Sign in

Ewen McNeill

@ewenmcneill.bsky.social
96 followers 98 following 694 posts

Freelance IT consultant in Te Whanganui-a-Tara, Aotearoa. Chaotic Lawful. They/Them. I'm mostly using this account for reading rather than posting; my short form posts are on Mastodon -- cloudisland.nz/@ewenmcneill

PostsRepliesMedia
Reposted by Ewen McNeill
Luca @lucagalletti.bsky.social · 11/10/2026
….aaaand they’re OFF 🏁 #ASMR #OddlySatisfying IG: @marblebrosasmr youtube.com/@marblebros-...
2594241754
Reposted by Ewen McNeill
Kawaiicon @kawaiicon.bsky.social · 10/10/2026
Last chance to have your name on your badge! Double check you’ve grabbed your ticket and entered your handle (name) by the end of this weekend (Sunday 11th Oct). events.humanitix.com/kawaiicon-4/...
events.humanitix.com
Kawaiicon 4
Kawaiicon is one of the myriad technical computer security conferences in the Australia-Pacific region, and certainly the most adorable.
0810
Reposted by Ewen McNeill
Gavan Reilly @gavreilly.com · 09/10/2026
You know the xkcd strip about how all modern internet architecture is eventually built on something a hobbyist maintains for free? Someone went out and found them all. sheets.works/data-viz/hol...
12546271
Reposted by Ewen McNeill
Armand Sarlangue @armandsarlangue.bsky.social · 01/10/2026
A new photo from the iconic Mont Saint Michel near home 🙂 #photography #art #nature
1931744
Reposted by Ewen McNeill
Andree Toonk @atoonk.bsky.social · 28/09/2026
This weekend’s project: DPDK + WireGuard 🤓 I wired wireguard-go up to my packetio library and got a single tunnel to ~30M pps clean, peaking 40M pps. That’s 70× what kernel WireGuard can do! Wrote it all up here if you’re into that kind of thing: toonk.io/wireguard-dp...
toonk.io
WireGuard at 40 Mpps with DPDK, in Go
Over the last few months, I’ve been spending a lot of time experimenting with high-performance packet processing in Go. A lot of that work turned into packetio, one Go API for sending and receiving pa...
1189
Reposted by Ewen McNeill
Ian Coldwater 🧊🚫 @lookitup.baby · 23/09/2026
everything you depend on in modern civilization is run by furries and that is an actual fact
1131952
Reposted by Ewen McNeill
Violet Blue® @violetblue.bsky.social · 20/09/2026
Thanks to @queenoliviaiii.com I now know that the Wellington Public Library lends out CO2 meters! www.wcl.govt.nz/services/at-...
wcl.govt.nz
CO2 meters
Borrow CO2 meters to monitor air quality and ensure a healthy environment.
412536
Reposted by Ewen McNeill
tef @tef.bsky.social · 20/09/2026
it's kinda funny how the report is very insistent on "but it was only possible in these exact circumstances! only a millisecond either way and it might not have broken!!" rather than "almost every successful operation was a millisecond away from failure"
2221
Reposted by Ewen McNeill
Ian Coldwater 🧊🚫 @lookitup.baby · 14/09/2026
A 40-year-old kernel bug got discovered while on stage at DEF CON and the writeup is glorious
yuvalino.com
How can you not be romantic about UNIX domain sockets?
A 40-year-old kernel bug discovered on the DEFCON 34 main stage.
633971
Reposted by Ewen McNeill
Tom Eastman @tom.eastman.nz · 07/09/2026
No matter how much you hate the tech industry, you do not hate it enough. www.youtube.com/watch?v=6IFV...
youtube.com
216,000,000 Spy TVs | The LG Smart TV Problem
YouTube video by Gamers Nexus
044
Reposted by Ewen McNeill
Techdirt @techdirt.com · 03/09/2026
Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year. From the very beginning of this recent obsession with identifying everyone online... www.techdirt.com/2026/09/03/hackers…
techdirt.com
Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.
From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it "age" verification, but it always ends up as identity verification), we've been pointing out that it was a huge privacy nightmare waiting to happen. Or maybe it wasn't waiting. Maybe it was already happening. This week a...
5196124
Reposted by Ewen McNeill
gloriouscow.bsky.social @gloriouscow.bsky.social · 03/09/2026
Read the story of how the NEC V20's microcode was decoded. martypc.blogspot.com/2026/09/deco... #retrocomputing #vintagecomputing #reverseengineering #x86
martypc.blogspot.com
Decoding the NEC V20 Microcode
reenigne's decoding of the 8088 microcode in 2020 opened the doors for extremely accurate emulation of the 8088 CPU.   Although I had added...
03111
Reposted by Ewen McNeill
Rachel Leggett @rleggos.bsky.social · 27/08/2026
I got the shot. I've been scheming and hoping the conditions would work out for this for two weeks!! 🪶
A broad-tailed hummingbird hovers next to an anise hyssop plant framed by purple blooms and with a rainbow behind it!!! The bird also has a little bead of water on its bill because it is raining.
17087031993
Reposted by Ewen McNeill
Bluesky @bsky.app · 27/08/2026
Now you can opt out of having your posts shown to non-followers in the Discover feed. We know not everyone wants to go viral. Sometimes you're just posting for your followers. This is one of a few updates we're working on to give you more control over your experience and help you find your people.
Instructional image titled "Hide your posts from non-followers in Discover" accompanied by a screenshot of the "privacy and security" options from the Bluesky settings menu. "Ask apps to hide my posts from algorithmic recommendations" is toggled to the "on" state.
34496343362
Reposted by Ewen McNeill
Ewen McNeill @ewenmcneill.bsky.social · 27/08/2026
Until you mentioned it, Gumroad seemed fine. Now... not so much 😱 For those also finding out this way, Gumroad seems to have gone All AI, All the Time recently :-/ Apparently thanks to a new CEO. gumroad.com/gumclaw (via bsky.app/profile/lomg... from the thread linked elsewhere in this thread)
111
Reposted by Ewen McNeill
Ian Coldwater 🧊🚫 @lookitup.baby · 25/08/2026
Dolly Parton was universally loved because she was a rich person who knew what it was like to be poor, stayed down to earth, and spent her life giving back to others who were less fortunate. The oligarchs who don’t understand why everyone hates them probably won’t learn from this. But they should
503394652
Reposted by Ewen McNeill
patak @patak.cat · 25/08/2026
nitter.net is down. xcancel.com may go soon, too. all the respect to the folks at nitter for their services so far, but to be honest, X completely locking itself out of the web is probably a net positive for us all in the long term
Cease and desist
On 24 August 2026 cease and desist letters have been sent by X Corp. demanding a permanent takedown of Nitter instances and the project's repository.

nitter.net is offline and development has stopped for the time being. I'm seeking legal advice and won't be commenting further on the specifics for now.

Thank you to everyone who used, hosted, packaged, donated and contributed to Nitter over the past seven years.

— zedeus, 25 August 2026
371797528
Reposted by Ewen McNeill
NZ Council for Civil Liberties @nzccl.org.nz · 24/08/2026
Media Release: NZCCL opposes National's planned social media ban for the under 16s: nzccl.org.nz/media-releas...
nzccl.org.nz
Media Release: NZCCL opposes social media ban for the under 16s
The New Zealand Council for Civil Liberties opposes the National Party’s bill to ban social media sites for people under the age of 16.
01519
Reposted by Ewen McNeill
Rust Language @rust-lang.org · 20/08/2026
⚠️ A few hours ago, a malicious crate was discovered on crates.​io which spread as a dependency of `arrayref` and some other crates, likely due to compromised credentials. The affected versions have been deleted. For details and how to see if you are impacted, see: blog.rust-lang.org/2026/08/20/s...
blog.rust-lang.org
Supply chain attack on arrayref | Rust Blog
Empowering everyone to build reliable and efficient software.
119481
Reposted by Ewen McNeill
Filippo Valsorda @filippo.abyssdomain.expert · 09/08/2026
I'm watching this, and sure sure the agents coordinating is neat, but once again, WHY ARE WE CHILL WITH Artifactory HAVING SEVERAL RCEs, SSRFs, and unauthorized writes. Why are we chill with Hugging Face having RCEs. Why are we chill with GitHub having RCEs (unrelated, from April).
817417
Reposted by Ewen McNeill
gloriouscow.bsky.social @gloriouscow.bsky.social · 07/08/2026
I've published a brief blog explaining how this all works. martypc.blogspot.com/2026/08/exec...
martypc.blogspot.com
Executable Emoji
Warning: This page contains hundreds of emoji. If you're using a screen reader, be sure it doesn't read them all out loud. A whole bunch o...
515760
Reposted by Ewen McNeill
gloriouscow.bsky.social @gloriouscow.bsky.social · 06/08/2026
The following emoji, pasted into a text editor and saved as a 141-byte COM file, will run as an executable in DosBox-X with options: cpu cputype=8086 machine cga 🐸☺️🐰🐎♐🗃️🧯🧯🧯🐮💗🦮🪏♐🐰🐹🗃️🧯🧯🧯🧯💗🪗🧯😗🧮🫪😗🧮😗🐮😪😔⭐ #retrocomputing #assembly #x86
310746
Reposted by Ewen McNeill
Angus Johnston @angus.bsky.social · 25/07/2026
"Do the thing you can do instead of beating yourself up over not doing the thing you're not doing" is honestly life-changing, even life-saving, advice.
6069612175
Reposted by Ewen McNeill
Jim Lippard @lippard.org · 22/07/2026
blog.qualys.com/vulnerabilit...
blog.qualys.com
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) | Qualys
Qualys Threat Research Unit (TRU) identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race…
294
Reposted by Ewen McNeill
Kawaiicon @kawaiicon.bsky.social · 22/07/2026
Kia ora hacker friends, a reminder: Tickets are live: kawaiicon.org/news/ aaaaaand The CFP is still open (closing Friday 7th of August, NZST): kawaiicon.org/cfp/
0148
Reposted by Ewen McNeill
Birds New Zealand (OSNZ) @birdsnewzealand.bsky.social · 15/07/2026
News just in: H5N1 avian influenza (bird flu) has arrived in NZ. www.beehive.govt.nz/release/h5-b... We encourage you to look out for groups of sick/dead birds and report these to the MPI hotline ☎️ 0800 80 99 66. To keep safe and support detection: www.mpi.govt.nz/biosecurity-...
beehive.govt.nz
24650
Reposted by Ewen McNeill
Jos Buurmans | New Zealand @josbuurmans.bsky.social · 13/07/2026
Gold Shore, Blue Range - Lake Clearwater, Canterbury. One morning from several spent in the Ashburton Lakes. The full story is coming later this week. #photography #landscape #nz
Gold tussock hills and a stand of conifers on the shore of Lake Clearwater, Canterbury, reflected in still water beneath blue mountains under clearing storm light.
011912
Reposted by Ewen McNeill
Chad Loder @chadloder.dev · 22/06/2026
A security firm published a working exploit on June 18 that permanently breaks the security foundation of a large range of previous gen Apple iPhones, iPads, and Watches. It cannot be fixed with a software update, ever. The code is publicly available. Here’s what I surmise so far about the risk.
ps.tc
Paradigm Shift - Introducing usbliter8
This write-up details a novel iPhone BootROM vulnerability discovered and exploited by our team. It covers the underlying bug, the associated exploitation techniques, and the post-exploitation steps r...
16694330
Reposted by Ewen McNeill
Buttons (Ashley) 🏴‍☠️#OFMDForLife🏴‍☠️ 🏳️‍🌈🤡 @sevensugars.bsky.social · 17/06/2026
Since I did do my PhD in cyanobacteria growth and treatment optimization modeling AND work in the water treatment industry, I’m gonna share my theory as to what’s happening here and how to fix it. People are focusing on the painted bottom of the pool increasing residual heat, and while that 1/19
21093573489
Reposted by Ewen McNeill
Dr. Curiosity @drcuriosity.bsky.social · 16/06/2026
Something I would like from Bandcamp and similar sites: different email preferences for general band news and for hawking merch. I may buy your digital music online; I will not buy your physical products, especially since they might cost half as much again after shipping to the South Pacific.
242
Ewen McNeill @ewenmcneill.bsky.social · 10/06/2026
If anyone was following @nztankerwatch.bsky.social for updates on fuel sailing to Aotearoa, it looks like they've deactivated their account for some reason. Last posts I saw were late May 2026, all down now. I'm unsure when the account deactivated, or why 😢
Profile page for @nztankerwatch.bsky.social, showing "Not Found" and "Account is deactivated" as the reason (suggesting it did exist, but is no longer active).
000
Reposted by Ewen McNeill
Christopher Harrison Photography @charrisonphotos.bsky.social · 10/06/2026
The Fangorn LOTR vibes were strong from this ancient forest…
Beautiful sunbeams shine through the ancient trees of this forest in Madeira. Moss covered branches stretch out.
221365146
Reposted by Ewen McNeill
Barry Dorrans @blowdart.me · 08/06/2026
This setting. This one right here. Go enable it on your GitHub actions settings. Right now.
A checked box next to “Require actions to be pinned to a full-length commit SHA”
108335
Reposted by Ewen McNeill
FabFilter @fabfilter.com · 04/06/2026
A song made with just white noise, Pro-Q and a bit of automation!
youtu.be
this song has no instruments in it
YouTube video by Andy Brewer
0131
Reposted by Ewen McNeill
Ed Zitron @edzitron.com · 01/06/2026
Today Microsoft moved all its GitHub copilot subscribers to token-based billing. If you want to see what happens when people have to pay the actual costs of AI, the day is finally here. It's obvious that every customer sees the deep, meaningful value and isn't angry at all.
r/GithubCopilot • 11m ago
Could not check
Confident-Hotel1700
Just one prompt and I got 50% of my whole month credits using Claude Sonnet 4.6.
General
This is hilarious. For context I used the Copilot Orchestrator that has Condutor, Planning, Implementator and Code review agents. But with the new "usage based pricing", seems like this is not an ideal setup anymore?
Anyone has the same experience here? I am on Copilot Prot. This is so expensive.r/GithubCopilot • 6h ago
Future-Lead-1432
Love the new Copilot token system
General
Last month I used ~60% of my quota in an entire month.
This month I've already used 25% on day one.
What an amazing improvement.r/GithubCopilot • 14h ago
Could not check
ImpossibleMuffin8791
Time to ditch Github Copilot
•..
General
First day of the new pricing model, I tried one prompt to just refine one of my existing change proposal, basically a conductor with few sub agents to update the existing change spec, architecture, test plan, prototype, tech spec and implementation plan.
About 20-30 mins task, ends up burning 16% of my monthly credits in one shot.
Bye.
↓
V Todos (15/15)
XE
create udla mouet oucumentalon
Draft implementation plan and technica...
Create test plan
Write deployment notes
Document operations notes
Copilot Pro
Credits
16% used
Upgrade
Resets Jul 1 at 10:00 AM
Inline Suggestions >
Enabled
A
d
1
V
U
Rr/GithubCopilot • 3h ago
Proper_Community 199
I just canceled my GitHub Copilot Max plan
General
You've cancelled your subscription to GitHub Copilot Max. This plan change will take effect on 2026-06-21.
Licensing
Current Copilot plan
GitHub Copilot
Your Al pair programmer
You've cancelled your subscription to GitHub Copilot Max. This plan change will take effect on Jun 21, 2026.
You can get a seat from one of your organizations. Go to Copilot settings to request a seat.
Active subscription
Copilot Max
Monthly payment
$100.00
Next payment
Jun 21, 2026
You can upgrade your subscription at any time. Read billing documentation for more details.
Compare Copilot plans
Undo
It's too expensive for me. In just one day, I used 4,000/20,000 credits, which means I would end up paying $600 a month.
Copilot Max
ね
Credits
17% used
Resets Jul 1 at 8:00 AM
Inline Suggestions >
Codebase Semantic Index O
Disabled
Ready
323105033473
Reposted by Ewen McNeill
Cinderella Mechanicus @hroethgar.bsky.social · 29/05/2026
This exact mechanism literally killed people in Australia. And using it for fraud detection in the UK Post killed people. Neither of those is an exaggeration.
074
Reposted by Ewen McNeill
what was I made for? @jjbbllkk.bsky.social · 24/05/2026
In 2022 when Christian Henson of Spitfire Audio came out in support of JK Rowling and Glinner, I did a video on how that hurt the trans community and beyond. Now it's 2026 and I felt the need to revisit it, because apathy keeps winning, and it sucks www.youtube.com/watch?v=mrlS...
youtube.com
The Price of Not Caring: Apathy and Consent in the Music Industry
YouTube video by Red Means Recording
13231102
Ewen McNeill @ewenmcneill.bsky.social · 20/05/2026
Looks like MBIE has conceeded that the Fuel Crisis is going to be a long term project, and moved fuel stock tracking to its own dedicated page. The URL doesn't exactly roll off the tongue, but as a bonus they do provide CSV downloads now (next to each graph). www.mbie.govt.nz/building-and...
mbie.govt.nz
Fuel stock and shipping updates | Ministry of Business, Innovation & Employment
MBIE publishes the latest information on fuel stocks and shipping every Monday and Wednesday afternoon.
000
Reposted by Ewen McNeill
Catalin Cimpanu @campuscodi.risky.biz · 10/05/2026
The FreeBSD team has patched a remote code execution in its operating system that impacts all versions released since 2005 Tracked as CVE-2026-42511, the vulnerability resides in the FreeBSD DHCP client and is extremely easy to exploit aisle.com/blog/aisle-d...
03919
Reposted by Ewen McNeill
Dylan Reeve @dylanreeve.com · 09/05/2026
If you would like to be able to vote in the InternetNZ board election this year, today is the joining deadline.
43231
Reposted by Ewen McNeill
Chad Loder @chadloder.dev · 05/05/2026
if human civilization manages to survive the Y2K38 apocalypse, it will surely end when we cross the MAX_SAFE_INTEGER horizon on June 5, 2255 at 23:47:34.740991 UTC
2708
Reposted by Ewen McNeill
Ernie Smith @ernie.tedium.co · 03/05/2026
Microsoft figured out a way to upset all the VS Code users: Add a comment to commits that says "co-authored by copilot" even when the feature is not used. github.com/microsoft/vs...
github.com
Enabling ai co author by default by cwebster-99 · Pull Request #310226 · microsoft/vscode
1821453
Reposted by Ewen McNeill
Filippo Valsorda @filippo.abyssdomain.expert · 29/04/2026
Copy Fail? Also looks like memory safety, but is actually complexity. xint.io/blog/copy-fa... I am going to link to this while rejecting changes to Go crypto for years. Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.
xint.io
Copy Fail: 732 Bytes to Root on Every Major Linux Distribution - Xint
Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Se...
39819
Reposted by Ewen McNeill
Chad Loder @chadloder.dev · 29/04/2026
This is the ideal user interface. You may not like it, but this is what peak UX looks like.
A screenshot of the retro Amiga music tracker software OctaMED Professional v4.00 during active playback. The classic gray and black pixelated interface features a complex control panel at the top with various buttons for playback, file management, and instruments, showing a BPM of 125. The central area displays four vertical channels of scrolling alphanumeric musical data, showing notes like "F-2" and "C-3" alongside numeric values. Superimposed over this text data are four colorful, glowing vertical volume meters (ranging from green to red) and a dynamic pink waveform line, visually indicating the music is currently playing. At the very bottom, two small red bar-graph audio spectrum visualizers monitor the output.
3440152
Reposted by Ewen McNeill
Tube Mapper- Luke Agbaimoni @tubemapper.bsky.social · 29/04/2026
Arch - Crystal Palace Photos looking down the stairs at Crystal Palace London Overground Station. I love the long shadows stretching across the platform. Featuring Andreya
Silhouette photo looking down stairs at crystal palace
317519
Reposted by Ewen McNeill
Filippo Valsorda @filippo.abyssdomain.expert · 28/04/2026
… are fucking kidding me. A github.com cross-account RCE due to the most pedestrian of injection attacks along the obvious exposed surface… and they actually have a globally shared “git” UNIX user!! This is not what taking the role of supply chain stewards seriously looks like.
wiz.io
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog
A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
735099
Ewen McNeill @ewenmcneill.bsky.social · 27/04/2026
"Numbers show small revisions due to amended returns from fuel companies" in MBIE's fuel report today seems to mean "1 day of petrol" (last report 29.5 in country; today previous 30.5, both for 2026-04-19 levels). Presumably someone's "off by one" somewhere 🤔 (Internet Archive links in alt text)
MBIE Fuel Stock Update published 2026-04-22, showing in-country Petrol at 29.5 days as of 2026-04-19

From https://web.archive.org/web/20260423025046/https://www.mbie.govt.nz/about/news/fuel-stocks-update2026-04-27 MBIE report on Fuel stock, showing previous petrol stock as of 2026-04-19 as 30.5 days of petrol in-country, an increase of 1 day since the actual previous report.

Archived at https://web.archive.org/web/20260427075238/https://www.mbie.govt.nz/about/news/fuel-stocks-update
000
Ewen McNeill @ewenmcneill.bsky.social · 23/04/2026
Does anyone know who was runing the nz-fuel netlify site? It looks like it was last updated a week ago (2026-04-16), based on a MBIE report from 4 days earlier (2026-04-12), reporting on data from another 4 days earlier (2026-04-08) :-/ Or another current site? nz-fuel.netlify.app/assumptions
nz-fuel.netlify.app
Assumptions & Sources — NZ Fuel Supply Security Model
100
Ewen McNeill @ewenmcneill.bsky.social · 22/04/2026
Seems like there's been too much Bluesky Status recently for the host of their status page 😬 (And/or the status page is also being DDoSed 🤔)
Bluesky Server Status in app post saying:

<video error> We are seeing elevated errors and timeouts on video uploads, and are investigating.

With a link to:

status.bsky.appScreenshot of the linked status.bsky.app webpage, with an UptimeRobot logo, and a Warning "The Status Page has been suspended.  Please contact support@uptimerobot.com for further information".
000
Reposted by Ewen McNeill
Tim Welch @tfwelch.com · 21/04/2026
It will be interesting to see where fuel prices go in the coming weeks and how closely/quickly they track crude prices. In MBIE's latest fuel stock update, on-shore diesel stock slipped below 20 days. Worth noting: retail price data is 11 days old, and fuel stock data is 6 days old.
041