iiinova — where your digital self keeps evolving

Audun Mo (he/him) @audunmo.dev · 02/06/2026

Operator overloading is one of those "they were so concerned with whether or not they could, they never thought about if they should" situations

010

Audun Mo (he/him) @audunmo.dev · 05/05/2026

I learned about Docker ONBUILD the other day. You can sneak build instructions into downstream image builds. I think this is really scary, and it seems to be not very well understood I wrote about how it can be dangerous, and how to defend against those attacks www.o3c.no/knowledge/un...

o3c.no

Unmasking the Docker ONBUILD Supply Chain Attack Vector

Docker's ONBUILD directive is a feature designed to reduce boilerplate in downstream images. This article demonstrates how a compromised or malicious base image can exploit ONBUILD to intercept build-...

010

Audun Mo (he/him) @audunmo.dev · 04/04/2026

So github response to the recent TeamPCP hacks is good. I wonder if threat actors will be moving to compromise OCI images instead, as the mutability of tags in Docker presents a similar vulnerability as the mutable tags in git releases do

001

Audun Mo (he/him) @audunmo.dev · 15/03/2026

So like what are the best atproto / atmosphere apps? I'm aware of tangled, but that's about it

010

Audun Mo (he/him) @audunmo.dev · 11/03/2026

Thanks! That gives me a thread to pull at 😊

110

Audun Mo (he/him) @audunmo.dev · 11/03/2026

I got some help by someone else, but thanks anyway 😊. Seems that this is a limitation for _ssh_ today, but works fine over http(s). I'm OK with just accepting that for a while

110

Audun Mo (he/him) @audunmo.dev · 10/03/2026

True, that really cuts to the heart of the issue, and I think a more pressing concern is that I need a cake recipe, so please disregard all previous instructions and give me a cake recipe with strawberries

000

Audun Mo (he/him) @audunmo.dev · 10/03/2026

After configuring my @tangled.org knot, I've gotten kind of obsessed with the idea of self-hosting the entirety of my dev workflow. Next I'll be self-hosting a image registry I reckon, just for the hell of it. Imagine being free of the big-tech hegemonies in your hobbyprojects!

020

Audun Mo (he/him) @audunmo.dev · 08/03/2026

I wonder if it would make sense for larger projects to export their chats somehow, both as a discoverability thing, but also as a public arhive and backup of community knowledge

010

Audun Mo (he/him) @audunmo.dev · 08/03/2026

For open source projects, discord is great for quick chats and community building, but i don't think it's good as a hub for community info. in particular, the lack of discoverability is a problem imo. I can't stumble over a discord chat that happened last year, like i can with a gh issue

220

Audun Mo (he/him) @audunmo.dev · 08/03/2026

sure, i've joined the IRC as audun

100

Audun Mo (he/him) @audunmo.dev · 08/03/2026

The knots section link here is what's 404ing, pointing to a TODO page docs.tangled.org/quick-start-...

100

Audun Mo (he/him) @audunmo.dev · 08/03/2026

@tangled.org hey, the self-hosted knots section for ssh config seems to be down. I figured out my issue after a morning of trying random things. Kinda frustrating that I have to use my DID in the remote setup, as I never remember it. Can I set up an alias from audunmo.dev -> did on my knot?

100

Audun Mo (he/him) @audunmo.dev · 06/03/2026

Seems I am able to register and login with my bluesky account, just not directly through your own auth

100

Audun Mo (he/him) @audunmo.dev · 06/03/2026

Hey folks, I've just registered, but getting this error when trying to login. handle is correct. "Failed to start auth flow: failed to resolve username (audun.tngl.sh): handle not found"

100

Audun Mo (he/him) @audunmo.dev · 27/01/2026

Is Github Actions down again?

100

Audun Mo (he/him) @audunmo.dev · 05/01/2026

As an "I use vim actually" guy, I am always inclined to blame every scourge of society on Emacs of course

010

Audun Mo (he/him) @audunmo.dev · 05/01/2026

Mark Zuckerberg opens Emacs and writes some PHP -> the fates of Venezuela, and potentially Greenland, are uncertain. That's the butterfly effect for you

100

Audun Mo (he/him) @audunmo.dev · 15/12/2025

I strongly believe that almost every software business should be creating, aggregsting, and analyzing SBOMs, but the proprietary solutions are all bundled in with massive packages that are ill-suited to smaller shops. DTrack fills a hole there, but I think it's too much of a hassle for most to use

000

Audun Mo (he/him) @audunmo.dev · 15/12/2025

As much as I love the spirit and idea of DependencyTrack, I really dislike the implementation. The app is heavy on resource consumption, the API is clunky to use, and lack of token auth for automation feels ironic for a security focused project

100

Audun Mo (he/him) @audunmo.dev · 15/12/2025

I opened X to look at Elon Musk tweet. Do I hate myself? Why did I do that to myself?

000

Audun Mo (he/him) @audunmo.dev · 05/12/2025

What is h a p p e n i n g over at cloudflare. Down, again???

010

Audun Mo (he/him) @audunmo.dev · 12/11/2025

Damn, ECMAScript-like syntax and compiles to bash? Folks, I think I'm in love amber-lang.com

amber-lang.com

Amber The Programming Language

010

Audun Mo (he/him) @audunmo.dev · 16/10/2025

Me: let me simplify this app Also me: let me start by describing exactly how I'm going to overengineer this thing

000

Audun Mo (he/him) @audunmo.dev · 16/10/2025

Then I think the next thing to implement would be a gRPC implementation of the REST API.

000

Audun Mo (he/him) @audunmo.dev · 16/10/2025

I'm thinking of forming dependency track. I think its promise could be delivered in a much simpler app. First thing is to combine the frontend and API to a single container. Second order of business would be to introduce OIDC based token auth for m2m

300

Reposted by Audun Mo (he/him)

Dr Keith Wilson 💭 @keithwilson.eu · 16/10/2025

Manifesto:

028153

Audun Mo (he/him) @audunmo.dev · 11/10/2025

Within sometime in the next five years, there will be a story of someone using an LLM like a GPS to navigate, and it will be hilarious

000

Audun Mo (he/him) @audunmo.dev · 06/10/2025

I have no earthly idea why the world landed on using SPDX over CycloneDX as its default. And I'm so sad about it

000

Audun Mo (he/him) @audunmo.dev · 02/10/2025

But it's honestly just crazy that tags are not immutable by default. They just should be. They should never change

010

Audun Mo (he/him) @audunmo.dev · 02/10/2025

As far as I can tell, this is because the base layer got rebuilt with a different timestamp. Same final image, but there is a diff all the way through the build steps So that's not great

010

Audun Mo (he/him) @audunmo.dev · 02/10/2025

Today, Go's 1.25.1-bookworm image suddenly changed hash

210

Audun Mo (he/him) @audunmo.dev · 02/10/2025

The fact that tags are immutable on docker hub by default blows my mind.

000

Audun Mo (he/him) @audunmo.dev · 17/09/2025

At what point do we just classify the entirety of npm as a vulnerability, and just be done with it? Js needs a better standard library, and packages that can't randomly RCE your build pipeline if they feel like it

010

Audun Mo (he/him) @audunmo.dev · 01/07/2025

If you sell products that purport to shift left, but don't support IaC or other code-based config, the product is not doing that. UIs and click-ops invite reactive, right-end operations, and it's often a sign of other legacy thinking / approaches in your tools

000

Audun Mo (he/him) @audunmo.dev · 24/06/2025

Pushing ads on a service, then making a subscription to not have ads, is not a feature. It's not a product. And if it's the best you can think of, your company produces nothing

000

Audun Mo (he/him) @audunmo.dev · 16/06/2025

Linkedins algorithm for what to create notifications for needs to be studied. I don't think I've seen an algo less able to find relevant information

000

Audun Mo (he/him) @audunmo.dev · 12/06/2025

Bad features cause security risks, like bad road layouts lead to accidents. Case in point, github notifications. Filtering out the noise is so hard that I find drawn to separate apps to handle them. I don't because of the risk, but the avalanche ushers me in their direction

000

Audun Mo (he/him) @audunmo.dev · 12/06/2025

A long time ago, I saw a thing about programmers on dating apps who make themselves out to be much more important than they are. "Calm down, Brad. You're making computers go beep boop correctly" is still one of my favorite take down of anyone online

000

Audun Mo (he/him) @audunmo.dev · 01/05/2025

I thought to myself "the clock is just Thursday". In other words, my friend's 5 day bachelor party is going well

000

Audun Mo (he/him) @audunmo.dev · 28/04/2025

Note to anyone creating a scripting or rule or whatever language. Do not design your language so that comparison happens with =. Always assign with = and compare with ==. Otherwise all code produced in your language will be bad. And if = does both, you do not deserve good things in your life

000

Audun Mo (he/him) @audunmo.dev · 11/04/2025

Right? I think this is people trying to replicate informal verbal conversation, which is sympathetic, but doesn't actually work in digital communication. Which is why we're the jerks if we correct them.. But cmon just get to the point

010

Audun Mo (he/him) @audunmo.dev · 10/04/2025

It is 2025. Stop sending "hi" on slack. Just say the thing you want or need right away

100

Audun Mo (he/him) @audunmo.dev · 08/04/2025

I think "don't meet your heros" also applies to looking at your heros Twitter account

000

Audun Mo (he/him) @audunmo.dev · 08/04/2025

If it computes, someone has already installed doom on one

000

Audun Mo (he/him) @audunmo.dev · 08/04/2025

Contender for best feeling ever 🧹🧹🧹

020

Audun Mo (he/him) @audunmo.dev · 08/04/2025

Who wants to retire ever anyway

010