AI, by the way is free:
| 🕸 | https://dgl.cx |
| 🛸 | https://dg.cx |
David Leadbeater
- 339 Followers
- 309 Following
- 147 Posts
Monitoring 📊, SRE, Open Source, Security 🔐. Emoji fan 🦸♂️. Just your average cynical Brit 🇬🇧 in 🇦🇺. He/him.
Was just looking at the possible specs of the Lenovo X1 Carbon Gen 14. Rather expensive option here! Also does anyone know what the $20 "Haptic Touchpad" means in terms of actual hardware?
alipNews from #sydbox git: Starting next release, we're going to be signing binary releases with #OpenBSD signify rather than #GnuPG. To enable practical signing in #Exherbo #Gitlab CI, I wrote an #ISC licensed, pure portable #POSIX shell implementation of #OpenBSD signify. signify.sh has no external dependencies and runs with PATH=. It has unit tests embedded which may be run with --test option: https://gitlab.exherbo.org/sydbox/sydbox/-/raw/next/dev/signify.sh #exherbo #linux #security
Bryan Steele 
David Leadbeater (welcome dgl@! 
) has shared some information regarding the recent __pledge_open(2) changes in #OpenBSD 7.9-beta, including some good advice for porters. 
mhoyeThe core insight of DevOps, at the very beginning, was that when people need to carry the pager for the code they write, they write code that won’t wake them up at Oh My God, What The Fuck O’Clock after it falls over in production again. Everything since - DORA, all of it - has been in service of this one idea that aligning software discipline with quality of life consequences makes better software.
It’s an idea that should be everywhere and in everything.
daniel:// stenberg://Looking back at all (now) published vulnerabilities in #curl that were present in code from 2020 until now, at no point in those years was the share of "C mistakes" higher than 15% of all vulns.
Through all years, the C mistake share of all vulnerabilities in #curl was never above 45% at any single point in history.
Interesting talk from 39c3: https://gpg.fail including my favourite classes of issues ANSI escape spoofing and abusing CR. A partial response from GnuPG is here https://www.gnupg.org/blog/20251226-cleartext-signatures.html — although there’s other issues that do seem more fixable. IMO better to use age if it makes sense and/or ssh signing (e.g. for git commits)
Rob RicciHere's a copy of the filesystem that has been extracted as a .tar file: http://squoze.net/UNIX/v4/
Here's the document release you were waiting for today!
The UNIX V4 tape!
https://archive.org/details/utah_unix_v4_raw
Credits:
* Jay Lepreau for holding on to this tape
* Aleksander Maricq for finding it
* Jon Duerig for driving it to the Computer History Museum
* Thalia Archibald for doing a huge amount of research into the tape, its history, and file formats, and the upload
* Al Kossow for the tape-reading equipment and doing the actual read
* Len Shustek for the lab where the read was done and the software used to decode it
UNIX V4 tape from University of Utah (raw) : Computer History Museum : Free Download, Borrow, and Streaming : Internet Archive
UNIX V4 tape from the University of Utah, received by Martin Newell in June 1974 around when he modeled the Utah Teapot.This is the raw analog waveform and the...
Sophie Schmieg