iiinova — where your digital self keeps evolving

iiinova is part of the Atmosphere — an open, public network where you own your identity.

defnull

@defnull.chaos.social.ap.brid.gy

12 followers 1 following 244 posts

I'm this guy -> defnull.de/about tl;dr; #FOSS enthusiast, #python, #devop, #infosec, #noai. I write and rant about whatever technology or topic I'm currently […] 🌉 bridged from ⁂ chaos.social/@defnull, follow @ap.brid.gy to interact

Posts Replies Media

defnull @defnull.chaos.social.ap.brid.gy · 17/10/2026

I do get the "this should be opt-in" argument and I actually agree, but the main complaint is about security and privacy and those argument are... well...

defnull @defnull.chaos.social.ap.brid.gy · 16/10/2026

Communication in the issue could be better, but come on.

defnull @defnull.chaos.social.ap.brid.gy · 16/10/2026

People not understanding how hashing works and what k-anonymity means are currently pitchforking against #homeassistant because it checks secrets against #hibp by default and they think this exposes their secrets. Oh and the attack scenario? "Someone might hack HTTPS and DNS, or backdoor HA." […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 16/10/2026

I found all the needles \o/

defnull @defnull.chaos.social.ap.brid.gy · 12/10/2026

[Russia] Ukraine tests the resilience of a Yandex (Russian Google) Datacenter and Yandex Bot traffic goes down. Which is obvious. Yandex is a search provider, those crawl the web to update their search index. Google and Bing do the same. But some people/journalists just assume 'Russian Bots' […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 11/10/2026

"AI will replace developers, you no longer need humans in the loop" github.com/bottlepy/bottle/pull/1544 #aislop #ai

fix(repoguard): automated verified defect patch for test/test_outputfilter.py by manish182003 · Pull Request #1544 · bottlepy/bottle

Automated bug fix generated by RepoGuard AI. Explanation: The bare except clause was actually an 'except ImportError:' which is already specific. However, the defect description mentions &#...

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

This is beautiful, and important. sheets.works/data-viz/holding-up-th… #FOSS #OpenSource

The people holding up the internet

Four billion phones ask one text file what time it is. One lecturer keeps it in his spare time. We counted the rest.

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

Looks like they run out of easy security issues to report?

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

Some AI company found out how to run basic profiling tools and is sending PRs with performance optimizations along with their product name as advertisement to open source projects. The optimizations kinda actually do improve stuff a bit in my case, but are still pretty bad. To many added or […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

The new #python315 profiling tools are great, managed to find and remove some hotspots with the heatmap and flamegraph visualisations. All those tools existed before, but beeing part of Python stdlib makes them way more accessible. A great addition to the toolbelt.

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

Not sure what you mean. The template engine used by flask (Jinja2) can also be used with bottle or most other frameworks. Flask is not special there.

defnull @defnull.chaos.social.ap.brid.gy · 10/10/2026

I always knew that #bottlepy was faster than #flask, but ... bottle.py (main branch) min: 166,113 requests/s max: 256,435 requests/s avg: 247,828 +- 321 requests/s flask (latest release) min: 16,961 requests/s max: 20,623 requests/s avg: 19,656 +- 17 requests/s The benchmark measures pure […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

RE: chaos.social/@defnull/1173771518557… I'm thinking about adding this to the 'multipart' #python library as a stable API, so the library is useful on the client side as well. Hmm. The multipart builder works nicely with requests or aiohttp.

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

# Patternm: SansIO mb = MultipartBuilder(write_func=lambda x: x) yield mb.field("foo", "bar")) # Pattern: Blocking writer mb = MultipartBuilder(write_func=socket.sendall) mb.field("foo", "bar") # Pattern: Async writer mb = MultipartBuilder(write_func=async_stream.write) await mb.field("foo" […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

The builder class inherits ''typing.Generic[R]'' and the return value of all its methods adapt to the return value of the 'write_func'. The beauty is that this also works for R=Awaitable[whatever] so all builder methods automatically turn into awaitable async methods if the write function is async.

defnull @defnull.chaos.social.ap.brid.gy · 03/10/2026

Found a 'clever' way to implement a builder for multipart/form-data streams in #python that supports #SansIO, generator patterns, blocking and #async IO, all with a single implementation. codeberg.org/defnull/multipart/src/… The trick is to have […]

Original post on chaos.social

Reposted by defnull

Ralf Stockmann @rstockm.chaos.social.ap.brid.gy · 30/09/2026

Die vielleicht größte #fediwall der Welt (?) Prominent im Foyer der @gwdg - große ❤️ #GWDG #academiccloud #mastowall

Fediwall im Foyer der GWDG

defnull @defnull.chaos.social.ap.brid.gy · 25/09/2026

Strange #infosec #AI observation: If you care about security and have well defined security boundaries and safety limits in your code, then AI will try extra hard to find bugs that would allow an attacker to bypass those limits. But if there is no limit or safeguard in the first place, AI […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 24/09/2026

@OpenTech_AUC Then we may have a hashtag conflict :/

defnull @defnull.chaos.social.ap.brid.gy · 24/09/2026

@OpenTech_AUC Is that related to the software called fediwall.social?

defnull @defnull.chaos.social.ap.brid.gy · 23/09/2026

Hot take: If you truly enjoy developing software through AI, you were never a developer in the first place.

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

@skinnylatte "Just because you can doesn't mean you should" - Ian Malcolm

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

Me when I learn about a new and interesting #FOSS project, look at the sources and it's vibe coded...

A VERY disappointed puppy

Reposted by defnull

defnull @defnull.chaos.social.ap.brid.gy · 28/07/2026

Dear everyone, could you...

A chain link fence with a huge sign that reads: "PLEASE DO NOT".

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

That may sound harsh, but if you know anything at all about software development you know that this is the exact type of software that will explode in someone's face down the line. The code quality and architecture is so bad that even AI will have a hard time maintaining that mess or finding all […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

I took a quick look at the source code of #FediSuite and I'm speechless. Wow. Just wow. That's bad. I know that most of its users won't care and it may be a useful tool on the surface to some, but... it's 100% vibe coded, all the way through, and in the worst possible way. The index.js is 15 […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

Looked at it in more detail. This is not successful #spoofing, the #phishing mail actually originated from within #microsoft infrastructure and was treated as legitimate outgoing mail. My guess: Someone found a way to trick MS into sending mails "from: outlooksupport@outlook.mail.microsoft" […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 20/09/2026

#Outlook mail infrastructure allows malicious tenants (e.g. sponaeop.onmicrosoft.com) to send #phishing mails from outlooksupport@outlook.mail.microsoft and happily signs everything. #SPF, #DCIM, #DMARC, all passing. Thats wild. #infosec

defnull @defnull.chaos.social.ap.brid.gy · 18/09/2026

The 'master' branch is kept in sync, so nothing should break. I could and should have done that way sooner.

defnull @defnull.chaos.social.ap.brid.gy · 18/09/2026

I'm (very) late to the party and just switched from 'master' to 'main' in bottlepy/bottle, one of my oldest #FOSS projects.

defnull @defnull.chaos.social.ap.brid.gy · 17/09/2026

TIL: Switching VPN on and off twice in a couple of minutes triggers googles "Suspicious activity" detection, immediately kills the login session from that device and sends alerts to my inbox and my phone, warning me and asking me to change my password. That's ... actually a pretty good response […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 17/09/2026

@bagder BREAKING NEWS daniel admits to collabora... No, in this day and age, we shouldn't post such things, not even as a joke. AI will pick that up and believe it :/

defnull @defnull.chaos.social.ap.brid.gy · 16/09/2026

@rstockm @hweimer Ah I start to understand. So it's based on the same idea as stootistics.web.app or glaforge.dev/posts/2023/01/06/calcu… but with an educated 'guess' and a nice UI […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 16/09/2026

@hweimer @rstockm I get completely different numbers for the same accounts. Ulm has a "Netto Reichweite" of 12.967 in the last 30 days when I run the tool. What is this tool doing?

defnull @defnull.chaos.social.ap.brid.gy · 16/09/2026

[Off Topic] @thomasfricke @graphwiz_ai Der Blog 'ruckelt' beim scrollen auf einem 3 Jahre alten High-End Handy. How!?

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

Read the mastodon thread, the tested scenarios are listed there, or take a look at the more detailed benchmarks here: defnull.de/2026/python-multipart-be… If you want to engage, please do so via Fedi. I'm not on BlueSky.

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

Large files are bottle-necked by the Django upload handlers and IO, so there is not much multipart can do there. But +7% is still nice. The +21% for the 'realistic' mixed payload, and the +235% for a small pure text form are the more interesting datapoints here. Those are fast anyway, but for a […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

After some simple optimizations I now have realistic numbers for a Django compatible wrapper based on multipart: 10 fields -> x3.35 10k fields -> x8.78 10MB file -> x1.04 100MB file -> x1.07 2MB file + 3 fields -> x1.21 Higher numbers are better. Read: Multipart can parse 8.78 times as many […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

Djangos upload handler API is ... interesting. I'm pretty sure that's the current bottleneck. But I can't just replace or ignore them, not even the default ones, without loosing the drop-in compatibility :/

defnull @defnull.chaos.social.ap.brid.gy · 11/09/2026

I benchmarked the #django #multipart form parser against a drop-in replacement wrapper based on multipart (v2.0.0). The wrapper implements all django specific features (upload handlers, limits, ...) and is not optimized at all yet. The results are still quite interesting: The multipart wrapper […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 10/09/2026

Random cooking tip: When making scrambled eggs, season the oiled pan, not the eggs. Put the eggs in as soon as the spices in the oil start sizzling and let the eggs set slightly before stirring for the first time. That way the seasoning will be evenly distributed and not form small bubbles or […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 10/09/2026

@wdormann When will media outlets stop humanizing AI? A mashine cannot commit a crime. It's always the user or creator that is responsible.

defnull @defnull.chaos.social.ap.brid.gy · 03/09/2026

More people should follow @PicardTips

defnull @defnull.chaos.social.ap.brid.gy · 30/08/2026

I wrote a blog article and a github readme and both got very little attention from humans, because it's a niche topic, but it drastically changed the answers given by AI on that specific topic. Hmm.

defnull @defnull.chaos.social.ap.brid.gy · 29/08/2026

@Cheatha Ist das ein byte underflow? 0-1=6

defnull @defnull.chaos.social.ap.brid.gy · 28/08/2026

This is #nice #pula #Croatia #FotoFreitag

An old but beautiful house in Croatia

defnull @defnull.chaos.social.ap.brid.gy · 26/08/2026

I'm using hotel wlan right now, which means no DNS level #adblock... Most mobile games are absolutely unplayable :/ You quickly forget how bad it is once you have #pihole or alternatives at hom, or #firefox with #uBlock. How do people even survive without adblock? I mean, seriously. Are you […]

Original post on chaos.social

defnull @defnull.chaos.social.ap.brid.gy · 23/08/2026

In 16 years he (or she?) will be an awesome pizza loving ninja, I'm sure!

A baby Turtle, less than 2 hours old

defnull @defnull.chaos.social.ap.brid.gy · 20/08/2026

I play this type of game way to much on mobile and wondered how level generation works. It's surprisingly difficult to generate puzzles that are not only solvable but also fun to solve. This is my first attempt, but I have more ideas :) Fun little side project.

defnull @defnull.chaos.social.ap.brid.gy · 20/08/2026

Yes, this is solve-able #gamedev #noai

An arrow puzzle game with an 100x100 grid filled with twisted arrows in a maze-like pattern. An arrow can be removed if it has a clear escape path to the edge of the grid.