taaz

I've remembered this exists and there seems to be some very recent activity in the repo so if you didn't know what was possible with TUI graphics now you know! (recommended watching with sound :)

Official site: https://notcurses.com/
Repo: https://github.com/dankamongmen/notcurses

PS: dank (the guy behind it) is definitely one of a kind, just read the releases haha

PPS: here is a doom running through notcurses in the terminal: https://www.youtube.com/watch?v=a_w5rh3c76g

cross-posted from: https://biglemmowski.win/post/2418820

For me, the most interesting point was the short mention of open sourcing Factorio (around 2:40). Kovarex seems to be very much open to the idea, he mentions that (as an approximation) maybe two years after the DLC after things calm down ...

(Hope this is not much of a titlegore)

cross-posted from: https://biglemmowski.win/post/1465956

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

E: https://github.com/wereii/lemmy-thumbnail-cleaner/issues/10

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

E: More information here https://github.com/wereii/lemmy-thumbnail-cleaner/issues/10

lemmy-1     | 2024-03-04T00:55:02.006942Z  WARN lemmy_server::root_span_builder: Unknown:
lemmy-1     |    0: lemmy_apub::insert_received_activity
lemmy-1     |            with ap_id=Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Some(Domain("lemmy.world")), port: None, path: "/activities/announce/like/19396dee-b18d-42d4-ba74-31986d4726e0", query: None, fragment: None }
lemmy-1     |              at crates/apub/src/lib.rs:198
lemmy-1     |    1: lemmy_apub::activities::community::announce::receive
lemmy-1     |              at crates/apub/src/activities/community/announce.rs:153
lemmy-1     |    2: lemmy_server::root_span_builder::HTTP request
lemmy-1     |            with http.method=POST http.scheme="https" http.host=biglemmowski.win http.target=/inbox otel.kind="server" request_id=13f38a7a-8814-4350-bf3a-b5a7e1dd3906
lemmy-1     |              at src/root_span_builder.rs:16
proxy-1     | XX.XX.XX.XX- - [04/Mar/2024:02:55:02 +0200] "POST /inbox HTTP/1.1" 400 47 "-" "Lemmy/0.19.3; +https://lemmy.world"

Considering the timing this is probably a side effect of .world upgrading to 0.19.3 and their federation kicking into "higher" gear. I see 20-50 warnings like these in logs every minute all from lemmy.world.
I am guessing .world thinks at least one of my users are subscribed to a community but they are not (?) so my instance drops the federation (?)

I have a unused RPi4 (the 8Gig one) running DietPi. I did use it as a playground but ever since I am renting a Hetzner machine for (playground) stuff that I want web accessible, I don't have particular use for the Pi.

I am currently running (outdated) Home Assistant on it but there isn't much I can connect it with (yet, getting the flashable/compatible ikea smart lightning zigbee? bridge thingy is on my bucket list). Obviously I do have a pihole there.

Shoot me any other ideas I could run there. Some kind of monitoring of my rented infra would be cool (I already have uptime kuma on the dedi hetzner box). One idea I had was if there are some OSS security scanning "daemons" I could use on to monitor my other infra.

Thanks a lot!

TLDW;

Pseudoregalia

Gravity Circuit

Dredge

Myhouse.wad

Jusant

Your Only Move is Hustle

24 Killers

South Scrimshaw

Laika: Aged Through Blood

King of the Castle

Against the Storm

Terra Nil

Mosa Lina

En Garde!

Cassette Beasts

World of Horror

Void Stranger

Chants of Sennar

Roboquest

Slay The Princess

Looks pretty great to me.

https://store.steampowered.com/app/2464530/VOIN/

tl;dr it's a strategy game, kinda like Stellaris (but... dumbed down?), it's free (for now) and fully playable with Proton Experimental, I have enjoyed playing it.

Stellaris Nexus, dubbed by devs as Stellaris experience under an hour.
If you love Stellaris or strategy games in general then I would recommend trying this one, there is a week of playtest (after which it will release as beta/pre-release, dunno the cost).

There is a lot to be polished (especially UI-wise) but I definitely do not regret sinking the last hour into first play-through of the Succession game-mode.

I was trying to give pointers to people in comments but it seems whenever I wrote uBlock Origin, "u B lock", SponsorBlock or "S p onSor Block" (without quotes) the comment would vanish within first minute.

Is this happening only to me/on this one specific video (in Czech, don't want to link because I don't agree with the points they said, though it was video about the adblock blocking of YT)?

I have been using xiaomi phones for a long time now, for most of them the (xda) community eventually had great ROMs that (eventually) worked without problems or with very little.

Though these days I need a working phone so I didn't bother with my (Mediatek) Note 8 Pro - last time I looked phones with these chips were a lot harder and more dangerous to flash then the Qualcomms I had before (loved my Xiaomi A1 for that tinkering with Ressurection Remix).

So I am looking for an investment - a device I won't have to replace for another ~6+ years but I really want my device to do mostly what I would expect, without any snooping or other privacy shenannigans - I know xiaomi is probably the worse choice for this but their hardware specs were always the best for the price and were generally easy to flash.
I don't like pixels - they are too expensive for the hardware it offers, at least in my country.

Thank you for any tips in advance.

Update: iPhone is a no go for me because of the walled garden - I am a software developer by trade and hobbyist, I like to have the possibility of cracking the device open, both HW and SW wise. I am willing to trade the longevity of the device for this.

cross-posted from: https://biglemmowski.win/post/224873

Posted on twitter by Curl author Daniel Stenberg - https://nitter.cz/bagder/status/1709103920914526525

We are cutting the release cycle short and will release curl 8.4.0 on October 11, including a fix for a severity HIGH CVE. Buckle up.

... But this time actually the worst security problem found in curl in a long time

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545