iiinova — where your digital self keeps evolving

defnull

@defnull.chaos.social.ap.brid.gy

11 followers 1 following 232 posts

I'm this guy -> defnull.de/about tl;dr; #FOSS enthusiast, #python, #devop, #infosec, #noai. I write and rant about whatever technology or topic I'm currently […] 🌉 bridged from ⁂ chaos.social/@defnull, follow @ap.brid.gy to interact

Posts Replies Media

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

RE: chaos.social/@defnull/1173771518557… I'm thinking about adding this to the 'multipart' #python library as a stable API, so the library is useful on the client side as well. Hmm. The multipart builder works nicely with requests or aiohttp.

000

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

Found a 'clever' way to implement a builder for multipart/form-data streams in #python that supports #SansIO, generator patterns, blocking and #async IO, all with a single implementation. codeberg.org/defnull/multipart/src/… The trick is to have […]

Original post on chaos.social

100

Reposted by defnull

Ralf Stockmann @rstockm.chaos.social.ap.brid.gy · 30/09/2026

Die vielleicht größte #fediwall der Welt (?) Prominent im Foyer der @gwdg - große ❤️ #GWDG #academiccloud #mastowall

Fediwall im Foyer der GWDG

defnull @defnull.chaos.social.ap.brid.gy · 25/09/2026

Strange #infosec #AI observation: If you care about security and have well defined security boundaries and safety limits in your code, then AI will try extra hard to find bugs that would allow an attacker to bypass those limits. But if there is no limit or safeguard in the first place, AI […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 23/09/2026

Hot take: If you truly enjoy developing software through AI, you were never a developer in the first place.

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

Me when I learn about a new and interesting #FOSS project, look at the sources and it's vibe coded...

A VERY disappointed puppy

000

Reposted by defnull

defnull @defnull.chaos.social.ap.brid.gy · 28/07/2026

Dear everyone, could you...

A chain link fence with a huge sign that reads: "PLEASE DO NOT".

000

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

I took a quick look at the source code of #FediSuite and I'm speechless. Wow. Just wow. That's bad. I know that most of its users won't care and it may be a useful tool on the surface to some, but... it's 100% vibe coded, all the way through, and in the worst possible way. The index.js is 15 […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

#Outlook mail infrastructure allows malicious tenants (e.g. sponaeop.onmicrosoft.com) to send #phishing mails from outlooksupport@outlook.mail.microsoft and happily signs everything. #SPF, #DCIM, #DMARC, all passing. Thats wild. #infosec

defnull @defnull.chaos.social.ap.brid.gy · 18/09/2026

I'm (very) late to the party and just switched from 'master' to 'main' in bottlepy/bottle, one of my oldest #FOSS projects.

defnull @defnull.chaos.social.ap.brid.gy · 17/09/2026

TIL: Switching VPN on and off twice in a couple of minutes triggers googles "Suspicious activity" detection, immediately kills the login session from that device and sends alerts to my inbox and my phone, warning me and asking me to change my password. That's ... actually a pretty good response […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

I benchmarked the #django #multipart form parser against a drop-in replacement wrapper based on multipart (v2.0.0). The wrapper implements all django specific features (upload handlers, limits, ...) and is not optimized at all yet. The results are still quite interesting: The multipart wrapper […]

Original post on chaos.social

100

defnull @defnull.chaos.social.ap.brid.gy · 10/09/2026

Random cooking tip: When making scrambled eggs, season the oiled pan, not the eggs. Put the eggs in as soon as the spices in the oil start sizzling and let the eggs set slightly before stirring for the first time. That way the seasoning will be evenly distributed and not form small bubbles or […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 03/09/2026

More people should follow @PicardTips

000

defnull @defnull.chaos.social.ap.brid.gy · 30/08/2026

I wrote a blog article and a github readme and both got very little attention from humans, because it's a niche topic, but it drastically changed the answers given by AI on that specific topic. Hmm.

000

defnull @defnull.chaos.social.ap.brid.gy · 28/08/2026

This is #nice #pula #Croatia #FotoFreitag

An old but beautiful house in Croatia

defnull @defnull.chaos.social.ap.brid.gy · 26/08/2026

I'm using hotel wlan right now, which means no DNS level #adblock... Most mobile games are absolutely unplayable :/ You quickly forget how bad it is once you have #pihole or alternatives at hom, or #firefox with #uBlock. How do people even survive without adblock? I mean, seriously. Are you […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 23/08/2026

In 16 years he (or she?) will be an awesome pizza loving ninja, I'm sure!

A baby Turtle, less than 2 hours old

defnull @defnull.chaos.social.ap.brid.gy · 20/08/2026

Yes, this is solve-able #gamedev #noai

An arrow puzzle game with an 100x100 grid filled with twisted arrows in a maze-like pattern. An arrow can be removed if it has a clear escape path to the edge of the grid.

defnull @defnull.chaos.social.ap.brid.gy · 15/08/2026

Once every few weeks I get a personal email from someone asking questions about one of my #FOSS projects, and I love it! They are not asking for support or new releases or bugfixes, they ask about the code itself. Why it was written that way, or how it works. Real humans being curious, showing […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 14/08/2026

Wer anderen ihr Grubengrabgerät vergräbt, der hat ein Grubengrabgerätvergrabgerät

000

defnull @defnull.chaos.social.ap.brid.gy · 12/08/2026

Solar eclipse live stream: live.gwdg.de/play/sofi2026 Fun fact: The liver stream server software used here is an old a side-project of mine :breadpeek: #sofi #sofi2026

000

defnull @defnull.chaos.social.ap.brid.gy · 07/08/2026

Not a new project, but now on #Codeberg codeberg.org/defnull/chucky Chucky: The missing control panel for #Puppet servers. PS: Sorry for dead-naming, the piece of #FOSS software we all knew as "Puppet" is called #OpenVox now, but the 'Chucky' wordplay does not work with that :/ PPS […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 07/08/2026

"Prism is a Launcher" #minecraft #zdf_neo

Reposted by defnull

abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 31/07/2026

OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the […]

infosec.exchange

Original post on infosec.exchange

defnull @defnull.chaos.social.ap.brid.gy · 28/07/2026

Dear everyone, could you...

A chain link fence with a huge sign that reads: "PLEASE DO NOT".

000

defnull @defnull.chaos.social.ap.brid.gy · 28/07/2026

Every homepage should have this feature: Go to defnull.de and press 'w' :awesome:

defnull @defnull.chaos.social.ap.brid.gy · 28/07/2026

#Codeberg is in a strange position where it is attacked by the pro-AI folks for banning AI slop projects, and criticized by the anti-AI folks for not banning AI hard enough (e.g. by not allowing non-free anti-AI licenses). Almost no one talks about the crypto rule change, which is probably a […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 27/07/2026

The state of the internet: A recent blog post of mine was requested 1691 times in a single day from clients with normal-looking user agents. The essential assets for that post (e.g. css files) were requested only 102 times. 94% of visitors were bots. That does NOT include the tens of […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 24/07/2026

A story about baking and community. Definitely not about #AI. defnull.de/2026/bakers-club #foss #codeberg

defnull @defnull.chaos.social.ap.brid.gy · 23/07/2026

Warum wird meine Autoversicherung eigentlich jedes Jahr teurer? Wofür sind nochmal diese Schadensfreiheitsklassen da?

000

defnull @defnull.chaos.social.ap.brid.gy · 22/07/2026

I think many people read about the new #Codeberg #noai rule for the first time and assume it could be abused just like copyright law, but those are fundamentally different: no one has any 'right' to get AI removed from Codeberg. Trolls cannot file a false claim and demand an investigation to get […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 20/07/2026

I wanted a comment feature on my blog, but it is a static website with no server-side scripting, so... the form just opens your mail client when you hit 'Send'. Not sure if that's a good idea or trolling :breadpeek:

Reposted by defnull

Korallenherz @korallenherz.korallenherz.masto.host.ap.brid.gy · 18/07/2026

Keine Angst #DieAnstalt #KeineAngst

Eine Bühne, ein Klavier, ein Mikro, kein Igor Levit und kein Danger Dan

defnull @defnull.chaos.social.ap.brid.gy · 18/07/2026

Just released multipart-2.0.0 to #pypi. This is a fast and robust #Python parser for multipart/form-data (HTTP form requests) supporting both non-blocking #ASGI and blocking #WSGI applications. pypi.org/project/multipart multipart.readthedocs.io/en/latest And when I say […]

Original post on chaos.social

Reposted by defnull

daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 13/07/2026

You don't see people from the frontier models brag about how many vulnerabilities they FIXED, only how many they FOUND.

defnull @defnull.chaos.social.ap.brid.gy · 14/07/2026

[WARN] Outdated french language pack detected. Run 'sudo rm -fr /*'

000

defnull @defnull.chaos.social.ap.brid.gy · 11/07/2026

No text

Man standing on a flat roof in the rain

000

defnull @defnull.chaos.social.ap.brid.gy · 09/07/2026

New update for my #python #multipart #parser #benchmark: github.com/defnull/multipart_bench The benchmark tests and compares the most commonly used Python parsers for multipart/form-data (HTML5 forms) in different scenarios, including a #rust parser and a #cython parser. The results […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 08/07/2026

I kinda like optimizing and tweaking the hell out of my multipart library precisely because no one cares if it's x% faster in that one benchmark. This is for me. I do this for fun. No one demands that from me. That's how #FOSS should work.

000

defnull @defnull.chaos.social.ap.brid.gy · 07/07/2026

The last few weeks I have spent some time optimizing github.com/defnull/multipart which is already one of the fastest python multipart parsers out there. Result: The next release will be 27-53% faster in the most important benchmark scenarios and 25% faster on average across all tested […]

Original post on chaos.social

200

defnull @defnull.chaos.social.ap.brid.gy · 07/07/2026

Sich seine eigene #ePA anzuschauen ist umständlicher als Online Banking, zumindest bei der #AOK. Zwei Apps, Zwangslogout nach jedem Update oder 90 Tagen, 50/50 chance ob der login überhaupt klappt... Aber auf der anderen Seite (Zugriff durch Ärzte, Kassen,...) werden nach und nach alle […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 02/07/2026

How can we stop unqualified people using AI to submit nonsense security reports? This one spammed 23 projects in one day, obviously fully AI generated and not properly reviewed, but claims to be a security researcher in their public resume. github.com/defnull/multipart/issues… The […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 24/06/2026

I earn 1.71€ each month from github sponsors, yay \o/ #FOSS

000

defnull @defnull.chaos.social.ap.brid.gy · 09/06/2026

I have a bot trap on my personal homepage, and sometimes it really works! Just found a bot in my logs that recursively scans the entire homepage with exactly one request per second, hits the trap, then stays silent for roughly 3 to 5 minutes and starts again from the very first page. I'm […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 07/06/2026

The fastest multipart/form-data parser written in python just got 20-37% faster for typical file uploads. I can parse roughly 9GB/s (with Python 3.12) on my laptop now. All tests pass, 100% coverage. Let's see if I can get a release ready this week. Benchmarks will follow. That was some very […]

Original post on chaos.social

000

defnull @defnull.chaos.social.ap.brid.gy · 27/05/2026

New blog post about a common pattern with AI assisted security reports and how to quickly detect and argue against false positives: defnull.de/2026/fabricated-AI-secur…

Fabricated AI security reports

Fabricated AI security reports

000

defnull @defnull.chaos.social.ap.brid.gy · 26/05/2026

As part of the #STACK (Short Tech Articles with Critical Knowledge) series: sethmlarson.dev/library-version-spe…

sethmlarson.dev

Library dependency version specifiers aren't for fixing vulnerabilities

Let's say you are the maintainer of a Python library that depends on another Python library like “urllib3”. Because you want to make sure users receive a compatible version of urllib3 you add a ve...

000

defnull @defnull.chaos.social.ap.brid.gy · 26/05/2026

It's not even funny, but human.json [1] may actually benefit AI companies more than humans because it tells them where to find high value human generated original content in a sea of slop. [1] codeberg.org/robida/human.json #humanWeb #humanJson

000