peter hessler @openbsd @phessler@bsd.network

Calvin's Dad on the US economy 2026:

Attention, community leaders: DNS-OARC is seeking its next President.

The President will provide organizational leadership, oversee staff, manage financial and operational activities, and advance DNS-OARC’s mission in service to its members and the broader DNS community.

Full details, qualifications, and application instructions are available here:

https://www.dns-oarc.net/president-job

Please share with anyone who may be interested and qualified.

Until 12 August, 4 PM CEST (Berlin time), premium fine art prints of my painting “Red Panda” are available at https://www.djamilaknopf.com/store (US shipping still unavailable, sorry)

Did you know you can have Flying Toasters as screensaver on your modern Mac?

Took like 30 seconds to install. https://github.com/warpspeedtech/flying-toasters

"residential proxy network" is what you call a botnet when it's run by a corporation that will never be prosecuted for doing something that would land a 13 year old in jail for the rest of their life

The fediverse delivers.

Why is the burden of “not letting the team down” always placed on overworked employees, instead of on management to hire enough people?

Time to try my luck with #getfedihired in IT:
I am looking for a work in IT, preferably as a software engineer (pref python/c++)/data scientist/data engineer/data analyst, but I can learn a lot of things on the fly and I'm not picky.
I have a bachelor's degree in compsci from uni of warsaw, two internships at google and two jobs (<1yr each) with data and ML. I can provide CV if you're interested.
EDIT: I'm based in Warsaw, and comfortable with working remote or in-office!

I finally have the #WPA3 SAE handshake working on #OpenBSD

media: IEEE802.11 autoselect (VHT-MCS1 mode 11ac)

status: active

ieee80211: join sae-testing chan 149 bssid 7e:8a:xx:xx:xx:xx 74% wpakey wpaprotos wpa2,wpa3 wpaakms psk,sha256-psk,sae wpaciphers ccmp wpagroupcipher ccmp powersave on (100ms sleep)

Got a large amount of qwx #wifi driver diffs off my chest and shoved them into the #OpenBSD CVS repository. Please let this driver be more stable now, i.e. finally leave me alone for a while and let me use my laptop to get important work done...

If anyone is attending (or wants to attend) the North Sea Jazz festival in #Rotterdam this weekend, I'm selling a 3-day earlybird ticket below face value
https://www.ticketswap.com/listing/nn-north-sea-jazz-festival-2026/21107010/42f31ff133
#northseajazz #nordzeejazz
or just get in touch if you're at the show!

Hello sloth aficionados!

This is a security announcement for an issue that was fixed in #GoToSocial releases v0.21.3 and v0.22.0. If you are running an earlier version of GoToSocial please find time to upgrade to one of these releases as soon as possible!

The security vulnerability allows a remote attacker crafting (properly signed) ActivityPub activies to send Create, Update and Announce activities to a GtS instance that persist statuses / boosts as if they were written by a remote victim account. This happens due to our (previously) incorrect handling of multi-valued attributedTo and actor in the effected activities. We are not aware of anybody using this vulnerability in the wild, but it remains possible on all GtS versions v0.21.2 and below.

This was kindly disclosed to us by Lain of the Pleroma project, thank you Lain!

Timeline:

• June 23rd, Lain emailed admin@gotosocial.org with details of the issue.
• June 24th, a fix was merged.
• June 25th, versions v0.21.3 and v0.22.0-rc4 including the fix were released, along with a pre-disclosure warning of the security issue urging users to update.
• July 6th, security vulnerability publicly disclosed by this post.

I would not wear this but I *think* I appreciate that it exists?

One aspect of retail we've forgotten after generations of conglomerated big box stores and subsequent online conglomeration is that of curation of products.

When you went into a family-owned hardware store in 1985, you got experts who chose products based on a balance of price and quality. Maybe they only had two kinds of hammers or one brand of bolts, but somebody selected those. There was some level of trust in what you were getting.

Now that labor is on us to filter from dozens of types and brands, based on reviews that are gamed by botnets, against manufacturers who change up the models yearly to dodge bad reviews. It's a race to the bottom because we don't have local curators who are personally invested in your returning to their store.

🧵

I already posted this with my second account earlier, but here it is again in the full long version because this topic just won't let me go and I feel like some people here have completely lost sight of reality.

Look, let's start at the very beginning: Yes, I 100% understand that what's currently happening with Bandcamp is absolutely shit. We're talking about a platform that, for years, was the last remaining safe haven for independent music – and now it's being swallowed up piece by piece by a corporation that couldn't give less of a fuck about our art. The frustration isn't just justified, it's necessary. And I'm totally on your side with that, really.

But. (there is alway a but...)