voidq
@hey@voidq.xyz
it's pronounced 'yagoda' => GPN [she/her] » 🌐
@j-g00da@donotsta.re
I will be posting wires and wireframes now #photography #art #jagodacore
@hey You can take look at this article:
https://repo.or.cz/code-notes.git/blob_plain/HEAD:/notes/Unix_As_An_IDE.txt
@hey Of course, you can take look at this Neovim config too:
Keep in mind that an external software requires additional maintenance work. Meanwhile embedded in OS tools are developed alongside the whole system.
Stop feeding the machine! ✊
Big AI profits from token bloat & subscription traps, hiding real utility behind opaque paywalls. Privacy shouldn't be a luxury you trade for convenience.
I’m fighting back with Searchbase v1.0.0: a sovereign, self-hosted search layer for LLMs. No ads, no tracking, just clean Markdown to stop token waste & reclaim autonomy. Open source & privacy-first, forever. 🏴☠️
Deploy it now: https://searchbase.md
🟠 CVE-2026-44724 - High (7.8)
systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces() when an active NetworkManager connection profile name contains shell...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-44724/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
#voidlinux setup
systemd ❌️ runit ✅️
glibc ❌️ musl ✅️
X11 ❌️ Wayland ✅️
Gnome ❌️ KDE ✅️
@hey My laptop on X11 was having random reboots for years whenever I played a video on VLC or loaded google maps on Firefox. I tried making a sacrifice to Cthulhu but it didn't work. Wayland seems to have fixed it, no crashes or reboots for a month now.
ps -ww -p 88163 -u | awk '{for (i=1; i<=NF; i++) a[i,NR]=$i} END {for (i=1; i<=NF; i++) { val=a[i,2]; if(a[i,1]=="VSZ" || a[i,1]=="RSS") { val=sprintf("%.2f MB", val/1024) } print a[i,1] ":\t" val }}'
USER: snacYou can do it.
The only thing standing between you and what you want to do is a guided tour of multiple pop-ups you need to dismiss before you can get to that one thing you need to do, if you don't get distracted before you reach the point where you can do it.
Use #emacs, btw. Emacs has never greeted anyone with a guided tour that they need to dismiss when they open the app. Imagine if you were in control of the tool that lets you do exactly what you want. You can have it today if you want it.
The usual solution is to use an ActivityPub relay. This, however, resulted in receiving looots of posts, hitting file size and inode limits on this small VM. Thus, I gave up this experiment a while ago.
Now, I just stumbled about https://relay.fedi.buzz/ from @astro@c3d2.social, which allows to only follow certain hashtags, which is kinda exactly what I wanted ❤️
After following the Subscribing to Fediverse Relays section from snac(8), I came up with the following jq(1) command to subscribe each hashtag I am already following on my #snac instance. And yes, this would be way faster to do by hand for those six hashtags in total.
$ # Create multiple snac follow commands for each hashtag the "xz"If the generated commands are looking not suspicious enough, rerun the command within
$ # user follows. The "data" directory is the $SNAC_BASEDIR.
$ jq -j \
'.followed_hashtags.[] | "snac follow data relay https://relay.fedi.buzz/tag/",.[1:],"; "' \
< data/user/xz/user.json
snac follow data relay https://relay.fedi.buzz/tag/openbsd; snac follow data relay https://relay.fedi.buzz/tag/snac; [ . . . ]
$() or execute the output manually.Finally, I am able to doomscroll #biketooter for weird and ridiculously expensive bikes from my instance; yay!
Also, I think it's important to remember that #snac also allows following hashtags by those RSS feeds provided by several Fediverse implementations (like Mastodon), avoiding the need of subscribing to a relay. E.g., you can add https://mastodon.social/tags/snac to the followed hashtags field, and it will periodically poll that RSS from the big instance and add to your timeline those posts tagged with #snac.
It's the complete URL for the entrypoint, with https and without any rss. Following the OP example, https://mastodon.social/tags/biketooter in its own line.
It's not immediate; RSS feeds are polled with the period defined by the rss_hashtag_poll_hours keyword in server.json (default 4 hour, minimum 1).
But, you can have snac running from a subdirectory of your main domain (which, as far as I know, no other fediverse implementation does). I.e. you can have your snac root in example.com/social and then you can identify as you@example.com . So you have no unnecessary subdomain just to be you.
Which is what I do for this very domain.
CC: @mms@bsd.cafe
@hey @grunfink @stefano @mms I understood the traditional meaning of "split DNS" is using one set of DNS addresses internally and serving a different set to the Internet.
That way your internal systems can get internal network addresses for hosts in yourdomain.com, meaning the traffic stays private, but the Internet sees only the public addresses of those hosts you choose to expose there.
Use `:w !sudo tee %` to save a file that requires elevated permissions to edit, when you have forgotten to append sudo before opening it.
The 60th OpenBSD release is here... 7.9!
https://www.openbsd.org/79.html
Start your sysupgrade engines!
Lots of vmd/vmm fixes and we will upgrade as soon as possible.
Artwork by Lyra Henderson.
New: NYC Health and Hospitals says a data breach earlier this year affects 1.8 million people. Hackers stole personal info, medical data, government-issued IDs, Social Security numbers — and *biometrics*, including fingerprints and palm scans.
Already one of the largest healthcare breaches of 2026.
Linus Torvalds says AI-powered bug hunters have made Linux security mailing list 'almost entirely unmanageable' https://www.theregister.com/security/2026/05/18/linus-torvalds-says-ai-powered-bug-hunters-have-made-linux-security-mailing-list-almost-entirely-unmanageable/5241633 😂
FYI, the Linux kernel officially allows AI-assisted code https://docs.kernel.org/process/coding-assistants.html This is all big tech who are members of Linux foundations forced AI assisted code inside the Linux kernel. Now what's the point of crying about it?l
I am slowly coming to understand that the reason some applications crash often on OpenBSD is not the fault of OpenBSD, but the fault of poorly written applications that have tons of vulnerabilities. OpenBSD is designed to be a secure operating system as one of its main goals, and trying to circumvent these safety guardrails by "optimizing OpenBSD for desktop use" -- i.e. tweaking sysctl.conf to the max -- defeats the purpose of having the guardrails in the first place.
If you want an OS where applications are free to roam full of holes and exploits without crashing, use Linux I guess. It will happily continue to allow those poorly written programs to run, giving the user a false sense of stability. Meanwhile, I'm starting to prefer safety and security over "desktop performance at all costs". If a program misbehaves it should die, and OpenBSD will kill it before I even know it misbehaved.
@kaidenshi every day I inch closer to finally dual booting a BSD. And I thought I'd escaped the gravitational pull after that close call when I read the entire backlog of Lawrence Tratt.
@MaddieM4 I have OpenBSD running on a few devices, but my main desktop is Void Linux. When I finally move it to OpenBSD I won't even bother with a dual boot, I'll just go all the way. And I'm close. Really, really close! Honestly just waiting on the LibreWolf port being worked on by @libreleah to be accepted into ports and I'm there.
@kaidenshi @MaddieM4 for now, you can just compile my librewolf port from source. i've been told that it won't be merged for 7.9. therefore, it would be merged for 8.0, and in the mean time merged into just -current once openbsd has fully reviewed it.
they're not taking new ports in the tree at the moment, because it's locked for a few weeks. they will presumably unlock the tree after the release, which i'm informed will happen some time in the middle of May.
@libreleah @MaddieM4 May is great, happy birthday to me! I've been trying to get your port to compile on my secondary workstation here at the house but I'm still trying to figure out dependency stuff (I am in no way, shape, or form a developer). I think I've managed to tackle every dependency except icu-i18n. If I can't get it to build on my own I'll just use your -current port once it hits the tree since I tend to run -current anyway.
@kaidenshi @MaddieM4 no need to figure out dependencies. just make sure if using my master branch to be on openbsd -current. i onyl maintain that branch for current. i'll start maintaining it in tagged releases from openbsd 8.0 onward, once openbsd merges my port in -current
@libreleah @MaddieM4 Oh it's nothing wrong with your port, I just ran into issues building dependencies so I tried installing them as packages to both speed things up and avoid any compile issues, and that one package was being fiddly (the correct version from ports kept erroring out during compile, and (at the time I tried it the other day) the version in packages wasn't right).
Trying again right now with a fresh install of -current on my most powerful dedicated OpenBSD machine, hopefully this time it's all in place and it builds successfully.
@kaidenshi @MaddieM4 on my i7-4790k, the port takes about 12 hours to compile, which includes building dependencies. once dependencies are done though, building librewolf on its own takes maybe 2 hours?
@kaidenshi @MaddieM4 i'm contemplating whether to host a package repo for librewolf, for openbsd 7.9, since 8.0 is the first stable release that will receive my port. as i said before, they'll start merging new ports again in probably a few weeks. new ports are locked for now until the 7.9 release i think. that's the impression i got anyway. librewolf is the first openbsd port i ever did.
@libreleah @MaddieM4 That would be awesome and much appreciated! I still want to succeed at building it for my own personal achievement, but a pre-built package would be a boon to those of us who have been waiting years for a proper LibreWolf port. I feel like the intersection of OpenBSD enthusiasts and LibreWolf enthusiasts has to be wide and populous.
@libreleah @MaddieM4 In other news, all dependencies satisfied on my current iteration, and the librewolf package officially started building at 20:08 local time. It's an HP mini pc with the i5-6600T so probably similar compile time to yours, if not a little slower. Fingers crossed!
@kaidenshi @MaddieM4 Please do share a screenshot once you have it running!
@libreleah @MaddieM4 Success! Damn it feels good to run this browser on this OS. Thank you so much Leah!!
@kaidenshi @MaddieM4 fun fact: you might sometimes have to compile it again, when updating snapshots. unless you idk stick to 7.9 (like, update to 7.9 from pre-7.9 -current before release). because openbsd doesn't do ABI-safety like on linux, so userland stuff will have to be recompiled when enough things change in kernelspace.
but enoughh of me being a debbie downer. congratulations!
@kaidenshi @MaddieM4 but lw doesn't change much. unless firefox does a new release. so i'd probably not worry about it, plus 7.9 is out soon. and also i assume they'll merge my port in -current at some point over the next few weeks. then you'll be able to just use the binary packages, so no worries.
@libreleah @MaddieM4 I backed up the package I built for safekeeping since it runs perfectly (actually a little faster than Firefox on the same machine). I tend to run -current so I'll just use your binary once it's merged.
@kaidenshi @MaddieM4 now u must re-compile. https://mas.to/@libreleah/116456565479340855
LibreWolf 150.0-1 is out (upgrading from LibreWolf 149.0.2-2).
I've updated my LibreWolf OpenBSD port to v150.0-1 in this patch: https://codeberg.org/vimuser/librewolf-openbsd-port/commit/13592d957af620f8c9ebcdb7f463b8bcb48f123e
Eventually, my port will be merged in -current, but for now, updating means re-building from source. Remember you must ensure you're on the latest snapshot and packages, and latest ports from -current. My port is for -current only (for now).
If you previously installed my port, please make sure you update/recompile :D
EDIT: It compiled! See:
@libreleah @MaddieM4 Hell yes I'm about to chuck an SSD I found in my desk into my main workstation and start grinding away at it.
@libreleah @MaddieM4 Just under an hour on the main workstation. I think I'm ready to go all in on OpenBSD now. Thank you so much!
@kaidenshi @MaddieM4 i also hardened some of the options at build time. you can see it in the git repository for my port. it's much closer to the hardening openbsd applies for firefox now, but with librewolf's additional hardening.
@libreleah @kaidenshi @MaddieM4
Logged in after more than a year just to comment. THANK YOU SO MUCH for this. I very recently moved from linux to openbsd. Always used librewolf, and missed it on obsd. I am using -current branch, hopefully binaries are available soon! I have a thinkpad with i3, but runs a little hotter than on linux. On linux it uses like 7.5W and and on obsd it uses around 10-12 (even after experimenting with apmd -L and obsdfreqd). Not that bad though.
Greatful to you and everyone at Openbsd!! ❤️
@Hello @kaidenshi @MaddieM4 You can control CPU frequency, check apmd manual. Or use obsdfreqd (i think it's called that). Probably still not as efficient as Linux, but you can get pretty close. I use the latter on laptops, when I'm out and about. obsdfreqd is in ports. You have to reconfigure apmd to disable some of its automation; check both manuals. Or just disable apmd when using obsdfreqd.
Also, I'll update librewolf soon. Got other work on at the moment. But will update the port after 7.9
@Hello @kaidenshi @MaddieM4 seems i'm dehydrated. i neglected to realise you already mentioned tweaking apmd/obsdfreqd
yeah, openbsd runs hot. just something you have to accept. it's not as power-efficient as linux. but it is better in lots of other ways :)
so i have been learning #sam and #acme properly and oh my god. acme is the best editor i have ever used. i love the fact that it really is an os interface in its own right. i have been completely underutilising it. i now have a setup on my second desktop at all times.
sam just seems like ed on steroids with a lot of the acme benefits of the mouse interface.
i am using acme for actual work or writing and i use sam for quick edits or config files.
OpenBSD 7.8 // IKED // ERRATA 036
Date: May 8, 2026
Name: 036_iked.patch
Description: In iked(8), address sizes were not checked.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/036_iked.patch.sig
OpenBSD 7.8 // NFS // ERRATA 035
Date: May 8, 2026
Name: 035_nfs.patch
Description: Due to insufficient checks in NFS server, the kernel could crash.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/035_nfs.patch.sig
OpenBSD 7.8 // EXPAT // ERRATA 034
Date: May 8, 2026
Name: 034_expat.patch
Description: libexpat uses more entropy to protect against hash flooding. CVE-2026-41080
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/034_expat.patch.sig
OpenBSD 7.7 // IKED // ERRATA 042
Date: May 8, 2026
Name: 042_iked.patch
Description: In iked(8), address sizes were not checked.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.7/common/042_iked.patch.sig
OpenBSD 7.8 // RPKI // ERRATA 030
Date: April 14, 2026
Name: 030_rpki.patch
Description: A malicious RPKI Publication Server can cause an incorrect error exit. A malicious RRDP Publication Server can cause a NULL dereference.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/030_rpki.patch.sig
Here my version of it
Gmail -> @Tutanota
Youtube -> @peertube
Liar Signal -> @delta
Chrome -> #Helium
NordVPN -> @mullvadnet
PS: Signal IS big tech, they run on their server, they pay them, they are part of the problem not a solution to it.
#privacy #sovereinty #notogafam #google #signal #youtube #chrome #chromium #nordvpn #gmail #mullvad #deltachat #peertube #tutanota #tuta #decentralisation #europe #canada
It is my setup :)
Lots of Linux vulnerabilities lately. Time to move the instance to Windows.
@jerry No, CP/M. I saw on The Computer Chronicles that CP/M is the premier operating system, and I'm sure The Computer Chronicles is a completely unbiased source on the matter.
@jerry
Didn't you use to work for IBM? AIX is right there. Lets just get you some cosy POWER hardware for it. I'm already looking forward to the smitty modules for mastodon server mamagement.
@jerry The windows vuls are still pouring out but it's easier to hunt on linux because the source is available
@jerry Someone, somewhere in a ‘C’ suite, who thinks they have their finger on the pulse, is asking a tired Tech Director that question.
Betcha.
might have to get a few costco sized bags of popcorn to last it out while i watch this... and something to read. maybe "war and peace".
At MS, there was a big project to unify all of the Windows-derived things. Apparently some folks had a build working that booted to WSL, with no Win32k. I did wonder how secure that would be: at the very least, I doubt there are many people who know how to attack the NT kernel via the Linux syscall interface.
@jerry Its better to get hacked by some guy sitting in his parents garage than getting our data stolen by corporations to feed the AI.
@jerry Also, pwn2own with zero findings in Microsoft Internet Explorer for several years meanwhile (!).
Time for our blue friend to take back the web, not sure why we even abandoned the king of browsers.
@hey @jerry the issue lie in "feel" safe, when massive AI assisted code exploration will hit BSD i also expect a bunch of critical vulnerability.
Because the AI find thing human brain is not wired to see.
It's not a proof something is not secure tough, pretty sure BSD, Window, Mac, ETC are also full of those issue.
But we also can use A.i to find these holes in System;)
so, i'm trying to shed myself of all the tech oligarchies #BreakTheOligarchy
so i'm migrating everything. & it's not about Windows' or Google's vulnerabilities
& from what i've learned about the mastodon & fediverse community is, this is the place to be if you support Linux💙
so i assume you're being sarcastic? i don't understand a lot of the discussion below but, you are either hated or hilarious😁
but i have a question. would the counter-argument to that statement be...
@WorldTravelerAll7 I was being sarcastic. It’s a problem I have.
The counter argument is that windows has a similar number of vulnerabilities to what Linux has been experiencing, but Windows experiences that every single month for the past 25 years
@jerry not a problem, i💙sarcasm😂 it's just hard to discern when one doesn't know the subject or speaker😁
i try to get word to the supposed "good billionaires" that if they want to prove they are good, fund FOSS projects around Linux & the fediverse
they could turn PeerTube into a YT competitor. they could build an amazon competitor built around the vendors & customers if they wanted
so i assume, whenever Linux or FOSS projects are attacked, they're doing something right😁
My apologies for interrupting, I got some trouble on notification via telegram bot, I input everything as required, but some reason I'm not getting notification at all, I checked logs:
snac[90250]: 03:22:32 telegram post 400
And I tried curl post on my server it was working perfect, maybe telegram refusing html or makrdown format? smthing else? before going to check source code, I would like to ask you about it:)
Thank you for your time
Best regards.