plasmasturm.org

Daniel Stenberg: Mythos finds a curl vulnerability Yes, as in singular one. […] My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing.

Say you want to write script that will set up the next Git commit for you without creating it – just stage some content and prepare a commit message.

This is another one of those small-lightbulb moments like this one was.

Recently I learned of a mistake I had been making without realizing it.

Ever since upgrading to a recent Mac that came with the disk formatted with AFPS, a perennial irritation has been Time Machine.

Some time ago I had a pile of tarballs which were created periodically by a cron job on a machine, regardless of whether anything had changed between runs, and they were eating up all the storage space.

Maciej Cegłowski: The Programmers’ Credo: We do these things not because they are easy, but because we thought they were going to be easy.

Bruce Schneier: This is an actual CAPTCHA I was shown when trying to log into PayPal. […] As an actual human and not a bot, I had no idea how to answer.

Michael Orlitzky: It follows that, on POSIX systems without any non-standard protections, it’s unsafe for anyone (but in particular, root) to do anything sensitive in a directory that is writable by another user.

David Kolb: I picked my own case because the focus on words and print makes various stages of learning to navigate a media world easily identifiable. […] When I moved to Bates College in Maine in the late ’70s, the computer revolution was just beginning.

Troy Hunt: A data breach occurs when information is obtained by an unauthorised party in a fashion in which it was not intended to be made available.

Jeff Johnson: To be more specific, NSURL is based on an obsolete RFC.

Jamie Zawinski: Today is day 10,000 of The September That Never Ended.

Over 6 years have gone by since I cut the last release of rename because no new features have been needed in the time since.

Brandur Leach: Although logs offer additional flexibility in the examples above, we’re still left in a difficult situation if we want to query information across the lines in a trace. [… At Stripe, we] use canonical log lines to help address this.

Fraser Speirs: It’s also worth noting the significant impact that the rise of tablets has had on the design and capability of laptops.

Over on his weblog, Chris Siebenmann talks about metadata in file based websites: In a file based website engine, any form of metadata that you can’t usefully commit into common version control systems is a mistake.

Eric Meyer: I saw a piece that claimed, “Investing in HTTPS makes it faster, cheaper, and easier for everyone.”

Bruce Schneier: Supply-chain security is an incredibly complex problem.

For long-running terminal sessions such as IRC, I’ve long used dtach (or Screen, or tmux, it doesn’t matter) to be able to leave them running on a server without having to be connected to it… just like everyone else does.

halvarflake: The one rule of thumb is: If you allow complexity into a place that should be simple, more complexity will follow.

Some time ago I had occasion to implement (mostly exponential) back-off in an application for the first time.

I’ve always found the default, easily available views of GitHub Issues inadequate for my purposes.

That can’t happen.

Hello back, everyone.