Профиль

I'm toast. poomang.com/en/t/brain_t...

"The user won't see that, don't worry too much about it," said the senior developer, five years ago. Unfortunately, now it's your time to face the truth: the user absolutely saw that and it's your turn to see it in your JIRA.

Yes, this entire exploit isn't new. Yes, it happened before too (2018 had a similar case of this happening). No, I don't think the AUR has improved since then, hence why we still have this issue 8 years later. youtu.be/r6cppD3UnQE

Thousands of Malicious Packages Ended Up in the Arch Linux User RepositoryYouTube video by Morgan von Asteriayoutu.be

Did you know that before AI, programmers actively hallucinate talking to rubber ducks? Fortunately, you can still do that today!

We aren't done yet with the AUR attacks. Another pattern has been reported, and this one is /just/ a little bit more elaborate. It's still a similar supply-chain attack. This one uses bun to fetch nextfile-js, one of the infostealers used in previous attacks. lists.archlinux.org/archives/lis...

One of the aches that people always bring up regarding Linux is the community. And that's fair, Linux communities are always a toss-up: you either meet people that'll deliberately troubleshoot with/for you, or people that'd dismiss your struggles with "well, don't use Linux like WinDOOZE."

About 400+ packages in the Arch User Repository were compromised with malware. This thread is a wake up call NOT to fully trust community-submitted packages /or/ the blanket statement that Linux is 'more secure'. A big enough platform will entice bad actors. lists.archlinux.org/archives/lis...

There are two sides in me: one that loves UI with personality (yes, this goes out to you Aero, Luna, and Aqua fans) and one that understands the accessibility constraints that arose from those designs. It's not that we can't do both, but somehow we've collectively agreed that this is an either-or.

I don't think enough people know the difference here: clean room reverse engineering is /hard/. It's the worst game of telephone I've ever had to do in my field: you're told to make "something that moves, it's got wheels, some have three but most have four" and you have no concept of what a car is.

Yushaa is the mama of my Live2D model, please give their work a gander and maybe beam a couple of comm requests their way! And also beat them up on Strive or something. Get 'em while they're rusty.

I wonder if posting snippets of my videos and/or Shorts here would require me to crush my videos into 2004-era bitrate. Maybe I should try that sometimes, still.

You know what, I've never done one of these before. Today's a free day, so might as well!

It's that time of the year again. It's time to mix drinks and change lives.

I 100% lied for internet clout. That score is fake, and it does not represent who I am as a person. My lawyers have told me to stop writing the next paragraph of this post, but I w-

Starved I/O threads? GIL issue

YouTube algorithm doing its job and delivering me exactly the kind of weird intersection that I like: synthesisers, Vocaloid, and a wee bit of janky engineerinh. youtu.be/x9BZeBIzcJ0

アスノヨゾラ哨戒班 / Orangestar (Cover)YouTube video by 名称未設定youtu.be

From the internal investigation document of the Xerox GYPSY text editor (or document preparation, or editing system, however you'd like to call it), we see a very relatable situation that can still be experienced 50 years later.