strenholme
I finally replaced the head unit with a plastic bracket and a standard old school in-dash stereo system. Much nicer setup.
It’s the cars which can’t have their head unit replaced with a simple stereo which worry me.
I am more a RedHat user, and Ubuntu never felt really comfortable for me. I don’t like having to do incremental upgrades every two years or so; I would rather do a single big upgrade about once every 7-8 years and have a rock solid development environment. Also, `dnf` is simpler and more stable than the mess of `apt-get` and `unattended-upgrades`.
sudo dnf --enablerepo=security updateReboot to have the new kernel
This is how to get the patched kernel right now if running Rocky Linux.
Here is the patched kernel (`rpm -qa | grep kernel-6`)
kernel-6.12.0-211.69.1.el10_2.x86_64
https://rockylinux.org/news/2026-05-14-introducing-security-...
https://forums.rockylinux.org/t/cve-2026-98432-any-roadmap/2...
https://access.redhat.com/security/cve/cve-2026-98432
For RedHat/Rocky 10:
https://access.redhat.com/errata/RHSA-2026:93413
Also, a mitigation:
https://access.redhat.com/security/vulnerabilities/RHSB-2026...
When I interviewed with them a couple of years ago, I got the sense there was a lot broken with their culture. It was the best choice back when RedHat/CentOS stopped providing long term security updates, but now that Rocky Linux is around, it’s getting to be time to jump ship again.
I might be moving over to Rocky Linux 10.
https://ubuntu.com/security/CVE-2026-98432
It’s still, over a week after disclosure and patches, unpatched in Ubuntu.
As for me, a part of me wants to move over to Rocky Linux 10.
Lua5.1 is much more stable by the virtue that the only updates it code gets are very minor changes to fix any lingering security issues it has (the last Lua5.1 CVE is from 2014).
[1] I guess these days a LLM can do the grunt work of converting a Python2 script to Python3.
[2] There is a project which converts Lua in to native code: https://github.com/samyeyo/clx
Lua 5.1’s edge over Javascript and Python is that it’s a lot smaller and simpler.
[1] It’s possible to recompile Lua 5.1 to have the numeric data type be an int, but the standard compiles of Lua5.1 only have double precision floats for numbers. Bitwise operators are technically not part of Lua 5.1, but a library to add support is easy and is usually done: Most Lua5.1 forks including LuaJIT and MediaWiki’s version of Lua5.1 have such a library available. Later versions of Lua have both int and float support.
https://archive.ph/HcOq2 (This is a link to the post for this article)
(If one’s ISP can’t access archive.today, I find that Firefox’s built in free VPN can usually access them)
Or, you can use on of the various Reddit scrapers, e.g:
https://redlib.catsarch.com/r/Seattle/comments/1xhf6qp/archi...
Here’s a list of Reddit scrapers:
https://github.com/redlib-org/redlib-instances/blob/main/ins...
Personally, as scummy as archive.today is at times, I can generally trust them to have an honest archive about, say, someone’s drunk post before said drunk deletes the post.
I wish Lua 5.1 could become part of POSIX; there are a lot of implementations of it out there.
background: #eee;
print-color-adjust: exact;
-webkit-print-color-adjust: exact;The way to handle elements wide enough to induce horizontal scrolling is to put them in a <div> (or make CSS for the tag in question) and make CSS with overflow-x: scroll; for just that element. An example from one of my webpages:
pre {max-width: 90vw; overflow-x: scroll;}The only way to work around this is to have two sets of chess pieces in the font, one with a white background for pieces on light squares, and one with a colored background for pieces on dark squares.
Printing web pages is rare enough I just assume someone doing that will also click on “print backgrounds”.
(The reason to not use images for the chessboard diagrams is because they use more bandwidth and can’t have usable “dark mode” colors)
To wit: There was a lawsuit where Susan Clements-Jeffrey sued Absolute Software (Lojack) for a stolen laptop she acquired; Lojack used surveillance to track down the stolen laptop and Susan successfully sued for invasion of privacy (Lojack settled instead of trying to fight it).
A lot of these bug reports are incorrectly filed. Let’s look at one issue, which I am sure was found with AI assistance:
CVE-2026-40719
Here’s the issue: An IP authorized to perform recursive queries can cause the DNS server to be non-responsive if it sends hundreds of specially crafted packets a minute (this can be changed to millions of packets a minute if one sets a parameter in the configuration file). Normal service is restored within a minute of the attack being stopped. The workaround would require me to essentially rewrite the recursive part of the DNS server.
Since the DNS server, like any server in a LAN, is already vulnerable to a flooding attack, this is just a flooding attack with extra steps.
I told the guy that was interesting, I’m not being paid enough to rewrite the DNS server to be immune to the attack, and people shouldn’t be using its recursion (it has very limited IPv6 support, for starters), and if they do use its recursion, only authorized IPs (e.g. 127.0.0.1 or 192.168.1.0/24) should be allowed to perform recursion.
It wasn’t a serious enough attack to merit a patch, and anyway the guy reporting the bug didn’t even have the decent courtesy to give me a patch.
The guy responded by filing for a CVE report, incorrectly calling it a “high impact” bug, and I had to make a “patch” which simply disables recursion: https://samboy.github.io/MaraDNS/patches/MaraDNS-CVE-2026-40...
Point being, a lot of these CVE reports out there which supposedly are high impact bugs are trivial things like “someone can overload a server for about one minute if they send hundreds to thousands of specially crafted DOS packets”.
(Today, I got an issue which, as far as I can tell, looks to be a Linux kernel issue and not an issue with my code. I told him to show me how he would patch my code to “fix” the issue, but so far have gotten nothing but crickets)
Does the fact I have written this resolver make me liable should it not block the domains they listed which may contain copyright infringing content? Am I now required to add these domains, and make them part of a mandatory block list? Will I still be held liable if people can still access these allegedly copyright infringing domains by modifying the source to my program?
Keep in mind that when Quad9 had a similar lawsuit in Germany, they blocked queries from German IPs, but the idiots said Quad9 was still liable because people could use VPNs in Germany to bypass their geoIP blocking.
Quad9 being forced to block these domains will achieve nothing. Will these copyright enforcers now go after Google for 8.8.8.8? Cloudflare for 1.1.1.1? Level3 for 4.2.2.1? Will they go after ISC for BIND? NLnet Labs for Unbound? CZ.NIC for KnotDNS? Me for MaraDNS? Even if they enjoin me from making a recursive resolver which can resolve these domains, that won’t stop anyone and everyone from forking my code (see also: Twitter trying to take down Nitter).
https://github.com/joelanders/reflecticon-224
This one needs actual 224 ROMs to run, but we also have...
https://github.com/filipeborato/borato-224
The second one is an 8-line FDN. While the actual 224 used “circle 8” algorithms instead of FDNs (it was Eventide who started using FDNs for reverberation) one can get amazing reverbs from a FDN, e.g. Valhalla Supermassive is a 16-line FDN where the 16 delay line amounts are the only thing that changes between algorithms. I myself have made a good sounding 4-line FDN reverb, and 8 lines was used in one of FreeVerb’s algorithms.
From https://github.com/tonsky/FiraCode
“Fira Code is not only about ligatures. Some fine-tuning is done for punctuation and frequent letter pairs.” Note that without ligature support, a lot of that fine tuning is lost.
That said, the original UNIX V7 implementation of /bin/sh didn’t distinguish different kinds of whitespace:
For example, ligatures in Fira Code cannot be disabled when using the Cygwin terminal in Windows (mintty). In that application, for example, “===” looks like three continuous long lines atop each other in Fira Code, with no way to make it look like three equal signs again.