Polymaths.social

There is one thing that always confused me in SSH, especially when I was a beginner: key fingerprints. No matter if at university or online, I have never properly learned about what they are and why they're useful. It's this funny thing that your key has, and different keys have different fingerprints, or something.

But the same applies to public keys! And the private/public key separation was a much bigger part of the curriculum. Always keep private key secret, and you may share your public key with anyone. And because public keys are non-sensitive, different, and even may have a comment, I have always used those as "identifiers" for my keys.

It becomes hard once you start doing more advanced stuff with SSH. You are troubleshooting your SSH agent, or you just want to see what keys there are, but ssh-add -l prints something you don't know how to verify. Same when you want to see what keys are there in your GitHub account, or to verify the authenticity of the machine you're connecting to. It's always fingerprints, and yet I was never taught about what they are or how to generate one.

I do understand the concept now, of course, but I still have to search the Web for the fingerprint command every time I need it 🥲

RE: https://mastodon.social/@mistersql/117031601599809156

I thought “Why not?” and migrated a few long posts from Fedi to my blog

Ugh, I think the Zola 0.23 update will finally push me towards Eleventy. I already wanted to migrate (to have more flexibility), but the breaking changes might be the final trigger. Sure, components are nice, but then lots of things break or become more cumbersome than they used to. Biggest gripe: | group_by now breaks sort order???

Ugh, I'm not even using GitHub all that much (or at least not as much as earlier), but it feels like every second time I visit that hellhole it has some problems, and all I see are unicorns and 5xx errors. And then the status page gaslights me with its "All Systems Operational" nonsense

I built a thing! https://codeberg.org/kytta/gfts

The premise is kinda dumb. I spend a lot of time on Fedi, and I read a lot of posts. For some of them, I think: "Damn, that's a cool project/idea/website! I need to revisit this later!" Then, I just continue swiping, without bookmarking, boosting, or even starring the post. Fast-forward to a few days after that, and I am looking through my timeline trying to find stuff.

My Fedi instance is running #GoToSocial, and that does not really have search yet. The API is there, and you can search for accounts, but it's slow and never returns anything when searching for posts. So, I built gfts. It basically just crawls your home timeline and stores every post in a SQLite database with full-text search enabled. Then, you can search this database. That's it.

This took me ~3 hours to build, and I already love it because it helped me find a post that was on the tip of my brain this all time :P

Also, don't use it, it's very raw and forever unfinished :D

I didn't buy nor build any eclipse looking gear, but luckily, my phone camera has a scratch on it :D

Omg I can doomscroll Fedi again, welcome back @polymaths

#TIL #LanguageTool was acquired by a US company back in 2023 o_O

RE: https://mastodon.social/@concretedog/116976794778175500

Yeah so apparently HF scraped everything it could. Some of my repos are also there. I expected it to have my high-starred repos, but it also includes extremely useless stuff, like test repos and my class assignments from the uni.

Submitted my opt-out forms. See link above if you want to do the same. Also, a heads-up: if you have any repos under GitHub organisations, you'll have to check and submit separate requests for each org

If you missed it, there are new Euro banknote designs that you can vote for.

https://surveys.ecb.europa.eu/10b/neweuro/

Sadly, my highest vote of all the designs was "I neither like nor dislike it". Ninety percent of the designs are outright ugly, non-relatable, or break the Euro banknotes best feature.

I think putting personalities on the banknotes is a no-go, because it creates a precedent of member states comparing each other based on whether their national person is on a banknote or not, and if yes, what denomination. We had this in Russia with cities already: Small cities feel forgotten because they never have a chance to appear on notes, cities that were put up in a poll to appear on 200 and 2000 ₽ notes started a shit show by rigging the vote to the point that it had to be cancelled It's a bit better here, as it seems that personalities were pre-elected and fixed, but then it's kinda sad for 75% of member states not getting a proper representation.

Birds are much better for this, but still not perfect. I like the motive of displaying the birds, but I also don't feel very much connected to them either. Born and raised in cities, I frankly don't see birds as much :(

Then, some of the designs feature "people", by which I mean groups of illustrated people doing stuff like learning, researching, talking, whatever. The idea is nice, but all designs make them look like corporate stock illustrations. Design C is straight up Corporate Memphis.

Lastly, the EU buildings. The least offending one, but also quite bland and boring. I like the current banknote buildings because they feature different architectural styles and are pretty to look at. EU administrative buildings are not that pretty: They're just glassy structures lacking any distinctive style or soul. Especially the Court of Justice looks quite dystopian.

Of all designs, Design G is the one I'd be fine to live with; I find it pretty in terms of shapes and colours. Design I is also quite nice, but looks more like Japanese paintings rather than something European. The rest, sadly, looks like what tourist-trappy souvenir shops would sell an unknowing American for 10 Euro a pop.

#OH: Adidas. Two brothers: Adi and Das

GitHub is not alright

I got a reply to my latest blog post (as luck would have it, the AI-sceptical one) via email. As it turned out, it was not a reply, but an AI-generated cold email advertising some service for bloggers.

I replied, asking to stop doing cold emails like that one, especially AI-generated, especially on an anti-AI blog post. Got a reply starting with "You are absolutely right, ..."

The internet surely is dead

#PyPI now displays the #Codeberg logo on links pointing there! Looks way better than the generic "external link" icon

Zameldowałem się w hotelu w Krakowie o 21:37 – jakie to kultowe

Wdym my train gets cancelled less than a day before departure 😭😭😭

I am not a very emotional person, except at some very specific moments and for very random things. Like right now, when I was riding a bicycle and almost shed a tear thinking about how captivating and powerful the castle break-in scene from Shrek 2 is

Reading through this year's #Codeberg proposals and found this sad statistic.

Also note that we have somewhat little participation in many votes. [...] from recent polls, the participants / eligible voters looks like this:

20.45% → 21.91% → 25.88% → 16.64% → 17.59% → 16.45%
(percentage calculated by me; from least to most recent)

Ouch! We get more and more members, but it looks like almost none of them decide to vote.

If you are an active (= paying or honorary) Codeberg e.V. member: Check your emails! You should've received eight separate mails with links to the voting portal. If you haven't, contact Codeberg: codeberg@codeberg.org

Please take your time (it took me less than an hour), read the proposals, and vote on them!

P. S. I am just another member; I do not work at, rule over, nor control anything at Codeberg and so I cannot help you if you didn't get an email or can't sign up. Please don't ask questions in the comments 🙈

Really wish I could attend Codeberg Annual Meeting today, but that heat... It's only now that I'm finally awakening from hibernation

cURL summer of bliss? I'm getting the #pnpm summer of hell

My project just got a dependency update PR from pnpm v10 to v11 because of twelve new vulnerabilities, half of them "CVSS High". But, reading through the summaries and PoCs, I can't help but think that most of them are nothing burgers. Almost everything can be mitigated by a simple config change, and a good portion of those are like this by design.

Like, what the hell is GHSA-2phv-j68v-wwqx? "There is a possibility to execute programs. But if the program is malicious, you will execute a malicious program! RCE! CVSS 7.5! Patch asap!"

I'm either too dumb/sleepy/hot¹ to understand the actual risks, or it's really some panic making by whoever (or whatever) submitted those vulns.