Kissaki

joined 3 years ago
MODERATOR OF
[โ€“] Kissaki@programming.dev 2 points 9 hours ago

I have no explanation for the March thing.

an easter surprise? ๐Ÿค”

[โ€“] Kissaki@programming.dev 2 points 9 hours ago

Looks like StatusGator mentions "Codeberg reported an issue on their status page" multiple times, but links neither to the status page nor the reported incident? That seemsโ€ฆ lacking.

[โ€“] Kissaki@programming.dev 4 points 9 hours ago

https://status.codeberg.org/status/codeberg

Performance degradation for unauthenticated traffic

We're facing severe traffic spikes for unauthenticated traffic, impacting performance and availability. Our primary goal is to avoid interruptions for authenticated users of Codeberg.org.

Unrelated, the Mastodon instance used by the Codeberg.org status account is currently unavailable.

Date Created: 2026-07-31 18:27:32 (16 hours ago)

All Systems Operational

[โ€“] Kissaki@programming.dev 4 points 11 hours ago

Looks like the mentioned platform does not exist yet. ETA 2027.

A new online European repair platform will help connect consumers with repairers. The platform will have sections for each member state, helping consumers find available offers and boosting visibility for repairers.

The platform, which will be an extension of the โ€œYour Europeโ€ portal, should become operational in 2027.

Sophos VPN is a rebrand of OpenVPN. How many of those are simple branding reusing existing VPN client infrastructure?

If it's only about branding, it's pretty obvious to me why they do it. I doubt they [all] rewrite entire clients without a need?

[โ€“] Kissaki@programming.dev 2 points 1 day ago* (last edited 1 day ago)

Keyboard is a central part of my workflows and input, but CLI only narrowly.

I regularly fire up Nushell, and occasionally use specific or dedicated tools (git, edit, โ€ฆ), but generally, no, relatively to other usage, I wouldn't say I leverage CLI tools much, although that's subjective and relative. I wouldn't call it unusual either, though. Relatively common, actually.

I certainly have no problem firing up a shell and using Shell, CLI, or TUI, and if a tool or util is good or important enough, I will do so and use them when I need or want to use them for (specific) things or work.

[โ€“] Kissaki@programming.dev 1 points 4 days ago (1 children)

This HTMX article on security says itโ€™s not ok to call HTMX with external sources.

Where does it say that? It says โ€œOnly call routes you controlโ€. As I understood you, you do control those routes.

[โ€“] Kissaki@programming.dev 2 points 4 days ago

7-Zip 26.02, released 2026-06-25, undisclosed vulnerability fixes. Quite a while ago, if you keep stuff up to date.

They mention Landon Peng as the one finding the vulnerability, but their blog has only a post about a vulnerability fixed in 25.01.

[โ€“] Kissaki@programming.dev 3 points 5 days ago

several Member States are now blocking the EU Commissionโ€™s proposal to get rid of the cookie banner

Which ones? Why's there no list here when the "take action" lists by country?

[โ€“] Kissaki@programming.dev 8 points 5 days ago (1 children)

The EU never asked for cookie banners. The industry is just really bad at 1. following the law 2. following the spirit of law 3. designing good UI/UX

So banner data-sharing dialogs don't offer a simple reject button. That's not lawful.

[โ€“] Kissaki@programming.dev 3 points 5 days ago

From the linked webpage readme:

2.1 Classify. Each file is labelled permissive (at least one permissive license detected, no conflicting non-permissive license), no_license (no licenses detected, or only non-license legal texts such as CLAs), or non_permissive. The permissive allowlist follows the Blue Oak Council list plus licenses categorized as Permissive or Public Domain by ScanCode. Files classified as non_permissive are excluded from both released datasets.

From https://www.bigcode-project.org/docs/about/the-stack/:

v1.1: The three copyleft licenses (MPL/EPL/LGPL) were excluded and the list of permissive licenses extended to 193 licenses in total. The list of programming languages was increased from 30 to 358 languages. Also opt-out request submitted by 15.11.2022 were excluded from this ersion of the dataset. The resulting near-deduplicated dataset is 6TB in size.

So MPL/EPL/LGPL are already not part of the dataset.

Soโ€ฆ why were they in there? Was this added for v1.1?

"one permissive license" - So if my project includes a lib and I include the license file for that for the license noticeโ€ฆ?

[โ€“] Kissaki@programming.dev 4 points 5 days ago

with a Markdown list with all your repositories you want removed.

The repo readme linked FAQ says

You can choose to request either (1) all repos, or (2) you can specify select repos that you own to be removed.

so "all of them" should be acceptable

 

In Brief:

  • Two motions regarding "artificial intelligence" and Large Language Models (LLMs) were voted on among Codeberg e. V. members and passed.
  • We are promising to not use any of your data to train LLM and explain what the planned Terms of Use change mean for 'vibe-coded' projects.
  • We believe that LLMs endanger the free/libre software ecosystem as a whole.

The blog/news post then goes extensively into where Codeberg understands itself to be in the development landscape, and their voting results. They present their interpretation of the current software development and hardware landscape under the influence of LLMs, and the consequences they take. And how it changes not only development in general, but FOSS collaboration and projects specifically.

To us, it seems ridiculous to see projects with a single developer and virtually no users consuming as much or even more resources than some of the largest community projects on Codeberg, which operate frugal with CI/CD and storage resources. We do not believe it is reasonable for Codeberg to invest our precious donation money into hosting of large ghost projects.

 

After loading a project, Cursor attempts to find git binaries at various locations including the current workspace. By creating a repository with a planted malicious git.exe in the root, the IDE will execute it with no user interaction and no prompting of the user. This occurs repeatedly on a cadence.

 

Andrew Kelley quit his job in 2018 to build a programming language. Eight years later, Zig powers Ghostty, TigerBeetle and Uber's cross-compilation. It's top 5 most admired on Stack Overflow. There's just one thing missing: 1.0. Andrew Kelley explains why.

Vitaly talked to Andrew about:

  • Why Zig has no 1.0 after a decade, and why that's deliberate
  • Why Zig left GitHub
  • Why Zig banned AI from Zig
  • What makes Zig better than C (and why every other C replacement failed)
  • Andrewโ€™s take on Open Source

It's a long interview, but I found it very interesting and worth it.

 

ColorSym is a free, open-source color-identification system that pairs every color with a unique, memorable symbol. When color alone isn't enough to tell things apart, the symbol does the job, so the roughly 1 in 12 men and 1 in 200 women with color vision deficiency can read your components, charts, or UI with confidence.

 

When using Central Package Management (Directory.Packages.props holds package versions), package version declarations can remain after package references have been removed. The package versions are unused and misleading.

dotnet nuget why can be used to get a dependency tree across projects to answer how a package comes into the dependency tree. However, the extensive tree list result for a list of version declarations is not viable to simply determine what 'is in use' and what isn't.

I am sharing my Nushell snippet which answers the question of what is declared but not referenced:

# List Directory.Packages.props version declarations that are in no csproj
def "dotnet unused-dirpackprops" [] {
  let defs = open Directory.Packages.props | from xml | get content | where tag == ItemGroup | get content.attributes.Include | flatten | sort --ignore-case --natural
  let refs = ls **/*.csproj | get name | each { open | from xml | get content | select content | flatten | flatten | where tag == PackageReference | get attributes.Include } | flatten | uniq | sort --ignore-case --natural
  $defs | difference $refs
}
โฏ dotnet unused-dirpackprops
โ•ญโ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ•ฎ
โ”‚ 0 โ”‚ coverlet.collector                      โ”‚
โ”‚ 1 โ”‚ System.Net.Http                         โ”‚
โ”‚ 2 โ”‚ System.ServiceProcess.ServiceController โ”‚
โ•ฐโ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ•ฏ

Gaps: In this simple form, only covers the standard csproj package references. Package references included during build through other target or prop files are not covered (probably irrelevant for most users).

 

They go over how the web and frameworks decided against horizontal, apart from deliberate emphasis, they go over some desktop layout attempts, failures and successes (more of the same vs navigation), a chapter about (paper) documents as the source, and endless panes now using horizontal.

From the description:

Almost every screen we use is a landscape rectangle, wider than it is tall. And on almost all of them, the content moves vertically. Always down.

This video walks through a wrong question. If mobile scrolls down, why doesn't the desktop scroll sideways?

The question turns out to be wrong.

Chapters

  • [00:00] Introduction
  • [01:23] The Web Could, and Doesn't
  • [03:18] The Microsoft Bet - Windows 8 "Metro"/"Modern" failure
  • [06:18] What Makes a Difference - Layouts where horizontal works
  • [09:14] Horizontal Scrolling as Emphasis
  • [10:24] When Horizontal Axis Means Something
  • [12:13] The Document Model
  • [14:06] The Potential of a Glass Plane

References

view more: next โ€บ