Nostr notes by Frederik Braun �

Tried to debug a perl project I inherited using a local LLM. I ...

2026-07-09T06:20:37Z

Tried to debug a perl project I inherited using a local LLM. I have a M4 Max with 64GB. Running with opencode and often times getting stupid loops of the model trying the same thing over and over again or "Iä Iä Cthulu Ftaghn" output.

Tried GPT-OSS 20B, Qwen3.5 9B which were completely terrible. Qwen 3.6 40B was better but horribly slow.
Am I doing something wrong or are local models really this stupid?

ja…wollte jetzt nich so dolle Werbung machen….für ...

2026-07-01T18:29:43Z

In reply to nevent1q…vzs4
_________________________

ja…wollte jetzt nich so dolle Werbung machen….für apfelgeräte

Der Warteschleifenhaltemodus von meinem Telefon ist schon echt ...

2026-07-01T16:33:20Z

Der Warteschleifenhaltemodus von meinem Telefon ist schon echt einfach sehr sehr nice. Warum hat das nicht früher jemand gebaut? 10 Minuten dumme Warteschleifenmusik? Well, not for me.

Stellt euch vor, der Toaster wäre so kompliziert wie ein ...

2026-06-22T05:31:21Z

Stellt euch vor, der Toaster wäre so kompliziert wie ein Drucker.

Oder auch: mensch, bin ich froh, dass mein Toaster Duplex kann.

became a paying member of codeberg e.V. mostly because I love ...

2026-06-18T10:46:34Z

became a paying member of codeberg e.V. mostly because I love what they are doing. Realized, it doesn't allow private repositories (which I strongly prefer for personal projects) and ended up not moving any of may code. Oops :)

also congrats! You’re a target now (I guess we kneel that?)

2026-06-15T15:52:56Z

In reply to nevent1q…3j27
_________________________

also congrats! You’re a target now (I guess we kneel that?)

looks oddly similar to https://checkpqc.app/, (which also tests ...

2026-06-13T14:42:49Z

In reply to nevent1q…2dvh
_________________________

looks oddly similar to https://checkpqc.app/, (which also tests the browser). maybe you used a similar framework/style/library to produce it?

can you point me to the manual for moving things around? I'd ...

2026-06-13T11:36:44Z

In reply to nevent1q…zzjm
_________________________

can you point me to the manual for moving things around? I'd love to try it and nerd around. I also promise bug reports :)

RE: https://chaos.social/@emz/116721057551353811 ...

2026-06-13T10:04:43Z

RE: https://chaos.social/@emz/116721057551353811

uberspace.de (npub19lm…m6sc) Too bad there's no HTTP/3 on uberspace. Is this on your roadmap? :)

quoting
note1tzg…5h7p

TIL that there are DNS HTTPS records you can use to signal that your webserver supports HTTP/3 (and ECH).

If the browser sees a HTTPS record indicating HTTP/3 support it can use that on the first connection, speeding up the load.

Max Inden (npub15mh…h268) built a great website for it where you can also test if that record is set for your site: https://savearoundtrip.com

I will be in Vienna later this month. The internet ...

2026-06-06T06:36:45Z

I will be in Vienna later this month. The internet recommendations are too plentiful for my 1½ days. Any recommendations on what not to miss? :)

also: Vienna in late spring / early summer 😍

2026-06-03T11:46:32Z

In reply to nevent1q…lzf2
_________________________

also: Vienna in late spring / early summer 😍

Hey, any plans for the end of this month already? If not, ...

2026-06-03T09:50:18Z

Hey, any plans for the end of this month already?
If not, consider visiting the beautiful city of Vienna and joining me at the OWASP AppSec from June 22nd to 26th.

I will be talking about my favorite topic: Cross-Site Scripting (XSS)

My presentation is titled "The Devil is in the Defaults" and I'll share what I think we as web developers, as security engineers, as browser folks and standards people can now do to fix this once and for all ;)

Apparently the all hosted nexclouds are unreachable because the ...

2026-06-03T06:16:35Z

Apparently the all hosted nexclouds are unreachable because the wildcard `*.your-storageshare.de` certificate has expired. Good morning and #hugops. Phone support is overloaded and this is a cert from DigiCert.

If this was Let's Encrypt, I'd at least have the confidence that it's fixable in mere minutes....

Nostr event nevent1qqsd0674wfmjfvxtwxwa87nd7xruserfzf43lw70mzplhjnaz7ld83czyqksl098zqfafzqk7k33cwtcq4tzfk8aap87et97h0m9j5jdnsgvuq5lllz

2026-06-01T10:10:03Z

Any recommendations for an external 2x NVME SSD raid + enclosure?

Oh no... I was going to say "took us 6 years from working ...

2026-05-28T14:00:56Z

In reply to nevent1q…fdvx
_________________________

Oh no... I was going to say "took us 6 years from working draft to HTML, but with this data point it's more like 10 years from idea to HTML. Sigh.

fine with an asterisk, I suppose. about:processes reports 100% ...

2026-05-22T08:00:43Z

In reply to nevent1q…7vqu
_________________________

fine with an asterisk, I suppose. about:processes reports 100% CPU

works fine for me in Firefox Nightly on macOS?

2026-05-22T07:59:06Z

In reply to nevent1q…0d58
_________________________

works fine for me in Firefox Nightly on macOS?

I have procrastinated on an important thing for multiple days. I ...

2026-05-21T12:09:25Z

I have procrastinated on an important thing for multiple days. I just did the thing and it wasn't hard and having finished it feels good.

Will I learn from this? Of course not.

What if "round robin" was not a technique/algorithm but ...

2026-05-20T15:19:19Z

What if "round robin" was not a technique/algorithm but the name of a person? :D
What would they look like? (No LLM generated pictures in the replies please, kthxbye)

Where do the people hang that read our hacks blog post and then ...

2026-05-10T08:58:08Z

Where do the people hang that read our hacks blog post and then went through all of the bugs that we opened up? Really eager for the deeper, informed takes now :) https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/

what? Are you trolling? The links to bugzilla have test cases for ...

2026-05-09T14:33:04Z

In reply to nevent1q…nde0
_________________________

what? Are you trolling? The links to bugzilla have test cases for all of the twelve. Every one or them clearly, deterministically reproducing with ASAN.

yeah, we will see how things go. Due to gestures wildly recent ...

2026-05-07T19:25:04Z

In reply to nevent1q…90y7
_________________________

yeah, we will see how things go. Due to *gestures wildly* recent events, we also had a bit less submissions, so… 🤷‍♂️

Nostr event nevent1qqsft3shvygexgzwzn43yjethngpvj25l7dh74ge0m092m7lnhu5gfszyqksl098zqfafzqk7k33cwtcq4tzfk8aap87et97h0m9j5jdnsgvumjk8w2

2026-05-07T18:58:05Z

In reply to nevent1q…xtuy
_________________________

https://attackanddefense.dev/2026/03/13/bug-bounty-program-updates-2026.html :)

You can just click the bugs and see the attachments? :)

2026-05-07T17:15:18Z

In reply to nevent1q…28lz
_________________________

You can just click the bugs and see the attachments? :)

You'll see attachments in some of the bugs. We asked the LLM ...

2026-05-07T16:23:08Z

In reply to nevent1q…n3sn
_________________________

You'll see attachments in some of the bugs. We asked the LLM to propose a patch, but it was real people who were assigned to the bug and they were of course free to pick a different approach.

As with all patches in Firefox, we need a human author and another human to review the patch. https://firefox-source-docs.mozilla.org/contributing/ai-coding.html

When we said that we found and fixed hundreds of bugs in Firefox ...

2026-05-07T16:15:27Z

When we said that we found and fixed hundreds of bugs in Firefox using AI, people were skeptical and said: Where are the bugs?

Well, here they are. We are unhiding 12 security bugs that are representative of the issues we have found.

https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/.

Nostr event nevent1qqsq6sst4v8h2net43vje59hfxz62r6vdaplv94g7yqxj8zatj0mauczyqksl098zqfafzqk7k33cwtcq4tzfk8aap87et97h0m9j5jdnsgvuy8d5lw

2026-05-05T11:03:53Z

https://blog.mozilla.org/netpolicy/2026/05/05/mozilla-calls-on-uk-policymakers-to-address-the-roots-of-online-harm-not-undermine-the-open-web/

ok, bisschen frech den Anschein zu erwecken, du hättest dein ...

2026-05-02T15:11:06Z

In reply to nevent1q…qjnp
_________________________

ok, bisschen frech den Anschein zu erwecken, du hättest dein Leben so arg im Griff, wenn es eigentlich das Werk von jemand anderem ist. 😊

Ach ja?! Wenn ihr mich wirklich beeindrucken wollt, zeigt mir ...

2026-05-02T13:23:53Z

Ach ja?! Wenn ihr mich wirklich beeindrucken wollt, zeigt mir euren Schrank mit Tupperdosen. Aber aufgeräumt und ohne fehlende Teile!

did the vibes take you? :P

2026-05-01T17:10:04Z

In reply to nevent1q…5ekt
_________________________

did the vibes take you? :P

why › and not >?

2026-04-26T16:37:19Z

In reply to nevent1q…ag28
_________________________

why › and not >?

Hey speakers! If you have some interesting app security story to ...

2026-04-24T19:38:21Z

Hey speakers!

If you have some interesting app security story to share, consider submitting to the German OWASP Day CfP.

Nice community event run by fine volunteer people. This year, the OWASP Day is in Karlsruhe on September 24th. https://god.owasp.de/2026/en/cfp.html

New Blog post: "Multiple things can be true at the same ...

2026-04-24T16:29:15Z

New Blog post: "Multiple things can be true at the same time" - https://frederikbraun.de/feels-and-llms.html :: Dear reader, I am sure you have read a lot of blog posts about AI in the past weeks or months. And now I too am writing. Mostly to help me cope with what my kind of hacker people would call out as hypocrisy or cognitive dissonance.

I am very, very terrible at ops and slightly concerned that my ...

2026-04-23T16:15:49Z

In reply to nevent1q…c9j6
_________________________

I am very, very terrible at ops and slightly concerned that my ISP is going to hate me. The internet would likely be better served if we all tell our friends in academia :)

The SSD storage thing is a bit concerning from a pricing ...

2026-04-23T14:18:47Z

In reply to nevent1q…q2aj
_________________________

The SSD storage thing is a bit concerning from a pricing perspective, otherwise this could easily live behind my sofa ;D

RE: https://abyssdomain.expert/@filippo/116454308369988698 ...

2026-04-23T14:18:09Z

RE: https://abyssdomain.expert/@filippo/116454308369988698

Research groups of the world, GO AND RUN A CT LOG!

quoting
note17ls…an9a

How much storage / bandwidth / CPU / memory does it take to run a production Sunlight CT log? Surprisingly little!

There's now a public stats page, pulled every 5m from our Tuscolo prod metrics.

https://stats.sunlight.geomys.org/

Less than 2 cores, 300 MB of memory, ~250 Mbps of bandwidth, 260 GiB of SSD.

Nah, you got it wrong, still. There is no point in issuing 271 ...

2026-04-22T19:20:09Z

In reply to nevent1q…w2fm
_________________________

Nah, you got it wrong, still.

There is no point in issuing 271 CVE identifiers when people have to update Firefox (or not). It's not like users have a choice which fixes to apply.

The LLM found way more than 271 vulns. We fixed the first 271 in Firefox 150. We lumped them into a somewhat arbitrary number of CVEs because we do not think our time is best spent writing advisory texts (or mastodon posts for that matter ;)). More bug fixes will come. And then some more.

yeah, I typcally run claude in a sandboxed container and let it ...

2026-04-22T15:38:29Z

In reply to nevent1q…mfd4
_________________________

yeah, I typcally run claude in a sandboxed container and let it go without any prompts. Much better security than me guessing the meaning of shell scripts. People should not be reading shell scripts.

Do you want to proceed? (x) Yes and always allow `xargs` lol.

2026-04-22T12:28:31Z

Do you want to proceed?
(x) Yes and always allow `xargs`

lol.

What Mae says is correct :)

2026-04-22T10:01:51Z

In reply to nevent1q…kr7w
_________________________

What Mae says is correct :)

I typically recommend people do not pick a Firefox fork because ...

2026-04-22T10:01:13Z

I typically recommend people do not pick a Firefox fork because keeping up with security patches is a lot of work and being downstream of our code typically implies a delay.

But if you feel like you really have to use a Firefox fork, I suggest you find one that has the means to ship an update within a day.

From those I looked at, most did not bring an update based on 150 yet. (Special shout out to the Tor Browser. You're awesome!)

no :)

2026-04-22T07:29:13Z

In reply to nevent1q…puql
_________________________

no :)

lots of people want anthropic to be wrong. It’s important to ...

2026-04-22T05:08:13Z

In reply to nevent1q…7nr6
_________________________

lots of people want anthropic to be wrong. It’s important to doubt a hype cycle. But this is real. See our blog post (I also
wrote some clarifying comments in https://lobste.rs/s/glpz3r/zero_days_are_numbered)

Holy patch notes, Batman! Firefox has obliterated over 200 ...

2026-04-21T19:12:29Z

In reply to nevent1q…glr0
_________________________

Holy patch notes, Batman! Firefox has obliterated over 200 sinister security bugs in this release alone - the most villanous vulnerabilities ever squashed in the Firefox history. https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/

What Mythos access got us. Now public. ...

2026-04-21T19:11:53Z

What Mythos access got us. Now public. https://blog.mozilla.org/en/privacy-security/ai-security-zero-day-vulnerabilities/

looks like it's late :D

2026-04-21T18:44:59Z

In reply to nevent1q…jta8
_________________________

looks like it's late :D

Nostr event nevent1qqsfqajsxsgxe97df3d3tgn3wnx04ejqyey6ezl48ms0lfd38aw0egqzyqksl098zqfafzqk7k33cwtcq4tzfk8aap87et97h0m9j5jdnsgvuxlgqp5

2026-04-21T17:45:00Z

What? Blog post in 45 minutes?

ok cool, ich hab jetzt einen Meshcore Solarnode auf dem fünften ...

2026-04-21T11:26:00Z

ok cool, ich hab jetzt einen Meshcore Solarnode auf dem fünften Stock in Berlin Südwest und ich glaub es läuft. eine erste nachricht ging sogar schon bis Teltow-Fläming :))

lots of people are being / were hit by LLM-slop bugs first and ...

2026-04-21T11:25:04Z

In reply to nevent1q…whge
_________________________

lots of people are being / were hit by LLM-slop bugs first and foremost, which pretty much set a bad stage. Most who haven't been directly involved are just epxecting AI bugs to be slop. I wish this was true :)

they likely advertise specifically to your area because of the ...

2026-04-21T11:22:57Z

In reply to nevent1q…s86k
_________________________

they likely advertise specifically to your area because of the shitty ISP that everyone is using :(

This is to let you know that ...

2026-04-20T20:36:55Z

This is to let you know that https://en.wikipedia.org/wiki/Security.txt exists and it is kinda cool.

Do I know someone who works on security for freedesktop.org ...

2026-04-20T20:18:46Z

Do I know someone who works on security for freedesktop.org software projects? :)

erinnert mich daran, wie ich das gleiche Softwareprojekt mehrfach ...

2026-04-20T06:17:29Z

In reply to nevent1q…daga
_________________________

erinnert mich daran, wie ich das gleiche Softwareprojekt mehrfach angefangen habe, weil ich meine eigenen Prototypen vergessen habe. Gute Ideen wollen eben raus. Manchmal reicht einmal nicht.

RE: https://glauca.space/@r/116434222890632831 @npub1dey…2ty4 ...

2026-04-20T04:28:20Z

RE: https://glauca.space/@r/116434222890632831

Greg Stoll 🌈 (npub1dey…2ty4) 👀

quoting
note1w6e…w5cn

🌟 Project Release Announcement Time! 🎉

I wrote a WebUSB extension for Firefox.

This lets web pages access USB devices (with your permission). This has long been supported by Chrome, but Mozilla has not wanted it, at least by default. Fortunately, because add-ons are a thing (for now. make sure to keep fighting for this!), it's possible to change that!

Common reasons for wanting this include programming microcontrollers, 3d-printers, smartphone bootloaders, and similar "physical computing" projects.

This works on Windows, Linux, and macOS

You can get the source code here: https://github.com/ArcaneNibble/awawausb

In order to make this work, you will need to install a small program on your computer. This is explained in the README. You can then install the .xpi file (on the GitHub Releases page) into your browser (which was _just_ auto-approved while I was typing this announcement up).

Please boost (if you want), test, report bugs, etc. etc. (although do keep in mind that this code is entirely written by a single catgirl)

i think this is the perfect type of project to drop late on a sunday / very early on a monday?

browsers have reacted and this kind of attack should no longer be ...

2026-04-19T11:00:21Z

In reply to nevent1q…hgyf
_________________________

browsers have reacted and this kind of attack should no longer be possible. That being said...yes. These vendors should have no place on a well maintained phone :)

Ach, schade. Vielleicht klappt es beim nächsten. Ein Stoffteil ...

2026-04-18T14:19:52Z

In reply to nevent1q…v8ea
_________________________

Ach, schade. Vielleicht klappt es beim nächsten. Ein Stoffteil der Tochter heißt auf meinen Vorschlag Sabiene. Nachdem sie jemand darauf hingewiesen hat, dass sie für eine Biene zu dick sei, heißt sie Sabummel. :)

das nervt mich am meisten. man müsste irgendso eine art ...

2026-04-18T13:37:43Z

In reply to nevent1q…ncp8
_________________________

das nervt mich am meisten. man müsste irgendso eine art monitoring haben, dass meckert wenn etwas ausfällt. aber dann braucht man monitoring fürs monitorung. oder man macht sich ein dashboard auf das man regelmäßig guckt?

Oder man steht ab und zu vom Schreibtisch auf und guckt sich um in der Welt.. Aber wer will das schon :D :D

Yeah, I have a take or two. What I like about David's idea is ...

2026-04-18T13:33:22Z

In reply to nevent1q…gvje
_________________________

Yeah, I have a take or two. What I like about David's idea is that this is on the improving side rather than the bug-finding side. It's surely a nice way to get a cleaner codebase that violates less analyzers/compiler warnings, sort of self-correcting if you let it iterate. On the offensive side, we have seen that you don't even need the analyzer right now. With a sufficiently smart enough model (Opus 4.6 was already there), you just ask it to find bugs and create a test.

Sales email started with a poem. I must have put a prompt ...

2026-04-17T11:20:16Z

Sales email started with a poem. I must have put a prompt injection in my profile, but can't remember where. Was a good poem though. Thank you.

RE: https://infosec.exchange/@attackanddefense/116418875523198922 ...

2026-04-17T10:21:50Z

RE: https://infosec.exchange/@attackanddefense/116418875523198922

Q1 2026 was a very strong quarter for Firefox Security & Privacy.

some highlights:
- We expanded AI-assisted vulnerability discovery through our collaboration with Anthropic, helping identify and fix a high number of real security issues.
- We shipped the Sanitizer API in Firefox 148, making Firefox the first browser to support this stronger defense against XSS.

More in the newsletter linked below :)

quoting
note13el…rl6c

We just published our recent Firefox Security and Privacy highlights in the Q1 newsletter. Take a look —> https://attackanddefense.dev/2026/04/14/Firefox-Security_and_Privacy_Newsletter_2026_Q1.html

+1 von mir. Würde such zum Telefon greifen

2026-04-17T10:12:02Z

In reply to nevent1q…kwey
_________________________

+1 von mir. Würde such zum Telefon greifen

This will be like what AddressSanitizer did to fuzzing but ...

2026-04-16T19:50:04Z

This will be like what AddressSanitizer did to fuzzing but bigger...

there was some early research that claimed a correcter / better ...

2026-04-15T16:33:05Z

In reply to nevent1q…72xg
_________________________

there was some early research that claimed a correcter / better reply is statistically more likely, because the training data on the web has the same property. Not sure if that holds though..

None of this is hype. Just look at the increasing length of the ...

2026-04-15T09:44:21Z

In reply to nevent1q…xf4e
_________________________

None of this is hype. Just look at the increasing length of the security advisories for major software release notes (eg Firefox, Chrome, Apple). The suggested, updated security program makes sense to me, but I'll acknowledge that a full implementation would look very differently from org to org.

oh, I had no idea Chrome had a guest mode. Firefox should steal ...

2026-04-14T06:12:32Z

In reply to nevent1q…j0ak
_________________________

oh, I had no idea Chrome had a guest mode. Firefox should steal that.

should be easy to do, too. Could just use a throwaway profile.

2026-04-14T06:01:18Z

In reply to nevent1q…8s6z
_________________________

should be easy to do, too. Could just use a throwaway profile.

yep this is still largely subsidized by cheap inference and ...

2026-04-13T20:31:53Z

In reply to nevent1q…r8vx
_________________________

yep this is still largely subsidized by cheap inference and essentially free training (for the consumer). I don’t bet on it staying this cheap.

RE: https://infosec.exchange/@metacurity/116397875382563012 Must ...

2026-04-13T20:28:34Z

RE: https://infosec.exchange/@metacurity/116397875382563012

Must read if you work in security.

quoting
note1ey4…xmzp

OK, I just discovered this extremely useful take on Claude Mythos and highly recommend it to all cyber practitioners.
https://labs.cloudsecurityalliance.org/wp-content/uploads/2026/04/mythosready.pdf

not really. Some bugs are truly hard to find with fuzzing and are ...

2026-04-13T19:55:32Z

In reply to nevent1q…7ukp
_________________________

not really. Some bugs are truly hard to find with fuzzing and are more easily identified by seeing codesmell and trying to trace it back to user. Reading and remembering code is limited by brain power / will power. As sad as it is: LLMs scale better here.

this is a good change. We adjusted the Firefox bug bounty policy ...

2026-04-13T12:51:47Z

In reply to nevent1q…jtnn
_________________________

this is a good change. We adjusted the Firefox bug bounty policy to essentially say "no test case? no pay out". Though the amount of bugs coming in has (unfortunately) not really gone down yet :-/

I got into a (mild) argument multiple times with our localizers ...

2026-04-12T18:22:17Z

In reply to nevent1q…cjn5
_________________________

I got into a (mild) argument multiple times with our localizers and gave up. I disagree with them but I also don’t have to live with the feedback they get elsewhere. Firefox in English it is… :)

Will damit sagen: Es ist viel Hype und daher auch viel ...

2026-04-10T14:29:20Z

In reply to nevent1q…r85q
_________________________

Will damit sagen: Es ist viel Hype und daher auch viel gerechtfertigte Skepsis.

Aber nur weil wir skeptisch gegenüber dem AI-Hype sind, können wir auch nicht die Augen vor der Wahrheit verschließen. Es kommt gerade eine riesige Tsunami-Welle an Security bugs auf alles an OSS-Software zu. Manche spüren schon die Tropfen, aber eben noch nicht alle :|

ach und noch was: Ich wünscht es wäre anders :)

2026-04-10T11:08:31Z

In reply to nevent1q…d4u0
_________________________

ach und noch was: Ich wünscht es wäre anders :)

Deine Kritik ist nicht so ganz angebracht: 1) Zu Firefox: alle ...

2026-04-10T06:43:51Z

In reply to nevent1q…axqk
_________________________

Deine Kritik ist nicht so ganz angebracht: 1) Zu Firefox: alle diese Bugs waren sehr gut, wir haben auch sandbox-escape exploits gesehen. Dass wir die "sec-high" nennen, ist nach gründlicher Analyse passiert. 2) NFS ist ziemlich oft "offen für alle im Netzwerk". Wenn der Angreifer 1 socket aufmachen kann, kann er auch 2 aufmachen.

Was ich sagen will: ich mach seit über 15 Jahren Security. Ich habe die Bugs gesehen. Sie sind wirklich krass.

looks so pretty, I can’t shake the feeling it was trained for ...

2026-04-08T06:21:42Z

In reply to nevent1q…e6dc
_________________________

looks so pretty, I can’t shake the feeling it was trained for this :)

true, using a mozilla build with our updater will ensure this ...

2026-04-07T13:23:19Z

In reply to nevent1q…ykrf
_________________________

true, using a mozilla build with our updater will ensure this doesn’t happen unexpectedly.

I think your configuration might be borked. We do not force a ...

2026-04-07T11:21:11Z

In reply to nevent1q…e0g8
_________________________

I think your configuration might be borked. We do not force a restart. You should only get this error if the binary file on disk changed while browsing. In that case, Firefox is unable to create a new process due to API incompatibility. Do you use multiple Firefoxes in parallel?

every browser, every library that does media parsing, ...

2026-04-07T09:13:21Z

In reply to nevent1q…madz
_________________________

every browser, every library that does media parsing, compression, …

duuuuude, just enable session restore 😓

2026-04-07T09:09:00Z

In reply to nevent1q…l4fw
_________________________

duuuuude, just enable session restore 😓

I got the neon pink "motherfucking devtools" sticker on ...

2026-03-31T06:37:08Z

In reply to nevent1q…vd45
_________________________

I got the neon pink "motherfucking devtools" sticker on my laptop at home (no photo because I'm on vacation right now :))

ist euch aufgefallen dass das Sommerloch-Tier dieses Jahr echt ...

2026-03-30T18:47:29Z

ist euch aufgefallen dass das Sommerloch-Tier dieses Jahr echt früh dran ist? - die beste Ehefrau von allen kommentiert, dass sei wegen der Klimakatastrophe.

her designs were amazing :)

2026-03-30T18:22:51Z

In reply to nevent1q…pshv
_________________________

her designs were amazing :)

guess if nobody disagrees, I will have to blog post. That’ll ...

2026-03-29T06:47:24Z

In reply to nevent1q…qj28
_________________________

guess if nobody disagrees, I will have to blog post. That’ll make them :D thank you both.

not CSS-only as I originally thought. But still pretty cool. I ...

2026-03-28T11:57:57Z

In reply to nevent1q…lzyl
_________________________

not CSS-only as I originally thought. But still pretty cool. I think doing THIS and then going CSS-only is the next frontier 🙂

…progress still remains as an inventive to get it done as first ...

2026-03-28T11:31:37Z

In reply to nevent1q…92q8
_________________________

…progress still remains as an inventive to get it done as first team, so might make sense to show progress as in "everything that is solvable because it has been solved" rather than "who has done the most".

@npub1k8h…4fm8 are you still involved with lakectf? Were you ...

2026-03-28T11:30:05Z

Mathias Payer (npub1k8h…4fm8) are you still involved with lakectf? Were you part of the decision making for the No LLM Policy at https://lakectf.epfl.ch/no-llm.html. I like the idea and have been thinking about the brokenness of CTF for a while. As a further step, I was wondering if it makes sense to provide scored/points only as a measurement of difficulty and stop showing a scoreboard altogether. Only show activity as "progress“ per category rather than points or rankings :).

… and @npub1s05…tnkj had a good tutorial including tips on ...

2026-03-28T11:24:25Z

In reply to nevent1q…w22n
_________________________

… and Michael Stapelberg 🐧🐹😺 (npub1s05…tnkj) had a good tutorial including tips on how to speed up the initial import https://michael.stapelberg.ch/posts/2025-11-29-self-hosting-photos-with-immich/

my take: if you don’t need encryption (because you self host at ...

2026-03-28T11:23:00Z

In reply to nevent1q…g0ry
_________________________

my take: if you don’t need encryption (because you self host at home), use immich.

did you see https://alexandmanu.com/blog/immich-vs-ente-photos/?

2026-03-28T11:21:41Z

In reply to nevent1q…skvm
_________________________

did you see https://alexandmanu.com/blog/immich-vs-ente-photos/?

this.

2026-03-27T17:45:35Z

In reply to nevent1q…jtep
_________________________

this.

OH: "Mich würd das auch total verstören, wenn ich es nicht ...

2026-03-27T17:37:27Z

OH: "Mich würd das auch total verstören, wenn ich es nicht verdrängen würde."

@npub1xcc…khle Have you seen this? You must see this :) ...

2026-03-27T17:03:20Z

Gareth Heyes :verified: (npub1xcc…khle) Have you seen this? You must see this :) https://front-end.social/@html5test/116301798349200500 first response also contains link to how he built it

sehr cool! Glückwunsch! :)

2026-03-27T16:31:53Z

In reply to nevent1q…vwew
_________________________

sehr cool! Glückwunsch! :)

I am still very much grappling with a conclusion. But it's ...

2026-03-27T09:32:09Z

In reply to nevent1q…hjp9
_________________________

I am still very much grappling with a conclusion. But it's real. Linux appears to bee seeing the same https://www.theregister.com/2026/03/26/greg_kroahhartman_ai_kernel/

codeberg seems cool but it doesn't really allow private repos

2026-03-27T09:28:56Z

In reply to nevent1q…5w7k
_________________________

codeberg seems cool but it doesn't really allow private repos

RE: https://chaos.social/@NikTheDusky/116296542412842528 Haha. A ...

2026-03-26T19:46:19Z

RE: https://chaos.social/@NikTheDusky/116296542412842528

Haha. A washing machine running wayland before all of my home computers… 😢🥲

quoting
note1tq9…5xjr

wayland washing machine

Looks like there’s s whole new meaning to "bugs are ...

2026-03-26T16:45:44Z

Looks like there’s s whole new meaning to "bugs are cheap"…

I like their aggressive timeline, but I'm not sure ...

2026-03-26T15:46:36Z

In reply to nevent1q…jsr5
_________________________

I like their aggressive timeline, but I'm not sure there's any specific argument or reason that explains why it should be expedited. Am I missing something?

Is there a shorter reference? Written words work better for me ...

2026-03-25T10:07:20Z

In reply to nevent1q…6lwg
_________________________

Is there a shorter reference? Written words work better for me than videos. Ironic, I know :)

In this household we don't say "The young people ...

2026-03-25T08:43:35Z

In this household we don't say "The young people don't work anymore", instead we say "surveillance capitalism, the ad industry and big tech have broken our attention span using mobile phones, notifications and social media FOMO" and I just think that's beautiful.