Lightnews — Scholar-powered news

Pelle Wessman @voxpelli.com · 8d

Lovely to hear!

Pelle Wessman @voxpelli.com · 8d

/cc @aaronpk.com

Have you looked at the ATProto OAuth?

1

Pelle Wessman @voxpelli.com · 8d

Will it be something like a token exchange with the AppView? oauth.net/2/token-exch...

OAuth 2.0 Token Exchange

oauth.net

1 3

Pelle Wessman @voxpelli.com · 8d

If you want I can guide you through that as well, empowerment is gold 😊

Pelle Wessman @voxpelli.com · 8d

Here’s a screen recording from my tiny iPhone 12 Mini that shows how to identify when the change was introduced (in this case it’s been there since the import of the documentation to GitHub 5 years ago) and how to make a change.

Only thing I didn’t include was the commit + proposal part 🙈

1

Pelle Wessman @voxpelli.com · 8d

I really hope they will start supporting Passkeys or something for 2FA, I can’t see why they wouldn’t (unless there is something peculiar in the decentralized nature of #ATProto that I’m missing)

1 5

Pelle Wessman @voxpelli.com · 9d

Additional JS pro tip:

Use the helpers from my module pony-cause (inspired by the Error Cause precursor VError) to work more efficiently with causes: github.com/voxpelli/pon...

1

Pelle Wessman @voxpelli.com · 9d

Tried using the GitHub Copilot Agent to fix some simple issues – it requires more baby sitting so far than any human developer I have ever interacted with, and it even mentions things like:

"I see the problem! [...] I need to actually apply the changes I described in my previous response."

Pelle Wessman @voxpelli.com · 9d

That it is all actual modular self-contained Rust crates is such an improvement over the node.js + libuv situation

1 1

Pelle Wessman @voxpelli.com · 9d

Their core package: crates.io/crates/deno_...

crates.io: Rust Package Registry

crates.io

1

Pelle Wessman @voxpelli.com · 9d

And the tech that it builds upon is so much cleaner – eg. their slim version: crates.io/crates/deno_...,

crates.io: Rust Package Registry

crates.io

1 1

Pelle Wessman @voxpelli.com · 9d

@clever-cloud.com Any plans to offer official @deno.land hosting on your PaaS?

Deno @deno.land · 10d

Worried about npm exploits?
Deno can run your Node apps with added protection:
🔒 opt-in permissions
🔒 user-authorized postinstall scripts
🔒 permission audit + trace logs
and much more 👇

deno.com/blog/deno-pr...

How Deno protects against npm exploits | Deno

Recent supply chain attacks on npm is a reminder that Node and npm grants unfettered access to your systems. Here's how Deno, with an opt-in security model, protects against these vulnerabilities.

deno.com

Reposted by Pelle Wessman

Deno @deno.land · 10d

Worried about npm exploits?
Deno can run your Node apps with added protection:
🔒 opt-in permissions
🔒 user-authorized postinstall scripts
🔒 permission audit + trace logs
and much more 👇

deno.com/blog/deno-pr...

How Deno protects against npm exploits | Deno

Recent supply chain attacks on npm is a reminder that Node and npm grants unfettered access to your systems. Here's how Deno, with an opt-in security model, protects against these vulnerabilities.

deno.com

10 42

Pelle Wessman @voxpelli.com · 10d

This is excellent! And I see @ap.brid.gy is bridging Bluesky quotes into Mastodon already 🥳

Mastodon Engineering @mastodonengineering.mastodon.social.ap.brid.gy · 10d

In case you missed it, Quote Posts are live on mastodon.social and mastodon.online — let us know what you think!

This feature has been a long time coming because we wanted to take the time to do it right. Part of that process was sharing our work and getting feedback along the way […]

Original post on mastodon.social

mastodon.social

1

Pelle Wessman @voxpelli.com · 10d

Ultimately taxes should be applied by governments to create sustainable societies and ecosystems – ones that are balanced, fair, just and productive.

So maybe we ought to tax AI labor at least as equal as human labor?

And make sure that we redistribute the richness that comes from the AI?

Pelle Wessman @voxpelli.com · 10d

And when put into a wider context of pollution, global warming etc it’s in a way fascinating that we are very good at taxing income from work but worse at taxing those that hurt the planet or creates unsustainable societies.

1

Pelle Wessman @voxpelli.com · 10d

The main issue with AI from a labor market point of view is that it risks further strengthen the divide between rich and poor.

The benefits are reaped by companies at the “cost” of the labor market.

If the benefits were more equally distributed it would be less of an issue.

1

Pelle Wessman @voxpelli.com · 10d

I have found Bill Gates suggestion to tax robots to one of the more intriguing ones (haven’t weighed in or if it would be good or not): finance.yahoo.com/news/bill-ga...

Bill Gates Wants To 'Tax The Robots' That Take Your Job – And Some Say It Could Fund Universal Basic Income To Replace Lost Wages

Back in 2017 – long before ChatGPT became a household name and artificial intelligence started raising existential questions – Bill Gates floated a bold idea: tax the robots. The Microsoft cofounder s...

finance.yahoo.com

1

Reposted by Pelle Wessman

The Iconfactory @iconfactory.com · 10d

Iconfactory Tapestry 1.3 arrives on iOS 26 with stunning support for Liquid Glass, timeline treats like displaying Mastodon quoted posts and nicer polls, the ability to adjust font size within Tapestry and a native macOS app.

Your personal timeline app just got a whole lot better.

#TapestryApp

Glass Tapestry and More! • The Breakroom

We’re pleased to announce the arrival of Iconfactory Tapestry on iOS 26 with stunning support for Liquid Glass, visual improvements up and down the timeline, and a new native app for macOS. Tapestry ...

blog.iconfactory.com

1 1 4

Pelle Wessman @voxpelli.com · 10d

The other one I've been keeping an eye on is github.com/RafaelGSS/be...

GitHub - RafaelGSS/bench-node: A powerful Node.js benchmark library

A powerful Node.js benchmark library. Contribute to RafaelGSS/bench-node development by creating an account on GitHub.

github.com

1 1 3

Pelle Wessman @voxpelli.com · 10d

I’m moving all my dynamic hosting to the @clever-cloud.com PaaS (partly because it is European)

4

Pelle Wessman @voxpelli.com · 10d

/me plugging steamdeck into 4k tv

Oh, its no longer running fine!?

3

Pelle Wessman @voxpelli.com · 10d

@tangled.org FYI, I mentioned you here in @openssf.org regarding documenting the process and considerations for onboarding new CI platforms to the "Trusted Publishing" model of package registries like @pypi.org, npm etc: github.com/ossf/wg-secu...

Relevant if you want to support it in your CI

Document / standardize a common process for onboarding Trusted Publishing platforms · Issue #90 · ossf/wg-securing-software-repos

Following on the npm security announcements and its discussions there is a common concern (see eg. this comment) that the number of platforms supported for Trusted Publishing by npm is limited to j...

github.com

1

Pelle Wessman @voxpelli.com · 10d

Here’s the Open Collective for @servo.org: opencollective.com/servo

Servo - Open Collective

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications. For more details on fees, go to https://servo.org/sponsorship/#donatio...

opencollective.com

1 5

Reposted by Pelle Wessman

Mia (online) @miriam.codes · 11d

If you're into new browser engines free from corporate control – maybe skip the latest 'benevolent dictator', and check out @servo.org

They have nightly snapshots you can install, and they're rolling out new features regularly:

servo.org

Servo aims to empower developers with a lightweight, high-performance alternative for embedding web technologies in applications.

Servo is a web rendering engine written in Rust, with WebGL and WebGPU support, and adaptable to desktop, mobile, and embedded applications.

servo.org

1 17 83