Tootfinder

@… True. But wouldn't it be a good idea to have a contingency plan whether you self-host or use a commercial service? 😀

La famille s'agrandit ! Les parents Chikot et Kenott ont le plaisir de vous présenter leurs effrayants enfants : Crokett et Krispy (ils sont restés sagement Š la maison)
#Halloween #JackOLantern #bouh

@… I'm pretty happy with my self-hosted Vaultwarden instance.
https://github.com/dani-garcia/vaultwarden

@… Pretty embarrassing you’d let people know you work at Panic.
I mean embarrassing for the company, of course 😂

Einmal mit Profis ey.... 🙄
https://www.ign.com/articles/buckingham-palace-honors-patrick-stewart-by-playing-the-wrong-star-trek-theme-music

Buckingham Palace Honors Patrick Stewart… by Playing the Wrong Star Trek Theme Music
The Band of the Grenadier Guards performed a medley of Star Trek themes in honor of Sir Patrick Stewart – none of which were the theme music of the show the late actor starred in.

RE: https://infosec.exchange/@0xabad1dea/117529823729259748
With every passing day I become increasingly emboldened that it is not only “not radical” but in fact “the only right choice” to only ever run software you yourself write, and to never connect…

🚀 Faster dependency resolution with less memory, no more HTTP/3 connection delay, parallel composer outdated, composer audit --direct, 429 Retry-After handling, only-branches for VCS repos, terminal progress via OSC, https://ssh.bitbucket.org support. Upgrade with composer self-update.

Anzahl der #Windkraftanlagen je #Bundesland in #Deutschland mit Stand vom 30.09.2026.
Die „Ausschließliche Wirtschaftszone“ bedeutet Offshore-Standort.
Der Datenbestand enthä…

Met het hele gezin naar Santafia, de enorme kerstshow van de Intratuin in Duiven: ‘Door gekkigheid gaan mensen lullen en dan komen ze’ | de Volkskrant
Ik ga hier niks over zeggen, dat lijkt me het beste.
https://archive.ph/2hVlx

@… It’s true, Go is scary.

🧹 The source fallback on failed dist downloads is removed, custom policies can block during install via block-scope, and policy config changes now mark the lock file as outdated.

RE: https://mastodon.social/@404mediaco/117509377339919227
I can recommend @…

Snickers has a folding candy bar now.

@… “We will keep modifying requirements until they satisfy what the software can do” instead of “We will keep modifying the software until it can satisfy the requirements” sure is *an* option.

🔐 Security fixes: package names in installed.json can no longer escape vendor/, inline HTTP headers like API tokens stay out of composer.lock, distrusted eMudhra intermediate certs are rejected, bin proxies escape paths and shebangs, secure-http catches more insecure URLs, and repo headers no longer leak to lookalike hosts.

Its 2026 and Chrome can't suggest strong passwords.
Feel free to check my pre agentic browser only (Go compiled to wasm) AGPLv3 page doing so for you. As a bonus me and my 0 advertising partners don't care if you visited the page.
It tries to fuzzy match the password strength instructions for some webs. Does not generate "4" unless pressed very hard.

@… It’s hard to argue about “most” because none of us will ever really interact with “most” code.
Is it true that average code is bad? Probably? Is it still a tragedy to see this technology infiltrate teams who had a higher bar and see it lower in real time? Absolutely.

#Sunset in #Memphis, #Tennessee

Made a thing, except it only updates every 15 minutes.

🕒 https://Packagist.org now records a published-time per version, based on when it first served it. The old time field is set by the publisher and can be backdated. Repositories without published-time make the command fail instead of silently skipping the cooldown.

🔓 --no-cooldown installs an urgent security fix immediately, while advisory and malware blocking stay active. An ignore list exempts trusted packages like mycompany/*. Security fixes are deliberately not auto-exempted, since an attacker controlling a repo could publish their own advisory.

⚙️ Set "cooldown": {"period": "1 day"} under config.policy, or use COMPOSER_POLICY_COOLDOWN_PERIOD in CI. It applies on update and require, while composer install still installs exactly what the lock file says. Dev versions and platform packages are never withheld. Not enabled by default.

@… @… FWIW I had a flip through my copy, I don’t immediately see anything in the index about “case” (Well CASE yes, but different thing), “camel”, “pascal”, “capitalization” or anything else that *appears* like it’d be…

Chips verkaufen, in die Käufer investieren, damit sie Chips kaufen, und dann noch für deren Miete bürgen. Nvidia ist Lieferant, Gesellschafter und Garantiegeber in einem. Früher hieß so etwas Rundum-sorglos-Paket. Wie lange der Kreisverkehr hält, hängt an einer Zahl: dem Umsatz von OpenAI. Björn Meschkat erklärt auf Golem den Geldkreislauf. #KI #Nvidia #OpenAI https://www.golem.de/news/nvidia-openai-oracle-wie-sich-die-ki-konzerne-gegenseitig-milliarden-zuschieben-2610-214529-3.html

Human shit and a tumbleweave. Never change, #Memphis

⏳ Why: most malicious releases on Packagist recently came from attackers who briefly hijacked legitimate packages, e.g. via compromised GitHub accounts. Scanners can flag problems within minutes, so even a 1-hour cooldown gives detection a chance before a version reaches your composer update. A few hours to a day also covers manual reviews.

🛡️ #Composer 2.11 is out. The headline feature is a cooldown dependency policy: newly published package versions are withheld for a configurable period before Composer installs them.
#PHP #supplychain

@… If it had pencil support, *maybe* it could replace a drawing tablet for like a graphic artist. But just touch? Yeah I don’t see how you pitch that as a “pro” feature.

@… Where’d you sign up to get notified it was accepted though? That seems useful.

@… Du behŸver altså ikke at blære dig.

TIL OS X Finder has a strong Smalltalk Object Browser vibes. And yes I still don't like this multi column UI 😎

📜 License: Mistral Ecosystem Open-Weight License, a modified MIT license for commercial and non-commercial use. Running a Model-as-a-Service business requires a separate commercial license, so this is open weights, not open source in the OSI sense.
🌐 https://huggingface.co/mistralai/Mistr

@… @… Man har jo lyst til at råbe “PÅ HVILKEN ANDEN VIS?!?”

⚡ Ships with an embedded DSpark speculative decoding draft head for up to 1.9x throughput without changing outputs. An NVFP4 checkpoint targets Blackwell GPUs. Serve with vLLM, SGLang, Transformers or llama.cpp; fine-tune with Axolotl, Unsloth or TRL

@… Feeeeeeedt. Det er bare er perfekt billede.

💻 Agentic coding: 48% on the Artificial Analysis Coding Agent Index, roughly tied with GLM-5.3 while using 47% fewer tokens per task. Scores 26 on Intelligence Index v5, the highest among western open-weight models; leading Chinese open-weight models score higher on that aggregate
🌍 Natively fluent in 160 languages, including every official EU language. Strong on cybersecurity, finance and law, with state-of-the-art visual grounding among open-weight models

Projekt Automated Train
https://stohl.de/wordpress/?p=194547

So far I haven't really warmed up to the Litrpg genre. But I just finished the audio book version of "The Wandering Inn" and have to say I enjoyed it quite a bit.
https://wanderinginn.com/

⚙️ Architecture: 128 routed experts with 4 active per token plus 1 shared expert, a 1M token context window, and text image input via a Pixtral-style vision encoder that handles variable image sizes and aspect ratios
🎚️ One set of weights covers instruction following, reasoning, coding and agentic work. Reasoning effort is set per request: low, medium or high (default). Native function calling, JSON output and strict JSON schema enforcement

@… @… I went ahead and did so, just noting it here to make the connection that I’m a real human looking to help, and not some random spammer on the internet… well… I guess this doesn’t prove that, but you know.

I’m confused by the Touch MacBook Pro not having Apple Pencil support.

🔓 #MistralAI has released the open weights of Mistral Large 4 on #HuggingFace. Until now it was available only through the Mistral API; the full checkpoint can now be downloaded, self-hosted and fine-tuned.
🧠 A natively multimodal

@… @… @… Den var dårlig, men sådan en god dårlig, så det går nok.

📜 Apache-2.0 licensed
🌐 https://github.com/galaxy-io/filament

⚙️ Event-driven runtime: the server accepts pipeline and run requests, a control plane schedules and dispatches work, workers execute runs. #PostgreSQL stores durable state, #NATS JetStream carries lifecycle events
🚀 Install via curl script,

✅ Every batch is verified on both sides of the write, and durable checkpoints only advance after successful work, so runs can safely pause and resume
🧩 Sources, sinks, state storage and event transport are replaceable interfaces. Run it as a service with API and #React web UI, deploy it on your own infrastructure, or embed the engine in a Go application

@… Would it be more of a mindfuck if they realized the fake 3D world was itself a re-creation of real life, meaning we’ve gone full circle?

60 Jahre Star-Trek-Serie
https://stohl.de/wordpress/?p=194537

@… it's a thread

🐳 One #Docker container bundles Console, Gateway and Runner. Bring your own provider key, no account or bundled model required. Starter kits cover slides, sheets, dashboards and videos, and the optional managed Cloud uses the same API contract
🌐 https://…

📊 Project benchmark across eight harness × model configurations on one task: cost ranged from 223 down to 0.47 credits (99.8% lower) and latency from 4m 36s to 1m 25s (3.2x faster). The best configuration varies per task
🔐 Secrets passed through env references or vault are redacted from responses, streams, traces and stored records. Sessions run in separate workspaces under separate OS users

https://philip.mallegolhansen.com/blog/2026-10-21-the-san-francisco-ai-billboards.html
In case anyone else wanted to see a couple of pictures from the eye of the storm. Don’t tell me I didn’t warn you.

LG-Fernseher senden mehr Daten als gedacht
https://stohl.de/wordpress/?p=194535

@… @… Ja det er en god iteration på det, kan vi finde en mere gammeldansk formulering af den anden halvdel? Så tror jeg vi har en klassiker (bogstaveligt).

🎯 Faster decoding with DSpark draft tokens and confidence-scheduled verification (default max draft length: 5). SWA bounded replay cuts decoder prefill work by replaying only a bounded suffix
🔒 Batch-invariant inference keeps results identical across batch compositions, deterministic sampling returns identical outputs for identical inputs and seeds (both NVIDIA only). Structured outputs constrain generation to regex, JSON schema or EBNF grammar

⚡ Optimized kernels from DeepSeek's own stack: #FlashMLA, #DeepGEMM, #DeepEP, TileKernels, DeepSelect and custom

@… It’s an interesting cultural comparison. I was baffled when I heard that Uber drivers get in trouble for like less than 4.5 stars?
To me, as to some others of Central European descent apparently, 5 stars is like “They literally gave me everything I could have ever dreamed of”. It’s not a realistic expectation.

🧠 #DeepSeek has open-sourced #DeepInfer, the high-performance #inference framework that powers its large-scale production services. The release covers offline inference with the core featu…

@… tell this the thousands of companies still using this (in their automation pipelines controlling big machines) 🙈

@…
The funny thing is, I’m exactly as confident as you are that if we made a bet, I’m unfairly stealing your money :)
I’m absolutely bullish that a decade from now, I’ll still be writing code like I am today, my local high school comp sci class will be too, and I’ll be more than able to give you a hundred bucks off of being paid for t…

🐍 Best fit is algorithmic code that can be tailored to hardware, but plain Python and PyTorch graphs also benefit, since the company says they are often far from optimal even under Torch's compiler.
🔧 Tracing and profiling overhead is capped at 2%, zero when idle. Setup: install the runtime, run your code. The model is hosted by doubleAI, so some trust is required.
🌐

@… Hear hear, I’m struggling hard with getting anyone at work to dedicate any learning and development time and money to anything other than LLMs.
Not because I’m a hater (though I am), but because *any* monoculture is boring and problematic.

✅ Every rewrite is backed by formal verification: Maxwell produces proofs that the replacement code is equivalent. The same process can prove the absence of memory errors; doubleAI says it found memory-safety issues in Python itself this way.
📊 Claimed results: data pipelines more than 38x faster, AI inference kernels more than 4.5x faster. The 4K video model LTX-2.5 ran nearly twice as fast after Maxwell cut data exchange between GPUs and dropped unnecessary token padding.

@… I unfortunately don’t live in Dublin anymore, but can highly recommend the Hairy Lemon as a quality pub. The family that runs it are all great people IMO.

ing-Vank: Zugriff auf Konten derzeit nur über Telebanking. Immerhin nicht Fax. http://heise.de/-11493483

⚙️ Unlike a JIT compiler, Maxwell reasons at a higher level and can swap out entire algorithms, e.g. replacing a general-purpose sort with a better-suited one. It sees the exact hardware, the real data shapes and types, and live bottlenecks, and keeps optimizing continuously.

🧠 #doubleAI, a Tel Aviv startup founded in 2023, has launched #Maxwell, a code execution model (CEM) that evaluates, optimizes and rewrites binary code while a program is running. Source code stays untouched. #AI

✅ To do: run composer update laravel/framework, check config/auth.php for token guards (top priority on MySQL/MariaDB), and run composer audit against published advisories
https://laravel-news.com/laravel-token-guard-auth-bypass

@… And a bigger salary to march the mortgage?

⚠️ Second advisory, same day: GHSA-5wcm-3v2w-8362 (CVSS 6.5) in the JSON:API resources added in Laravel 12.45. A crafted request to a read-only endpoint could trigger a destructive operation and empty a related table
📦 Patched in Laravel 12.68.0 and 13.29.0, both released August 25, 2026. The JSON:API issue is fixed from 13.27.0 on the 13.x branch. Patches exist only for 12.x and 13.x

@… @… Is that a bet you’re offering?
I’m ready to put down $100/€100.

🔧 Root cause: the guard only checked that the token was not empty. The fix adds an is_string() check to both user() and validate(), so arrays and other non-string values are rejected before any database query runs
🎯 Affected: apps with a guard using 'driver' => 'token' in config/auth.php. #Sanctum and

🚨 Critical auth bypass in #Laravel's token API guard (CVSS 9.2): on #MySQL and #MariaDB, an unauthenticated attacker could log in as an existing user without knowing their API token

⚡ Runs in parallel across all CPU cores while returning results in input order, so --check output stays identical on every run
🔌 Built-in Language Server (laravel-fmt lsp) for format on save and format selection, plus --stdin-filepath for editors that only pipe a buffer

@… Man bliver jo ligefrem i tvivl om det var det rigtige valg at opgive barndomsdrŸmmen om at være lokomotivfŸrer.

Das Ding mit den Social-Media-Algorithmen
https://stohl.de/wordpress/?p=194533

🎨 Blade-aware Tailwind sorting: in dynamic classes like bg-{{ $color }}-500 the partial class is pinned in place. The @theme block is loaded first, so custom classes like bg-brand sort alongside the built-in colors
🛡️ Alpine attributes get canonical spacing. The rewritten output is verified token by token, and the original is kept if anything moved

@… @… @… @…

📂 Covered file types: PHP (sorted and split imports, trailing ?> removed), Blade echoes, directives and @php blocks, Livewire 4 single-file components, HTML, CSS, Alpine.js expressions, Markdown, JSON, YAML and XML
⚙️ Adopts existing settings from Pint, PHP-CS-Fixer, Mago, EditorConfig and Prettier config files. An init command generates a dedicated config file when needed

🇪🇺 Voxtral 3 runs via Mistral's EU, US and global API endpoints or self-deployed on-premises, with control over audio retention. Voice agent API: $0.04/min with Mistral Small 4, $0.08/min with a larger model. #DataSovereignty
https://

@… Smukt!

🎭 Pro Voice reproduces a speaker's character, emotional range and speaking style across languages from 30 minutes of audio, aimed at brand voices and professional use cases.
🤖 The voice agent SDK is built on #LiveKit. Stages stream in parallel, so each turn completes in under one second, and the agent stops talking when interrupted. It supports function calling, web search, retrieva…

@… @… Meanwhile we have roads that are about twice as wide as they need to be.
There really isn’t room for sidewalks on the public land we already have?

@… If you have to worry about whether the current thing is in cents or dollars, then perhaps the real problem you have is Primitive Obsession.
Claude would never call *that* problem out, of course.

@… @… The Nazi’s didn’t lose because the people of Germany took care of it.
To expect everyday Russians to win against Putin would equally be an unreasonable expectation.
Apply the same logic here.

@… @… At this point, the problem seems far beyond any democratic intervention.
And as it turns out, most nations, your own included, have larger militaries than most Americans have at home. So actually I do think you *…

@… @… And you just know somebody out there is circulating “Candy stores great for weight loss” articles citing you, even though that’s obviously not the lesson to take from any of this.

Jeder 3. Neuwagen ist vollelektrisch
https://stohl.de/wordpress/?p=194520

@… I didn’t see any citations on the claims you’ve made in this thread.
How come that expectation only cuts one way?
@… @…

noch einer? #Tesla

Neue Probleme mit fliegenden Autos #Tesla

alle iPhone Duo Varianten sind 30 Minuten nach Verkaufsstart auf 25. Januar 2028. Da habe ich ja mit 3. November noch richtig Glück. #iPhoneDuo #Apple

Prägen frühere Sexualpartner spätere Kinder?
https://stohl.de/wordpress/?p=194518

Ups. KI löscht ganze Staffel der Serie "The Challenge Svergie" #ki #ai https://t3n.de/news/wenige-wochen-vor-der-premiere-ki-agent-soll-ganze-staffel-einer-tv-serie-geloescht-haben-1768359/

🔁 #Filament is an #opensource engine for pluggable data replication written in #golang. It moves data from sources to sinks via full, incremental or change data capture (#CDC) replication

🖥️ Hardware: #NVIDIA SM100 GPUs and #Huawei Ascend 950 NPUs. Requires Linux, GCC 13 , #Python 3.12 and #CUDA

#Blade #Livewire #AlpineJS #opensource

🧹 #LaravelFmt is a code formatter for #Laravel, written in #golang. It formats #PHP, Blade and…