kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile
[email protected] 🏴

@kpcyrd

Rust Developer πŸ¦€, {Arch Linux,Debian,Alpine} Package Maintainer πŸ“¦, Reproducible Builds Enthusiast β›“, Security Researcher 🦝, Anarcho Communist 🏴

ID: 1081734755698294790

linkhttps://github.com/kpcyrd calendar_today06-01-2019 02:10:38

647 Tweet

351 Followers

161 Following

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

I've verified vim_9.1.0199.orig.tar.xz in Debian was taken from `git+github.com/vim/vim#tag=v9…` with no modifications (and published a writeup on how I did it): lists.reproducible-builds.org/pipermail/rb-g…

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

The fine folks behind rustls have released the first version of their ABI compatible drop-in replacement for OpenSSL, implemented in Rust: github.com/rustls/rustls-… Exciting! ✨

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

Provenance data. There you have it. whatsrc.org/artifact/sha25… Quite often there's established consensus about "what's the source code", no need to make opensource developers go web3. The problem at hand is how we have zero data about who claims to have code reviewed this.

Provenance data. There you have it. whatsrc.org/artifact/sha25…

Quite often there's established consensus about "what's the source code", no need to make opensource developers go web3.

The problem at hand is how we have zero data about who claims to have code reviewed this.
kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

There was an exploitable bug in the chrome .bmp image parser in 2024: issues.chromium.org/issues/41494860 This kind of -1 bug is common in C programming due to the way C devs encode error codes into return values. Can users please have more self-respect and demand better memory-safety.

There was an exploitable bug in the chrome .bmp image parser in 2024: issues.chromium.org/issues/41494860

This kind of -1 bug is common in C programming due to the way C devs encode error codes into return values.

Can users please have more self-respect and demand better memory-safety.
kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

I've reworked the diff feature and you can now diff the curl-8_8_0 git tag and the autotools pre-processed curl 8.8.0 dist-tarball content. whatsrc.org/diff-right-tri… Using the "diff from/diff to" links you can check what different vendors consider "the curl 8.8.0 source code".

I've reworked the diff feature and you can now diff the curl-8_8_0 git tag and the autotools pre-processed curl 8.8.0 dist-tarball content.

whatsrc.org/diff-right-tri…

Using the "diff from/diff to" links you can check what different vendors consider "the curl 8.8.0 source code".
kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

In which case does the setsockopt syscall on Linux return EBUSY? According to the ERRORS section of both setsockopt(2) and setsockopt(3p) this code is never set by this function, but my computer seems to think otherwise.

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

If free public libraries didn't already exist and someone tried to invent them today, they'd be considered a plot by the LLM people to take away your capitalism opportunities.

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

Today I learned, with embedded Rust in 2025 it's common to depend on both embedded_hal 1.0 and 0.2 at the same time, because the timer traits haven't been stablized in 1.0 yet, and everybody imports them from the old crate. Can't complain about stuff I got for free tho. <3

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

Developing hidden services with the new Tor #rust libraries is really nice. No external services, everything happens inside your process. If you're curious how this looks like in practice, I put some code over here for both a server and client: github.com/kpcyrd/apt-swa…

Developing hidden services with the new Tor #rust libraries is really nice. No external services, everything happens inside your process.

If you're curious how this looks like in practice, I put some code over here for both a server and client: github.com/kpcyrd/apt-swa…
kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

I made about 1k eur with Github sponsors last year. It cost me about 2.7k eur to have a business to receive the money with. I'm not very good at this.

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

Service tweet since Germans apparently tend to be unsure who to vote for, but also hate discussing/disclosing who they vote for: I'm going to give both votes to 'die Linke' tomorrow and have done so for years. You're welcome to do the same. ✨

kpcyrd@chaos.social 🏴 (@kpcyrd) 's Twitter Profile Photo

This is the 4th Debian release I'm involved in, but for some reason none of the previous ones have stressed me out as much as the current one.