hackney 4.9.0 is out.
New: max_body_size caps buffered response bodies, 512 MiB by default.
Hardening: stricter SSRF checks, pinned CAs, redirect credentials and proxy TLS.
Fixed: a slow host no longer stalls the whole pool.
github.com/benoitc/hackney/r…
hackney 4.8.7 is out. It's a security update: quic 2.1.2 fixes session ticket reuse across listeners and closes two ways a hostile peer could stall or flood HTTP/3 and WebTransport connections. Upgrade recommended.
github.com/benoitc/hackney/r…
Livery 0.10.6 is out, now on quic 2.1.2 with its security fixes.
Uploads over the size limit on HTTP/2 and HTTP/3 now get a proper 413, not a stream error. And a GET over HTTP/3 no longer hangs when your handler reads the body.
github.com/benoitc/livery/re…
erlang_quic 2.1.2 is out. It fixes 4 security issues, including one high severity, and adds reader-driven flow control with quic:set_stream_flow_control/3 and quic:consume/3.
Please upgrade.
github.com/benoitc/erlang_qu…
la dernière chose don't j'ai envie c de perdre mon temps avec un conseiller commercial. C'est maintenant que je le veux pas demain ou après demain.
so i'm not sure. Advisories tickets are interesting, but why i should accept them from anonymous with a weird name ?
hackney 4.8.6 is out: large HTTP/2 downloads over slow links no longer time out, and now run about as fast as HTTP/1.1. certifi 2.18.0 drops the compromised eMudhra CA certificates. #Erlang
github.com/benoitc/hackney/r…
certifi 2.18.0 for Erlang is out.
Removes the distrusted eMudhra emSign roots (C1, C3, G3). The CA bundle now matches Mozilla's trusted set as of 2026-10-20 (118 roots).
hex.pm/packages/certifi
github.com/certifi/erlang-ce…
with the adition of multi processor to vmm, is there any reason to not go from freebsd fot openbsd ?Sill there is zfs and jails.
seriously do people test any more? freebsd, updated to llatest , bird 3.4 package is crashing. back to 3.2 that was working on 14.4 . crashing.
I wil open a ticket. But I used to trust more freebsd updates and the bird team .
This weekend I'm cleaning up AS209823 and preparing its move to full NFV.
Taking inspiration from Facebook's RFC 7938, I'm moving toward a simpler, BGP-only network. No more MPLS.
The goal is to replace any server without redesigning the network. Hardware should be disposable.
que fait l'INRIa ces jours ci avec l'IA. Un petit peu d'investissement dans la creation de modeles aerait pas mal? A quand un CERN oriente AI?
We shouldn’t worry about AI replacing parts of the development process. We had FileMaker, Access, Dreamweaver, and others. Anything that helps people build their own interfaces with the world is a good thing.
But software development is more than coding. It’s an art of understanding and interacting with the world. Learning languages and writing code have always been the easy part.
Benoît retweeted
As all programmers start taking the work of their coding agents completely for granted, the AI notices who still reads every line. 😍
New slopcore from yours truly!
h/t @anabology for Claudia
Benoît retweeted
Built a small tool for DGX Spark owners.
One command finds every Spark on your network over ssh, caps the GPU clock on each, and installs a system service so it survives reboots.
I use it myself - it reduces power consumption and heat with almost no effect on decode speed.
github.com/MiaAI-Lab/sparkLi…
FreeCORE TrueNAS® CORE — continued.
freecore.org
