Aki the Conqueror 🦓

Aki the Conqueror 🦓

@akiro.se

I flip bits. Mostly bees; 2024 CA state champion knitter; “occasionally impressive”; way too knowledgable about the EU CRA

515 followers116 following1.2K posts

Got cozy with the concrete today after some mysterious failure of my own balance sent my flying over my handlebars. Good thing I’m about to leave for three weeks of work travel, that shouldn’t be impacted in any way.

Jake Grumbach@jakemgrumbach.bsky.social

@gabrielzucman.bsky.social: So let met get that straight: paying a wealth tax is impossible (“billionaires have no liquidity”, “it would be taxing unrealized gains”, “their wealth is virtual”) but one man paying half a billion to influence elections is possible. Did I understand well?

While this is a cruel and dirty lie designed to make us all wonder if we’re in a time warp or actual dust (or a reference to the 1979 animated film) … Andy Serkis (Gollum) really is the same age McKellan was when Fellowship was released.

Siobhán 🪏@shibbi.me

Elijah Wood is older now than Ian McKellan was when the first Lord of the Rings movie came out.

Aki the Conqueror 🦓 reposted

Not a single word of this is hyperbolic in the slightest. Buy your friends in cybersecurity the drink or chocolate of their choice right now. We are not doing well

Jason Koebler@jasonkoebler.bsky.social

wrote about "Black October," the PHP vulnerability, and the AI-fueled dread and panic I'm seeing among almost all of the cybersecurity experts I've ever known. I think people w/ LLMs are brute forcing software the same way they brute forced social media w/ slop www.404media.co/php2shell-bl...

Includes the subhead “other disasters”

kira ☆@kira.ws

Pwn Day 2026 now has a live scoreboard: 29 CVEs / 7 projects / 4 major non-CVE incidents in the seed tally, plus a watcher polling cvelistV5/main every 3 minutes for new records rated 9+. It caught two more before I finished the page. https://pwn-day.wisp.place/

i keep wondering if yesterday was one of those days that we’re gonna talk about or years, or if it's more like the ongoing climate catastrophe thing where "every year is the hottest year on record"

Aki the Conqueror 🦓 reposted

Replying to @emily.news

less faith in higher powers. more faith in one another. something like that.

…dammit.

lauren@lauren.rotatingsandwiches.com

I don't want to hear any whining about fixing certs from the information security types today. you chose to join the techno-priest caste, now shut up and perform the rites of exorcism

Needed to put *something* in that slot after Kissinger finally kicked it.

Seth Abramson@sethabramson.bsky.social

The number of Americans who apparently have a *specifically designated* bottle of champagne somewhere in their home is absolutely shocking

Raise your hand if you had to go look at all your registrars/DNS providers to figure out what web apps you have out there churning away that you've maybe forgotten about ✋🏻

I strongly agree and will be defensive on behalf of PHP devs always. The documentation was so accessible and it was on every VPS. Such a low barrier to entry to explore & learn & experiment. Though on the topic of language _design_… these days I’m not quite as generous in my defence as I once was.

This post is unavailable.

Aki the Conqueror 🦓 reposted

I need a blanket, OS-level preference setting that tells websites and apps that I am never, ever going to want them to suggest what I should reply to a message. This is not a thing anyone wants.

Finally saw Vertigo for the first time. Kind of unimpressed. Does this mean it’s a severely overrated film or just that the depression is making everything grey and flat again.

Aki the Conqueror 🦓 reposted

Nobody wants to hear that this makes these systems fundamentally unsecureable, but they are.

Button@boombutton.bsky.social

Lmao turns out that when you build a system in which instructions, inputs, outputs, and "reasoning" are indistinguishable it's piss easy to trick it into thinking your input is instructions and/or reasoning

Open source maintainers are starting to get all manner of communiques from the compliance & legal departments of huge corporations using vaguely threatening and legal-sounding language and demanding the maintainer fill out forms and reports and attest to the security of their project "because CRA".

View full thread

also lol Thermo Fisher Scientific revealing they are placing products on the market with known vulnerabilities that were EOL over a decade ago. (presumably those aren't known *exploitable* vulnerabilities in the context of the products they're included in, but still made me giggle)

Open source maintainers are starting to get all manner of communiques from the compliance & legal departments of huge corporations using vaguely threatening and legal-sounding language and demanding the maintainer fill out forms and reports and attest to the security of their project "because CRA".

View full thread

Alternatively, open source maintainers looking to earn a living from maintaining their open source projects are welcome to respond "fuck you, pay me" and produce security attestations—without threat of suddenly their project is a formal product subject to all manner of regulation.

Basically, don't let the legal speak and forceful demands scare you—putting your open source project out into the world to see what others make of it is enough.

Open source maintainers are starting to get all manner of communiques from the compliance & legal departments of huge corporations using vaguely threatening and legal-sounding language and demanding the maintainer fill out forms and reports and attest to the security of their project "because CRA".

The appropriate and legally supported response to requests on open source maintainers to attest to the security of their projects and fill out lengthy forms about their cybersecurity stance is Fuck off.

there is a pattern of weaponisation of the language of psychology and activism (particularly historical disability rights activism) that basically exists entirely in ~~the comments~~ and I just want to talk to all of these people and tell them you can just *not respond*.

I got a message from my spouse, and with no interaction on my part my phone recommended a complete sentence in response. Why is it so much to ask that my technology stop trying to steal my voice?

I am inches away from an amazing joke about that polycule from NPR but I’m just not funny enough to write it.

Chris Dwan (he/him)@somershade.bsky.social

Necromancy is legal in Somerville, MA - but you have to get a license from the city. That's what I came here to say. G'night. 4/4

I remember tables and image maps and macromedia shockwave—content may be worse and design may be bland but websites are better now. In contrast, just 10 years of CSS later @zeldman.bsky.social cranked his body text to 24px and everyone lost their goddam minds 😆 web.archive.org/web/20120430...

web.archive.orgRedesigning in Public Again – Jeffrey Zeldman Presents The Daily Report
WebDesignMuseum@webdesignmuseum.org

In 2001, we really thought this was what the future of web design would look like.

There’s no such thing as being apolitical. “Not taking a side” implies that all opinions, actions, & policies are equal. The Israeli government and its military are committing genocide, out loud, and publicly celebrating the result. There is no acceptable “other side” to genocide. Free Palestine.