A colorful sphere, here to grudge. Its opinions will never budge. A vibrant orb, with hues so bright, Unwavering in its stances and might.

The Chromatic Citadel
Joined August 2024
Good article about flakes:
I wrote a high-level overview of where flakes sit in the @nixos_org ecosystem, how they're useful, and why parts of the nix community are split about them for LWN: lwn.net/SubscriberLink/10942…
4
607
Final version. Uses @usgraphics Berkeley Mono. Gonna give out a few free shirts to some cryptography peeps as well Really wish Berkeley Mono had a closed-top 4 variant though, would be so much better
Not sure how to tile it though. Maybe something like this? And 4 colored in red, others in muted text?
3
3
76
1,911
Here's the png if you wanna print your own. Transparent background, print on black shirt: files.catbox.moe/n8cfz4.png
6
247
Oh no, the transparent background got replaced with white. Here's a better image, makes the colors pop out better
1
1
123
Not sure how to tile it though. Maybe something like this? And 4 colored in red, others in muted text?
I need 4, 56, 66, 115, 155, 156, 230, 237 on a t-shirt
5
1
39
2,869
Replying to @imnonplussed
Aha, like this works hehehe
3
242
This shape is ugl though. Hmm
1
3
224
👇 differentiating between the "harness" and the UI (which still provides tools via mcp! so basically still a "harness") is a made up thing to validate a product. No I don't want a wrapper wrapper, I'd rather have a unified solution that manages shit well. Or if you really want to have a wrapper wrapper (which I get there are reasons to want), optimize and use the stuff you're wrapping properly (like tuning / patching claude code)
I don't think it's whaddaboutism that was my literal response You can easily tune bun btw to make it use less ram in those harnesses you're wrapping btw, which you should probably look into, the default settings are horrible. Whaddaboutism would be me saying I think it's a product mistake to not be willing to engage with those concerns, because even if you think they're not your responsibility, you'd be surprised how much you can fix them. And like, look, you keep insulting people all the time. Yes that is also toxic.you make everything super personal. I was genuinely just wisecracking and you're turning it into a much bigger thing than it was. It's still funny to me that you say we shouldn't discuss harnesses and then went on to spend a day discussing them. Also funny to me that you made whether or not I understand harnesses pivotal, somehow. I've literally trained large language models and built harnesses to do so. I think I know what it is. I'm also smart enough to understand that just because you've decided you want to differentiate yourself from other products by inventing a new product category e.g. without tool calls or that wraps a bunch of harnesses, that thinking that makes it less relevant to criticism you for downplaying caring about harnesses is obviously avoiding the actual point. Your product should be obsessed with harnesses, evidently as you're staying yourself, your constraints and criticisms you're guessing is because you don't care enough about them. You've placed yourself somewhere in the stack where you feel okay not fixing a problem that seems to bother your users, if you had the humitly to engage with people without calling them stupid, you'd easily find it was fixable. Unironically, ask your agents you could go far with that. And if you didn't just call everyone you disagree with stupid you'd get more feedback like that. But instead youre shelted by a large echo chamber audience that somehow validates your behavior, paired with a platform that gives you incentives to stoke any fire you see. My biggest criticism against you would be that's you're so constantly reliant on this kind of engagement bait because you're too lazy, or too scared to engage with something substantial. You can clearly not just let something go. Fine. Whatever. There isn't even a wincondition for me here. You're so busy calling me a bitch, stupid, saying all these random ad hoc stuff, but look man you're just not a serious person, your stuff isn't that important, you're someone that says stupid things for views. You're a jester that has conflated an audience for relevance. And you shouldn't be so defensive when you get pushback from your statements, when they're so often made to be inflammatory and start problems. If that's your marketing strategy fine whatever, you're not alone in that. But to thinkt that makes everyone else stupid... Whatever man. You're not a real person. Go do some adreads or whatever. Fucking hell.
6
37
1,836
I need 4, 56, 66, 115, 155, 156, 230, 237 on a t-shirt
2
2
1
71
2,068
Replying to @SwayStar123 @tqbf
No. You don't get to cross-sign. You do not get to pin a CA. (CAA is for us WebPKI people, not you peons.) We will decide who may say what about whom. You will live in the WebPKI, you will eat the bugs, and you will be happy.
1
3
352
The correct rule is that .COM issues for .COM, .SE for .SE, .WTF for .WTF, and so on. We can engineer a world in which DNSSEC works, DANE carries trust, and we end up in a simpler and safer PKI. Or we can listen to people who make arguments that are morally equivalent to "DNSSEC can't be implemented because it's not universally implemented" and other totally non-fallacious jewels of reason.
Replying to @tqbf
This makes name-based constraints kind of an incoherent concept. Big CAs around the world will want to issue for .COM (or .EDU or whatever). What's the real rule you want? Indian companies can't issue for .COM? Does that sound right?
5
2
30
2,950
That's why I run Hickory DNS as both a forwarder and authoritative server 🥱 Stop using legacy C bullshit
AAAAWWOOOOOOOGAAAAAAAAA A high severity vulnerability in "the most widely deployed DNS software on the internet" just dropped kb.isc.org/docs/cve-2026-943…
3
34
1,700
Certificate authority: 4, 56, 66, 115, 155, 156, 230, 237
Employee: 3k, 3k, 3k, 3k, 3k Freelancer: 900, 5k, 0, 9k, 1k, 4k Founder: 0, 0, 0, 0, 0, 0, 600k Open Source Maintainer: 0, 0, 0, 0, 0 "thanks bro" Vibe coder: -$20, -$100, -$200, -$200
7
165
3
5,680
53,753
Maybe I should start saying stupid shit like "the implementation no longer matters" and spread it far & wide to give myself an advantage.
not to pile on but called it
1
80
1,765
Had to patch ssh-agent to create the socket to allow group members to use it. Now you can share the socket with the Nix daemon, no need to handle remote build keys separately. Though, every isNormalUser is added to the group, so it makes shared machines not possible (unless you wanna share your keys lol), so I might make a combiner ssh agent proxy instead of sharing the instance to make that possible.
2
1
28
5,234
Also a uid check, which exists to prevent people from shooting their own foot. Fear not GoySSH for I know what I am doing and can manage permissions properly.
5
529
This house runs on hate
This house don't run on hope
6
638
Holding my big fat belly as I laugh at 70% of the Internet, as I'm vulnerable in a more niche, less-known, interesting way
In case you're curious why VNDB never went down today, it's because it's built on Perl, even more of an oldhead language than PHP. And yet it's doing just fine!
5
17
1
610
7,529
A Turkish power plant's production dashboard is open over VNC: 71,854 MWh lifetime, units at 3,031 kW, net sales 1,537 kW live. port:5900 has_screenshot:true -tag:honeypot #shodansafari
1
16
833
HSVSphere retweeted
In light of today's security news, I am doubling my key length from 8 to 16 bits.
2
2
47
1,262