Chris Olin

🇺🇸🗽🔧
old millennial child of the internet, contrarian, skeptic, wordsmith, philomath, doesn't suffer fools gladly

Perspective is in the eye of the beholder

[Chris Olin @realchrisolin]

This dumpster fire of a webapp has turned into a pay-to-play clickbait, drama farming abomination. Like most people, I was optimistic that Twitter was being bought by Elon. Its been nearly three years since and this is far from the platform of free speech we were promised.

[Steven Cheng @stevencheng]

The World's full open source Smallest Desktop-Scale Two-Wheeled Robot.
Github: MuShibo/Micro-Wheeled_leg-Robot

[Aikido Security @AikidoSecurity]

⚠️ New "IronWorm" supply-chain attack: 30+ npm packages from @ asteroiddao shipped a malicious Rust binary firing on preinstall.

It sweeps 86 env vars + 20 credential files (AWS, GCP, Vault, npm, plus AI keys like Anthropic & OpenAI), hits Exodus wallets, hides behind an eBPF rootkit, and beacons over Tor. Self-propagates via npm Trusted Publishing OIDC, with backdated commits faked as claude/dependabot/renovate.

[The Lunduke Journal @LundukeJournal]

Open Source has become a haven of child grooming.

And not ONE prominent Open Source organization has spoken out against it.

- Linux desktop project, KDE, has a cartoon mascot who is “Non-Binary”, with “They/Them” pronouns, specifically designed to celebrate “Trans Pride” using Trans child grooming slang and terminology.

- Bazzite, the popular Linux gaming distribution, has a cartoon mascot of a child who wears the “Trans” and “Bi-sexual” flags and colors.

- A registered sex offender, with reportedly “thousands” of acts of abuse against children, is a prominent contributor and leader in Debian, GNOME, & Ubuntu. This serial child rapist is a regular speaker at Open Source events (such as DebConf) which refuse to warn attendees of the dangers of his presense.

- Multiple prominent Linux leaders, contributors, and commentators have documented examples of collecting, distributing, and defending pornography depicting small children.

[Pirat_Nation 🔴 @Pirat_Nation]

RPCS3 has announced that it is blocking traffic from Tencent ASN 132203 after reporting sustained high-volume scraping activity.

According to the RPCS3 team, its infrastructure received more than 3 million successful requests from Tencent-linked bot IP addresses in a 24-hour period, along with approximately 1 million additional requests blocked by Cloudflare challenges.

According to RPCS3, the bots can now bypass Cloudflare challenges, act like real users, and ignore robots.txt rules.

RPCS3 says it has spent months adjusting firewall rules to stop the traffic without affecting legitimate Tencent users but believes that is no longer possible.
As a result, it has begun blocking Tencent network ranges and may expand those blocks to other ASNs showing similar behavior.

[(infinite-jes) @lawofcons]

@lcamtuf I consider myself something of an autist.

[LaurieWired @lauriewired]

Everyone tends to think of swapfiles being disk based.

In reality, swapping to RAM is exponentially more popular.

If you have a traditional model of memory in your head, this makes NO SENSE. Swap is that thing we use when the system runs out of real ram right?

You know, RAM fills up, swap out to SSD to give the OS some breathing room. Why (and how?) would you swap to memory…very thing that’s full?

Well, Modern CPUs are ridiculously fast at compression, especially with something light like lz4. Zswap intercepts old pages, quickly compresses them, and then crams them back into system RAM. If you’re lucky, you might be able to fit ~3-4 compressed pages into the space of 1 traditional page.

Of course, this also has the benefit of not prematurely wearing out your SSD.

Mobile has done this for *years*, I know Android specifically has used this for a decade+. Regular Linux is catching up, Fedora uses zram by default now. The NT kernel (windows) also has their own implementation of in-memory compression, you can see it in task manager quite easily!

Anyway, it’s a fun trick used everywhere that few realize. Towards the future, I wouldn’t be surprised if inline, accelerated LZ4 starts showing up in the majority of CXL controllers.

[Famous In My Phone🔥 @FamousInMyPhone]

https://t.co/uYnux69oqu

[Brian Roemmele @BrianRoemmele]

BOOOM!

I am very honored to announce an X follower here reached out and has donated the entire transcripts of ALL Art Bell shows. They were close to Art and have made some stipulations of which I will abide.

I have already stated to vectorize and analyze them for AI insights.

This is an absolute privilege to have access to this data and will make announcements when it is cleared.

I can say we will have things that will correlate with new US Government releases soon.

Buckle up folks, AI is going to show us something new.

[Chris Olin @realchrisolin]

@RustTrial @karly_beech I just feed the transcriptions to a LLM to review for me. The less I have to see him or hear his voice, the better

[Eric S. Raymond @esrtweet]

Dear Microsoft: I gotta say I appreciate how hard you're working to make 2026 the Year of the Linux Desktop.

https://t.co/dgLM0GiNfz

[vaxry @vaxryy]

when she malloc on that stack but the buffer is already overflowing

[Grummz @Grummz]

Does using Brave hurt your reach?

Brave cycles identifiers to be privacy focused.

The question is, does this present itself as a "spam" signal to X?

[RPCS3 @rpcs3]

PSA: @TencentGlobal is aggressively scraping the Internet to build yet another AI slop chatbot, DDoSing many websites in the process.

We've found that, as of last week, their scraping bots can now solve Cloudflare challenges and behave like real users while ignoring robots.txt. In the last 24 hours alone, our website received more than 3 million successful requests from Tencent bot IP addresses, plus another 1 million that were blocked by Cloudflare challenges.

These recurring DDoS attacks from Tencent have been going on for over a year, and we have been constantly adjusting our firewall rules to filter them while trying not to impact Tencent's real users. Because that is no longer possible, we're now fully blocking Tencent IP addresses, starting with ASN 132203. We recommend other sysadmins do the same.

Other ASNs displaying similar abusive behaviour will also be fully blocked from our services.

We'd also like to thank @Cloudflare for sponsoring us with Project Alexandria as of 2025, giving our sysadmin the tools to keep RPCS3's online services running without service disruptions.

[Grummz @Grummz]

I like to post “good morning” messages to y’all.

But now that I found out X penalizes that, I avoid it.

How stupid is that?

Fuck it, good morning everyone!

[Chris Olin @realchrisolin]

@esrtweet @nikitabier @brave Same thing happened to @BrianRoemmele a year or two ago. He only got unbanned after a mutual connection who knew Elon intervened.

[Eric S. Raymond @esrtweet]

Recent algorithm changes on X may be unfairly hammering Brave users. And there's a larger issue here about bad interactions between robots and privacy measures.

@nikitabier @brave

My friend Jay Maynard, who some of you may know as Tron Guy, just got permabanned off X for "inauthentic behavior". His appeal was swiftly denied.

Jay is not a spammer, scammer or engagement farmer; he is, in fact, exactly the kind of good citizen X says it wants. Jay asked Gemini for analysis, and now thinks he knows what happened.

Brave, as a privacy measure, randomly changes the identity presented to sites in order to avoid tracking by the ad vampires. Gemini suggested that some code at X interpreted this as spammy behavior using multiple browsers. If so - and this does seem plausible - everybody trying to protect their privacy with Brave is at risk.

This is a general problem, not just an X glitch or a Brave issue. Social media sites are increasingly relying for security on forms of heuristic AI that are prone to unacceptably high false-positive rates.

More specifically, platforms are increasingly treating a user's refusal to be tracked, fingerprinted, and categorized as a hostile act. When a site makes it impossible to connect via a privacy-focused user agent without getting flagged as a malicious bot, it stops being "security" and effectively becomes a retaliatory lockout for protecting oneself.

Worse yet, such system architecture provides no circuit breaker - humans are only rarely and exceptionally asked review for errors. Jay's appeal denial came back so fast that it was obvious no meat-brain ever saw it. He has filed complaints within the Minnesota Attorney General and the Better Business Bureau, because what else can he do? The robots have locked him out.

Badly designed robots and zeal to squeeze human oversight out of the system forces regular citizens to rely on state law enforcement or consumer protection bureaus.

Allow me to gently suggest to the people running X that unless you want politicians poking their noses into your business and imposing constraints on you that you are not going to like, you need to fix your security and appeal processes so running to the law isn't necessary.

[Chris Olin @realchrisolin]

@LundukeJournal

[Pamela @PamelaBies]

my honest reaction to the new react with video feature

[Jacob Matson @matsonj]

how to build empathy for your users, honestly love this

[DataRepublican (small r) @DataRepublican]

NGO cockroaches hate sunlight.