equilibriumuk
banner
equilibriumuk.bsky.social
equilibriumuk
@equilibriumuk.bsky.social
39 followers 100 following 9 posts
Writes Code · Breaks Hardware · 👹🎲 😇👀 🔑 Cyber Security 🐧 Linux 🧰 Electronics ⌨️ Programming 🖋️ Occasional Blogger @ equk.co.uk 🍵 Green Tea ☕ Black Coffee 🐮 Dairy Free Webdev · JS, TS, Go, Rust​ 🦀
Posts Media Videos Starter Packs
just added more prefs to firefox after noticing 'ask ai chatbot' appear in context menu after update

user_pref("browser.ml.chat.page", false);
user_pref("browser.ml.chat.menu", false);

...
Comparing 79a32b3..a19bac6 · equk/ffox_profile_tools
🦊 linux firefox profiles with security presets & userchrome styles - Comparing 79a32b3..a19bac6 · equk/ffox_profile_tools
github.com
Reposted by equilibriumuk
Omg, the solution to CIA's Kryptos being discovered by someone becoming a subject matter expert, going on location, and finding the plaintext sitting in a vault several miles away is the absolute *perfect* ending to Kryptos. You couldn't write it. Just absolutely A+ www.nytimes.com/2025/10/16/s...
A C.I.A. Secret Kept for 35 Years Is Found in the Smithsonian’s Vault
www.nytimes.com
Reposted by equilibriumuk
#ESETresearch has discovered #HybridPetya ransomware on VirusTotal: a UEFI-compatible copycat of the infamous Petya/NotPetya malware. HybridPetya is capable of bypassing UEFI Secure Boot on outdated systems. www.welivesecurity.com/en/eset-rese... 1/8
www.welivesecurity.com
Reposted by equilibriumuk
Svelte @svelte.dev · Sep 8
You've probably heard about the supply chain attack that affected a number of widely-used npm packages today.

tl;dr: Don't panic. Notes:

1. Svelte, SvelteKit and their associated packages are not vulnerable to this attack, as they do not use any of the compromised dependencies in the browser
Reposted by equilibriumuk
Nuxt @nuxt.com · Sep 9
you may have heard about a supply chain attack on a number of packages distributed on npm. a quick update:

1. nuxt is not vulnerable.

we do not ship code into client/server from these particular packages (this attack required running in the browser)

www.aikido.dev/blog/npm-de...
npm debug and chalk packages compromised
The popular packages debug and chalk on npm have been compromised with malicious code
www.aikido.dev
imagine going to great lengths to inject malware which runs on the browser into nodejs packages ...
Reposted by equilibriumuk
Reposted by equilibriumuk
it is still incredibly funny to me how “GamersNexus” remains one of the hardest-hitting voices in contemporary investigative journalism
Reposted by equilibriumuk
I imagined the Chatsubo in 1984. 41 years later I opened its door. Neuromancer is in production.
Reposted by equilibriumuk
Consider a programmer looking at code they themselves wrote a year ago, now having to identify and fix a bug. They have to rebuild the mental model of what is going on, which is easier if they have already had a mental model of what is going on.
Reposted by equilibriumuk
The Rust GCC backend can now fully bootstrap the Rust compiler. Excellent work from FractalFir in their GSoC (which starts in one week XD).

More information here: www.reddit.com/r/rust/comme...
From the rust community on Reddit: [Media] The GCC compiler backend can now fully bootstrap the Rust compiler!
Explore this post and more from the rust community
www.reddit.com
Reposted by equilibriumuk
"AI's gonna take your jobs"
Reposted by equilibriumuk
📣 The rush to add AI into everything is a big threat to privacy, as we've been saying.

MS Recall's screenshotting everything is a (not) great example of exactly why.

So, Signal took steps to protect everyone using Signal on Windows 11 from Recall's privacy invasion.👇

signal.org/blog/signal-...
By Default, Signal Doesn't Recall
Signal Desktop now includes support for a new “Screen security” setting that is designed to help prevent your own computer from capturing screenshots of your Signal chats on Windows. This setting is a...
signal.org
Reposted by equilibriumuk
new #rustlang crate drop: iddqd! ID-based maps where keys are borrowed from values. Four maps are included: IdOrdMap, IdHashMap, a bijective (1:1) BiHashMap and a trijective (1:1:1) TriHashMap.

At Oxide we've found this pattern to be very useful. iddqd is no-std compatible, too!

docs.rs/iddqd
Reposted by equilibriumuk
Oh my god, Copilot is allowed to create and fix issues on Microsoft github repos and it goes exactly as you'd have imagined.

Try going into any of these PRs commits to see poor Microsoft engineers try to coerce Copilot into doing literally anything right.

www.reddit.com/r/Experience...
From the ExperiencedDevs community on Reddit: My new hobby: watching AI slowly drive Microsoft employees insane
Explore this post and more from the ExperiencedDevs community
www.reddit.com
Reposted by equilibriumuk
I’m writing a series of posts about Hardcovers recent migration. The first one in the series was published yesterday!

Part 1: How We Fell Out of Love with Next.js and Back in Love with Ruby on Rails & Inertia.js

hardcover.app/blog/part-1-...
Part 1: How We Fell Out of Love with Next.js and Back in Love with Ruby on Rails & Inertia.js - Hardcover Blog
A look at how and why we migrated from Next.js to Ruby on Rails.
hardcover.app
Reposted by equilibriumuk
Today marks a decade since the 1st stable release of #rustlang 🎉 To commemorate this milestone, we asked Karen Tölva (Ferris creator 🦀) to design a celebratory graphic & answer a few questions in our blog.

Congrats to EVERYONE who has made Rust what it is today 🧡

rustfoundation.org/media/celebr...
Reposted by equilibriumuk
🎉 Rust turns 10! What a decade for us all 🥳

To celebrate, we’ve curated 10 must-watch talks from EuroRust. Let’s kick things off 👇

🧵 1/11