Jump to archive: [2024] [2023] [2022] [2021] [2020]

parking has eaten american cities (Bloomberg citylab)
simple 3d-printed mount for a standard 80mm case fan on a raspberry pi (thingiverse) [rpi]
easyjson roundup: (wired) (the register) (redcell) (cyber security news) (linux security) (absolute appsec)
Tool for open source maintainers to evaluate risk of their dependencies at scale (mitre/hipcheck) [supply chain][appsec]
Scaling the Security Researcher to Eliminate OSS Security Vulnerabilities Once and For All (Jonathan Leitschuh @SupplyChainSecurityCon) [infosec][supply chain][conferences]
list of cybersecurity confernences (lots of pay-to-play junk, but most community conferences included) (infosec-conferences) [conferences]
AI Tools in Society: Impacts on Cognitive Offloading and the Future of Critical Thinking (AI makes you dumb) (mdpi)

The History of MEM's Sub-Basement Transit Tunnels (memphis international airport)
Connecting SBOMs with OSS Project Health to Better Understand Dependencies (Georg Link @FOSDEM) [supply chain][infosec][conferences]
project health is the third pillar of open source strategy (bitergia) [supply chain][infosec]
how to import instagram feed to pixelfed (pixelfed)
Mark Klein, AT&T Whistleblower Who Revealed NSA Mass Spying, has died (eff)
bellingcat osint toolkit (bellingcat)
The Slow Collapse of Critical Thinking in OSINT due to AI (nico dekens)

11 best vintage fountain pens (onepenshow.com) [fountain pens]
extensive information on vintage parker pens ((parkerpens.net) [fountain pens]
detailed primer on alternative split keyboards mostly aimed at normies and newbies (chris person via aftermath) [keebs]
taxonomy of different types of nebula (big think)[astronomy][longreads]
training llm to inject backdoors into code as it writes (perfect for automated supply chain attacks) (sshh.io) [infosec]
sandwiches in NYC have gotten too big (gothamist)
Linux Privilege Escalation Awesome Script (github) [infosec]
browser extension that blocks various enshittification (stopthemadness)
Uncovering North Korean APT Attacks on the OSS Supply Chain (poppaea mcdermott @sigstorecon) [supply chain][conferneces][infosec]
a new way to count prime numbers (quanta) [longreads]
SNES hardware is running faster as it ages (404 media) (archive.ph link) [video games]
research on how dprk hackers build credible fake user accounts on github (nisos) [infosec]
the best shirtmakers in the world (ft.com)
dormant python package compromised (thehackernews) [malware][supply chain]
NPM Ignore Scripts as Security Mitigation for Malicious Packages (Liran Tal) [malware][supply chain]
3 takeaways from the Ultralytics AI Python library hack (infoworld) [infosec][malware][supply chain]
exit interview with jen easterly (cisa) (wired)
tool for continuous scanning of open source for malware (safedep) [infosec][malware][supply chain]
pypi project quarantine (mike fiedler) [malware][infosec][supply chain]
Supply-chain attack analysis: Ultralytics (seth larson) [infosec][supply chain]
malicious npm packages exfiltrate ssh keys (thehackernews) [infosec][malware][supply chain]
pretty insane gaggia classic mod (gaggimate youtube via lance) [coffee]
Canada's remote (but accessible) dark-sky sanctuary (bbc) [travel]
an Evidence-Based Approach to Vulnerability Prioritization (patrick garrity/vulncheck) [infosec][appsec]
austrailian government bans kaspersky (the hacker news) [infosec][foci]

marcin wichary's paean to "gorton" engraved font (and cousins) (the hardest working font in manhattan) [longreads]
"noun verbed" meme generator (fromsoftware/elden ring/dark souls etc) (rezuaq) [memes]
How Threat Actors Are Weaponizing Your Favorite Open-Source Package Registry (Kretz & Obregoso @ FOSDEM) [conferences][devsecops][infosec]
What if Log4Shell were to happen today? (Piotr P. Karwasz @ fosdem) [conferences][devsecops][infosec]
struggles with making sboms for C apps (chris swan @ fosdem) [conferences][devsecops][infosec]
Using AT Proto for more than just Bluesky posts (anil Madhavapeddy)
why sboms for C projects are problematic, some solutions &c (ariadne conill) [sbom][infosec]
interactive sbom browser utility (sbommage) [infosec][ops]
planetary alignment coming 28 february (bbc)
curl abandons cvss scoring (bagder) cf: go security team has similar issues (filippo valsorda) and additional commentary (open source security) [infosec][devsecops]
Knotty Business: A Delightfully Tangled Reading List on Knots (longreads) [longreads]
how go mitigates supply chain attacks (Filippo Valsorda) [infosec][devsecops]
how the kremlin inflitrated russia's facebook (wired)
demolishing the billionaire scam (a.r. moxon) [longreads]

linkedin post date extractor (trevor fox)
This Artist Faked Being a Billionaire to Photograph New York City's Best Views (architectural digest)
pacific coast highway road trip planners (pch1roadtrip.com) (california.com) (practicalwanderlust) (mandagies) [travel][pch]
Detecting Python Malware in the Software Supply Chain with Program Analysis (Shariffdeen et al) [infosec][devsecops]
2024 CVE Data Review (Jerry Gamblin) [vuln][infosec]
Tsundoku: The art of buying books and never reading them (bbc)
simple ad block tester (canyoublockit)
aboutcode uncovers data about software (licenses, dependencies, open source optics) (github) [infosec][devsecops][supply chain]
top 20 video games of 2024 (ars technica) [best of]
50 best indie rock albums of 2024 (rolling stone) [best of]

new NIST password guidance (sp 800-63b) (cf open source security podcast episode) [infosec]
How some of the world's most brilliant computer scientists got password policies so wrong (Stuart Schechter) [infosec]
combination of tetris and minesweeper (tetrisweeper)
v. rare hour-long interview with Dr. Demin at Ford HQ (youtube via john willis)
how pickup trucks became so imposing (axios)
ultrafeeder docker container can feed ads-b data to multiple services simultaneously (sdr-enthusiasts) [rpi][adsb]
The Arresting Typography of the Sanborn Fire Insurance Maps (kottke) (sanbornfiremaps.com)
the best aurora pics of the year (earthsky.org)
Bertrand Russell's Four Desires Driving All Human Behavior (Marginalian)
A Defense of the Reality of Time (quanta) [longreads]

"Well, what if time had two dimensions?" As a purely algebraic question, I can say that. But if you ask me what could it mean, physically, for time to have two dimensions, I haven't the vaguest idea.

Physics has discovered some really strange things about the world, but it has not discovered that change is an illusion.

special mylar tape blocks visible LEDs but allows IR for remotes (LED blocker)
how to disable/limit smart TV snooping features ("ACR" &c) (consumer reports)
top national-park hotels in the US (architecturaldigest) [travel]
tournament-style coding font battle-picker (condingfont)
ronan farrow on phone hacks by the government against citizens (new yorker)
lance hedrick review of miicoffee apex/turin legato/gemilai g3007l (youtube) [coffee]
lance hedrick coffee gear recommendations (amazon) [coffee]
turnkey modded miicoffee apex/gemilai g3007l/crm3007g/etc espresso machine (kafmasino one) [coffee]
open repository for legal documents (gitlaw.com)
Repo swatting attack deletes GitHub and GitLab accounts (Paul McCarty via BSides Melbourne) [infosec][conferences]
Josh Corman on software/cyber threats from China (and beyond) (below the surface podcast) [infosec][cybersec][interviews][podcasts]
Beyond Either/Or: Kierkegaard on the Passion for Possibility and the Key to Resetting Relationships (marginalian)

the true eternity lies not behind either/or but ahead of it.

if you are presented with two equally competent candidates, choose the one who overcame stereotypes to get where they are.

A grocer who dreams is offensive to the buyer, because such a grocer is not wholly a grocer. Society demands that he limit himself to his function as a grocer... There are indeed many precautions to imprison a man in what he is, as if we lived in fear that he might break away and escape from his condition.

when the natural world collides with the human, we must get to a truer vision of what life means on this planet (jeff vandermeer)
the hoover dam's Astronomical Monument allows aliens to understand when it was built (longnow)
The brain’s twilight zone: when you’re neither awake nor asleep (psyche) [longreads]
Beyond Either/Or: Kierkegaard on the Passion for Possibility and the Key to Resetting Relationships (the marginalian)
A Shadow Librarian: Fighting back against encroaching capitalism (DEF CON 32 - Daniel Messe) [conferences]
space chasers (thinking about first contact scenarios) (truly adventurous) [longreads]
Making the Most of a Crisis (mikey dickerson - Civil Service Talent Hackday Prague) [conferences]
Signal's Meredith Whittaker on Surveillance Capitalism (spotify - Kara Swisher) [podcasts][interviews]
How to not Let a Good Crisis go to Waste (mikey dickerson - govtech lithuania) [conferences]

If your plan to succeed where others have failed is "we are going to swim harder," you are going to fail.

AI and the future of democracy (and lawsuits, dispute resolution, bureacracy, etc) (bruce schneier tedx)

We should prefer when AIs augment people, and not replace them.

recap of all AI-related talks at bsides LV/defcon/blackhat (tldrsec)
Spacetime Management: Lessons from the Stoics (ignite) (Richard Boyd) (devopsdays detroit) [conferences]
multi-color LED time/temp clock etc (no radio sync) (seiko QHL085KLH)
My CI/CD Pipeline Contains All Security Tools Available! (Jasmin Mair) (bsides munich) [appsec][devsecops][conferences]
Are Vulnerability Scanners Dead? Transcending CVEs for Vulnerability Management (upcoming - bsides nova) [appsec][conferences]
netflix hides a bunch of stuff from you, use secret codes to find it (netflix codes)
WTF is Cloud Application Detection Response (latio/James Berthoty) [appsec]
CVSS scores do not correspond to reality (stacklok) [devsecops][appsec]

sbom-a-rama fall 2024 (denver) (cisa) [devsecops][conferences]
Secure Software Development Education 2024 Survey (linux foundation) [devsecops]
what I learned making an SCA tool in 2024 (chris langton) [devsecops]
The Man Who Invented Modern Probability (nautilus)
How John Coltrane's "My Favorite Things" Changed American Music (smithsonian)
finding the worst shape to pack (opposite of the knapsack problem) (quanta)
why many CNAPPs have a Kubernetes gap (james berhoty) [devsecops][appsec]
geodata from faulty GPS/trackers leads to "null island" (stamen.com)
crystal doodadd turns reality into 8-bit pixel art (yanko)
The Stabilizer Problem - Norbauer's Presentation at Keycon 2024 (youtube) [keebs]
interview with Ryan Norbauer (novelkeys) [keebs]
Faulkner's one-paragraph review of The Old Man and the Sea (lithub)
fifth busy beaver found (turing machine oddities) (quanta)
pv/pipe viewer - monitor data through a pipeline (ivarch) [devops][cli]

great primer on polyfill supply chain attack (latio/berthoty) [devsecops]
1955 Letter from Flannery O'Connor to Betty Hester (American Reader)

M. Sartre finds God emotionally unsatisfactory in the extreme, as do most of my friends of less stature than he. The truth does not change according to our ability to stomach it emotionally. A higher paradox confounds emotion as well as reason and there are long periods in the lives of all of us, and of the saints, when the truth as revealed by faith is hideous, emotionally disturbing, downright repulsive.

adding used coffee grounds to concrete increases its strength (science alert) [coffee]
"avoidance machines" - examining how silicon valley products are designed as user traps (kevin baker) [first in a series]

In this way the systems Silicon Valley uses to ensnare us, Seaver notes, walk a fine line between coercion and persuasion. A mouse may walk into a trap in search of cheese, but to describe this as a purely free choice amounts to a kind of willful ignorance.

open source, off-grid, decentralized, mesh network (meshtastic)
Nakaya Dorsal Fin 2 in Heki-Tamenuri: A Review (penaddict) [fountain pens]
Passkeys: A Shattered Dream (Firstyear's blog) [security]
rust-based open-source image conversion (switcheroo)
fediverse-based instagram replacement (pixelfed)
run doom inside htop (github) [gaming]
cursed "smart" tv destroys windows PCs by spewing UUIDs at an insane rate (cohost blog)
28 Spring Pastas (bon appetit) [cooking]
Henry Rollins on Black Flag, Minor Threat, The Stooges, Green Day, Beyonce and the meaning of punk (louder)
Physicists Finally Know How the Strong Force Gets Its Strength (sciam)
lessons from xz: a More Sustainable Open Source Ecosystem (cisa) [devsecops][xz]
new excavation is rewriting the timeline of the fall of rome (popmech)
open-source software-defined ham HF transceiver (hermes-lite) [sdr][ham]
thinkpieces on how to "fix" opensource are forgetting the people who make it go (Di4na)

anything you offer must fit in 1h per month. That is it. And if it does not... we, as maintainers, will not do it. At all. And then what will you do? Throw away the 60% of the code the world depends on in every software product? No. You will discover that you made nothing better.

Technologist vs spy: the xz backdoor debate (lcamtuf) [devsecops][xz]

perhaps they have known for a while

This is an example of Supply Chain Security that CISOs love to talk and freak out about. This is an example of an Insider Threat that is the boogey man of corporate infosec.

PLEASE IMMEDIATELY STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES

12 low-maintenance houseplants (allure)
command line tool for url parsing and manipulation (trurl) [devops][devsecops]
foolproof pan pizza (serious eats) [cooking]
yet another sbom-quality metric? (harness sbom score) [sbom][devsecops]
Quantifying your reliance on Open Source software (jamie tanna - state of open con 24) [devsecops]
John WIllis on how Kubernetes won, digital transformation and Deming (software defined talk) [podcasts][devops]
After Love: Maxine Kumin's Stunning Poem About Eros as a Portal to Unselfing (the marginalian)

Afterward, the compromise.
Bodies resume their boundaries.

Turn your fucking phone off, put it in your pocket, leave it in your pocket - stay here.

3d printed doodads for high-end home coffee enthusiasts (etsy) [coffee]
webtool for intercepting and recording webhook payloads (webhook-test) [devsecops]
600 years of color charts in one mammoth book (colossal)
the value of open source software (harvard business school)
tyranny of the algorithm: why every high-end coffee house looks the same (the guardian) [coffee][longreads]
10 Bathrooms You Should Pee in Before You Die (atlas obscura) [travel]
profiles of various AT&T/NSA spy hubs (the intercept)
teach yourself latin (familia romana)
Salary Negotiation: Make More Money, Be More Valued (Patrick McKenzie)
bruce perens working on what comes next for open source (the register)
Astronomer and Poet Rebecca Elson's Spare, Stunning Meditation on the Mystery of Being (marginalian) [longreads]
Open-Source Dependency Abandonment (Miller, Kastner, Vasilescu) [devsecops][appsec][infosec]
Determining EPSS Score Thresholds for Prioritization (medium) [devsecops][appsec][infosec]
Common Configuration Scoring System (snyk) [devsecops][appsec][infosec]
Zoom Unveils Open Source Vulnerability Impact Scoring System (security week) [infosec][appsec][devsecops]
a method to the madness of the teenage brain (nautilus) [longreads]
uncovering the hidden differences in how people experience the world (aeon) [longreads]
prima coffee advanced pourover class (prima) [coffee]
very little correlation between CVSS and exploitation of vulnerabilities (chris john riley) [infosec][appsec][devsecops]
Raspberry Pi 4 USB Boot Config Guide for SSD / Flash Drives (james chambers) [rpi]
crazy "triangulation" hardware 0-day owns iphones (ars technica) (securelist) [opsec][infosec]

technique for maximizing airtag privacy while still obstructing stalkers (wired) [opsec]
the advice I wish I listened to when my kids were little (fatherly)
detecting hardcoded secrets in packagesin pypi ecosystem (gitguardian) [devsecops]
how online laughing shorthand/indicators translate into different languages (lol)
suvs and cars in general are getting bigger and killing people (slate) [longreads]
sloppy wrapping is more appreciated by close friends (the conversation)
A guide to difficult conversations for people who hate confrontation (vox)
How to think before you speak, online and off (vox)
the year's most spectacular photos from the James Webb Telescope (time)
The Long, Petty Friendship That Changed Art (manet/degas - new yorker) [longreads]
comically large sweatshirt-material robe/housecoat (offhours) [shopping]
using debian package manager to solve sudoku (wayback)
how much did log4shell change? (veracode) [devsecops]
developer conferences agenda (calendar) [cfps]
How to Become a Killer Negotiator in Nine Steps (pocket/telegraph)
sylvia plath on free will (the marginalian)
vacation planning for maximum enjoyment (pocket)
astronaut-tested productivity hack and mistake recovery (fast company)
PJ Harvey tiny desk concert (npr/youtube)
John Gray on Pessimism, Liberalism, and Theism (conversations w/ tyler) [podcasts]
great interview with US digital service administrator (verge/decoder) [podcasts]
best winter escapes in the united states (natgeo) [travel]
the Japanese Approach to Accepting Life's Challenges, "Ukeireru" (pocket)
self-awareness is the secret to a successful job interview (fast company) [hiring]
Open Source Supply Chain Security at Google (slides, video) (ACM SCORED 2023 keynote) [devsecops]
lost ancient tyrian purple pigment (bbc) [longreads]

the manifest destiny of AI and techno-futurism (emily gorcenski) [longreads]
crypto/techbro obfuscation via effective altruism (molly white) [longreads]
selection of mods for gaggia classic pro espresso machine (reddit) [coffee]
full-size m.2 bottom-mount plate for rpi 5 (pineberry) [rpi]
cup score inflation (scott rao) [coffee]
cve "half-day" vulnerability watcher/finder (aquasec) [devsecops]
recommended practices for software bill of materials consumption (department of defense) [devsecops][sbom]
on the importantance of tracking software dependencies (Frederick Kautz) [devsecops]
diy mechanical keyboard with trackball/trackpoint option (holykeebs) [keebs]
figure 8 knot how-to animation (massimo)
self-awareness as a success indicator in job interviews (cnbc) [hiring]

the massive bug at the heart of the npm ecosystem (darcy clarke) [devsecops]
the stoic antidote to frustration (marginalian) [longreads]
common security advisory framework (via github) [devsecops]
running pihole on docker swarm (ocram85) [rpi]
25 best pizza joints in chicago (chicago mag)
nelson and western electric rules for control charts (via john willis)
ask 3 key questions to be more likable and give better advice (inc) [comms]
skip small talk with emotionally intelligent conversation starters (inc) [comms]
map of people who consider themselves midwesterners (twitter)
x-pac, dyneema etc camping/utility bags (hartford gear)
Commercially Available Chairs in Star Trek (via @gerikson@mastodon.social)
Anish Kapoor's "Untrue/Unreal" Exhibition at Palazzo Strozzi (colossal) [art]
Living with aphantasia (nautilus) [longreads]
what's next for mrna tech (cancer, gene editing) (nature)

the utter uselessness of job interviews (ny times)i [hiring]
big database of command line examples and howtos (via warp) [devsecops]
DevOps/SRE Exercises (github) [devops] [devsecops]
How to Read the Room (Fatherly)
Understanding Software Suppliers (Resilient Cyber) [devsecops]
Become a More Effective Leader at Work (lifehacker) [Careers] [Management]
William Blake on What We Keep In Loss (The Marginalian)
The Greatest Commencement Addresses of All Time (The Marginalian)
Three years all-remote at GitLab: Know the unknown unknowns (Michael Friedrich) [Careers]

build recorder (records interactions between files and tools during compilation) (github) [devsecops]
my distaste for your solution does not mean disregard for the problem (techdirt)
cryptography bill of materials (IBM github)

just-in-time theory of user behavior (jeff atwood/coding horror) [psych]
side-channel attack via power LED (ars via schneier)
turn command-line scripts into gifs for demo/docs (charmbracelet/vhs)
advanced macOS commands (saurabhs)
Dirty Martini Pasta (delish) [cooking]
Pasta With 15-Minute Burst Cherry Tomato Sauce (epicurious) [cooking]
40-minute interview with PJ Harvey (npr)
acura tsx wagon tonneau cover part # 84400TL4G12ZA (amayama)
acura tsx wagon tonneau cover part # 84400-TL4-G12ZA (ahparts) [diy]
bill watterson on creativity, inspiration, rejection, drudgery, grit, and being interesting (the marginalian)
monster gravitational waves "detected" (sort of) (nature)

the church of the clocked screws (lost art press)
the day the lake took the edmund fitzgerald (orion nature and culture) [longreads]
how the best leadership teams navigate uncertain times (hbr) [comms][management]
How to Write Email with Military Precision (hbr) [comms]
is cybersecurity unsolvable? [scott shapiro profile] (ars technica)
seiko dial logo dictonary (thewatchsite)
list of seiko movements (quartz and mechanical) (watchwiki)
is cybersecurity unsolvable? (ars technica) [longreads][infosec]

disable smb1 and netbios in macos (performance improvements) (apple)
climate and average weather year round for given locations (global) (weatherspark) [wx]
how artists have gotten shadows wrong through history (mit press)
Jorge Luis Borges on preferring english to spanish (instagram)
add remotes to any garage door opener (how to wire up external RF relay) (Rick's Tech Tips) [diy]
prefab, reconfigurable plastic housing (cellophane house) (cf. loblolly house)
bio-based 3d-printed house (umaine)
amsterdam gardens guide (vogue) [travel]
three day trips from amsterdam (conde nast) [travel]
hunting russian "snake" malware (cisa) [devsecops]
experiences of seven homeowners living in frank lloyd wright houses (Architectural Digest)
How To: LG/Kenmore Ice Chute Door 5007JA3006R (youtube) [diy]
yet another solarwinds postmortem (wired) [devsecops]
roundup of new coffee brewers at SCA 2023 (daily coffee news) [coffee]

the running conversation in your head - inner voice (atlantic) [longreads]
how ai could write our laws (schneier/sanders via crypto-gram)
inner voice - "We are all in pieces, struggling to create the illusion of a coherent 'me' from moment to moment." (atlantic)
what bobby mcilvaine left behind (two decades since 9/11) (atlantic) [longreads]
design lover's guide to amsterdam (architectural digest) [travel]
nyc's most beautiful public bathroom (atlas obscura) [podcasts]
brad delong on intellectual and technical progress (conversations with tyler) [podcasts]
devops metrics often capture the wrong data (acm via john willis) [devsecops]
software supply chain practices are maturing (reversinglabs) [devsecops]
bipartisan bill for open source security (fedscoop) [devsecops]
roland griffiths inteverview - psychedelics, regrets, terminal diagnoses (nytimes)
sbom type definitions finalized (cisa) [devsecops]
column mini-dripper for pour-over coffee (indiegogo) [coffee]
boom times for used office chair dealers (vice)
emily dickinson's electric love letters to susan gilbert (the marginalian) [poetry]
me from myself to banish (emily dickinson via internetpoem) [poetry]
tips for collecting houseplants on the cheap (wirecutter)
seven questions to explore your core values (fatherly)
rick steves on traveling light, spontaneity (travel and leisure) [travel]
map of upcoming 2023 and 2024 solar eclipses (space.com)

classic literature featureing the figurative "literally" (mental floss)
examination of glen canyon/lake powell, western reseviors (incredible pictures) (high country) [longreads]
searchable database of public hiking trails (with maps) (alltrails)
Deep dive on Apple M2 Pro performance compared to AMD 3950X (via jpetazzo@hachyderm.io)
Create SBOMs from github dependency graph data (gh-sbom) [devsecops]
Command Line Interface Guidelines (clig.dev)
Unsafe at Any CPU Speed (Jen Easterly remarks at CMU) (cisa.gov) [devsecops]

soviet-era analog/mechanical computer for astronavigation (mastodon)
"venting anger is like using gasoline to put out a fire" (slate)
train yourself to trust your gut more (hbr)
six alternatives to most popular national parks (wapo/pocket) [travel]
we've always been distracted (aeon) [longreads]
how to ask good questions (beside) [comms]
regular expression playground (regex101)
git checkout authentication for supply chain security (Ludovic Courtès @ FOSDEM)
bit-for-bit reproducible container builds (akihiro suda @ FOSDEM) cf. [source date epoch][repro-get]
open source client for container development (finch via estesp/aws) [devops]

the perverse incentive of vulnerability scanning (josh bressers) [devsecops]
super easy pasta pomodoro (allrecipes) [cooking]
quality of random number generator significantly influences monte carlo simulations (more than imagined) (pubmed) [via matthew green]
america's culture warriors are going after librarians (coda) [longreads]
add sbom to containers with github actions (alex ellis) [devsecops]
buildkit dockerfile frontend (qnib) [devsecops]
crawl your mastodon graph for additional accounts to follow (followgraph)
crawl your twitter follows for mastodon handles (fedifinder)
reimagine the 2nd half of your career (continuous improvement &c) (hbr)
how to be a better friend (insider) [comms]
move old raspberry pi root filesystem to USB (instructables) [rpi]
unleashed firmware for flipper zero (github)
fun things to try with flipper zero (derg.nz)
banished words for 2022 (npr)
long-bloom immersion/percolation technique with hario switch (kaldis coffee) [coffee]
hario swith comparison with clever dripper (Acquired Coffee) [coffee]
docker image for feeding ADSB data to flightaware.com (github)
docker image for feeding ADSB data to flightradar24.com (github)
docker image for deconding ADSB (&c) from software-defined radios (github)
fascinating and infuriating intervew w/ retired defense investigator (radley balko) [longreads]

protons are weird (quanta) [longreads]
stocism in the post-pandemic world (esquire) [longreads]
collection of houseplant articles for non-gardeners (pocket)
best indoor plants for small spaces (apartment therapy)
13 indoor plants that don't need sun (gardening chores)
handmade travelers notebook alternative in multiple sizes (etsy)
thread with lots of details on Seiko 9T82 chronograph movement, including a lot of good pics of SBCG003 (watchprosite)
vulnerability scanner written in go (osv-scanner via google) [devsecops]
webapp for checking other website's TLS/encyrption algorithms (ssltest via qualys)
teaching kids about risks, making better choices (bbc)
fixing ux for one-off kubernetes tasks (alex ellis) [devops]
devops conferences/agendas/cfps (github)
Do not say, "Why were the old days better than these?" For it is not wise to ask such questions. (Ecclesiastes 7:10)
quick and dirty regenerate expired k3s certs (one year expiration) (ibm)
quick tutorial on using existing images to seed midjourney v4 (medium) [ai]
3d-printed panel converts ATX power supply to benchtop use (hackster)
fusion XIAO mechanical keyboard contest results (seedstudio) [keebs]
timings and other details for moon/mars occultation on December 7th (via amsci) [more]
free stock images (unsplash)
bypass news paywalls (12ft)

custom cases for small-run keyboard projects (p3dstore) [keebs]
ai-generated jodorowski/tron fantasy (via midjourney) [more] [fb]
open source dependency mapping tool from lyft (cartography) [devsecops]
lessons from the best mentors (hbr) [comms]
review of pentiment, video game where player is an artist in 16th-century Bavaria (wired)
mastodon server bootstrapping journal (blogs via linkedin)
casino card-shuffling machines are non-random (new sci via crypto-gram)
walk around world cities (citywalks)
drive around world cities and hear local radio (driveandlisten)

pi-esque multimeter/tool for RFID/NFC/BT and more (flipper)
trackball module for diy keyboards (github) [keebs]
reverse dall-e takes an image and provides a plausible text prompt (clip interrogator) [ai/ml]
OWASP kube top ten risks #2: supply chain vulnerabilities (owasp via github) [devsecops]
remove your personal data from aggregators (usa today)
the surreal case of a cia hacker's revenge (new yorker)
how democracies spy on citizens (ronan farrow/new yorker)
incredibly misguided critique of open source security (lawfare)
pleasure is good: how french children acquire a taste for life (conversation)
electric horology forum (nawcc)
flipclock restoration/repair forums (flipclockfans)
23 of the world's best hiking trails (cnn)
best and worst public transit seat covers (citylab)
how to have better arguments (psyche)
a close reading of the best opening paragraph of all time (lithub)
friendship ghosting: how to reach back out (stylist)
Michael Heizer's desert megasculpture (nytimes)
NSA Kubernetes Hardening Guide (icnews) [devsecops]
bowie biopic moonage daydream review (michigan daily)

json diff webapp (json-diff.com) [devops]
prediction that ukraine's military momentum will continue to increase (francis fukuyama)
commercial-grade automated aeropress-style infusion coffee brewer (~$5k?) (bunn trifecta) [coffee]
seven safest mushrooms to forage and eat (field and stream)
five open source security tools all devs should know (devopsdays dfw) [devsecops]
full screencaps from all star trek films (movie-screencaps) [memes]

sherlock holmes deductive interview technique (lou adler) [hiring]
the most important interview question of all time (lou adler via linkedin) [hiring]
AC frequecy converter (for running 50hz clocks on 60hz and vice versa) (kcc scientific) [horology]
Wintering, wisdom, and weathering life's darkest times (vox conversations podcast)
$75/cup panama gesha from klatch coffee (youtube) [coffee]
underrated alternative travel destinations (buzzfeed) [travel]
toyota probox minimalist van-shaped-objec (JDM only?) (motor1)
raspberry-pi-based tracking detection device (wired) [rpi]
31 recipies to cook this August (kitchn) [cooking]
Satya Nadella talks about the future of work (microsoft)
remove tracking parameters from URLs in Firefox (ghacks via cryptogram)
Lex Fridman five-hour interview with John Carmack (spotify)
webapp for finding in-stock raspberry pis (rpilocator) [rpi]
tool for archiving websites (has some anti-paywall features) (archive.ph)
webapp for bypassing news paywalls (12 ft)
8 top SBOM tools to consider (cso online) [sbom]

the first complete sbom tool (tom alrich) [sbom][devsecops]
how to analyze an sbom (cloudsmith) [sbom][devsecops]
not just third-party risk (kusari) [sbom][devsecops]
ai-powered image upscaler (nero)
the myth of "I can't draw" (the conversation)
free file coversion tools (tinywow)
best-ever cabbage hash browns (delish) [cooking]
the two-question performance-based interview (lou adler) [hiring]
garlic confit recipe (kitchn) [cooking]
log4j post-mortem (cisa) [devsecops]
2022 Audubon Photography Awards (audubon.org)
cauliflower parmesean (delish) [cooking]
how to join ads-b tracking network (flightaware) [rpi][adsb]
aquasec/CIS supply chain security guide (aquasec) [devsecops]
iconburst npm supply chain attack (sc magazine) [devsecops]
investigators tracking people who faked their own death (mel) [longreads]

who makes chicago's manhole covers? (chigago sun-times) [ironcovers]
github application security will win the appsec wars (colin dembovsky) [appsec][devsecops]
check if your keyboard can be eavesdropped through a microphone (keytap3)
why brewing coffee and tea are so different (serious eats) [coffee]
how fast are linux pipes? (Francesco Mazzo) [ops]
six mobility exercises for longevity (wellandgood) [fitness]
zq, faster/easier alternative to jq (Steven McCanne) [ops]

made to order tomoe river week-on-one-page planners (etsy)
various v60 techniques (rao, hoffman, kasuya, &c) (pouroverproject) [coffee]
tetsu kasuya 4:6 v60 technique (longshortlondon) [coffee]
Hario V60 Tetsu Kasuya Model (kaffenytt) (kurasu) [coffee]
how big companies kill ideas (scaling startups, learning from failure, &c) (decoder) [podcasts]

how to discover whether someone is actually happy at work (hbr) [comms]
casio fx-1 calculator with nixie tube display (twitter)
numerical projection display (cf. CDC 3300) (twitter)
apollo-era test/data equipment with faux-nixie display (twitter)

web-based microsoft word art generator (makewordart)
10 frank lloyd wright houses you can visit (afar)
how to tie 20 essential knots (outdoor life)
tool for viewing hidden metadata on airline reservations (github) (pnr.sh)

various forum posts on hyperalignment for baratza vario grinder (reddit) (hb 1) (hb 2) (hb 3) [coffee]
arm-based upgrade board for Casio F91 (sensor watch)
five edible urban plants (outdoor life)
tmux cheatsheet (tmuxcheatsheet.com) [ops]
zsh config examples to review (joshua hartwell) (matt lim) [ops]
Nice things are meant to be enjoyed, even if it means they break sometimes (eater)
brining beans before cooking increases creaminess (serious eats)
Every Great Writer is a Great Deceiver: Vladimir Nabokov's Best Writing Advice (lithub)

global security database (gsd) [github database] [project plan] [csa circle group] [podcast]
five questions every manager should ask direct reports (hbr) [comms]
CostPlus Drug Company (Mark Cuban)
history of blinking cursor (inverse) [longreads]
better diff(1) output (github) [ops]
lsd - ls(1) deluxe w/ color, icons etc (github) [cf. exa][ops]
fx - interactive json processing (a la jqplay) (github) [ops]
fzf - general-purpose command-line fuzzy finder (github) [ops]
bat - better cat(1) with syntax highlighting (github) [ops]
duf - a better du(1) disk usage summary (github) [ops]

james webb space telescope mission tracker (live updates)(nasa)
macos security and privacy guide (github/drduh) [ops]
kdig for dns over https/tls examples (arch man) e.g. kdig +short @doh.opendns.com +https myip.opendns.com [ops]
tetris players develop new ways to hold classic nes controllers for more speed (vice)
nyc diner-style ceramic coffee cup (moma store) [coffee]
the best mentors ask these 8 questions (fast company) [comms]
configure pihole for dns over tls (unbound) [ops][rpi]
configure pihole for dns over https (cloudflared) [ops][rpi]
how rainfail has changed in your area (usa today) [climate]
diverse teams are less comfortable, perform better (hbr)

install and use any command on any os (command not found) [ops]
mens jeans reviews (wirecutter)
moebius concept art from jodorowsky's dune (instagram) (google photos)
how to follow up with someone who isn't responding (hbr) [comms]
online open ldap test server (forumsystems)

losing your native language (bbc) [comms]

how to transfer stock into an ira (zacks finance)
one sentence will make you a more effective speaker (inc) [comms]
12 phrases that will make your audience put down their phones (inc) [comms]
stop ending your speeches with any questions (inc) [comms]

list of least-traveled highways by state with senic callouts (geotab) [travel]
interactive comparison of keycap profiles (keycaps.info) [keebs]
nyquist/levinson split 40/60 ortholinear keyboard (keebio) [keebs]
dsp40 40% staggered or orthlinear keyboard (keebio) [keebs]
remember anything with this 20-minute habit (inc)
be a more interesting conversationalist (inc) [comms]
questions interesting people ask (inc) [comms]
source for untabbed hario v60 filters (prima)
how english spelling got so disfunctional (aeon)
fricatives, with lots of tangents related to weird spelling in english (lingthusiasm podcast)

mac/os x window management (remember positions &c) (slate)
new child tax credit faqs, including opt-out (irs)
baratza vario alignment video (youtube) [coffee]
baratza vario burr upgrade (youtube) [coffee]
baratza vario super alignment photo guide (home-barista) [coffee]
app to measure grind size distribution (ad astra) [coffee]
cybersecurity bad practices for critical infrastructure (cisa) [devsecops]
chicago to-dos (conde nast) [travel]
alonzo skiles livermore (findagrave) [ironcovers]

scary piece on vulnerabilities of weapon systems (crypto-gram)
benefits of being terrible (and great) at things (outside) [kaizen]
coffeevac 1/2 lb coffee cannister (tightvac) [coffee]
eight clues that a candidate will be a great hire (lou adler) [hiring]
writing in reverse for better written communication (emails, &c) (inc) [comms]
reading education is totally broken (apmreports) [comms]
monument spans continental plates in iceland (00group) [travel]
how to handle secrets on the command line (smallstep) [devsecops]
mrna revolution is just beginning (wired)

Write Like You Talk: 12 Tips for Conversational Content (content marketing) [comms]
The good guy/bad guy myth (aeon)
You Can Only Maintain So Many Close Friendships (the atlantic)
america's most underrated national monuments (afar) [travel]
using ai/ml to probe software for vulnerabilities (wired via cryptogram) [devsecops]
docker container attack vectors and techniques (mitre) [devsecops]
free cloud-based linux host monitoring (interzer) [devsecops]
browse streaming services by genre, format &c (movieofthenight)
source for luggage parts, connectors, belt rivets etc (ohio travel bag)
high-end boutique dyneema bags/luggage (sdr traveller)
profile of memphis community radio stations (memphis flyer)
historic memphis buildings (historic memphis.com)

regular expression in-browser testing (regex tester - dan's tools) [devsecops]
tsundoku: the art of buying books and never reading them (bbc)
best office chairs (wirecutter)
deals on used high-end office chairs (seatingmind)
giving good compliments (ted ideas) [comms]
seven phrases to increase your power at work (fast company) [comms]

movment of indiana bell building while occupied in 1930 (via hn)
look for many small gains instead of few large gains (one percent rule) [kaizen]
obit for space shuttle engineer Allan McDonald (npr)
bash shell history tips - bang shortcuts (mooreds) [devsecops]

throwaway development container for docker (nicola) [devsecops]
octopus with completely transparent head (modernmet)
remote desktop for low-bandwith xserver (x2go)
short-lived ups passenger service on "quick change" cargo 727 freighters 1997-2001 (airways mag)
playground for jq (jqplay) [devsecops]
paen to midtown manhattan north of penn station (new yorker)
oldest manhole cover in nyc, in that unnamed neighborhood (se corner of 40th and 8th)

how to give better advice (sci am) [comms]
you will regret these choices in 10 years (medium)
the mathematical case against blaming people for their misfortune (psyche)
os x window management (rectangle)
os x automation tooling (hammerspoon)
important/urgent axes for decsision making (eisenhower matrix)
using dropbox on arm/raspi [1] [2] [3] [rpi]
coffee flavor wheel (counter culture) [coffee]
quick and dirty how-to for building multi-arch docker images (docker blog) [devsecops]
most nutritious foods (bbc) [cooking]
major stargazing events for 2021 (natgeo)
configure raspberry pi for kubernetes (alex ellis) [rpi]
boot raspberry pi 4 from USB (tom's hardware) [rpi]

clearer thinking - improve rationality (good podcast as well) (spencer greenberg)
using obs &c for remote presentations (selfimproving.dev)
webcam network of residential window views (windowswap)
browser-based photo editor with intuitive workflow (photopea)
teach it to a toddler to learn anything (feynman technique)
variation makes practice twice as effective (inc) [kaizen]

anger is temporary madness (massimo pigliucci)
remembering alex trebek (fivethirtyeight)
radical advance in multiplication speed (quanta)
jeff vandermeer: some version of the apocalypse is inevitable (sway podcast w/ kara swisher)
history/background on the circumflex (haggardhawks)
1983 war scare/able archer exercise (gwu nukevault)
three important life skills nobody taught you (markmanson.net)

wifi qr code generator (qifi)
museum of obsolete library science (metmuseum)
history and evolution of the numpad (uxdesign.cc)
colemak keyboard layout resources (colemak.com) [keebs]
some bilingual people dyslexic in english but not their other language (medicalxpress)
open-source coloring/restoring of photos (deoldify)
conflict over ai/ml image upscaling/colorizing/adding frames etc (wired)

blacklight - real-time website privacy inspector (the markup)
comprehensive terminal/ssh for ipad/ios, with mosh support (blink.sh) [devsecops]
wynton marsalis on 12 essential jazz recordings (pocket)
wynton marsalis picks his top 50 jazz recordings (jazz blog)

great thread on remote onboarding new hires (twitter)
three jobs that retention programs overlook (hbr)
improve your strategic thinking (hbr)
beagle bros, nrol-39, etc stickers (vintagetechstickers)
underground black market chalk dealers in academia (cnn)
overview of keycap profile differences (keeblog) [keebs]
transparent toilets in tokyo (nippon foundation)
image cloaking disrupts ml facial recognition (via crypto-gram)
fermi estimation, orders of magnitude, beirut/covid guessing (david epstein)
leather notebooks, pencil rolls, razor cases etc (inkit/etsy)
leather index card holder (etsy)
horween leather wallets etc (ashland chicago)
leather wallets, belts, watch straps (guarded goods)

the origin of unix pipes (cat-v.org) [devsecops]
extensive resource for AT&T long-lines tech and gear (long-lines.net)
excellent vimrc example (github) [devsecops]
weird mods on mystery 737 (the drive)
long piece on Marcus Hutchins (kronos, wannacry) (@malwaretechblog) (via crypto-gram)

noctilucent clouds intensifying in the arctic (spaceweather)
running dns-over-https with pihole (pihole) [rpi]
os x command-line tool for reading cpu temp (github)
command-line utility for dispaying solar and lunar epherma (github)
promql (prometheus query language) cheat sheet, crash course (promql for humans) [devsecops]
install os x Catalina on older macs (dosdude1)