Viewing profile — rigid

a decent syslog daemon will stream it anywhere you like

you mean, something like a new FOSS project called "OpenEye"? :-)

> I wish Python had static builds! while unusual in the "python world", there are more or less well supported ways: https://www.askpython.com/python/examples/compiling-applicat... …

They suck to maintain. I love the fact that you can just update one single openssl lib and all installed apps use the updated version after a restart. Static builds have their legi…

https://textualize.io for python isn't bad either. (In case you don't like static builds like me.)

> where the maintainers of F-Droid can intervene and prevent an update to an app from reaching users if it's deemed to be malicious That sounds like a feature you want when using F…

That's not true tho. f-droid supports (true) https://f-droid.org/en/docs/Reproducible_Builds/ for quite some time now. Those are signed by both, f-droid and the author.

Hm f-droid provides privacy friendly https://fdroid.gitlab.io/metrics/ for some time now. I'm not sure what sort of "control" they have over the Play Store compared to f-droid, but…

Signal has reproducible builds for android now? Why not f-droid then, too?

yep. android 13

mobile users should tap the canvas for the particles to move.

Hence "hack". It needs keys for administration but at a first glance, I see no reason why a git-anon user couldn't be part of gitolite's git user.

ledger-cli is rock solid but it lacks a decent TUI. Really all I want is an 80s TUI accounting app that "just works" as ledger does but with a menu driven interface with keyboard s…

For a single author you don't necessarily need any server at all. A cloud directory or zip files work well. But gitolite is so easy to setup & maintain, it's not a big difference a…

not sure how lightweight any of these are, but https://gitolite.com/gitolite/ just needs git and ssh deployed. And it works like a charm.

...at least you weren't looking for any references to "mifflin" functions.

I bet in the majority of cases, there's no need to pressure for merging. In a big company it's much easier to slip it in. Code seemingly less relevant for security is often not rev…

I kinda miss the curiosity show. It was a bit more science leaning but got kids to awe just the same way.

> it enabled it in the first place it took roughly two years including social engineering. I'd say the same approach is much easier in a big software company.

> where no auditor ever looks Well, software supply chains are a thing. "where no auditor ever is paid to look" would be more correct.

> login process RCE doesn't really follow a login process design. As soon as you got RCE you can be considered pwned. If not now, then at the time the next locally exploitable vuln…

There's a gazillion nice python SSGs but when it comes to advanced stuff like responsive imagrs, i18n or js optimization, you always have to add it yourself. It seems most of these…

I loved etherpad but it was a pain to host back then. I'd love to have something similar that's lightweight and not serverside node.js

This a classic "post hoc ergo procter hoc" fallacy. You just can't know, how much more Einsteins there would be. People that would never steal an Apple II or would never even get t…

Not sure. In Germany there's an ongoing debate for extending conprehensive schools [1] across all ages. It's a complex topic but the general gist of supporters is, that pupils prof…