Lojicholia enshrines triumph

@lojikil
521 Followers
418 Following
416 Posts
Brains in the "trying to be a good dad despite having a bad dad" gang. ☦️|Father|Philosopher|Offensive Security|PLT
I work in offensive security, but my research interests are actually around Multics, ML dialects (including the two I’ve written, carML and coastML), and formal verification (esp Hoare Logic). Also anything gardening or hiking related
#magyar #balkanci #securityresearch #formalverification
GitHubhttps://github.com/lojikil
Homepagehttps://lojikil.github.io
Twitterhttps://twitter.com/lojikil

PL/I was a bit of an adventure to play with:

- there are no easily used modern compilers for Linux
- so I thought I’d try PR1MOS
- I couldn’t find a prirun host with a combination of a useful editor and PL/I
- I thought of DOS next, but the PL/I compiler there was a bust
- then I realized there is a “thriving” (for some values thereof) community of CP/M enthusiasts who keep PL/I alive there

So I ended up spending a bunch of time in CP/M, writing an LBR extractor, &c

I’ve been learning Pl/I, Ada, and Spark recently. The basics of PL/I are pretty simple, but you can tell it became hyper specialized for whatever IBM needed later.

Ada, however, feels like Java, Algol, C, and a JML got into a fight and designed a language: huge hierarchies of incompatible types, enforced by the compiler, each with their own ecosystem, and minimal desire for interaction.

For example, Ada.Streams’ API doesn’t seem to nicely decompose to Strings.

RE: https://mastodon.social/@Electrospaces/116177619999380943

It’s fascinating too that the proposed solution is “AI.” If they mean ML, sure, you can probably do some decent training there; but they likely mean LLMs which is… problematic, for various reasons

Again, it feels like the “post things on open forums and anyone can use it so long as they adhere to the license” has failed as a social contract, however strong it ever was. But the proposition for writing and maintaining FLOSS seems very painful for very little gain, especially now with the added corporate LLM issues. I might feel different with OSS models (training energy aside), but I feel little desire to post anything publicly of late, even blogs.

This paper just came up on lobste.rs:

https://arxiv.org/pdf/2507.12713

But the issue seems moot if all you’ll get is scrapers hitting whatever forge or storage system. My thought is I’d much rather have source that is licensed such that community members can use it for various purposes, as defined by authors (or even community), and cannot be posted externally. Like TLP:GREEN for source code.

RE: https://mastodon.social/@jeffjarvis/116041242464510649

Watching from the outside, it’s wild to me to see how quickly the Post has started to shift and decline of late; stranding journos in eg Ukraine during layoffs is a wild position to take

Has anyone switched to community source licensing in light of LLMs? I feel like the calculus has changed now that companies are asserting that hosting gives them exclusive rights to reuse regardless of license, and open source is no longer really what I want (I know open source folks have said for years that companies will just use it to devalue software, but still).

Folks like @stevelord may have thoughts already on this.

I keep seeing “IT: welcome to Derry,” and think “the I.T. Crowd NI reboot” and then am disappointed

In case you missed it, my piece yesterday on the 176 CISA employees fired last Friday, which will not go behind the customary archive paywall.

It's critical to note that sources told me more RIFs are in store for the nation's embattled cybersecurity agency.
https://www.metacurity.com/the-white-house-fired-176-cisa-employees-on-friday-with-more-layoffs-feared/

The White House fired 176 CISA employees on Friday, with more layoffs feared

Scattered Lapsus$ Hunters leaked 5m Qantas, 23m Vietnam Air customers' records, Spanish cops dismantle GXC Team, Dutch gov't warns of China's Nexperia security risks, Breach of crypto betting platform Shuffle exposes user data, FCC chair says sites have removed barred Chinese electronics, much more

Metacurity
I haven’t needed to run a pure web vuln scanner in years; I’ve don’t targeted stuff or had burp/zap. But looking around at the space, it’s wild to me how much it’s died off. Even the tools that do have updates seem not to have much other updates to how they work.