boltless

“Our Response To The eMudhra Key Disclosure Incident” by Roland Shoemaker, on behalf of the Go Security team — https://go.dev/blog/emudhra-incident #golang

Testing "the great migration" of all tangled users and repos from old to new architecture for upcoming release...

Pwn day is a meme gift that keeps on memeing

Huge milestone for the open social web—the first dedicated AT Protocol devroom is coming to FOSDEM 2027 in Brussels (Jan 30–31)! Congrats to @viivi.rocks, @edouard.paris, and the @atproto.eu community on bringing the room together. Watch for the CfP by Oct 27!

> So what is possible after Tangled 1.0 launch? Just new UI? Here is my PoC crowci-backed spindle that schedules pipeline from your existing .crowci/ files and still work as valid spindle. You don't even need extra .tangled/workflows/*.yml file to bridge them.

btw next week is also my 1 year anniversary in Tangled! I'm super excited to share what we've been building, and what kind of future we are drawing.

🔥🔥🔥

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

AT Protocol devroom is coming to FOSDEM 2027 🎉 @edouard.paris and I will open the CfP by October 27, mark your calendars ✍️

Tranquil 0.7.1 has been tagged and multi-arch docker images published. This security release includes a patched rustls-webpki that rejects the vulnerable certificates everyone is talking about.

if you want to be more independent of bluesky, the easiest way is to move where your account is stored. pds moover makes finding a new home for your account simple, and takes advantage of bluesky's locked-open tech to ensure a single entity take away your relationships or can't delete your posts.

atproto atproto atproto atproto atproto

This is Pele, my new rendering library for diagrams and charts, compatible with the latest Mermaid syntax. - 100-500× faster than mermaid.js - 6× smaller bundle - No dependencies - Easy to theme - Responsive to device width - Open source (MIT) Try it at pele.run

😫

Hey Japanese learners! I built a font that renders Furigana or Romaji on top of Kanji, with ligatures to support words. It can be applied everywhere to get furigana notations for free. Give it a try, and I hope it will be helpful :) furifont.antfu.me

some details from the upcoming docs refresh @tangled.org!

tangled knot hosted entirely on @cloudflare.social! it kinda works, and is already selfhosting. if you git clone this repo, it will redirect to a CF artifacts remote. fun bonus: http auth with goat! tangled.org/oppi.li/naut

Should Tangled have "just give me the fucking exe" button?

If you wanna see Monkeytype 🤝 ATproto, let's upvote this discussion: github.com/monkeytypega...

canvas interfaces are underexplored !! this is my canvas browser prototype

I think the most obvious "get people to sign up on atproto" is a linktree that is actually good and they don't even know it's a PDS.

This migration is now complete! Please do let us know if you run into an issues on the tngl.sh PDS 🙏

10월 31일에 vim.kr 주관으로 #jujutsu 워크숍을 열게 되었습니다! 많은 관심 부탁드립니다. 신청: 10월 24일 23:30까지 장소: 서울 성동구 튜링의사과 #git #jj #jj-vcs

10월 31일에 vim.kr 주관으로 #jujutsu 워크숍을 열게 되었습니다! 많은 관심 부탁드립니다. 신청: 10월 24일 23:30까지 장소: 서울 성동구 튜링의사과 #git #jj #jj-vcs

colmena is absolutely amazing, all of tangled is deployed from a single nix flake with colmena. can't wait to give v0.5.0 a go!

#atproto space question: Is it fine to create space for each records to support per-record access control? Say all Tangled repository issues are spaces. My biggest concern is sync, because every issues are now standalone permissioned repos. But maybe that doesn't matter much?

First day at NixCon was amazing and today we continue 🐑 Find us at our booth or come listen to @oppi.li at: 🛠️ workshop for joining Tangled at 2-3PM at Aula Srednia 🗣️ lighting talk on the future of code collaboration at 4:30PM at Aula Duza A

"file"-system? buddy. I gotta claudesystem

A changelog you can reply to! 🦋 We built our new changelog on #atproto. Our Bluesky posts tagged #new, #feature or #release also appear as changelog entries inside badrap.io. Each entry links back to the original post.

👀 sifa.id/c/jj-vcs.dev

Coming to NixCon this week? 🙂‍↕️ We (read: @oppi.li) are running a session on the first hack day, Friday the 25th at 2 pm on reproducible infra with Nix and SSH and how you can manage your infra too 🛠️ Look for the sheep t-shirts 🐑 or ping us here on Friday, and we'll tell you where we've landed!

The new "Sign in with @cocore.dev" is awesome! The new ssh.socialweb.computer hosted requester uses them, it's a frontend to the AT-proto native compute marketplace, allowing you to simply ssh handle.example.com@socialweb.computer to request a new VM from folks you have mutual tangled vouches with

Apple has high-level APIs that make building UI automagical But when experimenting with new hardware I like to rebuild everything from scratch to understand the fundamental building blocks An old habit from when I was a UI prototyper in Apple's Hardware org, with only basic firmware to work with 😄

One thing I've been toying with, instead of talking about "PDS" and cryptic nonsense like that is: Atmosphere Service Provider, like an ISP but for the social internet. Part of the motivation is that "Sign in with Atmosphere" only works if people have seen that before.

Quiet Posters is a really good feed. See people who post less and have been seen less is just a great way to mix it up. bsky.app/profile/did:...

The login discourse is triggering an explosion of new login interfaces and flows. I want to see more of this as honestly it's just devs discussing how it should be done and I'm not seeing enough user feedback. Keep experimenting and party on.

Today we bring you the second @localfirstconf.com Lab Day video. Follow Ivy Reese @spiralganglion.com as she whirls through PlayBook: A Programmable Paper Notebook It's a blank page in the truest sense, for pulling ideas out of your head so you can feel and think differently about them.

New trackballs arrived!

We decided to throw a little watch party for the keynote on our Discord! Sneak peek into what's coming soon, guaranteed 👀 discord.gg/4xwua4b2H?ev...

@tangled.org mentioned by @indirect.io at #jj-con!

@anirudh.fi is speaking tomorrow at Git Merge at 16:15/4:15 PM (UTC+1)! Tune in for the keynote: the Git forge must be hackable, on the @gitbutler.com YouTube channel. The (virtual) popcorn is on us 🍿 www.youtube.com/@gitbutlerap...

That's right, it goes in the JSON hole

bluesky-like webapp that is actually a mastodon client mastodon-like webapp that is actually a bluesky client

i love software dev in 2026

@impro.social has timed mutes now! Everybody say thank you Claude

ratlogin: rust port of @apenwarr.ca's atlogin tangled.org/quilling.dev...

you might not like it but this is what peak, not-AI-written commit messages look like