Tootfinder

Anthropic says Opus 4.6 found 500 previously unknown high-severity security flaws in open-source libraries with little to no prompting during its testing (Sam Sabin/Axios)
https://www.axios.com/2026/02/05/anthropic-claude-opus-46-software-hunting

Exclusive: Anthropic's new model is a pro at finding security flaws
The AI company sees the model's advancements as a major win for cyber defenders in the race against adversarial AI.

On a day full of conversations about big AI tech and the decisions museum, libraries and archives have to make at the intersection of licensing data for AI and their values, the AI Afterlives workbook seems like a thought-provoking exercise #FF2025

from my link log —
foreign-dlopen: load dynamic libraries into a statically-linked executable.
https://github.com/pfalcon/foreign-dlopen
saved 2025-12-04 ht…

GitHub - pfalcon/foreign-dlopen: Small library allowing to use dlopen() from statically-linked applications (where statically-linked executable vs loaded shared library may use completely different libc's)
Small library allowing to use dlopen() from statically-linked applications (where statically-linked executable vs loaded shared library may use completely different libc's) - pfalcon/foreign-dl...

Consider some Dead coding {💀} ?
It's December and quiet, it might be a nice small project on a code base you already know - it's amazing what you find! I'm not talking about rewriting - I'm talking about just removing whole unused functions or libraries.
Now, if you're doing this on an area of code maintained by someone else don't wade in with thousands of changes, try a few and just check you're not deleting stuff people want.
If you find somethin…

"Where do you start when it comes to creating a brand image for what is arguably one of the most important milestones of your institution?" – "The Smathers Centennial" https://communications.uflib.ufl.edu/2026/01/20/design-diary-the-smather…

I love university libraries.
(Dear reader, I have a weakness for 70s prog from Québec, arguably the beating heart of the genre at the time. I don't know where else I'd find this LP.)

Can we please not call it "supply chain" attacks?
It's "people overly rely on third-party libraries for no good reason and do not check those dependencies or version manage them properly" attacks

Enjoyed the wide variety of maps in #SecretMaps at the British Library and then... a live action team text adventure exploring the world of libraries. Thanks Seth Kriebel for an unpredictable and excellent experience! I'm still wondering what the spice smell was

"Literature in Context evolved from two independent projects, one by John O’Brien at The University of Virginia, and one by Tonya Howe, at Marymount University. O’Brien and Howe joined forces in 2017 and successfully applied for a Level II Advancement Grant from the National Endowment for the Humanities Office of Digital Humanities in collaboration with Christine Ruotolo, Director of Research in the Arts and Humanities at The University of Virginia Libraries (HAA-258768-18). In 2022, the project was awarded a second grant from the NEH ODH (HAA-290349-23), as well as an Open Course Grant from VIVA, Virginia’s academic library consortium. In April 2025, the second federal grant was terminated, along with many others, by DOGE."

Libraries. Amirite?
https://comicskingdom.com/bizarro/2026-02-03

Bizarro Comic Strip 2026-02-03 | Comics Kingdom
Read the Bizarro comic strip from February 3, 2026, and check out other Bizarro comics by Wayno & Piraro.

When you are a C developer, every day is Xmas!
https://www.swift.org/blog/improving-usability-of-c-libraries-in-swift/

Improving the usability of C libraries in Swift
There are many interesting, useful, and fun C libraries in the software ecosystem. While one could go and rewrite these libraries in Swift, usually there is no need, because Swift provides direct interoperability with C. With a little setup, you can directly use existing C libraries from your Swift code.

Minor good news for libraries: "A Victory for IMLS as Court Blocks Trump’s Attempt to Dismantle Agency"
IMLS is the Institute of Museum and Library Services, which funds leadership training and R&D in libraries in the US. A small % of library funding but important.
but I believe everyone is gone and grants cancelled so not sure what happens if funding returns-- who gets employed?

The Most Important Code Is the #Code No One Owns
https://techyall.com/blog/the-most-important-code-is-the-code-no-one-owns

Tennessee public libraries close for Trump-inspired book purge (Popular Information)
https://popular.info/p/tennessee-public-libraries-close
http://www.memeorandum.com/251125/p42#a251125p42

Alabama GOP Leader Who Used Fake ID To Vote Has Trans Books Axed From Kids Sections At Public Libraries - Joe.My.God.
https://www.joemygod.com/2025/11/alabama-gop-leader-who-used-fake-id-to-vote-has-trans-books-axed-from-kids-sections-at-public-libraries/

@… @… I’ve gotten books from various university libraries via the Fort Vancouver Regional Library system.
One of them stuck with me enough to get my own copy… which involved calling the author’s widow and mailing her a check. At…

"The Economics of Libraries"
https://www.routledge.com/The-Economics-of-Libraries/Martorana-Rizzo/p/book/9781032364285 (erscheint im April)
@…

Parks, Libraries and Leisure: Northampton’s Social Life in the 1920s https://edintone.com/leisure-libraries-parks/ In the 1920s, increased opportunities for leisure were an important part of life for the working-class. @…

Parks, Libraries and Leisure: Northampton’s Social Life in the 1920s - Miscellanea Edintone
In the 1920s, increased opportunities for leisure were an important part of life for the working classes.

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 550 nodes and 3691 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…

Simulated Cyanotype Chemigrams...
Lately I've been revisiting my old fluid sim toolset which started out as part of my toxiclibs Java libraries (2007/8, based on Jos Stam's research, also previously mentioned in this thread[1]), then ported & expanded it for #Houdini in 2016, then ported again to TypeScript/GLSL (via

So Intel have added a so-called On-Die Certifying Authority (ODCA) with ME gen 3 version 15 based platforms.
That is also explained in the recent CSME whitepaper.
I figured that the FTPR CPD manifest contains a new extension now for certificate revocation, including a URL to CRL data.
That extension's data itself is encoded as ASN.1 DER, so I need yet another parser. Uh-oh... which one should I choose, does anyone have recent experiences to share? 🙃
I am checking t…

I wonder if trivial code libraries (like the cliché left-pad) are going to mostly disappear because it's fewer tokens for a LLM to just inline that code than to manage the dependency, and advanced/experienced programmers aren't going to use that kind of thing anyway…

📊 How good are Chinese CPUs? Benchmarking the Loongson 3A6000
https://lemire.me/blog/2025/11/23/how-good-are-chinese-cpus-benchmarking-the-loongson-3a6000/

How good are Chinese CPUs? Benchmarking the Loongson 3A6000
I maintain a few widely used libraries that have optimized code paths based on the specific processor being used. We started supporting Loongson processors in recent years, but I did not have access to a Loongson processor until now. To my knowledge, they are not widely distributed in North America. This made it difficult for … Continue reading How good are Chinese CPUs? Benchmarking the Loongson 3A6000

AI Is Supercharging the War on Libraries, Education, and Human Knowledge https://www.404media.co/ai-is-supercharging-the-war-on-libraries-education-and-human-knowledge/

AI Is Supercharging the War on Libraries, Education, and Human Knowledge
"Fascism and AI, whether or not they have the same goals, they sure are working to accelerate one another."

from my link log —
GNU Recutils: a database management system using human-readable text files.
https://labs.tomasino.org/gnu-recutils/
saved 2020-01-26 https://

GNU Recutils
Fred and George, Turtles in love There are hundreds of cool command line tools that have been made over the years built on the unix philosophy. Plain text is powerful, ubiquitous, and human-centric. It was also the only option for computing for quite a while. It’s no surprise that some of the most sophisticated tools are focused on it. One such package is GNU Recutils, a set of tools and libraries to access human-editable, plain text databases called recfiles.

So, decided to make the `sisyphus-client` Docker image a multi-stage build because it was a really large image. Ended up taking it from 1.3GB to 708MB which isn't too shabby. Unfortunately, that's about as small as I'm gonna be able to get it with all of the encoding binaries/libraries that I have to install.
Still, pretty solid reduction in container size.
#homelab …

I guess the Internet Archive is now a for-Proffitt...
https://mastodon.archive.org/@internetarchive/115611174274779543

internetarchive (@internetarchive@mastodon.archive.org)
Attached: 1 image The Internet Archive welcomes Merrilee Proffitt as director of Democracy’s Library, US! With decades in digital libraries & open knowledge, she’ll expand free, online access to government research, supporting transparency, equity, and democratic engagement. Learn more at our blog ⤵️ https://blog.archive.org/2025/11/18/meet-merrilee-proffitt-director-of-democracys-library-us/ @internetarchive

Libraries open their archives to train AI chatbots with books spanning centuries of human knowledge | Milwaukee Independent
https://www.milwaukeeindependent.com/newswire/libraries-open-archives-train-ai-chatbot…

aus der reihe "leider zu teuer, um es "auf verdacht" zu kaufen" heute:
"Libraries in Transformation: Navigating to AI-Powered Libraries"
https://doi.org/10.1007/978-3-031-69216-1

The American Library Association (ALA) has touted a "massive win"
after previously revoked federal funding for libraries and museums was reinstated nationwide.
The Institute of Museum and Library Services (IMLS)
announced on Wednesday it had
"reinstated all federal grants,"
8 months after an executive order from Donald Trump kick-started a firestorm
at the agency that supports the nation’s libraries.
Most of IMLS' staff, and i…

Library Grants Reinstated Nationwide After ‘Massive’ Legal Victory
Grants being restored after a Trump and DOGE firestorm are being hailed as "a massive win for libraries."

Libraries scramble to find another print book provider after Baker & Taylor, once the largest US distributor of print books to public libraries, shuts down (NPR)
https://www.npr.org/2026/01/07/nx-s1-5668426/libraries-books-distributor-closing

The great thing about R is that if it can't do what you want out of the box, you can program it.
So I've just put 2-3 hours into programming that should be basic functionality, but is only accessible piecemeal in a dozen different incompatible libraries.
Now n <- n 1 incompatible libraries.

Not sure any longer which libraries your script actually needs? #rstats

Script for finding loaded but unused packages in R scripts
Script for finding loaded but unused packages in R scripts - analyze_pkg_usage.R

Some tips for debugging #Windows applications that do not start:
1. Run them via #wine. It can give you a useful error message (such as "this library is missing this symbol" rather than completely useless generic error code).
2. Wine has winedump tool that can be used to get information from DLLs and static libraries.
3. https://github.com/lucasg/Dependencies is a good replacement for Dependency Walker that runs on Wine.

Free Words was an art project I started in 2001. It was a hot pink artists book I described as “a book that belonged to anyone who found it.” I placed it onto the shelves of bookstores and libraries to be discovered, and people who found it had to make an uncomfortable decision about whether they were truly free to carry it away.
Here’s the story.

More of The Free Words Story
The story of Sal Randolph's Free Words, a social art project where free books were infiltrated into bookstores and libraries.

»Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack:
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 2024 as part of a likely financially motivated effort.«
How do you check if the JavaScript libraries and their libraries on which they are based are now safe?!??
🧑‍💻

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack
A mysterious npm worm published 46K fake packages in a two-year spam campaign, exposing major security gaps.

I wish dependencies would stop embedding their own arguments parser in a package that didn’t need a CLI to begin with.
Eleventy has *three* different dependencies with pretty hefty (and outdated) CLI argument parser libraries 😭
Is there an `overrides`-style feature that works for libraries? (afaik this feature is only for app-level code)

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 533 nodes and 1735 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…

Public #libraries should have datasheets, reference manuals and schematics. Would be great for #rightToRepair and keeping #knowledge in general - a library's main purpose.

from my link log —
Error handling in Rust: from `failure` to `fehler`.
https://boats.gitlab.io/blog/post/failure-to-fehler/
saved 2020-04-09 http…

PVS-Studio blog writer Georgii Tormozov summarizes a long list of improvements made to Microsoft's next LTS (and anniversary release) .NET 10. This overview highlights support for C# 14, performance enhancements, new libraries (including post-quantum crypto.), runtime and SDK. A good read to keep up with the latest and greatest in .NET.
"What's new in .NET 10"

@… Love seeing the openSUSE community tackle Y2K38 openly and transparently. Thank you for putting this on the radar.
Also important: we’re not at the finish line yet, even if many assume we are. There’s still real work across toolchains, libraries, and long-lived systems.
#Y2K38

Holy crap, #CSS really is on a crusade to eliminate JS libraries... And I am here for it!
https://youtu.be/HXIHpDnsizk

@borkdude, in your 'scittle with additional libraries' files, you have, for each file in the library, a line
SHADOW_ENV.evalLoad( <filename>, <boolean>, <???>);
where ??? is a string of JS source code with some punctuation replaced by hex codes.
The second last line appears to invoke the file itself (recursively!?!), and the last is always
SHADOW_ENV.evalLoad("shadow.module.<filename>.append.js", false, <???>);
Wha…

Python Cryptography about the state of OpenSSL...
The weirdest thing is that it appears even the authors of one of the more important libraries using OpenSSL appear to not understand why OpenSSL is doing the things they do.
https://cryptography.io/en/latest/statements/stat…

"Recently in Academic Libraries: Nov/Dec 2025" by @…: https://www.johnxlibris.com/2025/12/recently-in-academic-libraries-n…

Apple Friends, Xcode is bundling 48 megs worth of SwiftSyntax code into my iOS libraries and binaries because I defined some @… on my code.
The library does not reference or consume SwiftSyntax. In fact, a test with SwiftPM shows that it works correctly for a standalone executable, but for iOS it just gratuitously bundles it
It is rendering my Godot A…

@… Thought that was a barely pseudonymous book about you! 😂
https://mastodon.social/@bookblabla/115588744411865533

Book!BlaBla (@bookblabla@mastodon.social)
Attached: 1 image 📚 Chocky by: John Wyndham David Gore becomes concerned that his twelve-year-old son, Matthew, is too old to have an imaginary friend. His concerns deepen as Matthew becomes increasingly distressed and blames it on arguments with this unseen companion, whom he calls "Chocky". As the story unfolds, it becomes clear that the friend is far from imaginary, but i... https://bookblabla.com/book/chocky @bookstodon@fedigroups.social #books #reading #libraries #fiction #scienc…

Don't judge. Help. #Libraries

AI Is Supercharging the War on Libraries, Education, and Human Knowledge https://www.404media.co/ai-is-supercharging-the-war-on-libraries-education-and-human-knowledge/

Listening to Rudolf Mumenthaler, head library of UZH, at the 10th anniversary of ZHAW library Winterthur. He argues that libraries have been taken advantage of when it comes to publishing and access to published material. They should be careful to not losing agency again when it comes to research data. Let’s see

My colleagues just published a really nice analysis comparing the performance of (AI-enabled) Primo Research Assistant and traditional library search. TL;DR they pull up about the same proportion of relevant articles, without much overlap. Generated summary text still needs work. https://ital.corejournals.org/in…

I made a script for this, but then I thought a webui would be better so I could use it in my phone and stuff
I asked an LLM to generate a python webui to run server-side the script I wrote, and surprisingly it 100% worked first try. I was sure it wouldn’t work at all, but I didn’t touch that code and it works.
I can’t even say I “vibe coded” this bc I didn’t even read the code enough to know its vibes lmao. I’m surprised this even works, and it does work well. What the actual fuck.
Welp, not my favourite way to do things but I wasn’t in the mood to do python and figure out the extra libraries and stuff.
And it works so I’ll just use that. In a hardened systemd service to make sure it doesn’t like accidentally delete my whole system or something.

Ah yes, brew upgraded some ssl-related .so file and broke the python binaries linked against it. Again. So many venvs now lay in ruins.
There has got to be a better way.
(Why do pyenv-built pythons seem to habitually get built using the brew-provided libraries? There's no way for brew to know about that dependency.)
#brew #python #macdev #complaining #askfedi

So, 11 out of 12 days completed for #AdventofCode and my thoughts for this year:
- `nim` is probably the language I've enjoyed coding the most in.
- `python`'s whole ecosystem of libraries just makes things so much easier. Day 10 and `scipy` just destroyed that solution (part 2 specifically)
- `rust` annoys me, but I 100% admit that it's a skill issue on my pa…

@… Superb article - & everyone please call on the libraries, universities, arts organisations & NGOs important to you...
#OpenAccess #DigitalSovereignty

"Logo design and visual identity in academic libraries: An empirical study of chinese university websites"
https://doi.org/10.1016/j.acalib.2026.103214
"In digital environments, university library websites have become key interfaces for academic service delivery an…

@… it really depends on the dependencies.
Is it compiled? What libraries does it need.
Is it interpreted? Good luck defining the dependencies...

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 838 nodes and 3088 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…

All kinds of issues and adjustments are popping up and will be popping up as we go through AI integration into our lives. This was an interesting read: https://x.com/MarcJSchmidt/status/2009688028931875156
This was especially interesting: Look at Tailwind: "75 million d…

Marc (@MarcJSchmidt) on X
All my new code will be closed-source from now on. I've contributed millions of lines of carefully written OSS code over the past decade, spent thousands of hours helping other people. If you want to use my libraries (1M+ downloads/month) in the future, you have to pay. I made

"Tracking Instructional Themes at the Reference Desk"
https://journals.ala.org/index.php/rusq/article/view/8611
"Academic libraries play a vital role in supporting student learning by offering both structured instruction and point-of-need research assi…

Bücherhallen Hamburg (@…) completes successful switch to new library system
https://librarytechnology.org/pr/31917

I recently read and shared You’re Wasting Time in #Java Without These 10 Libraries. I commented on it a bit in my newsletter, but given the amount and intensity of reactions, I think a full-blown post is in order.
* Project #Lombok
*

For #TextModeTuesday, some fonts from my old demoscene days, recreated in 2022 for an example project of my opensource libraries:
Figlet style text generator using big fonts:
https://demo.thi.ng/umbrella/big-font/

"Can Academic Libraries Lead the Quantum Revolution?" https://katinamagazine.org/content/article/future-of-work/2025/can-libraries-lead-the-quantum-revolution
– Herjeh, um was sollen wir uns denn noch alles kümmern…

from my link log —
Soundness bugs in Rust libraries: can't live with 'em, can't live without 'em.
https://docs.rs/dtolnay/0.0.7/dtolnay/macro._03__soundness_bugs.html
saved 2019-12-14

from my link log —
The state of Rust cryptography in 2026.
https://kerkour.com/rust-cryptography-ecosystem-2026
saved 2026-01-16 https://<…

The State of Rust Cryptography in 2026
37.2% of vulnerabilities in cryptographic libraries are memory safety issues, while only 27.2% are cryptographic issues, according to an empirical Study of Vulnerabilities in Cryptographic Libraries (Jenny Blessing, Michael A.

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 282 nodes and 893 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/n…

"Pigments of the Imagination: Art & Archaeology from Across the Colour Spectrum" Bodleian Libraries blog: https://blogs.bodleian.ox.ac.uk/sackler/2026/01/23/pigments-of-the-imagination-art-archaeology-fro…

auch im bibliothekswesen scheint sich zurzeit mit KI gut geld verdienen lassen (oder zumindest glaub das der verlag): das buch "Artificial Intelligence for Libraries" bei bloomsbury kostet in der campus-ebook-lizenz 200 £ netto, also rund 250 € brutto. 🤨
https://doi.org/10.5040/9798216195054

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 838 nodes and 3088 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…

"Comparison Between Dewey Decimal Classification (DDC) and Library of Congress Classification (LCC)"
https://www.librarianshipstudies.com/2026/01/comparison-between-dewey-decimal.html

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 550 nodes and 3691 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…

software_dependencies: Software dependencies (2010)
Several networks of software dependencies. Nodes represent libraries and a directed edge denotes a library dependency on another.
This network has 533 nodes and 1735 edges.
Tags: Technological, Software, Unweighted
https://networks.skewed.de/…