Remote

Lance R. Vick

@lrvick@mastodon.social

mastodon 4.7.0-beta.1

FOSS || GTFO

* Security Engineer
* Cypherpunk
* Founder of #! (hashbang.sh), stagex.tools
* Co-founder of Distrust.co, Caution.co
* Church Of Cryptography Priest

#infosec #security #opensource #foss #sysadmin #cryptoanarchy #cypherpunk #embedded #puzzles #privacy #locksport #programming #linux #homelab

0 Followers

0 Following

7 Posts

Joined October 06, 2019

OpenPGP:

openpgp4fpr:6B61ECD76088748C70590D55E90A401336C8AAA9

Matrix:

@lrvick:matrix.org

Resume:

https://lance.dev

Community:

https://hashbang.sh

Posts

Lance R. Vick @lrvick@mastodon.social · Jul 30, 2026

I know a kernel engineer that is sitting on a bunch of Zig security patches they have not submitted because they were written with AI assistance, which is forbidden by Zig. Policies like these endanger users. Refusing AI contributions is just as brain dead to accepting them without review. Any project that does either is now a hobby project I cannot take seriously. Also just in: GCC now refuses AI contributions. Whelp. Glad I switched stagex to be LLVM native.

Lance R. Vick @lrvick@mastodon.social · Jul 23, 2026

"Open core" business models are for cowards. FOSS || GTFO

Lance R. Vick @lrvick@mastodon.social · Mar 22, 2026

Replying to @nabeards@hachyderm.io

@nabeards@hachyderm.io Packages are just containerfiles so it is not hard to write them yourself in most cases: https://codeberg.org/stagex/stagex/src/branch/main/packages/core/curl/Containerfile But file issues for things you want to see, or PRs if you get something building locally. Need any help, drop into #stagex:matrix.org

Lance R. Vick @lrvick@mastodon.social · Mar 22, 2026

Replying to @lrvick@mastodon.social

Read more about our work on [Stageˣ] here: https://stagex.tools All the pain of supply chain attacks is self inflicted. We actually can fix this.

Lance R. Vick @lrvick@mastodon.social · Mar 22, 2026

Security celebrities have been shitting on the PGP Web Of Trust as an idea we should abandon in favor of centralizing trust on corpos.

Meanwhile the internet is filling with AI bots using fake corpo accounts and no one can tell who is human anymore. Huh.

WoT has never mattered more, and it is time we anchor modern tooling back to the human roots that built the internet.

My fellow [Stageˣ] maintainer Kron, Zoë Finja Emilia makes a strong visual case.

https://kron.fi/en/posts/stagex-web-of-trust/

Lance R. Vick @lrvick@mastodon.social · Feb 23, 2026

I wonder if there were people that thought Stallman was a bad person for using a proprietary compiler to build the first version of GCC.

I exclusively write FOSS, but sometimes I don't understand the purity tests of the FOSS community.

As long as a PR author fully read the the code, and it was not largely copied from any other project, I don't care what kind of autocomplete magic was used.

FOSS is at too big of a disadvantage to be picky about useful contributions that respect the license.

Lance R. Vick @lrvick@mastodon.social · Jan 22, 2026

Boosted by

SuperDicq @SuperDicq@minidisc.tokyo

If you claim to be building decentralized FOSS for censorship resistant finance, privacy, or communication and you collaborate via Zoom, Slack, Telegram, Twitter, Github, or Discord: you are full of shit.

Lance R. Vick

Posts

Remote instance