If you want to be a git ninja, this will teach you all the ins and outs of git:

wizard zines

Oh shit, git!

It is way more than I think most people need to know, but it's basically the ultimate reference guide.

@Kagi just a heads up that your web search is broken in the .onion site. Image search and video seach is still working, but wev search shows no results no matter what query is entered. Here's an example:

1. Print 4 brackets to make an enclosure for #3Dprinter 2. Procrastinate for a few days 3. Realize I need 8 brackets, not just 4 4. Print 4 more brackets 5. Cut plexiglass 6. Drill holes and bolt things together 7. ..and now I have to wait another hour for that print to finish I should still have it done by the end of the night. I just hope it's big enough. Tolerances are tighter than usual than I'd like on this one.

This paper on remote code execution (RCE) on GPUs is great. Dead simple examples of how to do it, including the Python code. https://arxiv.org/pdf/2502.10439 It'd be so easy to backdoor these things and have a release that just skims off the top. Make a package that does what the user wants and is super easy to install and run and as long as you're not too greedy, I bet it'd work just fine for a long time. Might want to hide it better than a wget call to github, but that's just minor details.

I started reading the TrustZero paper. So far I am not impressed. Here's a quote: "Even though this architecture [zero-trust] was introduced in 2010, to this day, no real-world open-source reference applications have been made" Umm, what? This concept of continous verificatiton of every user and device regardless of their locaton was invented in 2010? What about the entire cypherpunk movement? There are no implementations of it? What about PGP? Bitcoin? FIDO2? Nostr? DIDs? I'm going to keep reading and try to understand their perspective. I can't imagine they are not aware of these things, so I'm curious as to why they feel these don't qualify as being zero-trust. https://arxiv.org/pdf/2502.10281

I missed the TunnelVision vulnerability from last year:

Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

CVE-2024-3661: TunnelVision - How Attackers Can Decloak Routing-Based VPNs For a Total VPN Leak — Leviathan Security Group - Penetration Testing, Security Assessment, Risk Advisory

We discovered a fundamental design problem in VPNs and we

It just goes to show, when you look at the extra features and options in something (in this case, DHCP), you'd be amazed at what you find!

Kagi's blog post on a privacy feature is not available over Tor.

Kagi Blog - Introducing Privacy Pass authentication for Kagi Search

Today we are announcing a new privacy feature coming to Kagi Search. Privacy Pass is an authentication protocol first introduced by Davidson et al....

And, to top it off, Kagi still hosts their stuff using Google. Yes, I'm sure their customers all feel very safe from Google's prying eyes and are totally fine with switching away from Google only to have their money still go to Google. 🙄

Kagi's help page on Tor... is not accessible over Tor. 🤦‍♂️🤷‍♂️

Accessing via Tor | Kagi's Docs

Kagi Search Help

Fun story: when I was migrating my #Matrix database to a new version of #Postgres, some people were still able to chat since they had accounts on other servers. My account and my server's chatrooms were down, but it wasn't complete downtime for everyone. This is what #decentralization looks like. 😁 It'd be cool if #Amethyst allowed users to have multiple addresses to get zaps. Other clients could fall back to a secondary or roleplay l tertiary if the primary was down. #bitcoin #lightning

I move slowly and test things in my test environment before tewting them in production. I may not have much, and new features may be slow, but once I get it done, it's rock solid.

TFW I want to print the custom case for my #meshtastic #solar node, but I have to wait for the tentacle to finish, so I can print the brackets to make a plexiglass enclosure for my #3DPrinter so my case won't curl. Dependency chains, yo. Either that or wait until summer when it's really warm in that room. And if I can't wait for two prints, I'm certainly not waiting until summer. 😂 #FirstWorldProblems

OK, the angle wasn't sharp enough on my first attempt, so I re-did it. I also added the screw hole in the bolt so I don't have to drill any plastic. I have a specific plan on how to use these and if it works, it's going to be glorious! Stay tuned. Remixed from:

Tentacles by Clay Rade | Download free STL model | Printables.com

#3DPrinting #manufacturing #art