54 Followers
163 Following
69 Posts
Engineer / Attack-Aware & Defendable Software Design (#defendabledesign) / DevSec ๐ŸŒด
PronounsHe / Him
Webhttps://canario.codeberg.page

Quake 3 in browser โ€” Play Quake III Multiplayer in Your Browser

No install step. Click play, pick a server, and jump straight into a live Quake 3 match.

๐ŸŽฎ https://q3js.com

#gaming #quake3 #online #quake #q3d #shooter #q3js #onlinegaming #match #multiplayer #clickplay #play #game #3dgame

Play Quake III Arena in Your Browser | Q3JS

Play Quake III Arena instantly with no install. Q3JS brings the classic arena shooter to the web with WebAssembly and online servers.

Q3JS

When to automate a repetitive task:

NO-BRAINER: "This is obviously going to be faster to automate than to do it by hand _even once_. Let's automate it right now, and not do it by hand at all."

FORESIGHTED: "Doing it once by hand is faster than automating it, but I'm going to have to do it a lot of times, so it still saves time to automate it first."

NEED A RUN-UP: "I don't yet understand this task well enough to automate it, so I'll do it a few times by hand first to get the idea."

RAN OFF THE RUNWAY: "Great, now I've done this by hand a few times, I think I can automate it reliably! Oh, oops, turned out I only had one more case of it left to do."

TERRIFIED OF RUNNING OFF THE RUNWAY: "This is a one-off, so it would be a waste of time to automate it, I'll just do it manually."
[next day] "Oh, oops, I made a mistake and have to do it again. But it should be fine this time."
[a month later] "Even though I've had to redo it 25 times already, surely _this_ is the last time? So it would still be a waste of time to automate it."

So, in the #PHP ecosystem, people can build a package like roave/security-advisories, which has a huge list of "conflict" dependencies.

These don't say "install this as a dependency", but instead "I'm incompatible with that dependency in that version". And the versions listed there are those with known security vulnerabilities, effectively preventing you from installing them, which is good.

Is there something similar in the #Python ecosystem? Is it even possible?

https://github.com/Roave/SecurityAdvisories/blob/latest/composer.json

SecurityAdvisories/composer.json at latest ยท Roave/SecurityAdvisories

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily - Roave/SecurityAdvisories

GitHub

I need to always keep this in mind while interacting with people.

#kindness

Spread the word! @phrack CFP with demoscene cracktro is live. Turn up the volume and enjoy the awesome stylings of PiotrBania with some hopefully inspiring text from phrack staff :)

phrack.org

i built an entire x86 CPU emulator in CSS (no javascript)

you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

https://lyra.horse/x86css/

Phrack + Chiptune, what more do you need?! ๐Ÿ’พ
https://phrack.org/
PHRACK CALL FOR PAPERS

I enjoyed this article about personal project programming, but I particularly liked this definition:

"Production code has a phone number to call when it breaks"

https://hannahilea.com/blog/houseplant-programming/

An ode to houseplant programming ๐Ÿชด

Waxing poetic about hyperlocal phytoid software development

Here it is, our biggest issue to date, Issue #8!
Read, share, enjoy!
https://pagedout.institute/?page=issues.php
Get prints here - https://www.lulu.com/search?page=1&pageSize=4&sortBy=PRICE_ASC&q=PAGEDOUT8&adult_audience_rating=00

And with that CFP for #9 is open - deadline 30 April 2026

Paged Out!

Deeply technical zine. And it's free.

Paged Out!

my dear friend @jed recently relaunched his blog with some poignant thoughts on the state of so-called "DevSecOps".

he believes (and I agree) that the SecOps part of this needs to have an SRE moment, in other words that security operations is not enough -- we should consider security from an engineering perspective rather than an operational one.

https://www.syscall.wtf/blog/security-sre-moment

Why Security Needs Its SRE Moment | syscall.wtf

The security industry needs the same paradigm shift that turned operations into reliability engineering.