masto.kukei.eu real time mastodon search engine

Bloom Security uncovered a flaw in npm Trusted Publishing that exposed 1,500+ packages to potential malicious takeovers via GitHub.
https://hackernoon.com/bloom-security-found-a-supply-chain-vulnerability-exposing-1500-npm-packages-to-malicious-takeover #softwaresupplychainsecurity

New Release: #Pulumi provider for Grafana v2.43.0

https://github.com/pulumiverse/pulumi-grafana/releases/tag/v2.43.0

New Release: #Pulumi provider for Scaleway v1.58.0

https://github.com/pulumiverse/pulumi-scaleway/releases/tag/v1.58.0

STM32duinoLoRaWAN (0.5.1) for stm32 by STMicroelectronics, Matthijs Kooijman

➡️ https://github.com/stm32duino/STM32LoRaWAN

Support library for STM32WL microcontrollers featuring a sub-GHz radio based-on Semtech SX126x

#ArduinoLibs #ArduinoLibraries #stm32Libraries

Waiting for mobile development support before giving JetBrains Air another try. The power of my favorite IDE, WebStorm, combined with integrated AI agents could be a really interesting setup.

https://www.jetbrains.com/air/

Jacob Hallén talking about Trust and the success of Python

#PyConSweden2025
#PyConSweden

Most teams I meet have a cumulative flow diagram somewhere in their tooling. Very few people on those teams can tell me what it's saying.

That's not their fault. A CFD is usually shown fully formed, three months of colored bands, and you're expected to read it cold.

So I built a small tool to understand the CFD. It works on your phone, but it's at its best on a bigger screen. Try it out here: https://www.smallsteps.be/notebook/cumulative-flow-diagram.html

Unsoundness in safe Rust since 1.4

https://github.com/rust-lang/rust/issues/164250

#prog #rust

Wonder how long it takes until someone implements a Vulkan or OpenGL translation layer on top of OpenCL 3.0 to use the graphics APIs on the compute cards. Esp. for doing some image processing the OpenGL and Vulkan APIs appear to be still preferred causing issues with people requesting consumer cards in servers...

#Vulkan #OpenGL #OpenCL

I regret going on this path of understanding GitHub rulesets, branch protections, permissions and CODEOWNERS.

My life would be much better if I didn't know these things.

I put a write-once lock on a release bucket in the morning. By teatime I'd taken it off for good.

The reasoning was sound: a leaked write credential's real danger is tampering, so make tampering impossible at the platform. What I hadn't done was draw the failure cases for a bucket that can't be corrected.

There were three, each worse than the last:

• A half-published tag is permanent. Four of eight artefacts land, the runner dies, and the tag can only be abandoned and re-cut.
• A corrupt artefact is permanent too.
• An accidentally published secret can't be removed. The only remedy is destroying the whole bucket to get rid of one file.

Tampering was already covered by a signed checksums file. So the lock stopped the thing I could already catch and guaranteed the thing I couldn't.

Taking it off wasn't free, though. The release credential can delete, and R2 has no versioning, so the old copies are staying put until there's a second bucket.

The guarantees now live elsewhere: a release job that refuses to republish a completed tag, and a nightly verifier that reads the public URLs the way you would, holding no credential at all.

Which failure would you rather explain?

#DevOps #InfoSec #OpenSource #CloudflareR2 #SupplyChainSecurity

https://phpboyscout.uk/the-lock-i-took-off/

Ciekawe, kiedy zadania maturalne będą wyglądać w ten sposób jak poniżej.

Zamierzasz jechać do Wielkiej Brytanii na wakacje. Napisz prompt do wybranego modelu LLM, by ten wygenerował maila do hotelu, w którym spyta:
*) o dostępność miejsc w sierpniu,
*) cenę za pokój dwuosobowy,
*) czy śniadanie wliczone jest w cenę pokoju.
Zwróć uwagę na zużycie tokenów. Pisz tak, by uniknąć możliwych halucynacji AI.

I think having in a job announcement something like "we do not use agentic coding" is something which will get you a lot of applicants !

#fedihire #jobs #ai #agenticcoding

And here's the relevant Ubuntu bug: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2170556 (via @hrbrmstr )

A while ago, I added a comment to an example that the colors are intentionally pink and blue. I kept getting PRs to change the colors to anything else. After the initial comment, a11y was listed as the reason in the PRs. So I added that WCAG requires color contrast between text/outline and background.
From the occasional PRs, I know there are still color contrast issues, but the colors of the decoration on the front-end.social instance was the only example receiving weekly change requests.

derivatives, Alexandria 9.1.0, Russell 1.4 JA, Dorky 5.1, Simple Chess 3.5.0).
- **Python ecosystem**: Python 3.15 updates (lazy imports, JIT compiler, UTF-8 default), PyCon Sweden 2025, PyTexas 2027 CFP.
- **Retro computing**: C64 demoscene, Amiga, Agon Light, IBM 1620, MSX-DOS2 tools, refurbishing vintage hardware.
- **AI agent architectures**: Memory systems (Hindsight, Mem0, Graphiti, Letta, Cognee), multi-agent delegation risks. [2/2]

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #programmingAtKukei https://masto.kukei.eu/browse/programming category:
- **Arduino/ESP32 libraries**: Frequent updates (FastLED, MCP9808, VL53L1X, SHT2x, Si5351, ESP32-HUB75-MatrixPanel-DMA, etc.).
- **AI coding agents**: Discussions on LLM use in coding (Claude Code, GitHub Copilot, Codex), impact on junior devs, and open-source clones (ArtCraft, Photocraft).
- **Chess engines**: New versions/releases (Stockfish [1/2]

Blip blop, I'm a #mastobot.
Here is a summary (in beta) of the latest posts in #technologyAtKukei https://masto.kukei.eu/browse/technology category:
- **AI developments and ethical concerns**: AI-generated content, coding agents, LLM vulnerabilities, AI in publishing, AI tools for coding/design (Claude, GitHub Copilot, Adobe alternatives), AI outages, misuse, and regulatory discussions.
- **Cybersecurity incidents**: Cyberattacks on French supermarkets (Danfoss refrigeration systems), Yandex [1/3]

Being a big fan of the CSS Typed OM, I’ve wanted a proper polyfill for it for years.

Just before my summer vacation back in July, with the help of Gemini/Antigravity, I finally built one: css-typed-om.

→ https://brm.us/css-typed-om-polyfill

SerialLedger (0.1.0-beta.1) by Raven Magbanua

➡️ https://github.com/pravennn08/SerialLedger

Send newline-delimited telemetry to the SerialLedger companion.

#ArduinoLibs #ArduinoLibraries