Lightnews — Scholar-powered news

Reposted by easrng

Filippo Valsorda @filippo.abyssdomain.expert · 1h

The pull_request_target vulnerabilities will continue until GitHub Action improves.

This time, it was nothing less than NixOS/nixpkgs.

pull_request_target is unsafe at any speed. Never worth it.

Pwning the Entire Nix Ecosystem - ptrpaws's blog 🌸

ptrpaws's blog on reverse engineering, programming, vr finds and miscellaneous stuff.

ptrpa.ws

2 14

Reposted by easrng

ari 💫 @arimelody.space · 2d

finally, π-thon. (python 3.14.0, released october 7th, 2025)

2 20 65

Reposted by easrng

tobyfox @tobyfox.undertale.com · Oct 25

400 4.4K 25K

Reposted by easrng

Elysia @mademoisellely.bsky.social · 1d

caught a sunset on my way home today

#elysiaphotos #ottawa #photography

omafiets with low contrast and saturation in front of a sunset, framed with trees.

4 11

Reposted by easrng

chloe 🐇 @sapphic.moe · 1d

gen z is trying to cancel nix-darwin

2 2 24

Reposted by easrng

isabel @isabelroses.com · 1d

the sanity of google software

Google wallet is not Google pay is not Google pay is not Google wallet is not Google check out is not Google wallet is not android pay is not Google pay send is not Google pay

13 97 320

easrng @purl.org · 1d

use the native node:sqlite module

1

Reposted by easrng

vanilla @downbad.forex · 1d

thats crazy

1 1 9

Reposted by easrng

ramiel @ramiels.me · 1d

2 27

Reposted by easrng

MondySpartan @mondyspartan.bsky.social · 1d

The Mizu5 spyware caught on live TV (2003)

2 11 56

easrng @purl.org · 1d

what if I don't do indexing and just pull from PDSes :)

1 1

Reposted by easrng

David Buchanan @retr0.id · 1d

I'm building a contraption (camera battery with integrated type-c charger)

(yes that capacitor is both load-bearing and too big to fit, I need to find a smaller one)

1 19

Reposted by easrng

leo vriska :light2: @leo.60228.dev.ap.brid.gy · 2d

> Apple TV+ is now simply Apple TV, with a vibrant new identity. Ahead of its global streaming debut on Apple TV, the film continues to be available on [...] Apple TV [...].
> [...]
> Apple TV is available on the Apple TV app in over 100 countries and regions, on [...] Apple TV [...] and at […]

Original post on 60228.dev

60228.dev

3 3

Reposted by easrng

willow @witchfuneral.quest · 2d

is anyone else getting tired of the victorian / middle earth aesthetic discord has been using? guilds were fine but this is a little excessive

discord context menu that lists

"send to the gallows
enroll as royal guard
stop the tomfoolery
behead postehaste
seize this user
inform of a malicious plot"

as available options

12 870 2K

Reposted by easrng

🇨🇦 spooka @yuka.tgirl.beauty · 1d

i guess we doin lix now

1 1 12

Reposted by easrng

juliet @juli.ee · 2d

some of you are writing blog posts with AI and it shows

7 2 87

easrng @purl.org · 2d

ex. github.com/easrng/atpkg...

github.com

1

easrng @purl.org · 2d

It does!

1

Reposted by easrng

juliet @juli.ee · 2d

we have it so much better on the atcute side
@atproto/api plebs are coping

juliet @juli.ee · 2d

you shouldn't need to generate any client because it has a generic xrpc client that calls endpoints, so the generated lexicons should be included when imported
github.com/mary-ext/atc...

atcute/packages/clients/client at trunk · mary-ext/atcute

a collection of lightweight TypeScript packages for AT Protocol, the protocol powering Bluesky. - mary-ext/atcute

github.com

1 2 27

Reposted by easrng

norma!~ @ntauthority.me · 2d

wi-fi 7
wi-fi 8
wi-fi rt
wi-fi 8.1
wi-fi 10
wi-fi creators update

5 12 60

Reposted by easrng

miyuko @calayucu.com · 2d

have you heard. they made good chromium with mv2 extensions

1 1 4

easrng @purl.org · 2d

also while we're here will my (ab)use of lazy here cause problems? manually throwing promises is super finicky and I didn't see another easy solution github.com/easrng/atpkg...

atpkgs/web/load.tsx at main · easrng/atpkgs

Contribute to easrng/atpkgs development by creating an account on GitHub.

github.com

1

easrng @purl.org · 2d

iirc it was initially rendering just the second route (before it knew if it would suspend) then bringing the previous one back on the next render, which was probably the real problem, the `first` thing (trying to keep the vdom position stable for each page) might not actually be doing anything

2 1

easrng @purl.org · 2d

there were some suspense issues, when a page suspended the previous page was destroyed then rerendered, which caused visual glitches

1 1

easrng @purl.org · 2d

this but unironically

1 2