🏳️🌈 Technology enthusiast with a focus on Free Software and embedded systems. Science fiction promised us general purpose electronics, let's build them! (And get their security properties right.)
Public Key
npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf Profile Code
nprofile1qqsyhth6f04zwlryhhx7pcnmlpz9c909ff5jfay49weja998vrvnavcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsm7xefa
Show more details
Published at
2026-05-28T12:38:16Z Event JSON
{
"id": "1a75def6bfad2831b4f40cdab49cb510dc879f5c030dd28a4cd81867726faada" ,
"pubkey": "4baefa4bea277c64bdcde0e27bf8445c15e54a6924f4952bb32e94a760d93eb3" ,
"created_at": 1779971896 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://chaos.social/users/chrysn",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"chrysn\",\"about\":\"🏳️🌈 Technology enthusiast with a focus on Free Software and embedded systems. Science fiction promised us general purpose electronics, let's build them! (And get their security properties right.)\",\"picture\":\"https://assets.chaos.social/accounts/avatars/000/144/098/original/a25570b32d79a4ed.png\",\"banner\":\"https://assets.chaos.social/accounts/headers/000/144/098/original/1f5c2f3bb5c5dbf3.jpg\",\"nip05\":\"[email protected] \",\"fields\":[[\"Website\",\"https://christian.amsuess.com\"],[\"pronouns\",\"he/him\"],[\"Other metadata for machine consumption\",\"searchable (eg. through tootfinder), https://justmytoots.com/@[email protected] \"],[\"Also contributes posts to\",\"@[email protected] , @[email protected] , @endor_creative, @flachwitz\"]]}" ,
"sig": "ed13d17ab0cff146f772ce704f9da37830d9502dd7b4abda3d14aa277b8c03895396cb13c1fd06d06788d415b0a27b57e6527860fc60a01d3fe2bde5f148041f"
}
Last Notes npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn Funny how people, in light of the LiteLLM compromise, jump to the conclusion that the solution is to make your supply chain even more intransparent by vendoring in dependencies through an LLM's processing, rather than just using pinned and vetted dependencies by default over tools' defaults "yolo there has been an update and it claims to be semver compatible" attitude. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…jydu Are you sure on 3? Inkscape does a good job pruning data from outside the MediaBox these days. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mcwl I don't think you can get rid of that big core switch, but would be delighted to be shown wrong. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mcwl I think in general you can't, you'll need methods like npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mudw @nprofile…pafg @nprofile…4esm Genaugenommen bedingt clone das nicht -- ARandR könnte auch die Beamerauflösung nativ einstellen, und scaling für's 2. Display verwenden -- gerade bei Photovorträgen kann das cool sein. Hab ich in ARandR aber leider noch nicht implementiert, und ist für die konkrete Zielgruppe vielleicht auch nicht so essenziell. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mudw @nprofile…pafg @nprofile…4esm Vorsicht nur: gespeicherte ARandR-Skripte funktionieren nur dann, wenn der angeschlossene Monitor auch die eingestellte Auflösung kann. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…jydu Just wait until you use Python 3.14: It has the tools for this too, so you don't want to debug the native code, you can work a level above it as well, or get yourself a REPL into any Python process. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn If you still have your project on GitHub and think that it is a public project, try this: Log off (eg. using a private tab), go to your project, and try reading 3-4 issues. Chances are you're Too Many Requests'd for a few minutes before you even got a decent overview of the project's state. Is this then still a public project? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mfuv I don't know of any way to count the threads, let alone to turn thread spawning off (esp. as that may not just happen through std::thread, but also through any C library). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…mfuv Clippy claims that () as the E is bad practice (<https://rust-lang.github.io/rust-clippy/master/index.html#result_unit_err>). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…f7sz `ls --sort time | head -n100 | xargs -n1 sh -c 'cat $0/.git/HEAD' | sort | uniq -c` gives me 45 main and 23 master for projects I touch regularly, and that ratio only gets stronger the less I extend this to ages old projects. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…f7sz https://xkcd.com/1172/ ;-) npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…f7sz So what, it's just a branch rename, as has happened in many projects. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…00z7 @nprofile…uy6d Zivilgesellschaftliche Organisationen kenn ich keine (nur technische), aber die Kollegys in Tschechien iaben da was vorgelegt: https://konecipv4.cz/en/ npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn I share the general concern from DJB in https://blog.cr.yp.to/20251004-weakened.html -- with much of the collective #IETF payroll being subject to the whims of US agencies, there is a risk of policy based strongarming-in of weak #cryptography. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…kxtw @nprofile…j8hy Would they be comfy as seat sized bean bags? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…nhea While you are joking: @nprofile…lrh8, what'd it take for an MPTCP host to advertise a v6 option and then unadvertise all prior v4 options? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n @nprofile…88lj Ah! I'm more of a wood person in that department. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n A whistle? (Not by design, but from the aspiration of using anything as a musical instrument). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…u7qg I don't know anything about UniFi; the Thread routers should (on the long run) follow the SNAC spec as far as I understand. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…u7qg But maybe I misread https://www.ietf.org/archive/id/draft-ietf-snac-simple-07.html -- or they don't deploy it that way yet. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…u7qg That's odd, because I vaguely remember that at least on a spec l evel, they talk about advertising an IPv6 ULA on the WiFi, which should even work in regions where due to monopolies, ISPs get away with not offering v6. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…528n Do those connections go up high enough to have an official French fediverse instance that could host, say, @academie@fr, and beat the pope to it? (cf. https://chaos.social/@chrysn/114477389021336262) npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn We're launching the embedded-cal project: Providing access to hardware accelerated and formally proven cryptographic algorithms on #embedded systems in #RustLang. For this, I'm teaming up with @nprofile…u6wh Paris and @nprofile…pkv8, supported by the #EU funded @nprofile…zzgr. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n @nprofile…8j6a For the symlink trouble I like exposing the repo over WebDAV (eg. loopback nginx) -- helps my TV, and helped back when "copy some photos onto USB" was an everyday operation that'd fail due to Nautilus/Thunar blindly defaulting to `cp -a`. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a @nprofile…ss2n Having a remote sounds better because it is tracked; also, that'd enable getting data from there by other clients. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…uy6d http://test-ipv6.com/ sollte das zeigen. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…uy6d Schaffen die Path MTU? Deren Disconter bob vergeigt da voll. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ndcz Hate to break it to you, but last time I saw that was on our 2012'ish server, and while far be it for me to call the constructors "grown up", they've all been approaching 30 back then. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a Well, if it just says it's locking, then I think C already has a copy, it's just not locked, and locking is supposed to be fast so no need to elaborate by default. (There could probably be a different trust model where there is no LOCKCONTENT required; maybe if the remotes were trusted, that'd already suffice). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a What is your numcopies? Maybe it needs more copies than the new one to satisfy that. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…7093 Are the recipients really in a better position to judge what the network state is? The negotiation for block sizes is already ... I wouldn't say brittle, but def'ly not well tested. Adding an extra option and protocol would best be done if there is a clear and benchmarked problem (which there may well be and I don't see it yet) npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…7093 Block size negotiation is mainly there to account for different supported MTUs in heterogenous 802.15.4 networks -- doesn't AX.25 provide that information already? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a @nprofile…ss2n You won't get around running some script per file, but you don't have to have all at the same time, but also don't have to have a commit per tagging: npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n @nprofile…8j6a I've seen there's a new feature to have `compute` as a remote, this might be viable too -- declare that each of those files is a compute result of the other. (pristine-tar says hi). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n @nprofile…8j6a `drop --unused` and then force drop them from the remotes where they used to be and then forget them. Or is there some automation for that process by now? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ss2n In @nprofile…8j6a 's case, the files are already in git-annex with bad metadata. A smudge/clean filter that acts on the annexed data would probably be viable, but then still needs to place the actual data (or whiteouts for to-be-deleted tags) in some sidecar file or the git-annex metadata. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a Yes and no... they usually read tags from files, but as that's not a well usable data structure, they all build their media library in separate files anyway. Some gladly read external metadata, but sadly they don't even agree on formats there (some using m-tags, some extended m3u). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a Ok then I phrased it badly. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a The perspective I take there is that when binary files are checked in, they're some kind of third party artifact that's immutable (b/c had I made it, it'd be versioned notes with playing instructions precise enough for reproducible builds, amirite?); own statements on how to best use them then go to versioned sidecar files. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn Don't trust security check websites. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn Die @nprofile…xpk0 sind übrigens auch hier. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn Spring at the stable: npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…qfh3 This is not specific to Python: it's the same in Rust and general mathematics. all(empty) is true and any(empty) is false. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn Nice new milestone for #embedded #Rust development: defmt 1.0 has been released. The crate enables logging for microcontrollers without text or number formatting on the device – instead, the device sends numbers of interned strings to the host, which composes log messages. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…ndcz Weird recommendation, but OK. Convinced me to watch it. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…cwcm Viel Spaß! Ich bin diesmal nicht dabei, aber die Freunde und Kollegen von @nprofile…drvc und @nprofile…86am halten die Stellung für embedded-Systeme. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…zfuh Ooh, turtle, my favorite RDF serialization 😻 npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…zfuh IIUC, the rationale is faithful rendition (the HTML form was not the "official" form). npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…8j6a Kind of yes, but what would that mean for my vim modelines? npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @nprofile…wwe7 Just spitballing: npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn A good 8-minute summary of the #SIGINT situation in #Vienna, based on @nprofile…x7ar's investigation, has been published by @nprofile…l8jc (a journal affiliated with the Austrian NEOS party): https://www.youtube.com/watch?v=CddUToKXZJ8 npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @npub16mt…pnwy Not arbitrary code, but OpenSCAD does load files from different formats with more focus on compatibility than security, and >20 open issues around segfaults. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @npub16mt…pnwy and the security implications of this are why we can't have nice things :-( npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @npub1hg2…k372 I think it's a good question. If nothing else, it shows other potential contributors how that project is being developed. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @npub1nlt…t44t @npub1ynl…873s @npub1adl…7nuk There was a good session during #IETF 113 on this, that showed one agreement across the technical community: npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn The new match rules of #OpenSSH 9.4 look like they'll finally let me use jump hosts only on demand: A `!localnetwork=2000::/3` condition on the ProxyJump directive for an #IPv6-only host should make direct connections used as long as I'm on a real network, and send data through a gateway on demand. npub1fwh05jl2ya7xf0wdur38h7zyts272jnfyn6f22an9622wcxe86esqqnhyf chrysn @npub1evu…uf5t @npub1llz…08cq I think my #IETF work could be eligible, but the scope is unclear to me -- on the one hand the type-of-contributions description reads like the "boring" everyday stuff (WG chairing, reviewing documents) is part of the plan, but the application form looks very project centric, as do the times (the "long term" parts are 6mo; that'd have worked for most of RFC9290, but that was the fastest doc I ever contributed to).
