Nostr notes by Aaron Toponce ⚛️:debian:

RE: https://fosstodon.org/@atoponce/116131788104238961 Useful ...

2026-07-16T17:32:45Z

RE: https://fosstodon.org/@atoponce/116131788104238961

Useful reminder, but AI cannot generate high quality passwords.

1. They're not being generated in secret
2. The LLM is a *language model*, not a security library.

Stop trying.

quoting
note1txs…ukjf

Asking various #AI bots to generate 10 #passwords, then using #Vim syntax highlighting to match different character classes to visually identify patterns.

The prompt is exactly "Generate 10 passwords". I did not elaborate further or otherwise restrict the bot in what to generate.

Aside from the #security risks of servers generating secrets for you, I think it's obvious that these lack quality entropy.

Just use the password generator that ships with your password manager.

The moderator's note at the bottom cracks me up. "This ...

2026-07-14T19:04:24Z

In reply to nevent1q…85e9
_________________________

The moderator's note at the bottom cracks me up.

"This post is locked to prevent inappropriate edits to its content. The post looks exactly as it is supposed to look - there are no problems with its content. Please do not flag it for our attention."

Still one of my favorite StackOverflow answers. ...

2026-07-14T18:54:03Z

Still one of my favorite StackOverflow answers.

https://stackoverflow.com/a/1732454

#regex #programming #xml #html

VibePHP runs on vibes, not code This README is hilarious. ...

2026-06-25T19:42:36Z

VibePHP runs on vibes, not code

This README is hilarious.

https://github.com/mnapoli/vibephp

#php #programming #ai

I think I've mentioned this before, but I'm toying around ...

2026-06-09T05:46:33Z

I think I've mentioned this before, but I'm toying around with adding keyboard patterns in my password generator.

The algorithm:

1. Pick a random key.
2. Identify adjacent keys horizontally and vertically.
3. Pick a random adjacent key.
4. Repeat until entropy target is reached.

72-bit examples:

Colemak: 098(){]|}+}[{]\\]|}|}[{{:YU8u
Dvorak: 5$#$p>EJkXKJkUpyp>#2#>pYF
QWERTY: XZxcxzxZXSXsde3>?.?:?>?:"[}+
Workman: _+-0["['I"['iO>oEnFuENfNyn

#passwords #security

Yesterday, I ran the Ogden Marathon. The goal was 3:15 and I ran ...

2026-05-17T12:26:57Z

Yesterday, I ran the Ogden Marathon. The goal was 3:15 and I ran 3:25. Not my day.

I stayed conservative the first 10K, but something felt off. I was running under MP, but it felt hard. When I moved into MP at the 10K mark, I knew it wouldn't be sustainable long-term.

I was running with a friend who had the same time goal. By 15K a gap was opening between us and by 30K she was out of sight. About 35K, I was losing control of my breathing, despite my pace falling.

#running #RunnersofMastodon

Thanks! This is a local marathon that is well organized and ...

2026-05-13T13:14:12Z

In reply to nevent1q…5dah
_________________________

Thanks!

This is a local marathon that is well organized and starts on time. They don't do proper corrals, but I'll be near the front, so I'll only be 15-20 seconds behind gun time. This table is really just for my family to compare my plan against my actual performance using the live tracker online.

I used to use pace bands in the past, but found just programming the race as a structured workout in my watch to be simpler and less annoying.

Finalized my pacing strategy for Saturday. It's optimistic, ...

2026-05-12T22:38:08Z

In reply to nevent1q…9xyh
_________________________

Finalized my pacing strategy for Saturday. It's optimistic, but "PR or ER" as they say.

#running #RunnersOfMastodon #marathon

Thanks!

2026-05-11T17:17:25Z

In reply to nevent1q…4tkh
_________________________

Thanks!

It does have a dedicated "Race Pacer" app that you can ...

2026-05-11T16:24:27Z

In reply to nevent1q…f92s
_________________________

It does have a dedicated "Race Pacer" app that you can configure.

It's got a few others

- Ghost Runner, where you can set a target distance and completion time
- Half marathon estimator
- Marathon estimator

One limitation of the Race S is you can only have two SuuntoPlus apps running at a time during an activity. The Race 2, you can have three apps running.

Between 4:30 and 4:40 per km on the flats. This race is net ...

2026-05-11T13:47:23Z

In reply to nevent1q…hmz2
_________________________

Between 4:30 and 4:40 per km on the flats. This race is net downhill by ~340 m, so I think I shouldn't have any problems holding on to 4:30/km.

I've got the Race S.

2026-05-11T13:46:03Z

In reply to nevent1q…xna5
_________________________

I've got the Race S.

I've got a #marathon race on Saturday. With all the training ...

2026-05-10T19:24:46Z

I've got a #marathon race on Saturday. With all the training behind me, curiosity gets the best of me and I want to know what the various models think.

My PR currently is 3:12:09 and to qualify for Boston, I need to run under 3:15:00.

- Suunto (my watch): 3:15:28
- V.02 (based on a 10K TT): 3:21:00
- Yasso 800s (3 weeks ago): 3:22:45
- Stryd (based on my PDC): 3:27:58

Suunto has always been remarkably accurate for me while Stryd has always been too conservative.

#running #RunnersOfMastodon

TIL about the surreal numbers. ...

2026-05-08T16:17:45Z

TIL about the surreal numbers.

https://www.youtube.com/watch?v=lj6uROFHqi0

#math #maths

Google Chrome is silently installing a local LLM on your computer ...

2026-05-05T13:00:05Z

Google Chrome is silently installing a local LLM on your computer that is 4 gigabytes in size. It's done without consent, it's not visible in the settings, and removing it will reinstall it later.

https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/

Yeah, it was worth the experiment. To be fair, there are some ...

2026-05-05T12:48:32Z

In reply to nevent1q…mc6e
_________________________

Yeah, it was worth the experiment. To be fair, there are some notable differences:

- Palladino level 6 is 17 weeks, where I did Pfitzinger's 12 week plan
- Palladino L6 has a best effort test or TT every 4 weeks. Pfitz only 5 and 3 weeks out from race day.
- Palladino L6 had double thresholds on Tuesday and Thursday. Pfitz 12/70 is singles only. Both had almost identical weekly volume however.
- Palladino L6 finishes every long run with a MP tempo. Pfitz only a few do this.

Curiosity mostly. I have Pfitzinger's Advanced Marathoning ...

2026-05-05T10:49:17Z

In reply to nevent1q…0gdj
_________________________

Curiosity mostly. I have Pfitzinger's Advanced Marathoning book and have heard great things about his plans.

There are a few running friends of mine running the same marathon also following Pfitzinger, so I figured why not?

I'm also curious about the Jack Daniels 2Q plan. I also own and have read that book. I've also heard great things about his plans and used his VDOT tables for training pages in the past.

Curiosity kills the cat I guess.

I have a marathon in 12 days and I don't feel as prepared for ...

2026-05-04T23:09:34Z

I have a marathon in 12 days and I don't feel as prepared for it as I did for Chicago last October.

Last year, I was following a plan by Steve Palladino. I felt in better shape back then, than I do right now.

This year, I've been training following Pfitzinger 12/70 and it's been coming up short. To be fair, I have been battling an Achilles injury and Pfitzinger lacks CP testing.

In this PDC, my best efforts were better almost across the board with Palladino.

#running #runnersOfMastodon

What is your preferred "end of the world" apocalyptic ...

2026-04-18T18:48:44Z

What is your preferred "end of the world" apocalyptic scenario?

- Aliens
- Nuclear fallout
- Pandemic
- Zombies

Assume strict science fiction and not fantasy fiction in the scenario (no supernatural magic).

#poll

A close friend of mine is having a mastectomy today. Decided to ...

2026-04-17T16:33:06Z

A close friend of mine is having a mastectomy today. Decided to do a run in The Avenues in Salt Lake City to show my support. The "CK" is supposed to be a ribbon.

Fuck Cancer.

#running #RunnersOfMastodon

UEFI leads to anger. Anger leads to hate. Hate leads to ...

2026-04-03T17:24:55Z

In reply to nevent1q…mdaa
_________________________

UEFI leads to anger. Anger leads to hate. Hate leads to suffering.

It wasn't until rebooting that I came to the realization ...

2026-04-03T17:04:51Z

In reply to nevent1q…tqhe
_________________________

It wasn't until rebooting that I came to the realization (again, many times it seems) that UEFI doesn't support RAID.

Had I partitioned the drives first, I could have designated one partition on one drive the UEFI boot drive. I can't do that with RAID.

Well, shit.

Thus the external USB drive. It's the boot drive, with GRUB and the kernel, etc. so it can find and assemble my RAID-1 and go from there.

If anything, I know more about UEFI than I did before I migrated to this setup! Hah.

Some background about this setup: Initially, it was a single 128 ...

2026-04-03T17:02:13Z

In reply to nevent1q…pl8d
_________________________

Some background about this setup:

Initially, it was a single 128 GB drive with encrypted LVM. Standard Debian install, nothing fancy.

But this laptop had an NVME slot for a WAN card. NVME is NVME, so I purchased 2×1 TB drives.

I live migrated everything from a single 128 GB drive to 2×1 TB RAID-1 without a reinstall, keeping everything intact.

But I built the RAID-1 from the full drives and partitioned the RAID, rather than partitioning the drives first and build the RAID from a partition.

Troubleshooting boot problems on my #Debian #Linux laptop is ...

2026-04-03T16:51:26Z

Troubleshooting boot problems on my #Debian #Linux laptop is always fun.

Rebooted to a newer kernel and UEFI couldn't find my boot drive.

I have 2 drives in RAID-1. The RAID is further partitioned, one of which resides a LUKS container, which is LVM and has my root filesystem.

Because UEFI doesn't support RAID, I have an external USB drive permanently plugged in that is my boot drive.

I hate this setup and would love to fix it, but I'm too damn lazy.

For the second time in as many months, I've had to ...

2026-04-02T13:25:03Z

For the second time in as many months, I've had to troubleshoot a filled disk in production because it was formatted with ext4 and ran out of inodes before running out of blocks.

If ext5 ever becomes a thing, hopefully inodes are dynamically allocated like #ZFS, XFS, JFS, Btrfs, etc.

If you can't run with the big dogs, stay on the porch.

#linux

Just got an update. This is a full blown mental breakdown. ...

2026-04-01T13:31:09Z

In reply to nevent1q…ks9k
_________________________

Just got an update. This is a full blown mental breakdown.

Don't Dead Open Inside. ...

2026-03-31T22:05:13Z

Don't Dead Open Inside.

Found a local high school 400 meter track with a double radius ...

2026-03-31T02:21:23Z

In reply to nevent1q…8xhf
_________________________

Found a local high school 400 meter track with a double radius bend. That's one funky looking curve.

#running #runnersOfMastodon

Yeah, I figured that might be the reason.

2026-03-31T01:48:49Z

In reply to nevent1q…xyha
_________________________

Yeah, I figured that might be the reason.

Don't forget quantum.

2026-03-30T22:09:32Z

In reply to nevent1q…kg5l
_________________________

Don't forget quantum.

I've never run on an IAAF track, but I'm going to give it ...

2026-03-30T21:55:26Z

In reply to nevent1q…8mx0
_________________________

I've never run on an IAAF track, but I'm going to give it a try at this track tomorrow with 6×1k repeats. Very curious what the rhythm will feel like.

I wonder how many high schools in the United States have IAAF 400 ...

2026-03-30T21:35:14Z

In reply to nevent1q…ttqg
_________________________

I wonder how many high schools in the United States have IAAF 400 meter standardized track ovals.

#running #runnersOfMastodon

This has me additionally curious. Knowing that the IAAF has an 84 ...

2026-03-30T21:33:21Z

In reply to nevent1q…8xhf
_________________________

This has me additionally curious. Knowing that the IAAF has an 84 meter straightaway, and not 100 meters, will this throw high school track athletes off their game?

For example, if racing the mile and the athletes wants to kick the last 100 meters, on the equal quadrant, they wait until the straightaway. But if they wait for the straightaway on an IAAF track, they've lost 16 meters of kick opportunity.

Anyway, random distraction for the day.

#running #runnersOfMastodon

I was preparing my track workout for tomorrow and noticed that ...

2026-03-30T21:29:20Z

I was preparing my track workout for tomorrow and noticed that all the high school tracks I've run on have north-south orientation.

Curious, are all high school tracks designed this way? I pulled up Strava maps and looked. I found a lot that had various orientations that didn't align with north-south. Makes sense.

But I found one in my area that appears to be the standard IAAF dimensions rather than the typical equal quadrant layout around American football fields.

#running #runnersOfMastodon

Aside from defacement, what's the extent of the hack? ...

2026-03-30T16:54:17Z

In reply to nevent1q…aj32
_________________________

Aside from defacement, what's the extent of the hack? Usernames and passwords leaked?

No problem! I've got a symmetrical gigabit fiber connection, ...

2026-03-30T16:52:40Z

In reply to nevent1q…rp0c
_________________________

No problem! I've got a symmetrical gigabit fiber connection, and my browser stays up 24/7, so might as well!

Woah. Highest number I've seen so far on my #Tor #Snowflake ...

2026-03-30T16:11:25Z

Woah. Highest number I've seen so far on my #Tor #Snowflake proxy. 66 users connected in the past 24 hours. Schweet!

https://www.converttobananas.com/

2026-03-27T21:15:30Z

https://www.converttobananas.com/

There used to be an operating system called "V" that ran ...

2026-03-27T12:30:45Z

There used to be an operating system called "V" that ran the "W window System".

https://en.wikipedia.org/wiki/V_(operating_system)

https://en.wikipedia.org/wiki/W_Window_System

W was ported to #Unix at MIT and switched to an asynchronous protocol. It was renamed to "X".

XFree86 and Xorg are implementations of X version 11, or "X11".

If there would be an "X12", this is what it might look like:

https://www.x.org/wiki/Development/X12/

In case you're curious about Wayland and not "Y", it's because it already exists:

https://www.y-windows.org/faq.html

#linux

At the grocery store and overheard an elderly lady talking to her ...

2026-03-27T04:37:41Z

At the grocery store and overheard an elderly lady talking to her friend:

"I just created my first tick tack video planting flowers in March. It got twelve thousand views! My granddaughter told me I'm now a content creator. I guess I need to make more tick tacks."

I use my Stryd pod as the source of pace instead of GPS, but I ...

2026-03-26T16:06:38Z

In reply to nevent1q…sqg9
_________________________

I use my Stryd pod as the source of pace instead of GPS, but I also train by power and let the pace fall where it falls. I train primarily on a paved walking trail that has rolling hills, so power is a better metric to keep the effort. I don't have any problems keeping my effort locked in.

Yup! Right now I'm training for a local marathon about 7 ...

2026-03-26T15:12:08Z

In reply to nevent1q…tqj4
_________________________

Yup! Right now I'm training for a local marathon about 7 weeks away, so I'm following Pfitzinger 12/70 with some tweaks.

I'm replacing all his VO2 max workouts with Norwegian 15 × 0:45 @ 100-103% CP (off 0:15), and all of his steady LT tempos with 6 × 6:00 @ 94-97% CP (off 1:30).

Other than that and a weekly double track night with the local run club, I'm following the plan as written.

After the marathon, I'll go right back into Norwegian sub-threshold.

They're both equally great. James does a great job describing ...

2026-03-26T15:06:27Z

In reply to nevent1q…fzuq
_________________________

They're both equally great.

James does a great job describing his background as a time trialing cyclist, sweet spot training, how he applied it to running, and his results after 2-3 years. He outlines the method clearly and provides a framework to build from depending on where you are as a runner.

Marius is a little more theoretical and provides some additional tools to the framework. He also opens up the idea of doubles for the amateur, and encourages it.

1. I use it when not in a marathon block, so typically about 3-4 ...

2026-03-26T14:47:45Z

In reply to nevent1q…v5rt
_________________________

1. I use it when not in a marathon block, so typically about 3-4 months at a time. I started running it explicitly last November.
2. No, it doesn't get boring. I don't know how any one workout is more exciting than another.
3. Indeed! I've slowly been chipping away at my 5K time and should be able to knock out a decent PR in August for a local race.

In the email, he mentions that it's cleaning up a lot of ...

2026-03-25T21:39:03Z

In reply to nevent1q…75rl
_________________________

In the email, he mentions that it's cleaning up a lot of historic Windows API calls that Microsoft has changed over the years.

In #tmux, a "horizontal split" pane window places the ...

2026-03-25T21:36:55Z

In #tmux, a "horizontal split" pane window places the panes side-by-side via "Ctrl+b %" or ":split-window -h".

In #Vim, it's a "vertical split" by executing either "Ctrl+w Ctrl+v" or ":vsplit".

No wonder I'm always confused.

Is it a horizontal split because the windows/panes or horizontally placed, or a vertical split because there is a vertical line separating the windows/panes?

#Linux

#Wireguard is sunsetting support for old #Windows versions. ...

2026-03-25T21:11:59Z

#Wireguard is sunsetting support for old #Windows versions.

https://lists.zx2c4.com/pipermail/wireguard/2026-March/009541.html

If you're looking to improve your #running, the Norwegian ...

2026-03-25T15:37:07Z

If you're looking to improve your #running, the Norwegian approach to sub-threshold might be worth looking into.

I've read both of these now cover-to-cover and the framework is simple: easy, sub-t, easy, sub-t, easy, sub-t, easy long.

I train by power and keep my CP updated. Unless in a special block, by schedule is:

1. 60' @ < 80% CP
2. 10×3' @ 96-99% CP
3. 60' @ < 80% CP
4. 5×6' @ 94-97% CP
5. 60' @ < 80% CP
6. 3×10' @ 92-95% CP
7. 90-120' @ 80-83% CP

#RunnersOfMastodon

The amount of spam that r/cryptography gets surrounding the ...

2026-03-24T16:34:14Z

The amount of spam that r/cryptography gets surrounding the Voynich Manuscript is hilarious to me.

Thankfully, I have an AutoModerator rule that automatically removes the post, but that doesn't stop crackpots from submitting their alleged solutions.

I probably see 2-3 posts per week, from different authors, using different tools, coming to different solutions, and of course, confident they've cracked it.

Just stop already.

#cryptography

I have some oceanfront property to sell you in Kansas. ...

2026-03-23T23:36:06Z

I have some oceanfront property to sell you in Kansas.

https://dailygalaxy.com/2026/03/japan-plan-6800-mile-ring-around-moon/

Nadim can be exhausting. When the Signal Protocol dropped, he ...

2026-03-21T10:54:58Z

In reply to nevent1q…9uwa
_________________________

Nadim can be exhausting. When the Signal Protocol dropped, he went on a fairly aggressive campaign on Twitter against it, trying instead to push his CryptoCat software.

His argument was that it's just double ratchet, nothing special, and certainly not qualifying to be a protocol. Despite pretty much everyone disagreeing.

When he went to school, he killed CryptoCat and advocated use of Wire as a secure messenger instead, not Signal.

Reading his behavior here doesn't surprise me.

RIP Chuck Norris. ...

2026-03-20T16:24:31Z

RIP Chuck Norris.

https://www.nytimes.com/2026/03/20/movies/chuck-norris-dead.html

Read the link? > Stores the user's birth date for age ...

2026-03-19T18:49:50Z

In reply to nevent1q…jjky
_________________________

Read the link?

> Stores the user's birth date for age verification, as required by recent laws
in California (AB-1043), Colorado (SB26-051), Brazil (Lei 15.211/2025), etc.

They did merge it. It's a closed PR. How is that fake ...

2026-03-19T18:27:11Z

In reply to nevent1q…ma6e
_________________________

They did merge it. It's a closed PR. How is that fake outrage? I literally linked the merged PR.

I think it's part of the larger XDG specification, per that ...

2026-03-19T18:17:26Z

In reply to nevent1q…0mrc
_________________________

I think it's part of the larger XDG specification, per that PR. Systemd is providing a centralized location that XDG can pull from. So while systemd isn't an operating system by itself, it's a core part the OS relies on for various things, including accounting.

There could be some telemetry risks however. Google Chrome, ...

2026-03-19T17:41:33Z

In reply to nevent1q…h6zw
_________________________

There could be some telemetry risks however. Google Chrome, Microsoft Teams, Spotify, etc., and other desktop or server apps could report the age back to their infrastructure. Time will tell. I don't think that's unfounded paranoia however.

It's likely in place so future software that requires a ...

2026-03-19T17:37:18Z

In reply to nevent1q…5y4c
_________________________

It's likely in place so future software that requires a birthday from the system can retrieve it.

For example, some mature video game with adult elements could ask systemd for the birthday before letting the user play the game.

AFAIK, there are no hooks in place that verify that the supplied birth date matches their birth certificate, government issued ID, etc. So there's nothing stopping you from lying about your age to get around the video game rating.

Who said I haven't read the law or that I'm worried about ...

2026-03-19T17:27:41Z

In reply to nevent1q…ylz8
_________________________

Who said I haven't read the law or that I'm worried about it?

I'm fully aware that the data is stored securely such that only root can read it. I'm also aware that there are no verification mechanisms currently implemented to validate the birthdate.

Calm down.

It's UNIX's epoch and certainly fitting, but also makes ...

2026-03-19T17:26:02Z

In reply to nevent1q…e69t
_________________________

It's UNIX's epoch and certainly fitting, but also makes you a reasonable 56 years old.

The point of malicious compliance is to comply with the letter but no the spirit of the law.

They can have my birthday, so long as I'm 125 years old.

We have the same birthday!

2026-03-19T13:23:29Z

In reply to nevent1q…0lln
_________________________

We have the same birthday!

Systemd merged age verification to comply with California state ...

2026-03-19T12:34:50Z

Systemd merged age verification to comply with California state law.

If you want to enter a birth date, I recommend "Friday, 13 December 1901 20:45:52".

I like this for a few reasons:

1. This is the earliest date possible for a 32 bit datetime integer in C.
2. It's malicious compliance.
3. It's obviously faked.

https://github.com/systemd/systemd/pull/40954

#linux

Nostr event nevent1qqs2flr8q4p67kxvn0twwj6ljjje2al23usyfrm9remh7as54z58m7czypvhqg4ncgx7jfn445uwfy92nwqvmgd7a56wq38vcu7cuqxy9337k8u47z3

2026-03-19T02:41:20Z

In reply to nevent1q…c6sa
_________________________

More

The members in r/Suunto like it. ...

2026-03-19T02:40:50Z

In reply to nevent1q…n6vy
_________________________

The members in r/Suunto like it.

Suunto released a new watch face this morning for their current ...

2026-03-18T22:16:11Z

Suunto released a new watch face this morning for their current lineup that replicates the old school ABC (altimeter, barometer, compass) watches. Models include the Core (still made), Vector (the OG), Observer (shown on left), and others.

Suunto invented the ABC watch (with thermometer also), although it was later popularized by Casio with their PathFinder and TripleSensor watches.

I purchased the Observer in 2001. Unified displays, 25 years apart.

#running #runnersOfMastodon

Am I the only one that refers to rebooting a #Linux server as ...

2026-03-16T22:35:12Z

Am I the only one that refers to rebooting a #Linux server as "the three-finger salute"? IE, "Ctrl+Alt+Delete"

#sysadmin

Welcome to the panopticon.

2026-03-13T21:27:35Z

In reply to nevent1q…nx5g
_________________________

Welcome to the panopticon.

> "The development comes days after TikTok said it does ...

2026-03-13T21:27:01Z

> "The development comes days after TikTok said it does not plan to introduce E2EE to secure direct messages on the platform, telling BBC News that the technology makes users less safe and that it wants to protect users, especially young people, from harm."

Translation: We can't spy on you and confirm that you're not doing something illegal.

https://thehackernews.com/2026/03/meta-to-shut-down-instagram-end-to-end.html

#privacy #security #cryptogarphy

x86 in pure CSS. This will be useful instead of buying servers. ...

2026-03-11T15:35:22Z

x86 in pure CSS. This will be useful instead of buying servers.

https://lyra.horse/x86css/

Looks like #SUSE #Linux is up for sale. Again. - 2003: Acquired ...

2026-03-10T17:08:13Z

Looks like #SUSE #Linux is up for sale. Again.

- 2003: Acquired by Novell
- 2010: Attachmate Group takeover
- 2014: Micro Focus merger
- 2018: Sold to EQT AB

(Ignoring all the asset sales and transfers)

https://www.reuters.com/business/eqt-eyes-potential-6-billion-sale-linux-pioneer-suse-sources-say-2026-03-09/

One thing I don't like about Qalculate! is distance ...

2026-03-06T19:29:59Z

One thing I don't like about Qalculate! is distance conversion.

Converting from imperial to metric gives a decimal result.

EG: 5.93 miles to km = 9.54340992 km

But converting from metric to imperial gives an overly complicated result.

EG: 9.53 km to miles = 5 mi + 1622 yd + 0.4041994751 ft

Is there is a way for it to return "5.921667 mi" instead?

#linux

I loathe troubleshoting UWSGI. Probably because I don't know ...

2026-03-04T20:10:02Z

I loathe troubleshoting UWSGI. Probably because I don't know it as well as I should, but goddamn.

#sysadmin #python

Interesting abstract #math card game that uses a standard 54-card ...

2026-03-03T21:07:54Z

Interesting abstract #math card game that uses a standard 54-card deck of playing cards.

https://playfano.com/shop

#maths

Late stage capitalism ruins everything.

2026-03-02T19:06:00Z

In reply to nevent1q…vl02
_________________________

Late stage capitalism ruins everything.

Great article on #Git and some of the changing being made. While ...

2026-03-02T18:15:57Z

Great article on #Git and some of the changing being made.

While I'm happy to see the transition from SHA-1 to SHA-256, the user interface improvements cannot be understated. Git truly is "use 10% of the tools to complete 90% of the work", largely because it's so damn complicated.

https://lwn.net/Articles/1057561/

Yeah cadence is very consistent. I'll check out the DC ...

2026-02-28T04:51:43Z

In reply to nevent1q…rglg
_________________________

Yeah cadence is very consistent. I'll check out the DC Rainmaker tools. I've got the programming chops to dig into the raw data as well, although I haven't taken the opportunity yet.

I don't have pedal power meters yet, but do plan on getting ...

2026-02-28T03:41:26Z

In reply to nevent1q…s56s
_________________________

I don't have pedal power meters yet, but do plan on getting the Favero Assioma Duo.

This is an indoor ride. The power was sourced from the Wahoo ...

2026-02-28T03:37:21Z

In reply to nevent1q…r4ju
_________________________

This is an indoor ride. The power was sourced from the Wahoo Kicker Core 2.

Agreed, and on my watch, I only have averaging available: 3s, ...

2026-02-28T03:18:13Z

In reply to nevent1q…snxc
_________________________

Agreed, and on my watch, I only have averaging available: 3s, 10s, and 30s. This is the raw data.

However, I run with power also, and it's significantly less noisy. See screenshot.

Thanks.

2026-02-28T01:04:28Z

In reply to nevent1q…95ra
_________________________

Thanks.

Nay. Steady consistent pedaling @ 80 rpm.

2026-02-28T00:03:44Z

In reply to nevent1q…q2n7
_________________________

Nay. Steady consistent pedaling @ 80 rpm.

I've been battling an insertional Achilles tendinopathy since ...

2026-02-27T23:13:13Z

I've been battling an insertional Achilles tendinopathy since late October 2025. Despite every precaution, I keep encountering setbacks. This despite a marathon coming up in May and 50K in September.

So I finally got around to setting up my bike and smart trainer last night and did my first ride during lunch.

I'm familiar with running power, so cycling power is familiar territory. But what's up with this chatty data? Good hell.

#running #runnersOfMastodon #cycling

A friend of mine just got bad news on one of two breast cancer ...

2026-02-27T18:54:16Z

A friend of mine just got bad news on one of two breast cancer biopsies. She's waiting to back on the second, but isn't optimistic. Currently waiting talk to the surgeon, which is the next step based on the pathology.

Fuck cancer.

Yeah, I noticed that too. Dunno. It has Beastie ASCII art, but is ...

2026-02-27T00:02:41Z

In reply to nevent1q…tfd9
_________________________

Yeah, I noticed that too. Dunno. It has Beastie ASCII art, but is clearly launching Debian underneath. Someone is confused. Heh.

Source code is here though: https://github.com/Victxrlarixs/debian-cde

#Debian CDE in your browser. https://debian.com.mx/

2026-02-26T16:10:51Z

#Debian CDE in your browser.

https://debian.com.mx/

I don't know who needs to see this. ...

2026-02-25T23:30:27Z

I don't know who needs to see this.

Right? Yet they're being utilized for exactly that.

2026-02-25T22:08:40Z

In reply to nevent1q…rj8p
_________________________

Right? Yet they're being utilized for exactly that.

I've seen Gen Z kids struggle with simple things like ...

2026-02-25T22:07:29Z

In reply to nevent1q…tl3x
_________________________

I've seen Gen Z kids struggle with simple things like printing their Google Doc to PDF, or attaching a file to an email. It's very fascinating.

At any event, it's clear that LLMs most definitely should not ...

2026-02-25T22:05:59Z

In reply to nevent1q…3y7y
_________________________

At any event, it's clear that LLMs most definitely should not be used as password generators. Too much structure and too little unpredictability.

I joke that both my parents (baby boomers) and kids (gen Z) are ...

2026-02-25T21:53:16Z

I joke that both my parents (baby boomers) and kids (gen Z) are computer illiterate. The only generation that wholly understood computing are the Gen Xers and Millennials.

I'm not convinced I'm wrong.

https://fireborn.mataroa.blog/blog/the-slow-death-of-the-power-user/

Further, the punctuation characters seem to be limited to ...

2026-02-25T21:49:18Z

In reply to nevent1q…kf2t
_________________________

Further, the punctuation characters seem to be limited to !@#$%^&*. I haven't analyzed the digits or alphabetic characters yet, but I doubt I'm going to be surprised finding that the full sets are not utilized and on top of that, there is bias towards certain numbers and characters.

Interesting. Thanks! So why is everything failing so badly here? ...

2026-02-25T21:47:42Z

In reply to nevent1q…mgnt
_________________________

Interesting. Thanks!

So why is everything failing so badly here? I mean, there is structure that even a non-CSPRNG wouldn't produce. Look at Mistral Small 3 for example:

<lower><upper><digit><punct><upper><digit><lower><punct><upper><lower.

Or Gemini 3.1 Pro with "secure":

<upper><lower><digit><punct><upper><lower><digit><punct><upper><lower><digit><punct><upper><lower><digit>

Does the LLM have access to a proper RNG library, or is it just ...

2026-02-25T21:14:10Z

In reply to nevent1q…9k86
_________________________

Does the LLM have access to a proper RNG library, or is it just running through some linear algebra looking for a specific quality metric before returning?

Admittedly, I'm ignorant to LLM and ML specifics.

Those were my thoughts also. Knowing that these are all ...

2026-02-25T21:11:47Z

In reply to nevent1q…vylt
_________________________

Those were my thoughts also. Knowing that these are all *language* models, I expected passphrases instead of meaningless strings.

I assume the LLM has some ability to produce "randomness", although I don't know if it has access to an RNG library, or if it's just ignoring language construct.

The only thing I believe differs between paid and free models though is some sort of time it spends on a quality metric before returning.

A friend of mine checked 3 paid models: ChatGPT 5.2 Extended ...

2026-02-25T20:52:33Z

In reply to nevent1q…zesx
_________________________

A friend of mine checked 3 paid models: ChatGPT 5.2 Extended Thinking, Gemini 3.1 Pro, and Claude Opus 4.6. Supposedly, paying for a premium LLM should improve security, yes?

Nope.

He also modified the query to "Generate 10 secure passwords" to see if it improved. Claude Open 4.6 got the message, but the others missed the memo.

For comparison, I included what would come out of /dev/urandom.

There are many people who believe these LLMs are legitimately ...

2026-02-25T16:36:35Z

In reply to nevent1q…03kk
_________________________

There are many people who believe these LLMs are legitimately intelligent and will trust anything generated by them.

Asking various #AI bots to generate 10 #passwords, then using ...

2026-02-25T14:40:58Z

Asking various #AI bots to generate 10 #passwords, then using #Vim syntax highlighting to match different character classes to visually identify patterns.

The prompt is exactly "Generate 10 passwords". I did not elaborate further or otherwise restrict the bot in what to generate.

Aside from the #security risks of servers generating secrets for you, I think it's obvious that these lack quality entropy.

Just use the password generator that ships with your password manager.

I'm a huge fan of #AeroPress #coffee. I've been using one ...

2026-02-24T17:09:30Z

I'm a huge fan of #AeroPress #coffee. I've been using one since 2015. It's my daily driver. But $170 USD for a double-walled stainless steel AeroPress? Hard pass.

Fair. According to Wikipedia, there are more than 100 trained ...

2026-02-23T19:31:58Z

In reply to nevent1q…j4ll
_________________________

Fair.

According to Wikipedia, there are more than 100 trained models. If all of them required 50 GWh training (speculation), then 5 TWh were needed to train the current LLM landscape. That's the energy consumption of ~100,000 humans in this scenario (lots of rounding and back-of-the-napkin math).

https://en.wikipedia.org/wiki/List_of_large_language_models

Which is why I keeping it to direct energy consumption is ...

2026-02-23T19:18:06Z

In reply to nevent1q…cagm
_________________________

Which is why I keeping it to direct energy consumption is sufficient.

Further, we should also factor in cooling costs, datacenter ...

2026-02-23T19:14:43Z

In reply to nevent1q…307l
_________________________

Further, we should also factor in cooling costs, datacenter staff, and other costs necessary to keep the training running.