Monthly Shaarli
August, 2024
Here’s the pitch: a motivated group of talented Rust OS developers could build a Linux-compatible kernel, from scratch, very quickly, with no need to engage in LKML politics. You would be astonished by how quickly you can make meaningful gains in this kind of environment; I think if the amount of effort being put into Rust-for-Linux were applied to a new Linux-compatible OS we could have something production ready for some use-cases within a few years.
Tips and guideline about writing your own API in rust.
It's all paragraphs at the end :)
Sur les initiatives citoyennes lancées dans l'UE
Animals put them in the shadow of a wind turbine.
A share from another share
Instead of scanning my surroundings for something relatable to turn into a social media post, I pay attention to blog posts and articles I read on the web. I’m constantly looking for anything of relevance that triggers and sparks my thinking into jotting down whatever thoughts I may have to add to the conversation. — Social media brain
Another positive blog post about blogging :)
Full of advices on these misused and abuses
CoPilot can be encouraged to launch HTTP requests on the server side, potentially enabling access to data from other companies.
A server-side request forgery (SSRF) bug in Microsoft's tool for creating custom AI chatbots potentially exposed info across multiple tenants within cloud environments.
Though the research proved inconclusive about the extent that the flaw could be exploited to gain access to sensitive cloud data
À propos de l'obésité logicielle
Une alternative à Google Maps
À propos de Strava
An awesome talk about how to write effectively.
A blog post version for developer is available in another shaare: https://shaarli.lyokolux.space/shaare/gNfmPg
#todo link my notes
Le commentaire du Hollandais Volant est pertinent: https://lehollandaisvolant.net/?id=20240822170443
Il y a déjà des solutions.
Un reportage faux de TF1 montré par Max BLD. Il montre toutes les solutions et pourquoi le reportage pose de faux-problèmes.
Un ajout du hollandaisvolant: https://lehollandaisvolant.net/?d=2024/08/24/05/00/31-mes-deux-mots-de-la-fin-sur-le-reportage-de-tf1-en-ve
No account. It simply streams audio.
Des jeux d'occasions
What make things interesting are personal things.
It is liberating. There are always topic to write about.
Maybe someone else will find joy in it, maybe not. It doesn't matter.
- text editor
- 2D game
- compiler - tiny Basic
- Mini Operating system
- Spreadsheet
- Video game console emulator
I will read it someday :)
To be tested. I don't know if such app provides value or is a simple checklist that does not ensure accessibility.
an arena is a way to store your data somewhere without directly going through the system allocator. If you have a lot of small objects which you don’t mind to deallocate together instead of individually, this can be a lot faster. You could use a Vec for this. However, if you store data in a vec its address might change all the time.
Some thoughts about high-leverage job.
Where to start: https://www.givewell.org/about.
The website contains a lot of information: goals, how and mistakes!
How to display free places for a show. It uses an API from a Google Form.
They are definitely not flat.
the goal for rainfrog is to provide a lightweight, terminal-based alternative to pgadmin/dbeaver.
The "(no)alloc" next to "(no)std" is a feature to disable the heap, and enforce only static allocation.
For a long time (and having a history in embedded) I think: Stack is enough if you have understood what you are about to write and are able to make design decisions aka good software.
The official website can be found on https://www.cedarpolicy.com/en
Cedar is a language for defining permissions as policies, which describe who should have access to what. It is also a specification for evaluating those policies. Use Cedar policies to control what each user of your application is permitted to do and what resources they may access.
It's called Mastodon Stampede: a link shared on an instance gets downloaded by all instances. A DDoS follows for small hostings.
2.9 milliards de personnes. La probabilité est forte que nous soyons impactés.
Developers are not happy with their job.
Programming is not the problem though (64% does it afterwork).
Moreover coding is a sedentary job, and a sedentary lifestyle is extremely harmful to physical health.
So we have the three pain points of the software developer job.
Du ressenti du web des années 90 à maintenant
Diagram titled 'Possible causes of your problems'. On the left hand side, subtitled 'Yes': Funding removed from local councils, growing gap between rich and poor, multinational companies not paying their taxes, lack of new affordable housing, government not investing sufficiently in schools and healthcare. On the right hand side, subtitled 'No': Picture of small boat, with arrow; 'People fleeing horrific situations that you and I can't imagine'.
One keylearning: write functions
- Memory safety (while working in the aerospace industry with an emphasis on space). Then the rest.
- welcoming community
- good documentation & tooling
- fun to write (in a way??)
- good compiler errors
- fast && secure
- queer community (feel like the Rust community is extra gay 💖)
- great for CLI tools
- the different approach for working with memory (borrow-checker).
- correctness
- fast & small executables
- quality of learning tools
- AI support through a critical mass of resources
- easy once the learning cliff is reached, compared to never-ending list of weird special cases in other languages
- consistent language
- everything is an expression
- pattern matching and enum variants
Forget #rust, learn sea++
That's very interesting
An appeal court ordered Microsoft to refrain from placing and storing cookies on the data subject's end devices without consent, even if this requires Microsoft to stop placing tracking cookies at all.
Les utilisateurs de applications de rencontres ont des risques d'être geolocalisé. Cela est d'autant plus inquiétant car ces applications sont utilisés par des harceleurs.
Quoting directly from the GPL: The “source code” for a work means the preferred form of the work for making modifications to it.
If a project is so difficult to build, package or redistribute that the only practical way is to use docker then this is hardly #FOSS
En fait on s'inquiète trop du réchauffement climatique. OK, les rendements agricoles vont s'effondrer et y'aura plus assez à manger. Mais quand il fait chaud on a moins faim, donc ça compense.
How to learn the alphabet in english? A for Apple, B for Ball. So you pronounce the letter depending of the associated word. I for Instect: that's great because the sound is different of "I".
How to name grid cells correctly? Here is a resource made for it.
Some are maintaining a list!
Les salaires de développeurs ne semblent pas avoir augmentés plus que cela. Ils ont cependant suivi l'inflation.
Une bonne nouvelle.
Le numéro du verre donnant l'âge vient du numéro du moule Duralex.
Which european language am I reading?
Regardless of what your parents may have once told you, it is not true to say that once something is online, it will be there forever. On the contrary, we’ve lost significant chunks of what used to be part of the World Wide Web to time and ‘link rot.’
Inevitably, the content of the dead is also changing how we grieve, with an increasing body of research showing that forms of online or digital content are replacing traditional mourning objects such as items of clothing, trinkets, religious symbols, or gravestones.
I suspect (or hope) that when I pass, the web may look very different. Yet I can’t help but wonder what will happen to all the essays, photos, posts, and messages I have shared and will share online in the future.
Read more about it: https://neonaut.neocities.org/cyber/crypt/
Un exemple de déclin des services publics.
Et s'il n'y a plus les données sur les infections nosocomiales, plus de problèmes.
Des contrats de travail à la journée ou la semaine.
Vous poser des questions, nous vos avons répondu par écrit [même si cet écris est hors-sujet].
L'hôpital ne se préoccupe pas de la politique sociale des sous-traitants.
Une proportion importante des services civiques sont utilisés comme remplaçant permanent des employés ou contractuels. Les missions proposées remplacent des missions métiers.
Les personnes qui annoncent ces nouvelles disent bien qu'ils ont des choix difficiles, mais aucun n'en subit les conséquences.
Start a VM or a browser ... in a browser
via https://korben.info/cloudtabs-navigateurs-virtuels-instantanes-sans-inscription.html
Welcome to the Rust Forge! Rust Forge serves as a repository of supplementary documentation useful for members of The Rust Programming Language. If you find any mistakes, typos, or want to add to the Rust Forge, feel free to file an issue or PR on the Rust Forge GitHub.
A testing service against an HTTP/1.1 implementation
Un example de blocage du site si on tente d'y accéder avec une IP étrangère.
That's a good news. The tool is great!
Rust biggest weakness: it needs a strong ecosystem of libraries. This ecosystem is fragmenting over time.
Sylvain recommends however four use cases for Rust:
- rewriting from C/C++ to Rust
- optimizing and securing the icome if the development can take two
- passionate that are already Rust experts and who are not counting their hours
- while starting a compagny that will vertically integarte a lot of different systems, from embedded devices to web services, i.e. https://oxide.computer/
That being said, if Rust may not be the best choice to build servers, Rust shines every time you would have picked C if it didn't exist such as crafting shellcodes and building other security tools.
A kind of friendly partal privacy policy
Serde with validation
Rain
rain all day.Rain to make that perfect gray.
Rain to keep people away.
Rain so I can puddle-play
- dialog: I use it regularly ✅
- picture: I only use images ⚠️
- data: It can be useful instead of spans 💡
- output: I never saw it ❓
- details/summary: I use it regularly ✅
- community
- user agency
- interoperability tests
- best practices for feeds
- browser integration
- authenticated feeds
- publisher engagement
À propos des routes commerciales
Selon le Parisien, c'est toujours le bon moment pour acheter de l'immobilier... Une vidéo argumenté pour démontrer cette fausse affirmation.
- les professionnels du marché qui y ont un conflit d'intérêt à s'exprimer, sans
- les sondages et avis douteux qui ne sont pas fondés
Et est-ce qu'il vaut mieux acheter ou louer? https://youtu.be/OAxqOR6VRLk?t=1376
Les joueurs décident du nombre de cailloux qu'ils mettent dans leur mains.
Au bout d'un certain temps, les joueurs tendent leurs poigs fermés contenant 1, 2 ou 3 cailloux.
Ils énoncent alors chacun le nombre de cailloux qu'ils pensent avoir en tout (en addtionnant les cailloux dans les 2 mains).Il est impossible de dire le même chiffre.
Si un joueur a gagné, il enlèce un caillou de sa main.
Le but final étant de ne plus avoir de cailloux.
The person who thinks everyone can write does the same because they do not understand the importance of written communication. They dismiss the importance of clear and concise writing and overestimate their own skills.
It consumes to much resources and people must have better hardware over time in order to develop....
Un exemple sur 15 entreprises.
Quand tu montre le ciel bleu à un ingénieur, lui voit la diffraction de la lumière
Another hypermedia framework
- parse a phone number
- normalize a phone number to E164 from local phone number or international codes
- detect if the phone number is valid
- get the country code from a phone number
A feedback from an Apple enthusiast
There are many books on leanpub :)
The top categories reference programming languages, architecture and so on.
Called "impl Trait type"
ObsoHTML is a Node.js script designed to scan HTML, PHP, JavaScript, and TypeScript files for obsolete or proprietary HTML attributes and elements (in scripts, it would catch JSX syntax). It helps you identify and update deprecated HTML code to be more sure to use web standards.
Insight 1: trust
Insight 2: loneliness
Insight 3: finances with big peaks and a couple of month of a lull
Create fonts without software. You only need a web browser
It is currently in alpha
Not sure Tim Berners-Lee’s vision was to have 148 requests transfer 5.3 MB of assets to deliver 15 KB of text
Un ami (qui ignore que le milliardaire Stérin finance le RN avec un plan de 150 millions d'euros sur dix ans) vous offre une Smartbox (société de Stérin) ?
Voici comment se faire rembourser sous 14 jours.
(via https://toot.portes-imaginaire.org/@loevenbruck/112939190690252785)
En 2024, il devient lobbyiste pour Shein.
Moins de services, 500 contractuels en moins. Déjà qu'ils sont pas cher payés.
Note: entre 1.6 et 1.8 millions d'économies pour 500 postes de contractuels.
Les témoignages sont pertinents, et l'efficacité montrée chiffres à l'appui. Ces économies sont volontaires et organisés à des fins précises.
and its website https://curl.se/trurl/
Mods for DOOM.
Independant websites are still there. Since Twitter lose users, more independant websites are rising. Other simply remains. The article provide some ezample.
Le vocabulaire dédié aux jeux vidéos expliqué par Sebsauvage. Il y a aussi un article Wikipédia bien fourni: https://fr.wikipedia.org/wiki/Glossaire_du_jeu_vid%C3%A9o
The user expérience should be what matters the most.
Web 3 for Read, Write, Own...
If the platform or service dies, you don't own it anymore. The same occurs when a platform can steal.
The author outlines https://mirror.xyz/ as an example. I didn't get into it yet.
Self-hosting is web3 at the end.
In just twenty years, OpenStreetMap grew from a small UK-based mapping project into the largest crowdsourced and crowd-worked geospatial project of all time. Mapped and managed by tens of thousands of volunteers all over the world, OSM is the leading provider of open source geospatial data, reaching billions of people each year through a universe of applications and products that use its data for free under the Open Database License.
It's hard to have a good privacy nowadays
cargo doc --open -p <crate>
This opens documentation in the web browser for any crate that a project might be using.
Randomize design tokens value :)
A tiling manager
Okay
A great resource to get into them
Oups. Les mots de passes de 15 millions d'utilisateurs sont dans la nature.
Bookmark for myself.
The favorites for appreciation.
The Boosts only for what I'm particularly fond of and what's similar to me, so I can have a sort of editorial line.
Le [RFC 9580] supplante donc le RFC 2240 en actualisant le standard. Rien qui casse la compatibilité, mais surtout des changements aux niveaux du choix des algorithmes et de la correction d'errata.
Que vous soyez débutants ou ancien Mastonaute blasé, que vous ayez 1 follower ou un compte à 5 chiffres, partagez !
Partagez ce que vous aimez, ce que vous trouvez intéressant, ce qui vous fait rire. Boostez ! Partagez !
Et aussi un slogan:
Si c'est Masto, c'est toi l'Algo ! 🔁🚀
(de https://piaille.fr/@Gergovie/112874241359422858)
The project to collect all great WebComponent: https://github.com/davatron5000/awesome-standalones
A critic: Telegram pushes Web3 and starts to look like WeChat
Alt text: Streetartwall. The funny mural of a fat pigeon was sprayed/painted under an old stone bridge. The background is light gray. The fat pigeon is sitting on the ground, red feet forward and seems to be resting.
La certification peut coûter quelques millions, ce qui est un freins pour le développement de logiciel open-source.
Medical Device Coordination Framework est un outil de coordination des appareils médicaux. L'objectif est de développer une plateforme matérielle open source.
What if I told you getting 200$ for passing GO in Monopoly is an example of universal basic income
Center for Internet Security BenchMarks
En permanence:
- livret de famille
- carnet de santé
- contrat de mariage
- jugement d'adoption
- l'acte de vente d'un logement
Après 3 ans: le contrat de location à la fin du bail
Après 4 ans: les avis d'impôsitions
Jusqu'à ce qu'ils soient reconnus par la caisse de retraite: bulletin de salaire
Une fiche plus complète est disponible à la page Durée de conservation des papiers
This repository contains the code for our paper: "Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact" ACM ASIACCS 2024. It contains a test suite for HTTP conformance tests of responses and test runners to run it on both local web servers and on real websites.
Everything should be written in #Rust
, but not everything deserves it.And that’s when I reach for #Go
And in the end I get paid to write #JavaScript
and #PHP
Also called german strings. This is a great data structure that explains how handling strings can be diverse.
Interesting debate here
It's sad on one side that some optimizations are not built-in...
- 📌 Multiple schema files
- Global omit
- 📌 Database level joins
- Is it a garbage?
- 📌 Performance checklist: https://www.prisma.io/blog/performance-benchmarks-comparing-query-latency-across-typescript-orms-and-databases
- Prisma Studio
- Prisma Pulse
- 📌 Prisma client extension
However, what most people don't realize about the role consuming meat in our evolutionary development is that we weren't eating meat as frequently as we are in the modern world. We were primarily grazing and gathering, not eating meat on a daily basis, [...]
When you live by the C,
juggling pointers, like razor blades,
while memory bleeds,
and comprehension fades,
you know what you need -
implement it, you must!
All your codebase
are turn to Rust!
Simply past a copied html content and it will be rendered as raw markdown on the page.
Un podcast sur les sujets de société et politiques.
How to improve a dictionary? Well there are many opportunities.
A dictionary can list the synonyms and each difference it has with the current entry. It can have more capabilities.
Par contre je pense qu’ils ont oublié de faire les comptes jusqu’au bout : à terme, ça réduira sûrement le coût des maladies induites par le tabagisme, coût lui aussi supporté par l’État, et probablement plus élevé que ce que rapportent les taxes.
A mindset shift
I want to become someone who enjoys tinkering with coding and tech every day
I want to become someone who loves running and taking walks.
[...] Just enjoy the path, stay on the path, and keep becoming.
TL;DR; -16% de postes pour les nouveaux internes.
Microsoft y indique qu'ils mettent simplement un outil à disposition et que l'utilisateur est responsable de tout: droit d'auteur, .
Microsoft stocke des informations sur sa création et associe ces informations et le contenu à un identifiant de contenu
Article anglais original de la dépêche de NextImpact: https://www.theregister.com/2024/08/14/microsoft_services_agreement_update_warns/
Ce guide est destiné à informer et conseiller les syndics bénévoles ou futurs
syndics. L’Anah (Agence nationale de l'habitat), l’Anil (Agence nationale pour
l’information sur le logement) et la CLCV (Consommation, Logement et Cadre
de Vie) ont souhaité vous apporter les clefs de vos missions via ce guide.
Il sera régulièrement complété et mis à jour
A feeback about starting a small business. It is full of insights and experiences.
First, you need to describe the intent of your code and give an overview of how it works both at a macro level (in the README / wiki) and at the micro level, by commenting functions, structures and packages. Document, document, document.
Second, give examples on how to use your code. Snippets that users can quickly copy/paste and "feel it". Even better, add comments with the expected output to your examples.
Three, write simple code.
An experiment to build a web browser based on Servo.
EDIT 2024-12-30: it has tabs now https://social.tchncs.de/@Blort/113740179696427117
I know half of them, and happy to discover the other half:
Jeremy Chone
Lets Get Rusty
Jon Gjengset
The Rusty Bits
Code to the Moon
Brooks Builds
No boilerplate
Logan smith
Chris biscardi
Tim clicks
Dario
sphaerophoria
Francesco Ciulla
Car traffic is a DDoS attack on cities.
Only set one language to reduce entropy and thus tracking.
I will argue that every small feature is a way to track users. We should avoid to diminish features for privacy. Privacy should be built-in or enforced.
Thoughts on AI usage: do they have a positive or negative global impact?
Des ressources utiles
“Jim Covello, Goldman Sachs’s head of global equity research, told me, “If we’re going to justify a trillion or more dollars of investment, AI needs to solve complex problems and enable us to do things we haven’t been able to do before.”
Yes it's a quote of a quote
C'est similaire de mon côté: un lecteur de flux RSS, un shaarli, et un tag "bookmark" et pas de reste en revanche. Sebsauvage va plus loin avec son propre wiki et la liseuse pour de longues lectures.
A successor for Insomnia and Postman. It catches API requests for now.
The more I discover git, the more I learn we can do everything with it!
Notes can be attached to git objects. We can then store plain text in these. So commente, review and so on. I added other posts relatée to git notes in the shaarli.
Pourquoi Framasoft ne fourni pas un service de DNS?
De Bortzmeyer:
1) de ne pas être trop gros pour ne pas devenir un « GAFA de gauche
2) d'être raisonnable dans les services offerts (comme la plupart des services, c'est facile de le lancer, c'est plus dur d'assurer la maintenance sur le long terme).
De Framasoft:
- notre valeur ajoutée serait plutôt restreinte, comme déjà dit, ça existe, juste pas connu 👀
- une grosse audience pourrait augmenter le fait qu'on puisse être vus comme une cible intéressante par certains gouvernements 🕵️
- il faut un effort plus conséquent pour changer ses DNS que simplement visiter un site web pour utiliser un service, ça peut être moins accessible 😓
{:#?} for pretty print instead of debug default formatting. Nice!
O_O it performs better than xz
« en fait, si je créais des articles sur Wikipédia, ce serait beaucoup plus simple pour synthétiser la connaissance. Non seulement je l’aurais pour moi, mais les autres l’auraient »
Le parcours à l'ANSSI montre les capacités de l'agence et son champ d'action.
Convert PDF to html
The digital art creations below are “64k intros”: small computer programs of 65,536 bytes or less, that present a short audio visual experience. They are a showcase of creativity and technical skills, using techniques like procedural generation, sound synthesis, and real-time graphics. More info.
Depuis leur rachat par une entreprise américaine, les prix sont de plus en plus élevés.
pour un .be on passe de 24€/an à 38€/an ! Il y a un an on était à 15€/an seulement.
Des alternatives sont recommandées par HgO comme lebureau.coop
Un exemple de personne qui veut une transformation durable et désirable.
« Lorsque tu es un athlète, tu apprends à être performant dans un domaine. Gérer son temps, se concentrer, planifier, travailler en équipe… Ce sont aussi des qualités particulièrement utiles lorsqu’on est un activiste. Je pense que je serais moins efficace si je n’avais pas été sportif. »
Il aspire que des célébrités plus importante que lui (+ de 3/10) prennent aussi le relais.
That's a good project. Make it better
An even smaller subset of htmx: it loads HTML onto any element in the page on request, and that's it.
La Scène a été parodié plusieurs fois.
"You weirdos only get offended when it's drag queens"
Cela ne veut pas dire que c'est bien. Pourquoi un tel engouement maintenant et pas pour les autre? Où est la différence?
C'est affligeant.