Mastodawn

@foudreclair très bon article

Ok, I've finally identified what is wrong with my dns-persist-01 challenge integration. #LetsEncrypt prod server just does not support it yet... ;-(

Waiting for "Q2 2026" then...

https://letsencrypt.org/2026/02/18/dns-persist-01#:~:text=production%20rollout%20targeted%20for%20some%20time%20in%20Q2%202026

#acme #devops #security

DNS-PERSIST-01: A New Model for DNS-based Challenge Validation

When you request a certificate from Let’s Encrypt, our servers validate that you control the hostnames in that certificate using ACME challenges. For subscribers who need wildcard certificates or who prefer not to expose infrastructure to the public Internet, the DNS-01 challenge type has long been the only choice. DNS-01 works well. It is widely supported and battle-tested, but it comes with operational costs: DNS propagation delays, recurring DNS updates at renewal time, and automation that often requires distributing DNS credentials throughout your infrastructure.

Show thread

nicobo Jun 2

@sebsauvage Alors je vais me fier à mon flair ;-)

Show thread

nicobo Jun 2

@sebsauvage aurais-tu un avis sur la non-obsolescence des toners Brother ?

À priori on peut les conserver en stock pendant de nombreuses années.
On aurait même accès au bouchon sur certains modèles pour les remplir soi-même.
Ton modèle a semble-t-il atteint sa fin de support fin 2018 mais on trouve encore la cartouche TN-2420 sur le site officiel pour 115€, le tarif a donc augmenté mais ça reste pas cher à la page.

Tout cela me semble très bon signe en termes de durabilité...

Me trompé-je ?

nicobo May 27

Keep #Android open : https://keepandroidopen.org.
Sign petition : https://www.change.org/p/stop-google-from-limiting-apk-file-usage/

Or this is going to be a real pain in the *as...

@keepandroidopen #KeepAndroidOpen

Keep Android Open

Your phone is about to stop being yours. In September 2026, Google will block every Android app whose developer hasn't registered with them.

Show thread

nicobo May 14

Also this feedback on #Mythos #security audit from inside #curl 's team : https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/

Mythos finds a curl vulnerability

yes, as in singular one. Back in April 2026 Anthropic caused a lot of media noise when they concluded that their new AI model Mythos is dangerously good at finding security flaws in source code. Apparently Mythos was so good at this that Anthropic would not release this model to the public yet but instead … Continue reading Mythos finds a curl vulnerability →

daniel.haxx.se

nicobo May 14

#Security #AI
High-Quality Chaos | daniel.haxx.se
https://daniel.haxx.se/blog/2026/04/22/high-quality-chaos/

High-Quality Chaos

As I have been preparing slides for my coming talk at foss-north on April 28, 2026 I figured I could take the opportunity and share a glimpse of the current reality here on my blog. The high quality chaos era, as I call it. No more AI slop I complained and I complained about the … Continue reading High-Quality Chaos →

daniel.haxx.se

nicobo May 14

All #AI tools are installed with curl|bash.
Developers are probably aware of the security issues with this.
But as AI democratizes, editors don't behave responsibly by training newcomers to blindly copy-paste things around the whole day...

- https://code.claude.com/docs/en/quickstart#step-1-install-claude-code
- https://openclaw.ai/
- https://ollama.com/download

#Security #DevOps #Claude #OpenClaw #Ollama

Quickstart - Claude Code Docs

Welcome to Claude Code!

Claude Code Docs

nicobo May 14

**DON'T waste your time on this AI tutorial !** https://www.freecodecamp.org/news/how-to-run-open-source-llms-locally-and-in-the-cloud

The guy just tries random responses from the LLMs without understanding what he's doing... and he even does not complete the goal of the chapters !

Strangely, Beau Carnes - which published the article - produces excellent tutorials on the matter himself...

#FreeCodeCamp has the best and the worst...

#AI #GenAI #DevOps

How to Run Open Source LLMs Locally and in the Cloud

Learn how to work with a wide range of open large language models (LLMs) such as Gemma, Kimmy, and GLM across various local and cloud-based environments. We just posted a course on the freeCodeCamp.or

freeCodeCamp.org

nicobo May 7

Show thread