@jbigham this is juno erasure (to say nothing of all the well.com perverts back then)

@bryanjclark this is such a fascinating exploit if it uses server-based passkit push updates to deliver compromised payloads that don't get handled by blastdoor until it's too late. i would imagine the problem is that images require a non-finite amount of space after decompression but that some cleverly compressed regions can exhaust the amount of memory allocated and allow you to traipse over old dylib code that executes at a higher privilege level. my understanding is that blastdoor prevents this for most data that comes in from imessage, but probably older codepaths are still vulnerable (i'm guessing lockdown mode just nixes all features that don't route initially through blastdoor)

@bshaykin this thread is doing the opposite of “giving me life”

Just launched: the initial version of Postmarks, a new ActivityPub platform that lets you save, tag and share bookmarks on the Fediverse! More info on my blog: https://motd.co/2023/09/postmarks-launch/

*in the style of 'blowing in the wind'* ...and how many times must one write a 'find closest `node_modules/.bin` dir relative to this view' function...

@isntitvacant these three posts were really great, i know you vow to write shorter stuff in the future, but i would happily read this if it were a full length book about the past twenty years with context from the prior forty, it's gripping and a lovely reminder of all the little things that have come and gone. thanks for writing it!

@bmp @bryanjclark i was expecting a conversation here about how classdojo had also gamified declining the upgrade path and your student had gotten a demerit as a result or something

@hotdogsladies winc! https://youtu.be/H8d3LOpOQX0

getting this just under the wire today

this too https://www.futurefonts.xyz/charactertype/lapidar

this is so nice https://www.futurefonts.xyz/duong-tran/loes

@sommer @andy_matuschak here it is https://squidgies.app/ !!

rewatching All The Little Things and i just don't understand how the js community never ended up doing more of these kinds of talks but as far as i can tell, due to social media dynamics, it focused its energy intensely into releasing frameworks and libraries instead. i'm sure somebody else has written this, but it feels rails and django had the benefit of thriving under a blog/bulletin board-centric environment where content-rich talks were the natural outcome, not github stars or npm installs.

https://www.youtube.com/watch?v=8bZh5LMaSmE

@sommer @andy_matuschak iirc mentioned a language learning chatbot startup a while back but i don’t remember where

when will germany truly have unification? never???

@omar i used to follow a lot of his web experiments and completely stopped after i dropped my rss habit, great to see his stuff again!

bluey in latin-american spanish is such a letdown. so many missed opportunities for casting, but the biggest of all seems to me bandit who sounds like the lamest dad possible in spanish. i feel like what makes him work in english is that he's both very confident and in that he projects a one-time cool, but the spanish dub makes him just sound square and marshmallowey. no disrespect to the voice actor who is clearly trying _something_, but it's really miscast. chili is also terribly miscast imo, both of them sound like they're at least ten years older than in the original mix and both sound like doughy elementary school teachers instead of Secretly Cool Parents.

new gold dream

From brick builder Angus MacLane, if you recognise it, I think it'll make you smile. I certainly had a little giggle. 😁