Brad boosted

1. Buy expired NPM maintainer email domains.
2. Re-create maintainer emails
3. Take over packages
4. Submit legitimate security patches that include package.json version bumps to malicious dependency you pushed
5. Enjoy world domination.

Brad boosted

I just noticed "foreach" on npm is controlled by a single maintainer.

I also noticed they let their personal email domain expire, so I bought it before someone else did.

I now control "foreach" on NPM, and the 36826 projects that depend on it.

Show thread
Brad boosted

PSA: please do not use "religion" when you mean Christianity, abortion 

Attempting to get ahead of the inevitable backlash: US abortion bans are not an expression of *religious* freedom. They are an expression of certain *Christian* views.

In Judaism, there are many cases where abortion is halachically mandated: (a good overview from an Orthodox perspective) Banning abortion infringes upon Jewish religious freedom, so please don't say "religion" when you mean Christian.

Brad boosted

The real trans agenda in regards to kids.

1: Respect your kid's identity
2: Keep them alive


Brad boosted

news, USpol, Roe v. Wade (-----) 

"The [U.S.] Supreme Court [will vote] to strike down the landmark _Roe v. Wade_ decision, according to an initial draft majority opinion written by Justice Samuel Alito circulated inside the court and obtained by POLITICO."

The *official* decision is not expected for another few months. Politico's source says 4 Republican-appointed judges are on board, the 3 Democratic-appointed ones opposed, and Roberts undecided.

While the outcome isn't surprising (the question was whether _Roe_ would be overturned outright, or chipped away like the Voting Rights Act), someone leaking the opinion to the press *is*; it indicates conflict behind the scenes.

Note to uterine-Americans: as anyone familiar with U.S. repro rights will tell you, the anti-choice movement's ultimate goal is banning birth control. Plan accordingly.

#news #USpol #abortion #ReproRights 🐘

Brad boosted

TIL the drum set was “the first bonafide American musical instrument.” Thanks, of course, to the creativity and ingenuity of black slaves.

Brad boosted

You can multiply vectors a and b and get the bivector a∧b, drawn as the pink parallelogram here. Or you can use the vector a×b, pointing at right angles to that parallelogram, with length equal to its area. But that requires a 'right-hand rule' and the concept of angle.


Brad boosted

@nova I’ve been replaying to the post about want to quote, and then boosting my reply. The nice tuna about that approach is it reframes what I say, because it encourages me to always include the original poster’s perspective in what I say, while still adding context for folks who follow me.

Brad boosted

Here's a post-mortem of what we saw on #Fosstodon over Monday and Tuesday with the influx of new members from Twitter.

Thought you fine folks would be interested in something like this.

Brad boosted

Can we separate the idea of decentralization from crypto currencies and nft schemes... Something being decentralized has nothing to do with blockchain and cryptocurrencies but everyone seems to think that those two are the same thing. And can we also stop versioning web which has no versions and no single way to do any single thing. Crypto is not the future and even if it was not every website would need to use it. It's all just marketing bs for rich people to sell stupid people nothing but mist

Brad boosted
Brad boosted

A sincere tip for longtime fediverse people who would like their friends to stick around here longer than a week:

If you're on Mastodon or Hometown, you can click the "bell" icon in the profile of someone you follow. This will make it so that every time they post, it will appear in your notifications like an "@". I am enabling this temporarily for friends so that I remember to interact with them. This is important for making this place feel more lively and helps people stick around!

Brad boosted

Another tip: Every Mastodon account has RSS built in. Just add .rss to the end of the URL for your account, e.g.

That lets people follow your public posts from an RSS reader, but it's also useful if you wanted to use IFTTT to crosspost your public posts to another platform.

Show thread
Brad boosted

“But the 8-hour workday is too profitable for big business, not because of the amount of work people get done in eight hours (the average office worker gets less than three hours of actual work done in 8 hours) but because it makes for such a purchase-happy public. Keeping free time scarce means people pay a lot more for convenience, gratification, and any other relief they can buy. It keeps them watching television, and its commercials. It keeps them unambitious outside of work. We’ve been led into a culture that has been engineered to leave us tired, hungry for indulgence, willing to pay a lot for convenience and entertainment, and most importantly, vaguely dissatisfied with our lives so that we continue wanting things we don’t have. We buy so much because it always seems like something is still missing.”
— Your Lifestyle Has Already Been Designed

Brad boosted

For everyone now leaving twitter again, I'm on masto.

Enjoy your exodus, and I'll see you back here on twitter next week.

Brad boosted

"Before you download and build the Android source, ensure that your system meets the following requirements, at least 250GB of free disk space to check out the code and an extra 150 GB to build it."


Brad boosted

Gazing in awe at the 1,000 different options in the AWS Console, and I have to wonder if I'm just looking at Amazon's org chart

Brad boosted

re: explaining fediverse to people 

@duponin You're already on fedi, so I assume it wont tell you more than you already know, but the way I explain it using that method generally goes something like

Let's say you're on Facebook and a friend is on Twitter. You want to send them a message, but you can't send messages from FB to twitter, right? That'd just be weird right? (Generally people agree that this is indeed the case and would be weird otherwise)

Of course you can also call them on the phone. Let's say you're with a telephone provider BlablaFon. A friend also has a phone, but they are with another provider, namely Phonica (I'm using fake names here, typically I use existing names they know because that parses easier).
Now image that you're calling them, but it doesn't work and you get told that it's normal it doesn't work because they are with another provider. That be weird right? You both have a phone and a subscription, you should be able to call each other, right? Why would a provider not allow calls to another provider? (Generally they agree that this would indeed be weird)

Yet, when we want to contact each other from one social media account to another, we suddenly not only think it's normal that it doesn't work, we'd even think it's strange if it would work! But it works for phones, why would it not work for social media either? (Here I typically see in their facial expressions that something clicks for them)

So that's basically what the fediverse is. Just like you have several telephone providers, we have different social media platforms. But even if you're on a different platform, you can still talk to each other like you're part of one big network. Or better put, you *are* all part of one big network, namely the fediverse.

I strongly DO NOT RECOMMEND getting a splinter under your fingernail.

Brad boosted

"if you hate Firefox so much, why don't YOU make a browser then?!"

This is literally the entire point: there was a time when we needed more browsers. We do not need more browsers now.

Contribute to the open source browsers and rendering engines that people ACTUALLY use.

Show older

The original server operated by the Mastodon gGmbH non-profit