tracy 💻 🦝

I use C/C++ for all my projects. Debt Badge, Clucks Capacitor, homemade power-wall, sculpting software for my haptic interface. I suppose with AI assisting, the clunkiness of developing in C disappears and the efficiency shines. How soon until the language doesn’t matter?

Let's do a cigar night.

アヴェンタドールSVJRS✖️キャンプ🏕️ 寒いけど最高の時間… #moss camp field #アヴェンタドール #SVJ RS #キャンプ

Omarchy 4.5 will ship with full compatibility for M1, M2, M3, and Neo! Incredible achievement from the Omarchy M team. The installer makes this so smooth, the dual boot makes it a no brainer. Apple hardware liberated. M4-6 on the way. WE CAN FIX EVERYTHING!

So I recently badgered my cinematographer @steveyedlin into making my ideal iPhone still camera app. It shoots RAW, bypasses the iPhone's look processing and instead uses the same image processing we use on our movies. apps.apple.com/app/apple-sto…

New GitHub infrastructure should be able to handle 24 hours of the busiest git repo traffic in 1 minute

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

SIMD to make sol money. A validator stake weighted oracle can mint sol backed by any tokenized collateral to facilitate a transaction and collect a tax on any profit from these transactions.

Unfortunately, with access to an abliterated DeepSeek V4.1 model, there is little value to KYC holding back the frontier models now for cyber. In fact, making it hard to secure systems w extra friction in American Enterprise is hurtful to national security.

if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?

who wants to hold hands in 13 hours? solana.com/upgrades/alpenglo…