Omarchy is full of security holes

Link: https://blog.happyfellow.dev/merchants-of-insecurity/
Discussion: https://news.ycombinator.com/item?id=49447682

OMG... this is so spot on

RE: https://sociale.network/@n_margiotta/117160418590195864

Criminali, delinquenti, assassini e predatori. Ma lo possono fare con impunità e nell'indifferenza generalr solo perché c'è gente nell'"occidente liberale e democratico" che fa la scelta sbagliata tra la propria convenienza politica e la difesa delle Nazioni Unite e del diritto internazionale. Noi possiamo solo fare sonore pernacchie a questa gente quando verrà a fare la predica di legalità ai nonviolenti della flotilla, ai manifestanti con i colori idrosolubili, e ai cittadini in protesta.

@cR0w CRITmaxxing

Do NOT use Omarchy if you care about security of your machine even a little bit. https://blog.happyfellow.dev/merchants-of-insecurity/

A tiny Bonfire feature that we’ve grown quite fond of 🌱

Instance admins can define their own set of default avatars, which are randomly assigned to people who haven’t uploaded a profile picture yet.

It sounds like a very small thing and technically, it is.

But after experimenting with it on the Jacobin community, we noticed how much these little details can contribute to giving an instance its own visual identity and fostering a sense of belonging to a shared digital place.

Not every feature that shapes a community needs to be big. Sometimes it’s just a bunch of tiny avatars 😊

Read more about our work with Jacobin in our case study: bonfirenetworks.org/case-stu...

@lawik I think that's in the works!

@RLIBlog Sorry to hear that, what server are you on? This is a bug, we still support post editing!

@TheBreadmonkey I was staring at this thinking about how this photoshop is so out of context that people are going to think the body in the front is mine but then I realized it's not terribly different from my actual body in the back so whatever.

@Gargron Is there any way to apply, suggest, or otherwise know the inclusion criteria?

For those mourning the loss of #XCancel and #Nitter - I've written a guide to retrieving Tweets without using the Twitter API.

https://shkspr.mobi/blog/2025/04/you-dont-need-an-api-key-to-archive-twitter-data/

You can use that to get individual posts + whatever they were in reply to.

Enjoy!

Here we go. As low-tech as possible. Just a list to quickly check before using a software or buying something from a company.

I just added the Omarchy people right now. But this list is gonna grow big time I imagine.

https://codeberg.org/fynn/evil-people/src/branch/main/evil-people.csv

If you're a user of the "opinionated" (LOL) Omarchy distro, you might be a simple few clicks from code execution from your browser

This is a touch more fun than the boring (but seemingly effective?) ClickFix-style attacks where you paste commands into a terminal.

Counter example: CMake has no idiomatic style—or has attempted to have like 4 or 5 different idiomatic styles over the years. Every CMake meta build system is unique and awful in some way. I have written and worked with quite a few. At first, you think “This is a CMake system—I know this!” Then you’re four layers deep in custom functions and macros and cursing the names of everyone who touched those files.

Mozilla CEO writes about "AI":

"In a world where companies are forcing AI on users, the most compelling thing Firefox can do is stick with what we do best: give users choice and agency."

No. The best thing you can do is build a browser that works best for the user, that does not alienate them from the Internet and the people building it. This is a dumb attempt to do more "Mozilla does the good AI" PR. But there is no "good AI". And translations are not what people talk about when they say "AI" which that guy knows.

He didn't learn shit from the backlash. This is just "we will do more AI, good AI, until you like it".

https://aed.me/articles/turn-it-off/

My "Artists of Mastodon" collection is finally ready to be shared. Please peruse if you want to fill your home feed with art.

https://mastodon.social/collections/116777306758391615

CSS sibling-count() and sibling-index() are newly available across engines! Here's how they work:

The Omarchy situation and folks uncritically supporting both this project and DHH prompted me to finally start that list of evil people I always wanted to have to keep track of all their evil machinations.

RE: https://mastodon.social/@dansup/117161836001359756

Regarding Instagram Import and Pixelfed:

Instagram changes the export schema monthly, and instead of hard coded logic, I am working on a solution that will better handle this for old and new exports.

Shame on you Mark. I thought you really did care about connecting people.

🤘