iiinova — where your digital self keeps evolving

Reposted by Mario Lins

Daniel Hugenroth @lambda.bsky.social · 18/08/2026

Had a look at how cargo-vet is doing (spoiler: growing quickly). I really enjoy it for my projects and was wondering how projects deal with audit burden (especially with many crate updates). Wrote up a little summary here: lightsquares.dev/blog/cargo-v... 🦀

lightsquares.dev

A look at cargo-vet in 2026

Cargo-vet requires audits of third-party Rust dependencies before they ship. We analyzed 408 open-source projects to measure adoption, audit workload, exemptions, and audit lag.

121

Reposted by Mario Lins

Martin Kleppmann @martin.kleppmann.com · 12/12/2025

If you want to make a copy of the entire Bluesky network (or some subset of it, or some other app built on atproto), Tap is now the best way do do it. I hope this will enable more people do do, for example, interesting social network analysis research

212431

Reposted by Mario Lins

Daniel Hugenroth @lambda.bsky.social · 24/10/2025

How to trust that the binaries that we deploy are truthfully built from the correct source code? 🤝 Just back from ACM CCS '25 🌏 where we presented Attestable Builds as a solution to this challenge. It complements Reproducible Builds and uses TEEs as a trust anchor. With @coderlime.bsky.social

The picture shows Mario and Daniel presenting the last slide of their presentation at ACM CCS 2025 in Taipei. The text on the slide reads: A-Bs provide source-to-binary provenance using TEEs and sandboxing; complements Reproducible Builds and both can be combined in an any-trust model; practical evaluation (see our GitHub) and formal verification using Tamarin.

151

Reposted by Mario Lins

Meredith Whittaker @meredithmeredith.bsky.social · 20/10/2025

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.

42939237