← Feed

Posts

• View post

  Avoid online identity verification that scan your documents. If your discomfort regarding the practice is not sufficient, here are examples of data breaches that should be: https://www.techdirt.com/2026/09/03/hackers-had-a-live-feed-of-every-id-this-verification-company-scanned-for-over-a-year/ and https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/ #security #identityyheft

• View post

  Switzerland's federal government replacing ms365 with #foss on 3000 PCs in a first step: https://itsfoss.com/news/switzerland-replace-microssoft-pilot/ Yesterday I was thinking about https://getaurora.dev/en/, an immutable #linux distro, as an interesting option for SMEs with its atomic updates. Let's hope replacing the OS is the next step.

• View post

  @fenixmaster to avoid misunderstandings: I'm not involved, just spreading the news and hoping they will also migrate the OS 😉

• View post

  You often hear that commercial software is used in enterprises for the support they get. Well, thanks Broadcom for giving the perfect counter example: https://www.virtualizationhowto.com/2026/09/leaving-vmware-just-got-harder-after-broadcom-pulled-vddk-downloads/ With #foss you cannot be taken hostage by the provider. With commercial software, the risk is *always* there.

• View post

  When will institutions like @EUCommission strictly enforce the use of open standards? And no, you can't pretend to promote open standards if you use Microsoft Office: https://www.neowin.net/news/libreoffice-developer-explains-why-it-cannot-display-some-microsoft-office-charts/ #foss #standards #office

• View post

  The venerable Tcl/Tk was released in version 9.1: https://www.tcl-lang.org/software/tcltk/9.1.html I might try to build a #gui with it over the @asfaload #CLI, following the idea at https://cgicoffee.com/blog/2026/04/tcl-tk-develop-cross-platform-cli-gui-tools-tutorial-guide #release #scripting

• View post

  You know this little feature you want to add, which is supposed to be easily implemented, but which in the end requires you to rethink and refactor a part of your app? I just finished one. It ended in multiple days work and 60 commits! I'm happy with the end result though, and that is very satisfying! https://github.com/asfaload/asfaload/pull/325 #development #story #experience #foss #rustlang

• View post

  Apparently an attack on refrigerators was possible because they were run by an 'obsolete' system, or at least labeled as such by the vendor. Will the @EUCommission soon mandate open sourcing vendor-abandoned systems? How much more does it have to cost us before we refuse planned obsolescence? https://www.lemonde.fr/en/france/article/2026/10/12/french-supermarket-chains-say-cyberattack-forced-refrigerator-shutdown_6758510_7.html #foss #security #plannedobsolescence

• View post

  Just discovered that dioxus labs is joining cognition to work on an ai product, but also continuing to maintain dioxus #foss projects. Let's hope it is not detrimental to the foss projects. Seems their focus will now be on the ai product... https://dioxuslabs.com/blog/joining-cognition #rustlang

• View post

  RE: https://mastodon.social/@asfaload/117506063307193577 Here's a small improvement that required some significant refactoring. It's similar to a TOCTTOU: the signature of a release was provided in a second step, leaving a small opportunity window open for an attacker. This is now closed, and additionally, the refactor should make it easier to add support for other forges like @gitlab or @forgejo #security #softwaresupplychain #SoftwareSupplyChainSecurity #foss

• View post

  The CfP for the #security #devroom @fosdem was published: https://github.com/security-devroom/fosdem-2027 . I will propose @asfaload , as it fits the #supplychainsecurity suggestion.

• View post

  A new version of https://myowdb.com has been deployed. There's no new feature, but it's part of its upgrade to the latest versions of DotNet and websharper. #dotnet #fsharp #buildinpublic #foss Code at https://gitlab.com/myowndb/myowndb/

• View post

  Good progress this weekend on myowndb.com upgrades and @asfaload documentation, incl a tutorial video! #foss #fsharp #rustlang #buildinpublic

• View post

  Cool to see myowndb.com mentioned in sergeytihon.com 's #fsharp weekly. I deployed an updated version this morning, now using websharper 9. Next step is DotNet 10 then websharper 10.

• View post

  A sudo replacement in systemd: https://fosspost.org/systemd-wants-to-expand-to-include-a-sudo-replacement/ RIP Unix philosophy. As an alternative, did anyone try Root As Role? https://github.com/LeChatP/RootAsRole #linux #security #foss

• View post

  The #ascii representation of a #ssh key is based on an astonishingly simple #algorithm. Read the simple idea at https://www.jfurness.uk/the-drunken-bishop-algorithm/ and the full #paper at https://dirk-loss.de/sshvis/drunken_bishop.pdf So simple I'll probably implement it for @asfaload for easy hash comparison when signing

• View post

  Say what you want about #LLMs , it is what allowed me to keep https://myowndb.com up to date. It is a #foss #fsharp project with 1500+ human-authored commits that lost my focus. Without llms I would have archived it. Now I plan to continue to #BuildInPublic . Disclaimer: the project has exhaustive tests without which nothing would have been possible. Also, llms were used as assistive technology.

• View post

  I'm a fan and user of #docker #swarm. Such a pity it didn't get traction. Most of us don't need google-scale tech and the #k8s complexity it brings... As swarm is just barely alive, this seemed promising: https://uncloud.run/ But: allowing all containers to contact all others?☹️Too easy to shoot in one's foot

• View post

  If you hear someone say microsoft loves #opensource, point them to this report: https://research.mozilla.org/browser-competition/over-the-edge-2/

• View post

  If you want to help bumblebees, this is a tree they love: https://en.wikipedia.org/wiki/Vitex_agnus-castus

• View post

  Note to self: in #rustlang, you convert an Option<String> in a Option<&String> with the method as_ref, and for the conversion Option<String> to Option<&str>, use as_deref. Damn, I have a hard time memorising these method names. Same for Option::ok_or. Absolutely not intuitive to me.

• View post

  An (online) open source license compatibility checker: https://fossa.com/resources/devops-tools/license-compatibility-checker/ #foss #license #legal

• View post

  A collaborative #slideshow solution in one html file! Edition and presentation. And #opensource ! https://github.com/nyblnet/bento #foss

• View post

  @e_mydata : accessing the /e/ os install page at https://e.foundation/installer/ with @mozilla 's Firefox on Android proposes proprietary browsers alternatives.... A welcome page explaining alternative installation procedures would probably be better.

• View post

  Tried to activate #passkey for my Google account using #firefox and #bitwarden. It was a traumatic experience.... I don't even know how to explain how it took so much time for so little result... @arstechnica has more prose about passkeys: https://arstechnica.com/security/2024/12/passkey-technology-is-elegant-but-its-most-definitely-not-usable-security/

• View post

  For @asfaload I chose ed25519 signatures for its pervasive use. However, there's one place it is not common: the TPM in PCs... Why? 😫 #security #cryptography

• View post

  Just wrote an #apache #httpd rewrite rule for the first time in years. Required multiple attempts to finally redirect /doc to /docs while I would have done it with closed eyes years ago. Triggered me to take a look at @Netcraft@infosec.exchange web server survey. How things have changed from when apache was on top (for 20 years!): https://www.netcraft.com/blog/june-2026-web-server-survey #sysadmin #http