Tech enthusiast. Love Linux and OSS. YouTube - https://teapawt.net/t.co/Sg1rMLuidG Telegram - https://teapawt.net/t.co/CUBxn9nN8p GitHub - https://teapawt.net/t.co/kINjWArVtd
Ukraine
Joined February 2025
- Tweets834
- Following26
- Followers117
- Likes3.3K
DiabloSat retweeted
A developer built a free Linux driver for USB display adapters and got a legal notice instead.
Mike Lothian was building Vino, a free Linux driver for DisplayLink hardware, using Rust and some AI assistance.
Then Synaptics, the company behind DisplayLink, sent him a cease-and-desist notice alleging patent infringement.
Lothian challenged the claims and shared the legal letters publicly. He’s a hobbyist developer without a lawyer.
The project’s GitHub repository is now no longer publicly available.
Full story: phoronix.com/news/Synaptics-…
DiabloSat retweeted
We've been early adopters of Rust since 2018 and a lot of our infra, voice tech, and even some of the current client is already Rust, the holy grail was getting the whole client there. That means Electron goes away, and so does React Native, mobile keeps native UI but shares app code with desktop via Rust. We hope to get it into testing with users soon™. (And it's not Tauri, it's GPUI, so good guess everyone.)
Alright, back to staring at the WoW Forever login screen.
DiabloSat retweeted
eMudhra login to download customer's certs can be cracked
Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end
They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP
@ni5arga
DiabloSat retweeted
Planned to drop a macOS 0day at OffensiveCon 2026 in Berlin 5 months ago. Submitted it to Apple 3 years ago, and Apple confirmed the vulnerability but closed the report. it's a universal method to bypass many security protections on macOS and you can fully bypass TCC and gain other privileged access as you want, easilly weaponized.
Although I mentioned the impact multiple times, there were no updates for the next 2 years until my presentation was accepted by OffensiveCon26 Berlin. Apple asked me to hold off on disclosure and not disclose the vulnerability at OffensiveCon26 Berlin, saying a patch would be released in macOS 27 in Fall 2026. They also mentioned "bounty" multiple times.
Honestly, I did have some complaints because their workflow was really bad. No updates at all until disclosure was about to happen. But as long as they decided to patch it, I was willing to wait, even without a bug bounty, for user safety. If Apple wasn't going to release a patch for 3 years, I'd disclose the vulnerability so EDR vendors could protect users too.
But in September, when the vulnerability was patched, there was no cve, no credit, and no bounty.
I really don't get why apple chose to handle it in such a dishonest and underhanded way, a cheat. Even if they had never mentioned a bounty, I still would have held off on disclosure because they were going to publish a security bulletin.
this is a huge disappointment in my experience with the Apple Security Bounty program. never thought I'd encounter something like this. As i said on my blog a few years ago, my experience with ASB had been positive. that's why I was willing to wait for the patch even without a bounty, but not to be cheated like this
DiabloSat retweeted
“Alright team, the code we wanna break is 112 digits, so we need a way to crack it.”
“I’ll brute force it.”
“Are you stupid? The amount of time it would take-”
“Done.”
“It was 4 btw.”
DiabloSat retweeted
on the vibecoded adobe suite
i think both the effort and the expectations are completely misplaced. illustrator is 39 years old, photoshop 36. people really did expect to catch up in two weeks.
attacking the full suite makes no sense. if you’ve been using photoshop, indesign, or illustrator for 20 years, you’d have opinions. you’d notice even the smallest inconveniences and have ideas for how to improve your workflows. with ai, you’re finally in a position to make bespoke software that serves you perfectly and brings you joy.
look at aseprite, which specializes in pixel art. losslesscut, which does one thing premiere makes unnecessarily complicated. photopea, which started as a browser-based psd viewer and grew into a serious editor over 14 years. figma, which rethought design around collaboration.
each of these projects has a point of view. each understands something about how people actually work.
instead, we get seven adobe-shaped applications, recreating the surface without understanding what led to the underlying decisions. not an alternative vision for creative software, just a checklist of features to imitate.
it’s slopware, and it trivializes decades of genuine attempts to free people from adobe.
the tragedy is that we finally have the tools to make the software we actually want, and instead we’re making the software we already have.
and if you needed any more evidence that this was never about making better software, having finished 40 years of adobe development in two weeks, he’s now moving on to microsoft office.
DiabloSat retweeted
Woah @ZelenskyyUa has done more for the bot problem on X than @elonmusk has. Hope he's on payroll.
DiabloSat retweeted
i now have an on-device vibecoding setup to build openXR vr apps on my steam frame!
godot even has live editing, so i can make changes to the scene (and i think even code) while the game's running. killer!
DiabloSat retweeted
what's more worth sponsoring?
- an overhyped linux distro that doesn't run anything mission critical
- a javascript runtime that runs half of the internet including likely their infra
This quoted post is unavailable.
DiabloSat retweeted
Hey Claude - copy this one of a kind open source project. I'll go post how I made it in an hour on twitter to get likes! Copy it in a different language so it's a bit less blatant. Make no mistakes
DiabloSat retweeted
Microsoft Office 365 Authenticated with my original license, working on Linux using Soda 11.0-11 (wine) via Bottles 67.4 (cpak).
- It starts
- Allows you to login, 2-factor auth also works
- Detects the license
- OneDrive works too, you can work with your remote documents, store them, cooperate with other persons.. everything
- Uses less than 500Mb of RAM
Next step: Excel.
As I said, Soda 11.0-11 will do great things, be ready 🫶
Oh if you want to support my work: usebottles.com/funding lov u all <3
#Windows #Linux #Wine #Bottles #OpenSource #Microsoft
DiabloSat retweeted
税務署「この100万円相当のUSDC、誰に送ったんですか？」
オレ「0x7A3F91B2C8D4E6F0123456789ABCDEF0 から 0xB82D47A1E903CF56123456789ABCDEF0 へ移動しています」
税務署「誰に送ったの？」
オレ「わたしです」
税務署「なんで自分に送ったの？」
オレ「ウォレットを変更するためです」
税務署「それは分かってる。なんで変えたの？」
オレ「管理場所を変更したかったためです」
税務署「なんで変更したかったの？」
オレ「念のためです」
税務署「念のためとは？」
オレ「秘密鍵の管理を分散して、セキュリティリスクを下げるためです」
税務署「そういうのを聞きたいわけじゃない」
オレ「では何を聞きたいのでしょうか」
税務署「なんで自分に送ったの？」
オレ「自分のお金を自分の別のウォレットに移したかったからです」
税務署「なんでさっきと回答が違うの？」
オレ「同じことを違う粒度で説明しています」
税務署「粒度？」
オレ「もういいです。疲れました」
税務署「なんで疲れたの？」
オレ「話が長いからです」
税務署「では簡単に聞きます。取引履歴はどこにあるの？」
オレ「ブロックチェーン上にあります」
税務署「ブロックチェーンはどこにあるの？」
オレ「世界中です」
税務署「世界中のどこ？」
オレ「ノードです」
税務署「ノードはどこにあるの？」
オレ「あちこちです」
税務署「あちこちってなに？」
オレ「例えばビットコインなら世界中に多数のノードがあって、同じ台帳を保持しています」
税務署「じゃああなたの100万円も世界中に分散してるの？」
オレ「違います」
税務署「今、分散してるって言ったよね？」
オレ「分散しているのは台帳です」
税務署「台帳に100万円あるんでしょ？」
オレ「100万円が置いてあるわけではありません」
税務署「じゃあどこに100万円があるの？」
オレ「どこにもありません」
税務署「？？？」
オレ「正確には、ブロックチェーン上の状態として、私のアドレスがその数量のUSDCを保有しているという記録があります」
税務署「何を言ってるの？」
オレ「ブロックチェーン技術の説明です」
税務署「じゃあその100万円は誰が持ってるの？」
オレ「わたしです」
税務署「どこに持ってるの？」
オレ「ウォレットです」
税務署「ウォレットはどこにあるの？」
オレ「秘密鍵なら手元にあります」
税務署「じゃあその中に100万円が入ってるの？」
オレ「入ってません」
税務署「さっきウォレットにあるって言ったよね？」
オレ「一般向けに説明するとそうなります」
税務署「私は一般向けなの？」
オレ「今のところは」
税務署「では、この送金先の住所を教えてください」
オレ「0xB82D47A1E903CF56123456789ABCDEF0 です」
税務署「住所を聞いてるんです」
オレ「はい。0xB82D47A1E903CF56123456789ABCDEF0 です」
税務署「だから、住所です」
オレ「ですから、それが住所です」
税務署「東京都とか埼玉県とか、そういう住所です」
オレ「それは私の住所です」
税務署「だから送金先の住所です」
オレ「だから0xB82D47A1E903CF56123456789ABCDEF0です」
税務署「そこには誰が住んでるの？」
オレ「誰も住んでません」
税務署「誰も住んでない住所に100万円送ったの？」
オレ「はい」
税務署「なんで？」
オレ「さっきも言いましたよね？」
DiabloSat retweeted
this afternoon i have a client call who can only meet on microsoft teams.
so i create a microsoft teams account. set up a password, billing, 2FA, etc etc. an overly laborious process.
then i download their teams desktop app. log in, set up a passkey, re-enter my information to get that set up.
finally get to schedule a meeting, but i can't. so i click to see why. it's logged me out.
okay, microsoft. so i log back in.
but my account has been locked.
so i ask its chat bot why. no help, obviously, but it says open up a trouble ticket. okay.
so i fill out the trouble ticket form with my information and a description of what happened. again, laborious.
then i get an auto-response saying that i can't communicate with the support team because the email address i entered on the support ticket is the same as the email on the account that was locked.
microsoft, this is why everyone hates you.
