If your software stores passwords in a way that they can be retrieved, and your software isn't a password manager, your software is broken.

Verifying that a password provided by a user is correct does not require you to store the password. As an industry we knew this in 1978. It has been 0 days since I saw software that violates this.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

Gotta love #reddit mods!

Where you make a post on r/vent complaining how cringe the fat acceptance movement can be, especially when they're trying to say #obesity has no negative #health effects.

Then you get banned for being #fatphobic and point out that's not a real thing, and get called a sexual predator by a mod!

He really isn't doing any favors for Reddit mods being terminally online losers.

Dealership sells me a preowned vehicle. Can't pick it up because they're waiting for the old owner to drop off the ownership paperwork.

WTF would they have taken the vehicle back in the first place without the ownerships?!

Dear webmasters: If your website is multilingual and has language selection link somewhere, PLEASE make sure they actually take the user to the translated version of the current page, not just the homepage. It’s so frustrating because it forces the user to search for the translated page manually.

"AI" is not intelligent. Nor is it conscient.

There is no "it" behind LLMs. Only rich people who want you to unlearn all your skills, by relying more and more on their LLMs. And once you've unlearned all your skills and once you're so utterly dependent on LLMs because you're so helpless without them and once you no longer know how to do *anything* without consulting a LLM, these rich people will crank up the subscription prices and become even richer. Because in rent-seeking capitalism, of course everything is a subscription.

Companies like OpenAI keep telling you that AI is real and will soon become sentient and destroy the world. And for that reason, OpenAI and its likes are actually public benefit companies, at least according to their own arguments, because they—the good people, the Sam Altmans of the world—work on making AI safe, and are thus the saviors of the world!!! Messiah-complex much?

And because these companies now positioned themselves as public benefit companies, they get massive funding. It's all just a giant grift, designed to make rich bastards even richer. And people who spend way too much time on LinkedIn fall for it, in masses.

It's time to wake up! You've been utterly fooled if you didn't know any of this. But it's not too late. Do the programming yourself again instead of vibe-coding some shit you don't understand. Unless you *want* to pay ever-increasing subscription fees to the Sam Altmans of the world, like a serf, milking you until the day you die.

Also ich finde das ja immer spannend zu lesen, wie Mastodon-Jünger sich hervorheben und wichtig machen müssen und dann auch noch laut vermelden, wie sehr doch Mastodon-User zusammenhalten. Da fällt mir gleich wieder der Begriff "Mastodon-Netzwerk" ein. Für mich hört es sich stets so an, als wenn einige Mastodon-User meinen, sie seien privilegierter, nur weil sie Mastodon nutzen.

Was natürlich vollkommener Quatsch ist, wie viele von uns hier wissen.

Wenn so etwas Fediverse-Neulinge schreiben - ok, das ist verständlich, denn häufig wissen sie es gar nicht besser. Wenn dies irgendwelche Blogger, Reporter oder Autoren schreiben, die nur auf den Zug "dezentrales Netzwerk" aufspringen, um Klicks zu bekommen und eigentlich überhaupt nichts davon wissen - dann kann ich sowas auch noch verstehen. Nicht gut heißen, aber verstehen, denn diese Menschen haben sich nie wirklich mit dem Thema "Fediverse" auseinandergesetzt und haben es auch nicht wirklich vor.

Wenn aber so ein Quatsch aus den eigenen Reihen hier im Fediverse von erfahrenen Usern erzählt und weiterverbreitet wird, dann muss ich mich wirklich fragen, ob diese Leute den Grundgedanken des Fediverse überhaupt verstanden haben und warum man diese Menschen falsches Wissen weitervermitteln lässt. Wenn ich es nicht besser würde, würde ich glattweg behaupten, dass es Provision für das Bewerben von Mastodon gibt!

Das Fediverse ist NICHT nur Mastodon!
Mastodon ist nur EINE Software von vielen, mit der man das Fediverse nutzen kann.
Dazu kommt, dass viele Mastodon-Instanzen aufgrund der hohen Userzahlen mittlerweile weit, weit weg sind von Dezentralität, die User verstehen es aber nicht und melden sich trotzdem immer weiter dort an.

Und jetzt spricht mir nach: "Das Fediverse ist nicht nur Mastodon..."

#Fediverse, #Mastodon, #MastodonNetzwerk, #Rant

GnuPG is almost the only OpenPGP implementation people use. This produces a lock-in that does not benefit anyone but those whose business, livelihood, or ego, comes from GnuPG.

It wasn't a vendor-driven lock-in, but some of the people behind GnuPG have started to push towards GnuPG-only features, which results in a vendor-driven lock-in. This is a problem and needs to be addressed by the software freedom community.

(This is not an invitation to tell me how bad OpenPGP is. I will block.)

#rant Achtung, explizite Sprache.
Ja, es ist mir durchaus bewusst und ich sehe es auch, dass unsere ÄrztInnen verdammt viel Arbeit haben. Aber verdammt nochmal, ich kann auch nichts dafür wenn es einer meiner zu betreuenden Personen nicht gut geht und ich den ärztlichen Nachtdienst anrufe, weil alle vom Tagdienst im OP stehen. Dann auf Station zu kommen erst sagen, keine Ahnung wer das Blut abnimmt, der Nachtdienst geht auch gleich geschlossen in den OP geht nicht. Nur um dann motzend auf...

#Rant #IA

For the last 5 days, I've been trying to sign a digital document via #DocuSign.
And I'm a bit furious and desperate...
Just in case, I live in West Africa.

Docusign outsources the ID validation. In the past, the vendor used real people you could connect with via a lengthy process. It was usually slow and tedious, but usually worked.

Now, you have to use a mobile phone, and all the process is managed by #AI and after more than 30 connections at different times of day AND night... 1/2

I get that QR codes are seen as a convenient way to share URLs by most of the public these days, but I really feel like most people use zero caution when using them. I should make a QR code sticker that leads to a safety guide about scanning QR codes and then post them on top of the most offensive QR codes I see, such as:

• at restaurants that entirely replace the physical menu with a QR code on the table
• anywhere that uses a URL shortener in their QR code to obscure the destination

On my blog: Copyright Thoughts https://john.colagioia.net/blog/2025/05/18/copyright-thoughts.html
Chewing over the actual effects of copyright and its absence, and what we can do with that.
#copyright #freeculture #rant

Well I've just pissed away an hour trying to change the icon of my firefox extension. I bodged something together in gimp and exported it to png. Doesn't show up on the firefox toolbar.

Wrong colour profile? No?

Wrong resolution? No?

Transparency problem? No?

I was editing the "icons" key in the manifest, which changed the icon used in the firefox addon manager, but I WASN'T EDITING THE BROWSER_ACTION KEY ARARAUAGHARUGHA.

It works now.

Don't confuse the overuse of emojis on CLIs with better DX.

Men who follow "alpha male" stuff online are hilarious to me.

Because for starters, absolutely nobody really likes hyper masculine men, and only pretend to because they like yelling at people at the drop of a hat.

Also I have some bad news for them:

If they need some dude online to tell them how to be an "Alpha-Male" then they're definitely a beta.

The entire idea is dumb too because the whole "alpha" thing doesn't even actually apply to wolves.

Let alone humans.

What the hell is even the point of #fastfood now?

Because it isn't cheap anymore, and at least in LA it isn't really that fast because unless you go during really slow hours, it takes 15+ minutes to get your order.

I can make my own damn burger faster. Cheaper too.

Then it only costs a marginal amount more to just go to a regular restaurant, then you're getting full service and an experience more than just #food.

For my own mental health, I made a pretty big post on, FA. If you have a few minutes or want to know how I feel, definitely give this a read. Thank you.

Lol Microsoft is like: "Okay disabled people, we have to skill up! Learn about AI so we don't have to fix Windows! I mean, with AI blind people can develop scripts to have Gem... Um I mean Copilot! Use Copilot! To control your PC for you! And while you do that, I'll be playing Candy Crush and Doom! Oh, blind people can't play that? Meh, too bad. Go play some text game roflmao. Oh and take our course cause it's not like you don't have tons else to learn and do. I mean statistically, disabled people don't have jobs and blind people spend their time running radio stations. I mean, it's the data bro, data don't lie and data means everything right? Also happy #GAAD, here's a course! Get to work upskilling cause AI, particularly our AI, particularly our $20 per month best AI, waits for no one! And you'll want the best AI for the best image descriptions and help and a eleven y!"

Note: I know GAAD isn't just about blind people, but it should seriously include us. We kinda do exist after all.

https://blogs.microsoft.com/accessibility/ai-in-action-celebrating-global-accessibility-awareness-day/

I've taken a break from making #scoopz videos.

It is fun and definitely something I want to continue, but I found myself doing absolutely nothing but obsessing over #politics and arguing with idiots.

I wanted a bit of peace, and I am brain storming other kinds of content I can make.

The only people who ever comment on the political videos are toxic pieces of human garbage, who do nothing but waste time.

Not like my channel will just disappear if I take a couple days off.