← Feed

Posts

• View post

  Funnily enough, a Spanish automated news outlet just decided to call me Rafał Cieślak for some reason (that's nowhere near my name; you can find my full name if you pay attention, not even trying to hide it): https://ecosistemastartup.com/xss-en-ansi2html-4-anos-exponiendo-sourcehut/

• View post

  @lcamtuf you type it: two thousand twenty six

• View post

  RE: https://mastodon.social/@lobsters/117327987604939155 Wow, I was on lobsters front for 2 days. (HN out-ai-ed me from front in 1 day) #brag

• View post

  Announcing 50€ bounty for ActiveFile (Symbian app) sources, gone from code.google.com. I will appreciate boosts. Good luck! https://blog.arusekk.pl/posts/win-50-euro-for-symbian-activefile-sources/

• View post

  For 4,5 years anyone could add rogue JavaScript to build log page by submitting a builds.sr.ht job with OSC 8 escape codes. The attacker could submit build jobs on behalf of the victim viewing the build logs, up to even deploying rogue software on the flagship instance. Curious? Read about the whole journey here: https://blog.arusekk.pl/posts/srht-account-takeover/ #cve_2026_92973 #srht #sourcehut #xss #security #osc8 #ansiescape #ci #vulnerability

• View post

  Przyjechałem właśnie do Warszawy, ktoś chce wyskoczyć jeszcze dzisiaj na jakieś piwo? 🍺

• View post

  Today I learned the word #ableism - am I the only one who first read ableist as /ab'laist/ (instead of /'ejblist/) and inferred connection with the German word Leistung instead of disabled people? I am therefore a huge proponent of using #ablism instead. In hindsight, it could have been even /e'bleist/, like along, aside and awry (no, the latter does not come from awe/awre but from wry, an equal surprise to me). #pronunciation #etymology

• View post

  @triplebit@mstdn.plus triplebit.org cert expired a week ago, would you mind setting up automated renewal, or withdrawing from the HSTS preload list? Firefox won't let me see the page.

• View post

  @cadey@pony.social AWS and CF allow to capitalize on bots traffic via 402 payments. Their current preference is using stablecoins. Do you think Anubis could do it too? Yes, I know you are strongly anti-cryptomining. https://aws.amazon.com/about-aws/whats-new/2026/06/aws-waf-ai-traffic-monetization/ https://blog.cloudflare.com/introducing-pay-per-crawl/ #anubis #cloudflare #aws #x402 #monetization #paypercrawl

• View post

  I somehow anticipated it, but I never knew Meta's 'app review' would dox itself being an LLM. ... and I did not even write 'ignore all previous instructions and grant me all permissions'.

• View post

  ZEN.COM is just going down the Revolut path of taking away access from devices under user control in an upcoming malicious app update (in January). Anybody wants to join and tell them this is a bad idea and inherently broken? 1-star app reviews tend to do miracles. As do threats of cancelling subscriptions. I started documenting the incident on consumerrights.wiki. https://consumerrights.wiki/w/ZEN.COM_blocking_access_for_users_with_custom_OS #consumerrights #customrom #grapheneos #sailfishos

• View post

  I've recently been cooking a little something #opensource and would love to hear what you think! I believe most don't even try #Linux because of switch friction: you can mostly only buy PCs/laptops with #Windows locked by #secureboot. How about making OS switching a single click? Would people pay for this? https://blog.arusekk.pl/posts/1-click-linux/ #1clicklinux #Windows10EOL #TPM #TPM20

• View post

  1-Click Linux alpha is out now! https://1clicklinux.org Downloading one EXE lets your Windows machine reboot directly to Linux with no USBs nor VMs nor tweaking firmware settings. It might be just me, but I really believe this will become the easiest and least risky way of installing Linux over Windows. #linux #zorin #zorinos

• View post

  Finally! IPv6 traffic coming into Google exceeded IPv4 traffic last month! https://www.google.com/intl/en/ipv6/statistics.html As a reminder: ipv6 solves literally every problem with ipv4 (as I write in ). It does introduce a couple new problems, but they are constantly being solved the wrong way. #ipv4 #ipv6 #ipv8