data0

This album page is a real #utf8 stress test. Renders differently in every #browser I tried. Music is good too.

https://00000ooooo.bandcamp.com/album/--5

#nowplaying #bhavnagar

"We are witnessing a general threat to intellectual work, with misalignment between the outcome of the use of AI and its initial purpose. […] years of training have traditionally served not only to produce a final answer or product, but also to develop understanding and the ability to formulate new questions and ideas. […] how to make sure that, as AI changes the way work is done, we do not lose sight of what that work was meant to achieve in the first place."

https://mathandai.org/

"Write clear and concise #documentation. A rule of thumb: If you're doing agentic [coding], if you're vibe-coding, you would give a human-language description to the ai to go do your #code. Just write your own code, but include that prompt as your comment."
– Richard Hipp

https://youtu.be/V_qzqY1bb7I?si=PYU4xCGtlSJi1IVm&t=3101

#sqlite #ssw2026 #talk

Here we go again :-/ Another deterministic #privilegeescalation bug in the #Linux kernel. Make sure you're using at least the following version of your branch to mitigate against #dirtyfrag:

- 7.0.5
- 6.18.28
- 6.12.87
- 6.6.138
- 6.1.171
- 5.15.205
- 5.10.255

6.19 is eol, so it probably won't get patched. Remove and blocklist the following modules if you have to use an unpatched kernel: esp4 esp6 rxrpc

See https://github.com/V4bel/dirtyfrag/blob/master/README.md for more info.

#vulnerability #linuxadmin #sysadmin #exploit

Omg, I came across the totalitarian fever dream that is called #IPv8. Why is it even reported on? Takes 2 mins to realise:

- Website is 100% AI
- Vast portions of the proposal most probably too
- Everyone can propose an Internet Draft and have it published on ietf.org
- Author is called "veteran network architect" but has no track record and hides behind entity registered in Bermuda

What real experts say
https://seclists.org/nanog/2026/Apr/99
https://openfactory.net/the-ipv8-proposal-and-a-bit-of-an-opinion-on-it/
https://shitwolfymakes.substack.com/p/we-need-to-talk-about-the-ipv8-draft

#networking #ipv6

And here's another one:
https://github.com/0xdeadbeefnetwork/Copy_Fail2-Electric_Boogaloo

This one is not fixed by f4c50a40, so all current kernels are vulnerable. Looks like mitigation is possible by blocking kernel modules `esp4` + `esp6` here as well (and breaking #IPSec in doing so). Can someone confirm?

Why is it called "Electric Boogaloo"… is this a #DonaldByrd fan? Were they inspired by this week's @thekalimerashow@pirate.mxtthxw.art shows??

#privilegeescalation #linux #vulnerability #linuxadmin #sysadmin #exploit #copyfail2 #electricboogaloo

@agowa338@chaos.social Yup. There's also the option to block the algif_aead kernel module in the modprobe config. All distros I've checked so far compile it as a module (CONFIG_CRYPTO_USER_API_AEAD=m).

Just be aware that blocking this may break things, albeit the chances seem low. As far as I understand, this functionality is only used by some older IPsec VPN software.

RE: @polymorphic_engine@social.toplap.org

I’d like to do a little bit of promotion here for my sibling in spirit, Lil Data! So if you happen to be in #Vienna the weekend after the next, check this out!

#concert #chiptune #pcmusic #music #coding #hyperpop #djset

… happened to the test suite being sufficient to catch everything? It's not sufficient to catch bugs in #Zig code but it is sufficient to catch bugs in 1m lines of unreviewed slop?

[…] to better make the case that "#Bun is better in #Rust". But all that engineering work had nothing to do with the rewrite. I think this is precisely why it took so long for the blog post to come out, you were doing the #engineering work that you should have done in the Zig codebase since the beginning.

[3/3]