Just finished writing another tool, now I can see NINE known compromised packages are still up for download on NPM! ⚠️

This tool crawls the list of known bad packages and downloads the latest bundle.

It then runs my other checks against the downloaded bundle and logs the results.

https://github.com/datapartyjs/walk-without-rhythm

#WalkWithoutRhythm #Sha1Hulud #NPM #GitHub #Microsoft #nodejs #javascript #cybersecurity #devlog #bash

Just finished writing another tool, now I can see NINE known compromised packages are still up for download on NPM! ⚠️

This tool crawls the list of known bad packages and downloads the latest bundle.

It then runs my other checks against the downloaded bundle and logs the results.

https://github.com/datapartyjs/walk-without-rhythm

#WalkWithoutRhythm #Sha1Hulud #NPM #GitHub #Microsoft #nodejs #javascript #cybersecurity #devlog #bash

the first test succeeds, but i have early typechecking in the parser that needs to be put into a second pass.

too late for that today, more tomorrow.

#devlog #LRDL

if you're getting an aneurysm trying to understand how those mtof cases work, that's because you're trying to read it as a function, but the "function head" is the `then` section, at the end of the block rather than the beginning.

in datalog/prolog, order would be correct:

mtof(m, ...) :- ge(m, 0), ...

but then regular rules are not in execution order.

i'm going to explain the relational model with diagrams in an extra post.

#devlog #LRDL

alright! looks like we're sufficiently complete now to have more refactoring fun on the user side.

this contrived example here defines disjunctive rules for our inline.

they inline as merge cases; types are inferred correctly.

#devlog #LRDL

sigh. i have one more thing to fix, which is sugar for recognizing expressions as conditions; e.g. when you put `B ...` in a case, or any other buffer B with an omitted boolean in last place, e.g. `eq a b`, this should internally expand to `B ... tmp:bool; cond tmp`

#devlog #LRDL

yes, hooray, it works again!

which means inlines should now theoretically work perfectly. i can make more music

#devlog #LRDL

only just managed to get the parser to work again. now the typechecking begins.

#devlog #LRDL

this turned into a bigger refactor. the parser needs to work without knowing anything about types, and that's presently not true. it's not impossible to change, but - requires a lot of furniture rearrangement.

#devlog #LRDL

the first test succeeds, but i have early typechecking in the parser that needs to be put into a second pass.

too late for that today, more tomorrow.

#devlog #LRDL

so i'm thinking, step 1 is adding "inline" buffers (a solution from soufflé), for which cases don't generate code, and which in usage get inlined directly into other cases.

this already covers the need i have for functional macros and i can put off supporting C exports to a later point.

#devlog #LRDL

alright. today's job: support for defining C functions in LRDL.

this should generalize far enough that we can implement `main` this way, and also write shared libraries with it.

but it requires opening the reactor pattern to external users. it significantly complicates interactions and update flow.

hmhmhm. difficult to extract the smallest most elegant idea that works.

#devlog #LRDL

#MeshTNC #devlog

Working on BLE packet sniffing and transmission for MeshTNC, bc who doesn't want to do APRS or meshcore over BLE advertisements 😉

My quick hack feels promising so I think I'll clean this up and PR it.

https://github.com/datapartyjs/MeshTNC

#lora #meshcore #meshtastic #amateurradio #embedded #esp32

Woot, done with BLE receiving. Added some new commands to control it all.

Still need to actually test the KISS output and support transmit.

But its been running all day and seems pretty stable.

https://github.com/datapartyjs/MeshTNC/pull/41

#MeshTNC #devlog #radio #ble #lora

Just needed one tweak to the KISS encoder to define our port usage and give myself a way to put BLE data out a different port than LoRa data when in KISS mode.

Planning to also support streaming GPS NMEA over KISS eventually as well as promiscuous mode WiF sniffing.... eventually.

So reserved some values for that stuff.

#MeshTNC #devlog

Here I was thinking the KISS protocol support was going to be hard ✨

Actually this flew together, mostly bc @meph already did all the hard stuff on KISS handling.

So just check which output mode we're in and yeet the data at the BLE data KISS port.

#amateurradio #wardriving #ble #embeded #esp32 #devlog #MeshTNC

First things first, I want to make it so that the ASCII CSV output format for BLE packets roughly matches LoRa packets.

Every packet gets an arrival timestamp, type, RSSI and SNR values. Followed by whatever payload.

In the case of BLE packets there's also a 6 byte MAC so I slap that infront of the payload.

There's no SNR data for BLE so that's always 0.0. But the RSSI is good.

#MeshTNC #BLE #LoRa #devlog

#MeshTNC #devlog

Working on BLE packet sniffing and transmission for MeshTNC, bc who doesn't want to do APRS or meshcore over BLE advertisements 😉

My quick hack feels promising so I think I'll clean this up and PR it.

https://github.com/datapartyjs/MeshTNC

#lora #meshcore #meshtastic #amateurradio #embedded #esp32

#lispGameJam #commonLisp #programming #devlog #commonLisp #mcclim #nicclim #gamedev #itchio in which I play with the make-my-own-level player activity. (It's unix-surrealism-jam not just NicCLIM because it is built around the unique unix-surrealism-jam controls not my preexisting NicCLIM's)

Article: https://screwlisp.small-web.org/lispgames/my-common-lisp-game-jam-self-experience/

Jam submission https://itch.io/jam/autumn-lisp-game-jam-2025/rate/3822491 ,
my fellow jammers:
+
Pixel Outlaw's #interlisp https://itch.io/jam/autumn-lisp-game-jam-2025/rate/4015363
@mdhughes ' MUD https://itch.io/jam/autumn-lisp-game-jam-2025/rate/4002647

Here's a local LLM checking my Linux server from a Mac, privately and safely using Shannot v0.3!

Built this for homelabs and Raspberry Pi setups where you want AI help without opening security holes.

https://github.com/corv89/shannot

#homelab #selfhosting #python #ai #raspberrypi #linux #devlog #security #sysadmin #privacy #llm