrunning their own obsolescence on someone else's dime. And I'm not sure we're even asking the right questions while we do it.
even if we just stop relying on big tech's architecture, capitalism and the money divide remains strong...
@heredos the worst thing is that they worked out a metric of tokens per story point of their system. So they put a cost metric of their work agains it. And it was more efficient. But they didn’t say what other costs where involved.
I will not intervene. I know that my team takes another route. Using AI aditve to their workflows instead of trying to obsolete them selfes
i mean, it's a good thing i guess, the more people whose content is not directly queer-related can be allies, the better
Today's Low Quality Ad is for this Buff Frog Pin. Republicans were so worried that the water was turning the frogs gay that they failed to notice the frogs were getting absolutely jacked.
https://collabs.shop/wlsbzt
Alt...
Enamel pin of a muscular orange and black spotted frog with a yellow chest and six-pack abs. The frog is wearing blue jeans with a brown belt and has large, black eyes.
@lowqualityfacts That looks like what RFK Jr. is slowly morphing into. It's the jeans that really bring it home.
There is copilot but it's even more hilarious, you have to be using vscode and you have to be signed into a github account to use it.
Alt...
Issue with the title "Raccoon becomes hyperactive sometimes when building for Emscripten", opened 14 hours ago (last night) by me. The issue content is just "what"
@heredos this raccoon, actually: https://hachyderm.io/@ROllerozxa/116346759203801175
got the game to run in the browser but the idle animation would get glitched after the tab being unfocused making the tail wiggle switch every frame rather than 1000ms like it's hyperactive
I'm not very good at pixel art, but I've begun to work on a new game so I have been trying to do it nontheless.
They are still not perfect but I think these raccoon sprites I made turned out pretty cute. It will probably become (one of) the player character sprites.
Alt...
Screenshot of a spritesheet showing a cute pixel raccoon character in four directions, with black outline and two shades of beige (?) for the body and raccoon patches.
@heredos (I figured out the issue. yet another case of falsely assuming deltatime can't be a rather high number... :)
![[?]](https://assets.chaos.social/accounts/avatars/000/084/707/original/cb655b0643cb17af.png)
![[?]](https://assets.chaos.social/accounts/avatars/109/287/829/664/781/389/original/9164dc2ee031625d.jpeg)
![[?]](https://media.unfug.social/public/accounts/avatars/109/705/360/278/521/680/original/26fc223eac0527f8.png)
[![[?]](https://asdf.donotsta.re/media/9d1896eacbde9916ab20801e16ced1437194446fc8a583f179f9222dce890711.jpg)
![[?]](https://media.tech.lgbt/accounts/avatars/111/153/809/371/501/751/original/53b895d44f5816b1.png)
![[?]](https://media.hachyderm.io/accounts/avatars/114/410/239/621/890/573/original/77cc389dd55246e8.png)
![[?]](https://media.sakurajima.moe/accounts/avatars/114/305/239/910/868/895/original/667af86b88c086fb.jpg)
![[?]](https://heredos.net/snack/heredos/s/avatar-946b98f3eefeb17d08102131893c3cc4.png){kind=avatar}
![[?]](https://gts.snkrgirl.cfd/fileserver/01DT10N8E7W47NTS4TQ1ZGZB5N/attachment/original/01KSN5XVS5DEM4SEJ3JZ5TSWH4.png)
[
![[?]](https://media.sakurajima.moe/accounts/avatars/111/180/090/776/504/104/original/8ccc7739d5b0d716.png)
![[?]](https://media.hachyderm.io/accounts/avatars/114/408/964/403/517/082/original/25b57a6b271ff685.png)
![[?]](https://f2.tchncs.de/accounts/avatars/115/813/847/445/891/782/original/3f31133b2a65aa0f.png)
![[?]](https://data.mastodon.minionflo.net/accounts/avatars/116/346/548/544/271/763/original/d73e9d28a5a5d222.jpg)
![[?]](https://static.mediapart.social/accounts/avatars/110/990/689/633/850/363/original/cfdf82f6db47c38b.png)
![[?]](https://static.mamot.fr/accounts/avatars/000/036/983/original/d6296eb3839cec37.jpg)
![[?]](https://files.mastodon.social/accounts/avatars/113/967/445/769/843/780/original/58ee03fa00575e6a.jpg)
![[?]](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAEAAAABAAQAAAACCEkxzAAAAUUlEQVQoz43R0QkAMQwCUDdw/y3dwEvsvzlL4X1IoQkAisKmwfAFT3RgJHbQezpSRoXEqeqCL9BJBf7h3QbOCCxV5EVWMEMwG7K1/WODtlvxAYTtEsDU9F34AAAAAElFTkSuQmCC)
![[?]](https://files.mastodon.social/accounts/avatars/110/692/449/539/056/472/original/98d70f27136c634b.jpeg)
![[?]](https://friendica.mrpetovan.com/photo/profile/hypolite.png?ts=1682368420)
![[?]](https://pix.famichiki.jp/storage/avatars/078/479/063/106/591/269/8/VnIa2HKC5eRMZ6DXEUn6_avatar.png?v=2){kind=avatar}
![[?]](https://akkoma-media.berkeley.edu.pl/media/7ab53b43ea739307d1cb511e47da1fc29155b631affe824aedb0d747030b6ca5.png)
![[?]](https://misskey-taube.s3.eu-central-1.wasabisys.com/files/feeec57b-56cd-4d88-9ddf-dd82e601fddf.webp)
![[?]](https://media.tech.lgbt/accounts/avatars/110/169/535/354/262/764/original/a21d6c77b4467752.jpeg)
![[?]](https://media.mstdn.social/accounts/avatars/109/320/359/690/189/383/original/ea97f02b5e033fe9.jpg)
![[?]](https://files.techhub.social/accounts/avatars/113/974/441/607/573/830/original/fa920f6004278a00.jpg)
![[?]](https://files.mastodon.social/accounts/avatars/116/471/267/231/765/652/original/b8535d432a24f71e.jpg)
![[?]](https://files.mastodon.social/accounts/avatars/111/738/926/606/148/138/original/3a61d8d1b63f9617.jpeg)
![[?]](https://tiggi.es/system/accounts/avatars/109/310/049/090/418/998/original/5bed9e4107fc467b.png)
[![[?]](https://files.mastodon.social/accounts/avatars/000/838/409/original/a4e7b4b5599f59fe.jpeg)
![[?]](https://files.mstdn.plus/accounts/avatars/109/609/362/675/216/685/original/69e7a34c4ad3a3d0.jpg)
![[?]](https://coales.co/system/accounts/avatars/000/000/001/original/71c9037924b282a6.jpg)
![[?]](https://media.freerobuxextremist.com/media/36/7e/96/367e96b3f63b8720c9deb8fbedd4de576d0e2bc5f7bc65aca11dd1178e338e05.png)
