leah 🛸

leah 🛸

@spacegirl.ing

software developer, atprotoist ~ she/her → @userstyles.club ☆ https://uncenter.dev

1K followers1.4K following2.9K posts

leah 🛸
@spacegirl.ing

> "our researchers" > its a single person love me some claude slopped websites and awful vulnerability disclosure practices

Cyberdione Labs@cyberdione.bsky.social

Our researchers have discovered vulnerabilities in the open source Tailscale software. These have been reported upstream. Take the appropriate precautions. Our primary recommendation is to disable the "tailscale ssh" feature and App Connectors. www.tailworm.com

leah 🛸
@spacegirl.ing

it's like the audio they trained it on was a disinterested person on the other side of a phone call. it manages to say words while barely any meaning actually comes across

leah 🛸
@spacegirl.ing

...

youtube.comphp2shellYouTube video by Calif
leah 🛸@spacegirl.ing

whaaaat a shit show > ...Calif, one of the security firms that had reported the issues mistakenly published a video. It showed their proof of concept working against a number of targets and revealed a few additional, though limited, details about the vulnerabilities.

thephp.foundationToday's PHP Security Release, and How We're Strengthening PHP SecurityDescribing the story behind how critical security vulnerabilities were found and fixed.
leah 🛸
@spacegirl.ing

> Mitigation advice we started providing to a few critical infrastructure providers... may have leaked as well. > ...more than six hours before the coordinated release, Chainguard unilaterally broke the embargo and published built images containing the fix.

leah 🛸 reposted

JP
@byjp.me

Plus it doesn’t need a browser context, so you can now convert mermaid to SVG server-side too!

kepano@stephango.com

This is Pele, my new rendering library for diagrams and charts, compatible with the latest Mermaid syntax. - 100-500× faster than mermaid.js - 6× smaller bundle - No dependencies - Easy to theme - Responsive to device width - Open source (MIT) Try it at pele.run

leah 🛸
@spacegirl.ing

this looks like a great feature, but it is so bizarre to frame this as "for your agents" when instead its just a useful feature, *for humans* and whatever their tools are

Matthew Phillips@fancypenguin.party

Coming soon to @astro.build we're adding a --timings flag you can have your agents run to figure out what is slowing down your build, and have it fix it.

leah 🛸
@spacegirl.ing

very fun to look in the logs for things and find that people are just probing the shit out of it looking for secrets

leah 🛸
@spacegirl.ing

bun, the everything app

patak@patak.cat

really curious where bun's story ends up in a few years; their scope story has always been at odds with what I believe is healthy for a project, and they keep doubling down on engulfing whole ecosystems

leah 🛸
@spacegirl.ing

are there any "paid storage tiers"-type pds services out there yet? i expect this kind of thing will become necessary if at spaces matures and increasingly large amounts of data per user are expected to be stored

leah 🛸
@spacegirl.ing

something like paying $1.99/mo or whatever google charges for upgrading from 15gb to 100gb of account storage is one example

leah 🛸
@spacegirl.ing

what's the deal with the branded strings- i don't get the appeal. its mostly just confusing to consumers and seems like it doesn't have any use case. what is anyone going to do with a .salesforce tld??

Pete Millspaugh@petemillspaugh.com

333 branded strings like .airbnb, .adidas, .adobe, .anthropic, .claude, .openai, .chatgpt, .bsky (oh hey! @bsky.app), .cloudflare, .converse, .meta, .facebook, .instagram, .ihop, .mazda, .mychart, .newbalance, .palantir, .notion, .ralphlauren, .salesforce, .shopify, .slack, .stripe, .vercel, ...

leah 🛸
@spacegirl.ing

i originally had planned (...hoped) to make it more whimsical and cheerful but i kinda reached the limits of my rudimentary design skills rather quickly >:{ would love to dm/chat with anyone interested :)

leah 🛸
@spacegirl.ing

also half conflicted on the domain/name i gave it... been reconsidering but i haven't any better ideas! lmk if you have any!

leah 🛸
@spacegirl.ing

gmail perfected the inbox design a decade ago and open source still hasn't caught up, what are we doing :///

leah 🛸
@spacegirl.ing

what in the world is going on with @pnpm.io the whole point was minimal and performant and now it's a rust toolchain manager? if i wanted that i'd just use like mise like who is asking for this

James@43081j.com

was curious what the various increments were, so here's the pnpm size bumps labelled!

leah 🛸 reposted

Graze Social
@graze.social

Your feed, their way! Feeds have always been one list, same for everybody who opens it. Today that changes - we've rebuilt feed ordering around layers, and any layer can be tuned to the person reading. Same feed, a different page for every reader. Live now for all feeds!

leah 🛸
@spacegirl.ing

can someone elaborate on what the issues with cory's piece actually are? i mean it's a different framing but it doesn't seem objectively wrong to me

Will Stancil@whstancil.bsky.social

No. This Cory Doctorow post is awful and borders on actual misinformation. The fact that a widely respected voice like him is spreading this kind of false narrative is, again, a giant blaring alarm about the effect the Bluesky info environment is having on people’s brains.

leah 🛸
@spacegirl.ing

"That’s the speed of collaboration that’s possible with X, agents, and boundless ambition!" 🤡

austin@aparker.io

@digitalocean.com et tu, brute? omarchy.org/news/2026/09...

omarchy.orgDigitalOcean joins as a Founding Corporate Patron with $3 million - Omarchy NewsDigitalOcean is joining the Omacom Foundation as a Founding Corporate Patron, contributing $1 million a year for three years! That’s a $3 million commitment to the development, maintenance, and spread...
leah 🛸
@spacegirl.ing

this seems like it would make it harder to do native atproto integrations aka @airglow.run etc 🤨

Anirudh Oppiliappan@anirudh.fi

We're moving issues/pulls (and a few other things like collaborators) into git repositories, much like Radicle does. This data will be "knot-owned". There's a lot more here to talk about but I will do that once we've stabilised everything.

leah 🛸 reposted

jamelle
@jamellebouie.net

so unfair that you might be attacked for just wanting a white ethnostate anyway after like a decade plus of usage i canceled my @1password.bsky.social subscription and switched to apple passwords. took 15 minutes.

andy™@andylevy.net

ah yes once again the racists are the real victims