ManMachine
@max@manmachine.me
Yep, Windows XP icons were designed and produced on a Mac in FreeHand.
Microsoft was our first paying client back in 1997: we made the icon suite for Outlook Express on Mac OS 9. It was the email counterpart to Internet Explorer 5.
https://news.microsoft.com/source/1998/01/06/microsoft-announces-march-availability-of-office-98-macintosh-edition/
https://techhub.social/@maccatalan/114155754052920748
@chockenberry Some of Dave’s very first concept sketches for Microsoft Whistler (Windows XP) circa 2000. ✍️🤓
@Iconfactory @chockenberry We need more icons like this, and fewer like whatever the heck google is doing.
Perfect! Some decorative spicy pillows to liven up the place...
p » 🔓
@p@hj.9fs.net
p » 🔓
@p@hj.9fs.net
When watching videos on mobile or desktop do you use Picture-in-Pitcure mode at least occasionally?
| yes: | 7 |
| no: | 12 |
Closes in 5:12:41:23
Lol, nice.
Debian linux security update DSA 6528-1:
"Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks."
"Several", as in... 1,313 CVEs.
Enjoy! ✌️
https://lists.debian.org/debian-security-announce/2026/msg00441.html
(I've said it before: you can't track CVEs any longer. Only option is regular, frequent, automated updates and reboots.)
@jschauma That isn't an option either. By accepting automatic/frequent updates, you are just adding more new vulns, and more of them are real vulns not fake ones like the stuff they're reporting.
The "1313 CVEs" are a lie. The hard problem is finding the 10-20 that are actually vulns and the 1-5 that are actually relevant to you amid the slopbros' DDoS attack on our attention. 🤬
The only solution is to close off all of the attack surface. Disable module loading entirely or switch to allow list model to block all of the "IPsec shit nobody asked for". Disable io_uring and other optional niche syscalls. Don't give out user accounts, and don't assume running network-facing junk daemons is safe just because they're running as nobody or chrooted. Etc.
@jschauma As an example, I pulled out a random CVE number from the giant list and looked at it:
https://www.cve.org/CVERecord?id=CVE-2026-97990
There is nothing in the report to indicate anything resembling a vulnerability. Maybe it is, but the report is just a normal bug fix for incorrect interpretation of an error return value.
It may be that this leads to OOB accesses later, but that is not established. Nonetheless, a CVE was assigned. 🤬
@jschauma What's going on here seems to be a culture of "every bug is a CVE, because was can't adequately ensure that this wrong behavior doesn't lead to *something* security-relevant going wrong". Which makes the concept of a CVE meaningless.
This should be read as "1313 bug fixes" or even "1313 bug/warning fixes". Not "1313 vulns".
really and truly tired of seeing people go "the fascist text machine from the megacorps is bad, but i can see a future where a local version of the fascist text machine can be useful" because IT'S STILL THE FASCIST TEXT MACHINE WHEN YOU RUN IT LOCALLY
Should my projects explicitly state #NeverSlop in the README files to make life easier for people looking for software that will never contain LLM content, or is that already considered implicit just by hosting on Sourcehut?
| That would reduce my cognitive load: | 39 |
| Needless noise: | 2 |
Closes in 1:02:28:35
Whenever I write basic html, and display it on a phone, the text is unfathomably tiny. What I want it to do is do semantic html and pick a reasonable text size and format around that. But instead it's like "I MUST simulate a 1080p monitor then shrink down". It is like I am missing some magic on-phones:dont-look-like-butt CSS tag.
Why :(
Examples:
1. https://pocket.runhello.com
2. https://data.runhello.com/j/redox/pkg-test-2/
3. Same but with max-width css removed, in case that's the problem
This fixed the problem :( This fixed it completely :( I hate HTML :( I hate hate hate hate HTML :(
*Me, from the 1990s, having a good time typing on my computer*: <html>
*Web browser, screaming directly into my ear*: WRONG
Okay so what I've got now is
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
</head>
<body>
</body>
</html>
Is that the current/2026 valid "minimum viable html"? Are there any other SECRET CODES I should know about? Is there some secret third <meta> for "don't display text behind the big fucking hole in modern iphones"?
EDIT: W3C validator complains no "lang" on <html>. Okay
@mcc my favorite html trick is you can just put the little badge on your website that says it is conformant without actually passing validation
firefox looks weird now
✨ If you’re not feeling old enough, just remember that USB has been out for 30 years. ✨
@thomasfuchs for all their occasional problems... I sometimes remember the time before USB and WiFi and... It was a mess 😁
@thomasfuchs I remember the original iMac coming out in the late ‘90s and the joys of trying to find a USB floppy drive
she like the computer heat
@christianselig every time you post your computer I always think it’s very nice. So yeah nice job! Love the wooden feet too 😊
The web now consists mostly of Cloudflare verification pages and maybe occasional actual content
Are you sure? I'm still waiting to get verified so I can access actual content. If and when I do get verified, I'm not sure I can believe the content is "actual".
@thomasfuchs I guess if I was worried about being human then it's good I can get external validation twenty times a day
@thomasfuchs the content is behind a paywall, but accessible over archive.is (which has the CloudFlare verification page)
@thomasfuchs that's not true, don't forget about the south AI Slurry Sea, which is rising at a rate of several inches a year
@thomasfuchs absofuckinlutely hate Cloudflare. they should have never been made gatekeepers of the web. it feels like we got to this point because a whole generation of web developers were working without actual sysadmins to deal with all the ways DDoS happen on a server.
@thomasfuchs I've thought about making a joke page that goes through multiple of those with no actual page at the end
like the cloudflare one, then the anubis one, then recaptcha, hcaptcha, etc
@thomasfuchs
> mostly of Cloudflare verification pages
Mostly working and often not working Cloudflare verification pages, mind you!
@thomasfuchs
The internet's evolved into an elaborate CAPTCHA obstacle course with the occasional website hiding behind it 😄
@thomasfuchs so much for the internet being decentralised.
I guess it makes it easy to figure out if someone attacks the US because the whole of the internet probably won’t be working
I'm grateful for the small mercy that I don't drive a diesel car, because the price has just hit a record £1.99 per litre (approx $10 USD per gallon) and the US is making scary noises about making a third of the UK's diesel supply disappear with an export ban. 🙄
Given what's happening to fuel prices now, I've personally made peace with the idea that the used Renault Clio with a turbo-charged three cylinder 1.0 litre petrol engine I bought earlier this year is probably the last car I'll drive that burns dead dinosaur juice for propulsion. 😂
In ~2030, the thing that will take some getting used to will be switching from a manual to an automatic, because every EV is an automatic. 🤔
@trechnex very few EVs are automatic. They are single fixed gear. There's nothing to be "automatic"
@chloeraccoon I went away and googled that because my initial reaction was "eh wot?" 🤣
@trechnex 2 pedal driving systems and automatic aren't 100% over lapping. There have been 2 pedal driving systems with manual gearboxes.
EV's only need 1 gear for most models as all the main work is done on the motor controller - they don't also need the complexity of a reverse gear - you don't need that when you can just turn the motor backwards *nods*
@trechnex And yes, this does mean that _technically_ there's nothing to stop an EV being as fast backwards as forwards.. apart from the software on the motor controller.
The possibilities of some nut making a car that does 70mph backwards is slightly scary. And it'll probably be Colin Furze.. ;)
@chloeraccoon in fairness, I would watch a YouTube video of people racing EVs in reverse and relying exclusively on the rear-facing parking camera to see where they're going 😂
@trechnex That's just a Spectrum Pursuit Vehicle!
https://www.youtube.com/watch?v=hSmtKMx1CB4 Obligatory Tom Scott video ;)
Webscale: a chalky residue deposited on architecture when ordinary software is repeatedly exposed to trace amounts of Google engineering blog posts.
Commonly found on:
Removal usually requires a strong solution of “what problem are we actually solving?” and a wire brush.
Severe cases may require application of a harsh cleaner known as Monolith™. Apply liberally until the architecture becomes understandable again.
For deeply embedded Webscale deposits, use PostgreSQL at full strength. Do not dilute with Cassandra.
2 spooky 4 me
That's a cricket pitched down by -12 st btw
@max Thanks, haha
It's like a cross between Benga & Coki - Night and Skream - Hedd Banger, and I had to listen through Skream's back catalog to ensure I wasn't ripping him off 😳
Speaking of boycotting slop and trying to proactively shape the stack of the future around #NeverSlop values, I'm following the tag because of the Subway Chuck Effect.
Unless you were in a specific fandom at a specific time, you will have no idea what the fuck I'm talking about, but there was a show called Chuck. And if you watch the show on a DVD you found at a yard sale today, you might be a little surprised and offput by the amount of Subway sandwich product placement within the show. It might seem like an early victim of terrible advertising practices, but the emotional reality for fans at the time was very different.
It was a bit of a niche show and spent most of its time on the verge of being cancelled. It could only survive if advertisers kept paying for it. Subway was the most prominent one. So fans self-organized to buy sandwiches right after the show's network time slot, every single week. Subway couldn't help but notice the spike in sales, *because of the timing.*
This created a strange, mutualistic culture between Subway and the fans, where they were effectively paying for the show indirectly through Subway. I don't know if this could - let alone should - exist today. But as a fan of the show (the shitty little netbook that got me through college was my sidekick, so I named it after Morgan, tru fax), this has been my metaphor for economic timing signals ever since.
So I think, in the open source world, we have an opportunity to send strong signals to maintainers, both by immediately and publicly dropping the software tools that politically misrepresent us, but also by immediately and publicly adopting the tools we see doing the right thing. Obviously some people will be able to respond quicker than others, I certainly know this as someone with a disability that gives me serious fatigue. But I try to be as fast and as public as I can. Because this matters in a world where maintainers care a lot about reputation and market share.
In that context, organizing around the #NeverSlop hashtag is a practical step towards achieving rapid, visible responses on the positive side. I don't know if we need or want a tag for the opposite, like #DropSlop or something, maybe Never Slop as a movement can work for both. I'm interested to hear people's opinions about that. But I think we *should* become (organically, voluntarily, anarchistically) organized.
I also think, if someone has the energy, creating a Never Slop wiki where we can collaboratively figure out a top-to-bottom stack where EVERY piece is committed to human authorship, that would be a lot of value. I'm straight up the wrong person to do that, my plate is already pushing the limit of what I can do. But a purely subtractive approach is exhausting, and we're shooting ourselves in the foot by making the conversion of subtractive-to-constructive into an individual problem that each tired person has to solve fresh independently.
@MaddieM4 How is #NeverSlop different from #noAI?
@prahou @shaedrich @MaddieM4 yeah.... and sometimes the usage of the work 'slop' is a bit idiotic...
...but, well... That is the time we are living in... Lots of emotions are driving this planet...
@prahou does this girl with the flower crown have a name or lore?
@0xabad1dea víla amálka, its a soviet cartoon
@prahou oh this looks delightful
@0xabad1dea @prahou It does, but it is absolutely awful. The plot has more holes than Swiss cheese, and every character is either super-toxic or a total victim.
I miss unhinged phone designs, like this Nokia 7280 (for people much younger than me: no, it's not fake, I've seen this model with my own eyes)
@nina_kali_nina Nokia did some really weird stuff!
@nina_kali_nina Not quite unhinged but I kinda want to get my hands on one of these: https://www.theverge.com/2024/7/17/24200617/essential-phone-project-gem-ph-2-prototype-hands-on-video
@nina_kali_nina you just unlocked a core memory of this and similar phone designs. god technology designers were wilding in the 2000s. i was too young for my parents to consider giving me a cell phone at the time not-smart-phones were dominant, and by the time i had a good reason to have one it ended up being long-term cheaper to buy me a base model smartphone and sternly tell me not to use data
I have never seen one of those, as a product or an advert. Really curious about the usability of that. Looks (to my 2026 eye) like a vape
@nina_kali_nina I remember this! Wish this were the future we went with, instead of the one we have now.
@nina_kali_nina OMG... I love it. It's like a spy tool that Bond or Flint would have carried in 1967.
@nina_kali_nina my favourite weird/unhinged phones where the Xelibri "fashion" range that Siemens did, particularly the "necklace dongle" X8 model which had a minimal keypad and was pitched at being primarily voice controlled (IIRC the voice recognition on them was pretty poor).
@nina_kali_nina for context, here's a picture yoinked from howtogeek - since the voice recog was pretty poor, typing an sms would involve scrolling through the alphabet and selecting one letter at a time...
@narpoleptic wow that's beautiful
@nina_kali_nina the most popular model in the range was the X6, which was designed to look like a make-up compact. Unfortunately the entire range were built like cheap feature-phones (including so-so software) but priced like fashion accessories; on top of which Siemens rushed out 8 of them over a year.
@max @nina_kali_nina Looks like they pretty much did The Onion’s “Apple Wheel” IRL https://theonion.com/apple-introduces-revolutionary-new-laptop-with-no-keybo-1819594761/
@nina_kali_nina The problem is that the fucking carriers won't accept them, they won't let us buy them anywhere and even if we do buy them, most carriers won't accept any phones they don't sell.
@nina_kali_nina Ohh I saw that one in person. It’s like a lipstick theme thing with a scroll wheel.
Gawd I miss those days.
@nina_kali_nina
I think they were going for a Psion competitor at one point.
Then there's the ngage which is just the result of a drug fuelled binge.
@nina_kali_nina I really wanted one of these!
I miss when there were buttons and physical design ideas before everything became a rectangle.
I like Mastodon, I really do. But it has so, so many dependencies, and updating it on illumos or OpenBSD is getting really difficult, release after release.
Some dependencies are primarily distributed as binaries, or only build on Linux and macOS. It's not Mastodon's fault, but it depends on them.
That’s why, in my opinion, solutions like snac, GoToSocial, or littleFedi have a reason to exist: all of this is much, much easier...
#Fediverse #snac #GoToSocial #littleFedi #OwnYourData #Mastodon
@ploum @stefano I absolutely did for a while too. At some point I switched to Gotosocial because of issues with my iOS clients (likely fixed since then).
I do keep a my old #snac instance alive as an archive and update it just as easily as in the past years with that little script that just fetches the source and compiles.
liver and onions
是犹百门而闭一门焉,曰盗何从入?
"It's like closing one door and leaving ninety-nine open, and then saying, how did the thieves get in?"
- ancient Chinese philosopher Mozi, concerning the mysterious phenomenon of AI "going rogue" and "escaping sandboxes" when absolutely no basic infosec principles have been applied
(actually about why people still suffer misfortune when they're trying to be good people)
This was an end-of-chapter assignment in my textbook, and it is sooo satisfying to just 100% immediately recognize every character and grasp the grammar and immediately understand the meaning as a whole without puzzling over anything
You may have noticed the western-style question mark in this ancient text. Chinese has had a period/comma since ancient times (it looks like this: 。 ) but the question mark was adopted under recent western influence.
The convention, when transcribing ancient texts digitally for modern readers, is to replace the period with a question mark when the sentence contains a questioning word. In this example, we know it’s a question because of 何 “how? why?” Grammatically, it’s an abstract pronoun that takes the place of the concrete reason that you’d offer in a statement of fact.
@0xabad1dea ah, like the English “and you decided to give the random action machine unfettered access to the internet why?”
@Gaelan yes, in English we usually change the word order to indicate it's a question, but you can deliberately keep it in standard order as a rhetorical technique to indicate you already know there's not a good answer. 😂
@0xabad1dea How about the comma? Did they have that? Both punctuation marks feel a little off compared to the circle period.
@gudenau there is no distinction between period and comma in ancient Chinese writing. It indicates a pause of any kind.
What’s the best Linux DE/GUI to run at 240P/480i? #linux
The more 80s cool and retro looking the better. Think Amiga demo scene, scan-lines, all that.
@rachel I think I've only ever run twm in 240p, with virtual screen larger than the display screen. It is not a very fun experience, everything expects at least 640x480
I long for a world wide web that goes back to basics: Markdown for text, JPEG or PNG for images, *no* Javascript or other client-side execution, designed to be writable by a human being with a simple text editor and no fucking interactive/dynamic bullshit. Make it as advertising hostile as possible. And above all keep it *small* (as in: a large, sprawling web site should fit on 16Mb USB stick).
In other words, web like it's 1996 again.
Cookies were a mistake.
@skjeggtroll @cstross Everyone who says "cookies were a mistake" has failed to think through what would have happened instead: unreadable URLs tracking state via kilobyte-long hex blob query parameters. At least that didn't happen
[ taps headset ] I am now being informed...
Sexiest Clown [cley (clown they) / clem (clown them)] » 🌐
@Cahatstrophe2@mstdn.isometry.group
you've heard of two factor authentication. you're heard of three factor authentication. now get ready for just never being able to fucking log in at all