Ben Cohen @ben@ischool.social

“Do not wait: the time will never be 'just right'. Start where you stand, and work whatever tools you may have at your command and better tools will be found as you go along.”
― Napoleon Hill

I'm looking for a fairly rugged, dependable laptop running under #linux with decent hardware support.

My instinct is to go with a ThinkPad. Anyone think I'm wrong about that?

If not, which ThinkPad?

if anyone here needs Ethernet cable hit me up. I'll cut a cable up to 10 feet for you and ship it anywhere in the US

boosts welcome

In my quest to build an #ActivityPub based simple, no-frills bulletin board / forum system, I've gone ahead and pushed up my work-in-progress #golang ActivityPub single server framework: apcore. It has no README (yet) and still has a lot left TODO.

https://github.com/go-fed/apcore

I hope to use it in the future to launch multiple small ActivityPub applications leveraging common serving, storing, and moderation features. But new #ActivityStreams vocabulary can be readily innovated upon.

@mdszy I'm already testing Fedilab, I have never used the 4 apps in the poll.

Alpine Linux has completed their migration to SourceHut for their mailing lists 🎉

They're running their own instance here:

https://lists.alpinelinux.org/lists/~alpine

I'm actively recruiting volunteer devs for a native Signal / Signal-like client in Gtk, in the hopes that we can bring it to the @Purism Librem 5 phone. Please contact sean.obrien@puri.sm if interested.

PGP/GPG: FA9D 40F1 5FE1 D8AB 8312 4AAA 77E3 1447 CD1F C3F6

Applications secretly running web servers on localhost is such a security antipattern. Basically turns your desktop into just another ioshit zombie.

'Backdoor found in Ruby library for checking for strong passwords'

https://www.zdnet.com/article/backdoor-found-in-ruby-library-for-checking-for-strong-passwords/

it's alive now. shows up at localhost:3000

try to login but get an error:

"No connection to backend server"

oh i knew this would be fun, why do i use Google Photos? ah this is why.

There's something beautiful about code analysers analysing themselves

Found a new RSS feed to follow:
Cryptography Dispatches - https://buttondown.email/cryptography-dispatches

First article is interesting. OpenPGP is Broken

⚠️Our New Website is Live! 🚀

https://pixelfed.org/

#pixelfed

ar.al is now running on a new server

https://ar.al/2019/07/06/ar.al-is-now-running-on-a-new-server/

I've done a little update to my homepage: https://emsenn.net/

Still have a lot of trinkets from my old hugo stuff to bring in but, it's a bit more informative and complete than it was.

Absence of certain features in IRC considered a feature

https://drewdevault.com/2019/07/01/Absence-of-features-in-IRC.html

Tech enthusiast: "I want smart lights, smart tv, everything, and connect them all to my digital assisstant!"

Tech worker: *looks wistfully into distance* "I should get a small place in a little town, with a garden, make my own furniture."

@ignaloidas this will disable TCP SACK, an optional feature without which lossy connections may suffer reduced throughput

Without disabling this, your server can be remotely kernel paniced

🚨 ⚠️ ⚠️ ⚠️
Urgent Linux advisory
⚠️ ⚠️ ⚠️ 🚨

https://www.openwall.com/lists/oss-security/2019/06/17/5

Urgently run the following:

echo 0 | sudo tee /proc/sys/net/ipv4/tcp_sack

On all Linux hosts to work around the issue and then start patching your kernels

So Gab has decided that their own code that they spent $5M of investor money developing is so unsalvageably bad that they're going to use Mastodon's code instead, with the added bonus of leeching off of our apps (with Gab apps being banned from app stores)

This is an early warning to fellow admins to be vigilant and domain-block them on sight, when/if they appear (unconfirmed whether they intend to federate), and to app devs to consider if blocking Gab's domains from their app is necessary.