open source geek, metabrainz dev, listenbrainz lead

hell
Joined January 2023
Today’s PHP security risks got me thinking about how I could have been more vulnerable with you. Perhaps we can patch things up and be there 4 one another.
1
159
That civ scout you set to auto explore turn 5 and find again in the information era
why is this guy still roaming around middle america marveling at how “big” and “great” everything is, months after the world cup? got to be higher probability he’s being funded at this point to be doing this right?
19
632
3
12,868
244,506
if eternal sunshine of the spotless mind was made today
Claude, erase the memory of her smile. Make no mistakes
1
51
lucifer retweeted
guy who hasn’t stopped thinking about you for 16 hours straight: no worries if not
165
6,519
740
85,110
2,765,601
im in a crusade against non-chalantness
9
5
4
44
17,068
The Great Gatsby spoke of this
posting on instagram stories is so fucking weird until you have a crush and then it becomes your life's work
8
916
10
9,928
240,607
GET OFF THE COUCH. For the love of God, people, this is not cute.
162
459
450
28,694
5,560,815
"Normies are gonna lose their mind when they hear Anthropic solved Navier-Stokes" My brother in Christ. The normies haven't got the news that Poincaré was solved
66
90
21
2,822
320,803
if a girl asked me to be "actually funny" id also have performance anxiety :\
worked for 4m 54s
3
4
304
19,444
had chai latte at starbucks after trying it at a normal cafe and finally get why starbucks has such a bad rep for coffee/tea in europe.
1
64
ananya : india :: tereza : czechia
44
Last thing an ASML exec sees before he starts leaking ultraviolet lithography machines
Commerce Secretary Howard Lutnick told ASML tonight that the US government believes that one of its ultraviolet lithography (EUV) machines may have somehow made its way into China. Senior administration officials said they have evidence that ASML is not acting in good faith.
45
280
19
9,491
683,047
how your electron looks at you when you ask it where it was and how fast it was moving at the same time
6
36
1
660
28,002
TIL that the train conductors in the eternal sunshine of the spotless mind made over 200k usd annually
37
top tier joyful experience getting to setup linux - windows network printing!
39
It is almost like Maven’s choice to prefer specific versions, enforce keys, etc. was a good idea but admitting Java was right ever might kill people.
New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads. Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned. It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I think ultimately the defaults of package management projects (pip, npm etc) have to change so that a single infection (usually luckily fairly temporary in nature due to security scanning) does not spread through users at random and at scale via unpinned dependencies. More comprehensive article: stepsecurity.io/blog/axios-c…
1
1
31
3,415
lucifer retweeted
50
19,937
1,745
83,814
1,547,872