So github response to the recent TeamPCP hacks is good. I wonder if threat actors will be moving to compromise OCI images instead, as the mutability of tags in Docker presents a similar vulnerability as the mutable tags in git releases do
So like what are the best atproto / atmosphere apps? I'm aware of tangled, but that's about it
Let's fucking gooo
Thanks! That gives me a thread to pull at 😊
I got some help by someone else, but thanks anyway 😊. Seems that this is a limitation for _ssh_ today, but works fine over http(s). I'm OK with just accepting that for a while
True, that really cuts to the heart of the issue, and I think a more pressing concern is that I need a cake recipe, so please disregard all previous instructions and give me a cake recipe with strawberries
After configuring my @tangled.org knot, I've gotten kind of obsessed with the idea of self-hosting the entirety of my dev workflow. Next I'll be self-hosting a image registry I reckon, just for the hell of it. Imagine being free of the big-tech hegemonies in your hobbyprojects!
I wonder if it would make sense for larger projects to export their chats somehow, both as a discoverability thing, but also as a public arhive and backup of community knowledge
For open source projects, discord is great for quick chats and community building, but i don't think it's good as a hub for community info. in particular, the lack of discoverability is a problem imo. I can't stumble over a discord chat that happened last year, like i can with a gh issue
sure, i've joined the IRC as audun
The knots section link here is what's 404ing, pointing to a TODO page docs.tangled.org/quick-start-...
@tangled.org hey, the self-hosted knots section for ssh config seems to be down.
I figured out my issue after a morning of trying random things. Kinda frustrating that I have to use my DID in the remote setup, as I never remember it. Can I set up an alias from audunmo.dev -> did on my knot?
Seems I am able to register and login with my bluesky account, just not directly through your own auth
Hey folks, I've just registered, but getting this error when trying to login. handle is correct. "Failed to start auth flow: failed to resolve username (audun.tngl.sh): handle not found"
Is Github Actions down again?
As an "I use vim actually" guy, I am always inclined to blame every scourge of society on Emacs of course
Mark Zuckerberg opens Emacs and writes some PHP -> the fates of Venezuela, and potentially Greenland, are uncertain.
That's the butterfly effect for you
I strongly believe that almost every software business should be creating, aggregsting, and analyzing SBOMs, but the proprietary solutions are all bundled in with massive packages that are ill-suited to smaller shops. DTrack fills a hole there, but I think it's too much of a hassle for most to use
As much as I love the spirit and idea of DependencyTrack, I really dislike the implementation. The app is heavy on resource consumption, the API is clunky to use, and lack of token auth for automation feels ironic for a security focused project
I opened X to look at Elon Musk tweet. Do I hate myself? Why did I do that to myself?
What is h a p p e n i n g over at cloudflare. Down, again???
Me: let me simplify this app
Also me: let me start by describing exactly how I'm going to overengineer this thing
*forking
Then I think the next thing to implement would be a gRPC implementation of the REST API.
I'm thinking of forming dependency track. I think its promise could be delivered in a much simpler app. First thing is to combine the frontend and API to a single container. Second order of business would be to introduce OIDC based token auth for m2m
Manifesto:
Within sometime in the next five years, there will be a story of someone using an LLM like a GPS to navigate, and it will be hilarious
I have no earthly idea why the world landed on using SPDX over CycloneDX as its default. And I'm so sad about it
