(date: 2024-11-10 09:48:03)
date: 2024-11-10, from: Alex Schroeder’s Blog
Weil wir letzthin im Internet Office Hours Podcast wieder über Traveller geredet haben und davon geredet, dass wir ein kurzes, einfaches Regelwerk brauchen. @hasran meinte zu Beginn der Sendung: Schreiben wir einen Traveller Klon und wann tun wir das?
Jetzt haben wir damit angefangen. Ich habe es Weltensegler genannt.
Unser Zielbild, für den Moment:
Hasran: “Als Spiel soll Weltensegler ermöglichen, eigene Welten und Abenteuer im Stile klassischer Science Fiction Literatur erlebbar zu machen.”
Ich: “Weltensegler soll ein relativ kurzes 2W6 basiertes Science Fiction Rollenspiel sein, auf Deutsch, für alles von Star Wars bis Perry Rhodan, von Star Trek bis Dune.”
Wir sind beide grosse Fans vom ursprünglichen Classic Traveller Gerüst. Also haben wir damit mal angefangen: Personagenerschaffung, Berufserfahrung, Karrieren. Es fehlen noch ein paar Tabellen aber grundsätzlich steht schon einiges. Und wenn wir nicht weiter wissen, hilft uns @wandererbill mit Traveller 5 Erfahrung. 😄
Allerdings habe ich für mich beschlossen, dass ich für Weltensegler bei den Regeln bleiben will, die ich am Tisch schon verwendet habe. Erstaunlicherweise waren das nie die Preislisten. Viel wichtiger war der Tech Level der Welt und das wars. Ausrüstung war geschenkt, gesponsert, geklaut, aus dem Ship Locker, oder aus der Lebensgeschichte heraus gegeben. Ich glaube, ich habe als Spieler nur einmal eine Sonnenbrille für 100 Cr. gekauft, mehr nicht. Entsprechend habe ich unter Ausrüstung eine Seite für Wirtschaft ohne Geld erstellt.
Entsprechend habe ich auch noch nie ein Schiff nach den Regeln zusammengebaut. Mal schauen, wie es bei Hasran aussieht. Ich glaube jedenfalls, dass er schon gerne Preislisten hätte.
https://alexschroeder.ch/view/2024-11-10-weltensegler
@Miguel de Icaza Mastondon feed (date: 2024-11-10, from: Miguel de Icaza Mastondon feed)
The 400 days of genocide by the numbers:
https://threadreaderapp.com/thread/1855556300232380523.html
https://mastodon.social/@Migueldeicaza/113459790843129552
@Dave Winer’s Scripting News (date: 2024-11-10, from: Dave Winer’s Scripting News)
There’s absolutely no doubt in my mind that what’s missing in the two-party system in the US is that one of the parties does not own a social network. It is not represented online 7-by-24-by-12 every year, not just presidential election years. Democrats, when you lose it’s because you didn’t show up. It’s happened three times so far, at least. We could have led here because most of the innovators in this space vote Democratic, but the leadership doesn’t listen. The voters could get to know all the stars of the parties. People were right when they said they didn’t know Harris. It’s time to let the leaders rise from the net, not just from the insiders. This is how you do it.
http://scripting.com/2024/11/10.html#a163202
date: 2024-11-10, from: Dan Rather’s Steady
A Reason To Smile
https://steady.substack.com/p/the-steady-playlist
DOS: How much conventional memory is available to a process?
date: 2024-11-10, updated: 2024-11-10, from: Uninformative blog
https://www.uninformativ.de/blog/postings/2024-11-10/0/POSTING-en.html
date: 2024-11-10, from: Robert Reich’s blog
Friends,
https://robertreich.substack.com/p/sunday-caption-contest-wha
date: 2024-11-10, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-8-2024-bb7
@Dave Winer’s Scripting News (date: 2024-11-10, from: Dave Winer’s Scripting News)
ChatGPT’s web search can search my blog, as I do on Google, but it’s way more useful. Here’s a screen shot. We’re getting there. Really nice.
http://scripting.com/2024/11/09.html#a042214
date: 2024-11-10, from: Tracy Durnell Blog
Welp. That week happened. I’ve added in a couple extra things I appreciated this week because I think a lot of us could use some joy right now. Highlight of the week: meeting our neighbors at Diwali Looking forward to: vacation Stuff I did: 10.75 hours consulting we heard our neighbors throwing a party on […]
https://tracydurnell.com/2024/11/09/weeknotes-nov-2-8-2024/
date: 2024-11-10, from: Heather Cox Richardson blog
“Off the Bar” is one of my favorites of my friend Peter’s photographs, and after I fiddled around with all sorts of images and captions that hinted at the chaos of these days, I threw them all out and just came back to this image of peace and quiet for tonight.
https://heathercoxrichardson.substack.com/p/november-9-2024
date: 2024-11-09, from: Alex Schroeder’s Blog
I really hoped that I wouldn’t have to extend the link list on Trump I started back in 2016 because I didn’t understand how he could win.
Then again, I also didn’t understand why Bush got re-elected. I just read a 20 year old blog post of mine: 2004-11-09 USA where I was grappling with it.
Trump is truly a setback for my priorities.
Fuck this timeline.
@mattwilcox said it best:
Fascism is the inevitable result of a society with large imbalances of personal security. Which in a capitalist society means large imbalances of wealth.
If your society allows some people to be mega secure and untouchable, while also allowing large portions of it to feel very insecure… you will become a fascist society, eventually.
Do not allow this. Do not allow excessive wealth stratification. It. will. Destroy. Your. Civilisation.
The best defence against many divisive issues is to solve them. To leave festering wounds invites further prodding by the troll armies. Start small but start early, because soon the prodders are in power, prodding ever harder until it all falls apart.
Remember that these days, all dictators are voted in. The elections may be a farce, but it’s always a legal farce. The people in power may be the most corrupt criminals but ever and always they are the ones fighting corruption. It’s just that the corruption of their enemies is always uncovered and punished whereas their own is hidden in plain sight, know to all.
Look around at the countries around you. Erdoğan is still in power. Putin is still in power. Dictatorships may end eventually, but they take a fucking long time to fall. If it takes forty years, I won’t be around to see it. It’s hard to wait them out.
If you meet somebody thinking about a civil war with armed militia doing this or that, I’d say forget about all of that. In the real world, revolts that are not decisive inevitably lead to warlordism. Organised armed forces will shoot all the wanna-be resistance to bits. The police will beat the unarmed resistances into submission.
I take solace in the fact that when Stalin was dying and calling for help in his office, the attendants just didn’t listen. They didn’t open the door and the fucker died alone.
2024-11-10. I need a place to link to @mekkaokereke – it’s where I learn about black America. If you don’t know, start with his Black History Month megathread
https://alexschroeder.ch/view/2024-11-06-nightmare
date: 2024-11-09, from: Shady Characters blog
https://shadycharacters.co.uk/2024/11/bombs-books-and-ai/
date: 2024-11-09, from: Om Malik blog
Dennis Crowley has built his career at the intersection of emerging technologies and human behavior. Twenty years ago, as a 25-year-old inspired by Harry Potter’s Marauder’s Map, he created Dodgeball—turning text messaging into a way for friends to find each other in the city. When the iPhone emerged, he launched Foursquare, riding the convergence of GPS, …
https://om.co/2024/11/09/future-of-ar-is-in-your-ears/
date: 2024-11-09, from: Dave Winer’s Scripting News
I asked ChatGPT: “Based on what you know about me, draw a picture of what you think my current life looks like.”
http://scripting.com/2024/11/09/174937.html?title=chatgptImageOfMyLife
@Dave Winer’s Scripting News (date: 2024-11-09, from: Dave Winer’s Scripting News)
I’d like to hear from tech vendors, asap, which ones will help American voters learn what’s true independent of whatever “truth” the government wants us to believe? Who will stand with the people? A good question for all of us to ask. Ask news orgs the same question.
http://scripting.com/2024/11/09.html#a174419
@Dave Winer’s Scripting News (date: 2024-11-09, from: Dave Winer’s Scripting News)
I see they have a piece about the “Manosphere.” Stop blaming men. Lose that habit now. It’s toxic.
http://scripting.com/2024/11/09.html#a150308
@Dave Winer’s Scripting News (date: 2024-11-09, from: Dave Winer’s Scripting News)
It’s worth listening to On The Media, interview with Masha Gassen, saying that the authoritarian government will want to define what’s true and not. Since we now understand that most of the information flow now goes around the NYT, CNN etc – even Fox, and largely through social web and podcasts, if that’s where we’re all getting our news from, and btw MSNBC are already pretty well limited in what they’ll tell us (this was our beef with NYT if you recall) – the next step is to make it impossible for us to hear what each other are saying. Now is the time to plant seeds for a defense of our speech and communication later.
http://scripting.com/2024/11/09.html#a145637
date: 2024-11-09, updated: 2024-11-09, from: Julia Evans blog
https://jvns.ca/blog/2024/11/09/new-microblog/
date: 2024-11-09, from: Robert Reich’s blog
With Heather Lofthouse, Michael Lahanas-Calderón, and Yours Truly, Robert Reich
https://robertreich.substack.com/p/what-do-we-do-now-the-coffee-klatch
date: 2024-11-09, from: Heather Cox Richardson blog
Social media has been flooded today with stories of Trump voters who are shocked to learn that tariffs will raise consumer prices as reporters are covering that information.
https://heathercoxrichardson.substack.com/p/november-8-2024
date: 2024-11-09, updated: 2024-11-09, from: Daring Fireball
Election day, 2024.
https://daringfireball.net/2024/11/how_it_went
date: 2024-11-09, from: Jeff Geerling blog
Why Raspberry Pi for an SBC guy
<div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><p><img width="700" height="auto" class="insert-image" src="https://www.jeffgeerling.com/sites/default/files/images/armsom-bpi-sige7-purple-case.jpeg" alt="ArmSoM Sige7 purple enclosure"></p>
If anyone asks why I prefer to work with Raspberry Pis when I want to tinker on a random project, consider:
I just spent the past hour with a brand new ArmSoM Sige7 board
(see my
debugging notes in my sbc-reviews
repo). This SBC has
been on the market for months, with
glowing
reviews all the way back in May…
<span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>Jeff Geerling</span></span>
https://www.jeffgeerling.com/blog/2024/why-raspberry-pi-sbc-guy
date: 2024-11-09, from: Dan Rather’s Steady
My attempt to understand and explain
https://steady.substack.com/p/our-loss
@Dave Winer’s Scripting News (date: 2024-11-08, from: Dave Winer’s Scripting News)
BTW, there’s a lot of talk about new ways to communicate that don’t depend on silos that could be sold to billionaires. One way to do it is with my product FeedLand. It manages news streams for feeds you subscribe to. I think every publication should share news from feeds they depend on, experts they quote, other news sources they read. We can build our own networks this way. The advantage of this approach is that it is truly decentralized and not at all complicated to use. Here’s the news stream I provide for readers of my blog. It’s the most popular feature on the site. With FeedLand you can create your own.
http://scripting.com/2024/11/08.html#a230543
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045594-the-quilt-index-originall
date: 2024-11-08, updated: 2024-11-07, from: Bruce Schneier blog
Squid-A-Rama will be in Des Moines at the end of the month.
Visitors will be able to dissect squid, explore fascinating facts about the species, and witness a live squid release conducted by local divers.
How are they doing a live squid release? Simple: this is Des Moines, Washington; not Des Moines, Iowa.
https://www.schneier.com/blog/archives/2024/11/friday-squid-blogging-squid-a-rama-in-des-moines.html
@Miguel de Icaza Mastondon feed (date: 2024-11-08, from: Miguel de Icaza Mastondon feed)
From Stephanie:
https://mastodon.social/@Migueldeicaza/113449562461549865
date: 2024-11-08, updated: 2024-11-09, from: Daring Fireball
Progress hasn’t stopped, but it’s never easy, and never without backlash.
https://daringfireball.net/2024/11/it_doesnt_end
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/surreal-glitch-pulls
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045606-climate-scientists-say-we
date: 2024-11-08, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-7-2024-828
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045604-why-the-work-still-matter
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/the-big-wait
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045603-laura-hazard-owen-we-need
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045595-focus-on-the-ball-mesmeri
@Miguel de Icaza Mastondon feed (date: 2024-11-08, from: Miguel de Icaza Mastondon feed)
As always an excellent thread by @Pwnallthethings https://fed.brid.gy/r/https://bsky.app/profile/did:plc:ovyajbnegrir2ddtwfhijiob/post/3lah6347tts2p
https://mastodon.social/@Migueldeicaza/113448337748185002
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/wolf-hall-the-mirror-and-the-light
date: 2024-11-08, from: David Rosenthal’s blog
NV1-based Diamond
Edge Swaaye, CC-By-SA 3.0 |
Today
Nvidia
replaced Intel in the Dow Jones Industrial Average with a market cap
of about $3.6T, about the same as Apple, as against Intel’s market cap
about 33 times less.
That is a long way from Curtis Priem’s
kitchen table, a $2.5M A-round from Sutter Hill and Sequoia, and the
NV1.
https://blog.dshr.org/2024/11/nvidia-vs-intel.html
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045600-i-missed-this-back-in
date: 2024-11-08, from: Jeff Geerling blog
Home Assistant and CarPlay with the Pi Touch Display 2
<div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><p>After a decade, Raspberry Pi <a href="https://www.raspberrypi.com/news/raspberry-pi-touch-display-2-on-sale-now-at-60/">finally upgraded their official Touch Display</a> from 480p to 720p, while keeping the price and overall aesthetic the same.</p>
I’ve had early access to the Touch Display 2, and have been testing it in a variety of scenarios. Generally, Linux touchscreen support isn’t wonderful. And Pi OS, being a fairly customized UI focused on simple use cases, is not quite to a usable state if you go touchscreen-only, considering I had trouble getting the onscreen keyboard to work in Chromium half the time, and it would overlay things I was typing even in fully-supported apps like Terminal.
<span class="field field--name-uid field--type-entity-reference field--label-hidden"><span>Jeff Geerling</span></span>
https://www.jeffgeerling.com/blog/2024/home-assistant-and-carplay-pi-touch-display-2
@Miguel de Icaza Mastondon feed (date: 2024-11-08, from: Miguel de Icaza Mastondon feed)
Joseph filed a bug against the SpriteFrames editor in Godot/iPad and also pointed out that it was a bit clunky to use on device.
And while I could fix the bug, and maybe blow up some icons, I could not resist the urge of rewriting it in SwiftUI.
This is not very responsible of me, but it was hard to resist the urge.
https://mastodon.social/@Migueldeicaza/113447789825273900
date: 2024-11-08, updated: 2024-11-08, from: Jason Kittke’s blog
https://kottke.org/24/11/0045596-in-the-three-years-since
date: 2024-11-08, from: Dave Winer’s Scripting News
I’ve actually written a lot, but haven’t wanted to publish most of it. So many reasons why the Dems lost. Maybe I should just list them.
I don’t know if we can reboot the Democrats as an opposition party given all these problems. Whatever comes next is going to perform very differently from the party that lost this election. If we try to do it again the same old way, it will fail even worse. I think everyone knows this by now.
http://scripting.com/2024/11/08/123049.html?title=democraticMistakes
date: 2024-11-08, updated: 2024-11-07, from: Bruce Schneier blog
The Open Source Initiative has published (news article here) its definition of “open source AI,” and it’s terrible. It allows for secret training data and mechanisms. It allows for development to be done in secret. Since for a neural network, the training data is the source code—it’s how the model gets programmed—the definition makes no sense.
And it’s confusing; most “open source” AI models—like LLAMA—are open source in name only. But the OSI seems to have been co-opted by industry players that want both corporate secrecy and the “open source” label. (Here’s one …
date: 2024-11-08, from: Robert Reich’s blog
The real lesson we should draw from what occurred Tuesday
https://robertreich.substack.com/p/the-lesson
date: 2024-11-08, from: Heather Cox Richardson blog
Today the Trump family posed for a post-election photo.
https://heathercoxrichardson.substack.com/p/november-7-2024
date: 2024-11-08, from: John Naughton’s online diary
Wheels within Wheels Quote of the Day ”The truth does not change according to our ability to stomach it.” Flannery O’Connor Musical alternative to the morning’s radio news Vaughan Williams | How cold the wind doth blow | Ellen Leslie, … Continue reading
https://memex.naughtons.org/friday-8-november-2024/40046/
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045597-a-fun-interview-with-ridl
@Dave Winer’s Scripting News (date: 2024-11-07, from: Dave Winer’s Scripting News)
Not much time to write today and tomorrow.
http://scripting.com/2024/11/07.html#a230056
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045599-a-soft-murmur-is-an
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045593-i-think-i-might-take
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045592-if-you-cant-wait-until
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045598-election-grief-is-real-he
date: 2024-11-07, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-6-2024-cd6
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045591-ran-across-a-song-with
@Miguel de Icaza Mastondon feed (date: 2024-11-07, from: Miguel de Icaza Mastondon feed)
So just one crasher left to open the preview to Godot on iPad, but I am scared that I will be flooded with bug reports and things I missed.
https://mastodon.social/@Migueldeicaza/113442963391614887
@Miguel de Icaza Mastondon feed (date: 2024-11-07, from: Miguel de Icaza Mastondon feed)
The genocide continues at full speed:
“After Northern Gaza has been disconnected from life, Israeli military now orders under gun threat the main neighborhoods in north Gaza City (incl Shati RC and Nasser) to leave or face death.”
https://mastodon.social/@Migueldeicaza/113442958615900931
@Miguel de Icaza Mastondon feed (date: 2024-11-07, from: Miguel de Icaza Mastondon feed)
At least Bibi and his children are safe now.
https://mastodon.social/@Migueldeicaza/113442949351841869
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/a-time-of-earnestness
date: 2024-11-07, updated: 2024-11-07, from: Daring Fireball
Singsong congratulations from the leaders of America’s biggest companies.
https://daringfireball.net/2024/11/i_wonder
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/0045580-for-the-last-18-years
date: 2024-11-07, updated: 2024-11-07, from: Jason Kittke’s blog
https://kottke.org/24/11/here-we-go-again
date: 2024-11-07, updated: 2024-11-07, from: Bruce Schneier blog
Interesting research: “Hacking Back the AI-Hacker: Prompt Injection as a Defense Against LLM-driven Cyberattacks“:
Large language models (LLMs) are increasingly being harnessed to automate cyberattacks, making sophisticated exploits more accessible and scalable. In response, we propose a new defense strategy tailored to counter LLM-driven cyberattacks. We introduce Mantis, a defensive framework that exploits LLMs’ susceptibility to adversarial inputs to undermine malicious operations. Upon detecting an automated cyberattack, Mantis plants carefully crafted inputs into system responses, leading the attacker’s LLM to disrupt their own operations (passive defense) or even compromise the attacker’s machine (active defense). By deploying purposefully vulnerable decoy services to attract the attacker and using dynamic prompt injections for the attacker’s LLM, Mantis can autonomously hack back the attacker. In our experiments, Mantis consistently achieved over 95% effectiveness against automated LLM-driven attacks. To foster further research and collaboration, Mantis is available as an open-source tool: …
@Miguel de Icaza Mastondon feed (date: 2024-11-07, from: Miguel de Icaza Mastondon feed)
Dan offered to kindly answer questions on Bluesky architecture, and I was wondering, could it be hijacked by a billionaire?
His fascinating answer is here (see the post this was in reply to for a bunch of other great insights):
https://bsky.app/profile/migueldeicaza.bsky.social/post/3la3gfn7wi22p
https://mastodon.social/@Migueldeicaza/113442195274060149
date: 2024-11-07, updated: 2024-11-06, from: Bruce Schneier blog
Really interesting research: “An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection“:
Abstract: Large Language Models (LLMs) have transformed code com-
pletion tasks, providing context-based suggestions to boost developer productivity in software engineering. As users often fine-tune these models for specific applications, poisoning and backdoor attacks can covertly alter the model outputs. To address this critical security challenge, we introduce CODEBREAKER, a pioneering LLM-assisted backdoor attack framework on code completion models. Unlike recent attacks that embed malicious payloads in detectable or irrelevant sections of the code (e.g., comments), CODEBREAKER leverages LLMs (e.g., GPT-4) for sophisticated payload transformation (without affecting functionalities), ensuring that both the poisoned data for fine-tuning and generated code can evade strong vulnerability detection. CODEBREAKER stands out with its comprehensive coverage of vulnerabilities, making it the first to provide such an extensive set for evaluation. Our extensive experimental evaluations and user studies underline the strong attack performance of CODEBREAKER across various settings, validating its superiority over existing approaches. By integrating malicious payloads directly into the source code with minimal transformation, CODEBREAKER challenges current security measures, underscoring the critical need for more robust defenses for code completion…
https://www.schneier.com/blog/archives/2024/11/subverting-llm-coders.html
date: 2024-11-07, from: Robert Reich’s blog
Friends,
https://robertreich.substack.com/p/who-are-we-anyway
date: 2024-11-07, from: Daniel Stenberg Blog
I am thrilled to announce: Rock-Solid curl: long term supported curl releases Basics We make long term support releases of curl that we call Rock-solid curl. We support each release branch for at least five years. We only merge security fixes and important stability bugfixes into these branches for updates. No new features. No surprises. … Continue reading Rock-solid curl
https://daniel.haxx.se/blog/2024/11/07/rock-solid-curl/
date: 2024-11-07, updated: 2024-11-07, from: Daring Fireball
https://politicalwire.com/2024/11/06/the-election-provided-some-clarity/
date: 2024-11-07, from: Heather Cox Richardson blog
Yesterday, November 5, 2024, Americans reelected former president Donald Trump, a Republican, to the presidency over Democratic candidate Vice President Kamala Harris.
https://heathercoxrichardson.substack.com/p/november-6-2024
date: 2024-11-06, from: Om Malik blog
In the past, I typically followed election news and results on television networks like CNN and websites such as The New York Times. This time, I opted for Apple News’ Election Center coverage instead. It turned out to be good choice. This approach significantly reduced the anxiety I experienced when watching live feeds on television …
https://om.co/2024/11/06/how-i-followed-the-election-results/
date: 2024-11-06, updated: 2024-11-06, from: Daring Fireball
https://www.thebulwark.com/p/what-will-trumps-win-mean
date: 2024-11-06, updated: 2024-11-06, from: Daring Fireball
https://www.theatlantic.com/newsletters/archive/2024/11/trump-victory-democracy/680549/
@Miguel de Icaza Mastondon feed (date: 2024-11-06, from: Miguel de Icaza Mastondon feed)
Godot on iPad status:
- Limited Preview: 6 open bugs (120
closed)
- Public testflight: 50 open bugs (61 closed)
- Public
launch/appstore: 42 (but closed 40)
23 bugs closed since the update six days ago.
https://mastodon.social/@Migueldeicaza/113438040452648616
date: 2024-11-06, from: Dan Rather’s Steady
Navigating the uncertain road ahead
https://steady.substack.com/p/now-what
date: 2024-11-06, updated: 2024-11-06, from: Ron Garret
I’m writing this at 9AM Pacific standard time on November 6, the morning after the election. Not all the dust has quite settled yet, but two things are clear: Donald Trump has won, and the Republicans have taken control of the Senate. The House is still a toss-up, and it’s still unclear whether Trump will win the popular vote, but the last time I looked at the numbers he had a pretty
https://blog.rongarret.info/2024/11/the-bright-side-of-election-results.html
date: 2024-11-06, from: James Fallows, Substack
“The end of all our exploring / Will be to arrive where we started / And know the place for the first time.” TS Eliot, from 1942, with words for our moment.
https://fallows.substack.com/p/election-countdown-the-day-after
date: 2024-11-06, updated: 2024-11-06, from: Liam Proven’s articles at the Register
<p>A relatively tiny code change by penguin premier Linus Torvalds is making a measurable improvement to Linux's multithreaded performance.</p>
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
PS: I bet Bezos wishes he had bought Twitter.
http://scripting.com/2024/11/06.html#a173106
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Final note (I think). The pain you feel at first may abate. It did for me. I had pushed down memories of 2020 and 2021. It was a horror show, and Trump was the main character. So the first thing I had to deal with is that I don’t want to remember that. Too painful. But once I realized that’s not where we are right now, it’s a totally different situation, that’s when the creative impulse rose as the pain receded. We have one short term thing to do – keep the campaign running, and long term we have to recognize division we add, and counteract it. We are the party that welcomes everyone regardless or race, religion, country of origin, age or gender. All of them. No exceptions. The election result represents big change. And it’s a good time to make more changes.
http://scripting.com/2024/11/06.html#a165446
date: 2024-11-06, from: Alex Schroeder’s Blog
Here’s something to watch out for, if you’re like me: Disable all the infrastructure that watches over your processes. In my case, the problem was Monit. It checks the website every five minutes and if it fails to connect for three times in a row it restarts the server, breaking the migration. 😭
systemctl stop gotosocial
# prevent systemctl from restarting it
systemctl disable gotosocial
# prevent monit from interrupting the migration with a restart!
monit unmonitor gotosocial
# backup!
mkdir backup
cp sqlite.db backup/
Now you’re ready to extract the new version over the old one, compare your config file with the example provided, and start it again.
systemctl enable gotosocial
systemctl start gotosocial
journalctl --unit gotosocial --follow
Don’t be like me and start Monit because my Monit config checks the URL every five minutes and restarts GoToSocial if the site is not up. Which is a big problem if migration takes more than a handful of minutes.
I ended up with a borked migration restart loop and ended up stopping it all again, overwriting the borked database file with the backup, and redoing it.
2024-10-28. Another thing to note for the GoToSocial upgrade is that I ran 16.0 using a systemd MemoryMax of 200M; today the upgraded instance with 17.1 ran fine for a while and then locked up. A restart didn’t bring it back. It remained stuck after a log message saying “compiling WebAssembly”. I increased MemoryMax to 300M, no change. I increased it to 500M and the instance came up. Just in case you’re as memory-stingy as I am…
In order to avoid future compilation, @dumpsterqueer pointed me at this:
You can instruct GoToSocial on where to store the Wazero artifacts by setting the environment variable
GTS_WAZERO_COMPILATION_CACHE
to a directory, which will be used by GtS to store two smallish artifacts of ~50MiB or so each (~100MiB total). – Configuration Overview
I’ll try that.
It looks like a side-effect of GoToSocial implementing the direct messages API is that the Toot! App I’m using is showing me all my former direct messages using it’s special user interface (those bubbles on the right hand side). I have to open every single one of them to dismiss it. 🤨
2024-10-29. Today I read that the botsin.space instance
was shutting down. I figured I might start thinking about creating a
second account for my blog on my own instance. I tried to run
./gotosocial admin account create
a few times, forgetting
this or that parameter. And then I noticed that the replies I saw
scrolling by always ended in an error message. In fact, there were more
such error messages in my log files: “database disk image is malformed”
😱
The .recover
command didn’t work when I tried it:
# sqlite3 sqlite.db ".recover" | sqlite3 new.db
sql error: SQL logic error (1)
So then I tried the following:
monit unmonitor gotosocial
systemctl stop gotosocial
sqlite3 sqlite.db ".dump" > db.sql
mkdir backup
mv sqlite.db backup/
sudo -u gotosocial sqlite3 sqlite.db < db.sql
gzip backup/sqlite.db
gzip db.sql
Some errors that I saw:
A few lines about accounts with no account_uri even though that was a NOT NULL column.
Many, many such lines:
no such table: sqlite_stat4
Then this one:
NOT NULL constraint failed: conversations.thread_id (19)
I started to feel bad about the whole thing.
I aborted the operation. The gzip command hadn’t finished, yet. I restored the old database file.
mv backup/sqlite.db .
systemctl start gotosocial
As it turns out, now my GoToSocial instance seems to be unreachable. The
service starts, htop
shows processes churning. The log
shows i/o timeouts and “No Content: wrote 0B” log messages scrolling by.
Oof! 😓
Looking at the timestamps again, it seems that the recovery command left
a sqlite.db-shm
and a sqlite.db-wal
file in
place.
-rw-r--r-- 1 gotosocial gotosocial 10445488128 29. Okt 22:47 sqlite.db
-rw-r--r-- 1 gotosocial gotosocial 32768 29. Okt 23:19 sqlite.db-shm
-rw-r--r-- 1 gotosocial gotosocial 341992 29. Okt 23:19 sqlite.db-wal
That can’t be right. So I’m going to stop gotosocial
, move
these two files away, and start it again.
Sadly, no luck.
Perhaps there is a database recovery going on? I can’t tell. This time around I see the typical startup messages, something about “recovered queued tasks”, about 12 requests that look like regular requests, and then nothing.
I’ll let it run for a bit.
I restarted it again. It seems to work?
2024-10-30. The database is still corrupt in some way. There are a lot of errors. Here are two examples:
error dereferencing remote status … : enrichStatus: failed to dereference status author … : enrichAccount: error putting in database: sqlite3: database disk image is malformed (code=11 extended=11)
0xc0091c61e0: error processing: CreateAnnounce: error dereferencing announce: EnrichAnnounce: error fetching boost target … : enrichStatus: failed to dereference status author … : enrichAccount: error putting in database: sqlite3: database disk image is malformed (code=11 extended=11)
There’s something about these authors that’s not working.
The code in account.go
:
// This is new, put it in the database.
err := d.state.DB.PutAccount(ctx, latestAcc)
if err != nil {
return nil, nil, gtserror.Newf("error putting in database: %w", err)
}
I feel that this is where things are going wrong. Something about the accounts table.
I’m going to make an offline copy of the sqlite.db
file.
Sadly the .recover
doesn’t work on my laptop, either.
$ sqlite3 sqlite.db ".recover" > data.sql
sql error: SQL logic error (1)
Not looking good! I’m going to try the dump.
sqlite3 sqlite.db ".dump" > data.sql
sqlite3 recovery.db < data.sql 2>&1 |tee recovery.log
Let’s look at the log file and list the errors!
Occurences | Type | Error |
---|---|---|
454 | Runtime error | UNIQUE constraint failed: media_attachments.id |
69 | Runtime error | NOT NULL constraint failed: accounts.uri |
2111 | Parse error | no such table: sqlite_stat4 |
1 | Runtime error | NOT NULL constraint failed: conversations.thread_id |
I ended up filing an issue.
And then, later that day, I used .dump
. This time around,
there was a COMMIT
at the end of the dump, so no change was
required.
sqlite3 sqlite.db ".dump" > data.sql
tail data.sql # verify that there is a COMMIT at the end
sqlite3 recovery.db < data.sql 2>&1 |tee recovery.log
rsync --archive --itemize-changes recovery.db "sibirocobombus.root:/home/gotosocial/sqlite.db"
The recovery log showed all the errors mentioned above, and I used the new database anyway.
2024-10-31. Currently the instance is locking up every few minutes, as far as I can tell. 😰
2024-11-06. The instance has been stable these days!
https://alexschroeder.ch/view/2024-10-27-upgrade-gotosocial
date: 2024-11-06, from: Om Malik blog
The chatbots-as-search paradigm encourages us to just accept answers as given, especially when they are stated in terms that are both friendly and authoritative. The chatbot interface invites you to just sit back and take the appealing-looking AI slop as if it were “information.” Emily Bender, Prof, Linguistics, UW By The Numbers Worth Reading R.I.P …
https://om.co/2024/11/06/the-day-after-field-notes/
date: 2024-11-06, from: Robert Reich’s blog
I still have faith in America, but we must mobilize to protect those at risk if Trump achieves his worst impulses.
https://robertreich.substack.com/p/the-resistance-starts-now
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
“Richest man in the world” doesn’t begin to cover Musk’s ambition. He wants “all the money in the world.”
http://scripting.com/2024/11/06.html#a155539
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Also to the Twitter founders, amassing that much power and centralizing it as Twitter did, had a cost that we’re paying now. But it’s very hard to stop when the juggernaut is rolling. I understand, but in the future we have to think about this more clearly. When a medium becomes too big and centralized, there’s trouble ahead. It was accidental that Trump was the one to take advantage of this to route around journalism and go direct, but it was not accidential that Musk did.
http://scripting.com/2024/11/06.html#a152508
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
My longtime friend, Mike Arrington said next time have a primary. He has a point. Would Harris have been the nominee if the Dems had had a normal primary process? Who knows. Maybe the voters could have told us then that what happened yesterday was coming.
http://scripting.com/2024/11/06.html#a152050
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Speaking of Musk, maybe he will temper Trump’s desire for retribution. It may be a vain hope, but I’ll cling to it anyway. Doing business in a world of retribution might not be too conducive to the creativity needed to run innovative tech businesses. A climate of fear doesn’t inspire great software. I know the quality of products Musk makes, I own and love my Tesla Model Y. Best car I’ve ever owned or driven.
http://scripting.com/2024/11/06.html#a151847
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Ben Thompson wrote in his Stratechery newsletter: “What is fascinating is how this fundamentally transforms any attempt to evaluate the Twitter acquisition. From a business perspective it’s a massive failure, and might always be: Musk paid too much for Twitter as it was, and in the intervening years the flight of advertisers from the platform has made it worth even less. From a Musk Inc. perspective, however, X played a pivotal role in ensuring that the incoming administration will do whatever Musk needs at the exact moment that SpaceX is gaining the capabilities to actually make a trip to Mars, if only the FAA in particular will give him the freedom to do so. That alone is almost certainly worth $44 billion to Musk!” I wrote in 2017, that some Repub would buy Twitter, and it would merge and thus transform politics and tech. This was obvious, but for some reason I was the only one who saw it. We could have headed this off, if people would just listen. I beg you to listen to people you don’t usually listen to. The NYT will never hire someone like me to write on their op-ed page, so if you only accept your input from people with legit credentials, you’ll miss insights like this. We’re paying a heavy price for this now. When I begged people to listen they came back with the balance sheet valuation of Twitter, but they were leaving the most important asset off the balance sheet, the dollar value of being able to elect a president. Musk didn’t miss this.
http://scripting.com/2024/11/06.html#a151335
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Speaking of Carville, yesterday’s Trippi podcast with Carville as the only guest was the best podcast I’ve ever heard. I recommended it yesterday as inspirational. Now that we know the outcome of the election, it’s a marker of where we were before the results were known. A world that no longer exists. But like stories written in 2016, the markers are useful to see where we once were and how we got here, and what we can learn from what happened between. I wish it had turned out the way these two great friends thought it should have. But it didn’t. But there was a hint that they knew what wouldn’t work this time. No spoilers.
http://scripting.com/2024/11/06.html#a151138
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Be generous with all classes of people, by gender, age, race, religion, whatever is used to divide us. Stop vilifying men. Carville was right. There’s no reason to make one whole gender the scapegoat for all our problems. It’s no accident that the Repubs own the men. We could probably have had ten percent or more of their voters if we stopped doing this. Key point, when you blame a whole gender, you hurt people who have no power to stop it.
http://scripting.com/2024/11/06.html#a150124
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
Blame is pointless. It may be emotionally satisfying at some level, but it is division, and that’s why we keep losing elections. We don’t see it but we create our own divisions. This must stop.
http://scripting.com/2024/11/06.html#a150114
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
First thing – Don’t shut down the campaign. We must keep communicating with the electorate, independent of what they get from the news orgs. The Harris campaign did an exemplary job. Why shut it down. Keep setting the agenda. Help keep us organized. Preserve the perspective and expectation of democracy in the US. Change the message from raising money, to keeping us all in touch with the opposition (ie us). This is the mistake we made in every election since we had the web to organize. The Repubs, almost by accident, never stopped organizing. And now that Musk, who will be part of the new administration, owns Twitter, you can be sure they will stay and get more organized. We can do it too! We have to stop making this mistake of going back to zero after election, whether we win or lost.
http://scripting.com/2024/11/06.html#a145605
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
In 2016, on the night of Election Day, when it was obvious Trump would win, before taking a Xanax and going to sleep, I wrote a piece, that my friend Chuck Shotton says I should run again. Rather than doing that, I’ll quote the important part. “I don’t think it’s about economics, I think it’s about change happening too fast. And the Trump voters had the power to bring it to a screeching halt, they saw the chance and took it.”
http://scripting.com/2024/11/06.html#a145357
@Dave Winer’s Scripting News (date: 2024-11-06, from: Dave Winer’s Scripting News)
I prayed. I really did. But I got the wrong answer.
http://scripting.com/2024/11/06.html#a145303
date: 2024-11-06, updated: 2024-11-06, from: Bruce Schneier blog
Microsoft is warning Azure cloud users that a Chinese controlled botnet is engaging in “highly evasive” password spraying. Not sure about the “highly evasive” part; the techniques seem basically what you get in a distributed password-guessing attack:
“Any threat actor using the CovertNetwork-1658 infrastructure could conduct password spraying campaigns at a larger scale and greatly increase the likelihood of successful credential compromise and initial access to multiple organizations in a short amount of time,” Microsoft officials wrote. “This scale, combined with quick operational turnover of compromised credentials between CovertNetwork-1658 and Chinese threat actors, allows for the potential of account compromises across multiple sectors and geographic regions.”…
https://www.schneier.com/blog/archives/2024/11/iot-devices-in-password-spraying-botnet.html
date: 2024-11-06, updated: 2024-11-06, from: Liam Proven’s articles at the Register
<p>At this year's Ubuntu Summit in The Hague, we were really hoping to hear some news about Canonical's new immutable desktop distro.</p>
https://go.theregister.com/i/cfa/https://www.theregister.com/2024/11/06/ubuntu_core_desktop_waiting/
date: 2024-11-06, from: Robert Reich’s blog
What should we do?
https://robertreich.substack.com/p/office-hours-what-will-happen-to
date: 2024-11-06, from: Daniel Stenberg Blog
curl 8.11.0 is released, featuring one security fix, five changes and 265 bugfixes.
https://daniel.haxx.se/blog/2024/11/06/curl-8-11-0/
date: 2024-11-06, from: Doc Searls (at Harvard), New Old Blog
It used to be When. But that was yesterday: election day in the U.S. In California, where I voted (by mail), it’s still 10:30 PM., and the Blue folk are especially blue, because the whole thing is over. Trump hasn’t won yet, but he will. I correctly predicted a Trump win in 2016, a loss […]
https://doc.searls.com/2024/11/05/now-what/
date: 2024-11-06, updated: 2024-11-06, from: Daring Fireball
https://talkingpointsmemo.com/edblog/status-check-before-midnight
date: 2024-11-06, from: Tracy Durnell Blog
Editor’s note: I am going news-free tonight and haven’t looked at any results — pls don’t tell me! I’m not doing the doomer thing (and you shouldn’t either). 🎶 Post soundtrack 🎶 During this election, people have rallied behind the idea of saving democracy — let’s use this collective energy and frustration to push for […]
https://tracydurnell.com/2024/11/05/the-election-is-just-the-first-step-for-democracy/
date: 2024-11-06, from: Heather Cox Richardson blog
Today is Election Day, 2024.
https://heathercoxrichardson.substack.com/p/november-5-2024
date: 2024-11-05, updated: 2024-11-08, from: Daring Fireball
Italic and bold emphasis are information-density additives. But as Kottke observes, used deftly, hypertext links are an information-density multiplier.
https://daringfireball.net/2024/11/kottke_on_the_art_and_power_of_hypertextual_writing
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045588-if-you-need-some-last
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
https://1password.com/daringfireball
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045586-sometimes-a-post-title-ju
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045577-how-ill-advised-guideline
date: 2024-11-05, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-4-2024-df8
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045585-tony-hawk-posted-a-photo
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/danny-macaskill-rides-the-adidas-hq
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045582-fleabag-in-lego-i-look
@Miguel de Icaza Mastondon feed (date: 2024-11-05, from: Miguel de Icaza Mastondon feed)
Every M-based computer has been a vast improvement over the equivalent
PC
offering.
https://mastodon.social/@iryantldr/113431366744282667
https://mastodon.social/@Migueldeicaza/113431413514330906
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045583-a-scottish-childrens-hosp
date: 2024-11-05, from: Om Malik blog
A few weeks ago, I went on a road trip to Montana with Rod Clark, a photographer friend. On the way back, we stopped in Wells, NV, to get food at Sher-E-Panjab Dhaba, a converted truck stop diner that serves good old-fashioned Punjabi food. When paying for our lunch, I got into a conversation with the guy behind …
https://om.co/2024/11/05/why-carnegies-rules-are-evergreen/
date: 2024-11-05, from: Alex Schroeder’s Blog
If you use GoToSocial, like I do, then your posts do not expire. Mastodon, on the other hand, has that feature.
Now, you could use Mastodon Archive. But that makes you archive your toots before expiring them.
No good!
I want them gone. So here’s a tiny Python script, built on the shoulders of the Mastodon.py library. It deletes and unboosts ten posts older than eight weeks that you haven’t pinned.
The idea is to run it from a cron job every hour, deleting up to 240 toots per day. The reason is that the deletion rate limits are super strict. So you have to be slow about it.
Now, I could not be arsed to write yet another oAuth workflow. So here’s
the deal: Use toot
to login. It’s a great client for the
command line and it comes with a separate text-based user-interface.
Gomphotherium uses the toot
config file to log in. 😬
It’s probably full of bugs. At least it’s short.
#GoToSocial #Mastodon Archive #Gomphotherium
https://alexschroeder.ch/view/2024-11-05-gomphotherium
date: 2024-11-05, from: Robert Reich’s blog
Friends,
https://robertreich.substack.com/p/today-holding-each-others-hands
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045581-til-about-argonaut-octopu
date: 2024-11-05, from: Robert Reich’s blog
at 9:00pm PT/10 pm MT/11 pm CT/12:00am ET
https://robertreich.substack.com/p/join-us-tonight-for-an-election-night
@Dave Winer’s Scripting News (date: 2024-11-05, from: Dave Winer’s Scripting News)
http://scripting.com/2024/11/05.html#a130139
date: 2024-11-05, from: Alex Schroeder’s Blog
I keep an archive of the One Page Dungeon Contest. It’s pretty big.
Size | Year |
---|---|
48M | 2009 |
193M | 2010 |
121M | 2011 |
199M | 2012 |
149M | 2013 |
278M | 2014 |
364M | 2015 |
233M | 2016 |
250M | 2017 |
493M | 2018 |
345M | 2019 |
472M | 2020 |
217M | 2021 |
353M | 2022 |
492M | 2023 |
486M | 2024 |
So I decided I wanted to gzip the PDF files (“pre-compress”) them. I found the answer I was looking for in Serving pre-compressed files using Apache by François Marier. Sometimes searching for stuff is hard just because you don’t know what it’s called. 😅
AddEncoding gzip gz
Options +Multiviews
SetEnv force-no-vary
Header set Cache-Control "private"
<FilesMatch "\.pdf\.gz$">
ForceType application/pdf
</FilesMatch>
OK, time to gzip them all!
for d in 2*; cd /home/alex/campaignwiki.org/1pdc/$d; echo $d; gzip *.pdf; end
Aaaaand … the gains are abysmal! 😓
Size | Year |
---|---|
46M | 2009 |
173M | 2010 |
110M | 2011 |
190M | 2012 |
126M | 2013 |
261M | 2014 |
351M | 2015 |
226M | 2016 |
225M | 2017 |
471M | 2018 |
325M | 2019 |
448M | 2020 |
206M | 2021 |
339M | 2022 |
472M | 2023 |
471M | 2024 |
The PDFs really are that big! 🤨
Somebody should put a size limit on submissions!
The whole collection is still 4.4G. 😞
2024-11-04. I started looking at Ghostscript to reduce
filesize. The result of using -dPDFSETTINGS=/ebook
is
disappointing. The first PDF I opened had text in the original turned to
a badly pixelated image.
I started reading Optimizing PDFs on the Ghostscript blog and my head started smoking.
I ended up writing the following:
pdf-shrink
To this, @mxp replied:
My invocation is less elaborate (w/o the threshold, filter settings, etc.), but similar in that I also downsample images to 150 dpi. In addition, I have
-dSubsetFonts=true -dCompressFonts=true
, but since I use this for my own LaTeX-generated documents, I guess I could drop this.
I didn’t look into fonts because I don’t mind people using weird fonts; for the moment images are a bigger problem than fonts.
Then I went through my local directories and called
pdf-shrink
on them all, regenerated the zip file containing
the year’s entries and gzipped the individual files.
As I was going through the files for 2024 I noticed that sometimes the filenames betray different names (from email senders, I presume), leaking privacy related information. I wanted to make sure that the filenames reflected the authors of the works and that made me realize two things:
Then again, anonymous works are OK, but it would have saved me some time if it said “anonymous” somewhere. 😏
In any case, if you publish PDF files somewhere, here’s what I’m planning to do from here on out:
https://alexschroeder.ch/view/2024-11-01-gzip
date: 2024-11-05, updated: 2024-11-05, from: Bruce Schneier blog
I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing source code scanning, AIs finding zero-days in the wild, and everything in between. The AIs aren’t very good at it yet, but they’re getting better.
Here’s some anecdotal data from this summer:
Since July 2024, ZeroPath is taking a novel approach combining deep program analysis with adversarial AI agents for validation. Our methodology has uncovered numerous critical vulnerabilities in production systems, including several that traditional Static Application Security Testing (SAST) tools were ill-equipped to find. This post provides a technical deep-dive into our research methodology and a living summary of the bugs found in popular open-source tools…
https://www.schneier.com/blog/archives/2024/11/ais-discovering-vulnerabilities.html
date: 2024-11-05, from: Daniel Stenberg Blog
The little men in your computer do this every time you open google.com I found this video so hilarious and awesome that I simply had to also mention it here.
https://daniel.haxx.se/blog/2024/11/05/curl-v-google-com/
date: 2024-11-05, from: Robert Reich’s blog
It’s a dirty trick Trump used in 2020 and will probably try to use tonight, but it won’t work if you know it’s coming. Please spread the word.
https://robertreich.substack.com/p/be-prepared-for-the-red-mirage-on
date: 2024-11-05, from: Heather Cox Richardson blog
Today, the Office of the Director of National Intelligence (ODNI), the Federal Bureau of Investigation (FBI), and the Cybersecurity and Infrastructure Security Agency (CISA) warned that foreign adversaries, especially Russia, are working “to undermine public confidence in the integrity of U.S.
https://heathercoxrichardson.substack.com/p/november-4-2024
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045579-wow-more-than-40-people
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
https://www.nytimes.com/interactive/2024/11/02/opinion/vote-harris-2024-election.html
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
https://www.threads.net/@kamalahq/post/DB4aHh4uP8l
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
https://www.theverge.com/24282022/kamala-harris-endorsement-presidential-election-2024
date: 2024-11-05, updated: 2024-11-05, from: Daring Fireball
https://www.thebulwark.com/p/reich-track-wrong-track
date: 2024-11-05, from: Matt Haughey blog
Here's a thing I can't stop noticing in new cars: when the iPad came out in early 2010, it took the world by storm and subsequently, when the Tesla Model S debuted in 2012, it had what seemed like a very forward-thinking futuristic dashboard that was
https://a.wholelottanothing.org/skate-to-where-the-puck-is-going-to-be-not-where-it-has-been/
date: 2024-11-05, from: Om Malik blog
I have been using MacWhisper for recording and transcribing my conference calls and interviews for quite a while now. I have also tried FlowVoice.AI for using voice to respond to emails, text messages and do short dictations. Now that I have upgraded to the latest version of the Mac operating system, today, I decided to put the new Apple Intelligence voice transcription to the test. I dropped …
https://om.co/2024/11/04/apple-intelligences-transcriptions-are-very-good/
date: 2024-11-05, updated: 2024-11-05, from: Jason Kittke’s blog
https://kottke.org/24/11/0045575-i-did-go-touch-that
date: 2024-11-05, from: John Naughton’s online diary
Presidential doodles Dwight Eisenhower (34th President of the US) seems to have been quite a good artist, as the nice detail in this doodle suggests. (From Presidential Doodles: Two Centuries of Scribbles, Scratches, Squiggles and Scrawls from the Oval Office.) … Continue reading
https://memex.naughtons.org/wednesday-6-november-2024/40036/
date: 2024-11-04, from: Dan Rather’s Steady
The Dan Rather Election Guide
https://steady.substack.com/p/staying-steady-and-sane
date: 2024-11-04, updated: 2024-11-04, from: Jason Kittke’s blog
https://kottke.org/24/11/0045576-some-profiles-of-first-ti
date: 2024-11-04, updated: 2024-11-04, from: Jason Kittke’s blog
https://kottke.org/24/11/0045578-i-am-very-excited-about
date: 2024-11-04, updated: 2024-11-04, from: Jason Kittke’s blog
https://kottke.org/24/11/the-powerful-density-of-hypertextual-writing
@Miguel de Icaza Mastondon feed (date: 2024-11-04, from: Miguel de Icaza Mastondon feed)
I could preview Godot for iPad today, but there is a UIKit bug that crashes it after you run the game.
So either I have to rewrite the NavigationShell/Sidebar/Inspector, or I have to cross my fingers for Apple to fix the bug.
https://github.com/feedback-assistant/reports/issues/550
https://mastodon.social/@Migueldeicaza/113426593220723330
date: 2024-11-04, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-3-2024-fd7
date: 2024-11-04, from: Heather Cox Richardson blog
After Congress passed the Kansas-Nebraska Act and President Franklin Pierce signed it into law, Illinois lawyer Abraham Lincoln applied the logic of mathematics to the American system of human slavery.
https://heathercoxrichardson.substack.com/p/history-extra-for-november-3-2024
date: 2024-11-04, updated: 2024-11-04, from: Jason Kittke’s blog
https://kottke.org/24/11/0045573-based-on-our-election-for
date: 2024-11-04, updated: 2024-11-04, from: Jason Kittke’s blog
https://kottke.org/24/11/how-are-you-doing-1
date: 2024-11-04, from: Tracy Durnell Blog
https://tracydurnell.com/2024/11/04/watched-toxicity-halloween-light-and-fire-show/
date: 2024-11-04, updated: 2024-11-04, from: Liam Proven’s articles at the Register
<p>Fear not, FOSS fans. Bitwarden isn't going proprietary after all. The company has changed its license terms once again – but this time, it has switched the license of its software development kit from its own homegrown one to version three of the GPL instead.</p>
@Miguel de Icaza Mastondon feed (date: 2024-11-04, from: Miguel de Icaza Mastondon feed)
As seen on Twitter:
https://mastodon.social/@Migueldeicaza/113425244064705157
@Dave Winer’s Scripting News (date: 2024-11-04, from: Dave Winer’s Scripting News)
lists.opml.org: The other day I asked a famous blogger who uses RSS if he would be willing to share his list of feeds, so others could subscribe to them. He declined, for good reason, there was private stuff in the list he couldn’t share. I certainly understand that. Then I realized, as often is the case, that I could do myself what I had been asking others to do. And in fact I already was sharing my OPML subscription lists, but people who didn’t use FeedLand wouldn’t know how to find them. So I decided to make it easier. On lists.opml.org I’ve got a link to the lists of podcasts I’m subscribed to. That list should update every hour for any additions or removals from this list. I don’t update the list very often, fwiw. And I make no warranties about the quality of the podcasts, or when the feeds in the list update. And maybe this will give other people an idea that they might want to do this as well. Let me know if you do, I’d love to see what you do.
http://scripting.com/2024/11/04.html#a143253
@Dave Winer’s Scripting News (date: 2024-11-04, from: Dave Winer’s Scripting News)
Tomorrow if you are an American, and haven’t voted yet and are thinking of sitting it out – get off your butt and get out there and do your civic duty. We need great turnout this year, record-setting turnout, as a show of love for our country and our Constitution. Vote now, because later you might not have any power to change direction. Tomorrow, you do have power. And remember that voting is not you expressing yourself, it’s not free speech, it’s you and I governing. This is our moment of greatest power. Use it or lose it.
http://scripting.com/2024/11/04.html#a134017
date: 2024-11-04, from: Dave Winer’s Scripting News
My opinion: At this point it doesn’t matter what the NYT says. Either way they jumped the shark for the last time in this election.
After the election if we still have freedom of speech, we should reboot news around the simple idea of news written by experts. They must know the basic rules of journalism, imho that’s much easier than the know-nothing journalist posing as everyman with a view from nowhere, trying to understand what they’re writing about. They don’t have any basis to judge, we give them far too much power. That system is rooted in a time when publishing was expensive but that hasn’t been true for thirty years. the old system has run its course. This election, either way, is a lesson in how that system, if it ever worked, doesn’t work today. The next news system will be sources going direct to interested readers.
Jay Rosen and I did a series of podcasts in the early teens called Rebooting the News. This was the basic premise. I believe more than ever that this is the best path for news going forward.
They did this at Wired for a while. I was invited to be a columnist when my main qualification was that I was an accomplished software developer. I think that’s the way to go. Experts sharing their perspectives on current events.
Before Twitter existed, in 2002, I proposed to the NYT that they offer a blog to anyone who is quoted in a NYT article. If they had done this, the NYT would be what Twitter became, and it wouldn’t now be owned by Elon Musk, for the benefit of humanity. I wish they had done it. It would have been a real moneymaker. And good for the flow of knowledge.
http://scripting.com/2024/11/04/132817.html?title=rebootingTheNews
date: 2024-11-04, updated: 2024-11-04, from: Bruce Schneier blog
Really interesting story of Sophos’s five-year war against Chinese hackers.
https://www.schneier.com/blog/archives/2024/11/sophos-versus-the-chinese-hackers.html
date: 2024-11-04, from: Robert Reich’s blog
A note of reassurance on election eve.
https://robertreich.substack.com/p/we-the-people-will-succeed
date: 2024-11-04, from: Heather Cox Richardson blog
I’m home tonight to stay for a bit, after being on the road for thirteen months and traveling through 32 states.
https://heathercoxrichardson.substack.com/p/november-3-2024
date: 2024-11-04, updated: 2024-11-05, from: Daring Fireball
date: 2024-11-04, from: James Fallows, Substack
One thing we don’t know, many things we do know. And some models for a better stage of American history that could be ahead.
https://fallows.substack.com/p/election-countdown-one-more-day-and
date: 2024-11-04, updated: 2024-11-04, from: Daring Fireball
https://www.nytimes.com/2024/11/03/us/politics/trump-pa-rally-election.html?smid=url-share
date: 2024-11-04, from: John Naughton’s online diary
American options This is a flow-chart that the economist and blogger John Quiggin drew up on the Crooked Timber blog to help him think about the various possible paths that the US could follow after tomorrow’s presidential election. The diamonds … Continue reading
https://memex.naughtons.org/monday-4-november-2024/40025/
date: 2024-11-03, updated: 2024-11-03, from: Daring Fireball
https://x.com/PoliticusSarah/status/1853081045962194977
date: 2024-11-03, from: Om Malik blog
For the sports fan in me, this has been a bit of a tough week. Two teams I normally like lost in a humiliating fashion. The New York Yankees lost to the L.A. Dodgers in the MLB World Series (4-1), and the Indian Cricket Team (ICT) was spanked by New Zealand, 3-0. The Indians have …
https://om.co/2024/11/03/failure-and-perspective/
date: 2024-11-03, from: Heather Cox Richardson blog
https://heathercoxrichardson.substack.com/p/november-2-2024-9e4
@Dave Winer’s Scripting News (date: 2024-11-03, from: Dave Winer’s Scripting News)
Heard on Facebook: Next week has been exhausting. Yes.
http://scripting.com/2024/11/03.html#a152844
@Dave Winer’s Scripting News (date: 2024-11-03, from: Dave Winer’s Scripting News)
About polls, I learned how they work and how much they are a Ouija board, where the reports are tuned up based on the pollsters assumptions about who are the real voters, and account for the limited people who can be polled. They’re trying to estimate what millions of people will do by talking with a few hundred. So they read each others’ work, and try not to be too far off the consensus. It’s at best an art, at worst they’re just press releases designed to get the ad money to flow in certain directions. Don’t overlook that the money is flowing to the same businesses that are choosing which polls to report on. Most of what the news orgs report on, it makes it into a sport like the NBA or MLB, but there at least there’s objective news to report on, you know – the score of each game, how many runs were scored, who got injured, fired, traded. In politics, there is no objective news, and if there were, the journalists we have don’t report it. There’s a lot of inputs that are connected to the outputs, conflicts of interest everywhere. Even so, the top item on Memeorandum is about a poll in Iowa that says Harris is ahead. Iowa was never thought to be in play. Yes, I too am addicted. Endlessly fascinated. Maybe we’ll survive next week after all? Hope.
http://scripting.com/2024/11/03.html#a151847
date: 2024-11-03, from: Dave Winer’s Scripting News
Cory Doctorow: “I will never again devote my energies to building up an audience on a platform whose management can sever my relationship to that audience at will.” It’s a good practice, and while I completely support it, I am part of several communities that could remove me without recourse. I do it because I value the people in the community, and feel that life is too short to wait for everyone to get it right.
Doctorow was writing about Bluesky, and once again, on Bluesky a discussion starts on what it would take for Bluesky to attract developers, and each time I am told that they have done enough, and I go away thinking that their pitch is a scam, and they’re building value in a user base that they will sell. They certainly could do it, and for all we know the founders may have already sold some of their stock in the latest investment round which valued the company at $x billion. (I did a search to find the evaluation but it appears to have not been announced.)
I gave them a roadmap, again, of how to demonstrate that they’re open, and finally concluded that the only way to really do it is to “provide a download that you can install on any popular operating system to get an instant blue sky network, running on its own without any help from anyone else. Then you can claim to be really open and until then there will be a lot of confusion.” (And I was generous at that. More accurately, people with experience in tech will be certain this is yet another deal where the founders get rich, where the users are the product and have read too much into their promise of being open.)
I’m still on Bluesky but I expect them to be another Twitter, which btw had an open API too, and it’s pretty good, but they never offered the option of people running their own twitters. That would have been good protection against a Musk buying them out and turning us into pawns in his plan for world domination. Do we really want to help someone else build one of those?
In early 2017 I observed that Twitter had just been used to route around journalism and elect a president. This value wasn’t on their balance sheet as an asset. I felt its stock was vastly underpriced. Exactly as it turned out when Musk bought it. Everyone still thinks he paid too much, at this moment it could possibly gain him control of part of the US government’s $6 trillion per year budget early next year, and if they start selling the assets of the government he could be in the best position to buy them at pennies on the dollar, or take a percentage of each saleAt this point it doesn’t matter what the NYT says. Either way they jumped the shark for the last time in this election.. He could probably start borrowing against it the day after the election is called for Trump.
In the title I ask if a Musk could buy Bluesky, it’s possible they have a way to prevent that in the design of their corporation, that’s why it’s a question. But if the price were right maybe the founders would sell out even if they didn’t have to.
http://scripting.com/2024/11/03/145356.html?title=couldAMuskBuyBluesky
date: 2024-11-03, from: Dan Rather’s Steady
A Reason To Smile
https://steady.substack.com/p/the-traveling-wilburys
date: 2024-11-03, from: Heather Cox Richardson blog
Yesterday, in Time magazine, Eric Cortellessa explained that the electoral strategy of the Trump campaign was to get men who don’t usually vote, particularly young ones, to turn out for Trump.
https://heathercoxrichardson.substack.com/p/november-2-2024
date: 2024-11-03, from: Robert Reich’s blog
And last week’s winner
https://robertreich.substack.com/p/sunday-caption-contest-the-choice-7f6