iiinova — where your digital self keeps evolving

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Henri Sivonen

@hsivonen.mastodon.social.ap.brid.gy

44 followers 8 following 691 posts

Making Firefox load about:blank correctly [bridged from mastodon.social/@hsivonen on the fediverse by fed.brid.gy ]

Posts Replies Media

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 13h

I failed to find a PQ calculator online, so I made one: hsivonen.fi/pq (gray only, no color RGB math)

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 19/10/2026

What should I read to understand the risk of protests by arson and violence in centers of French cities other than Paris (Nancy specifically) on weekdays this week or next weekend?

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 18/10/2026

@bagder What’s your current take on whether it’s worthwhile to keep hiding the test case for HIGH after the fix is public?

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 18/10/2026

@tedmielczarek From the dept of kicking the can down the road in time-related things, there is the precedent of en.wikipedia.org/wiki/Revised_Julia…

en.wikipedia.org

Revised Julian calendar - Wikipedia

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 18/10/2026

My guess is that the leap hour will not actually take place: It’s a face-saving construct, and the folks who need to save face will be dead already when it’s time to execute the plan.

Reposted by Henri Sivonen

Drew Mochak @prism.infosec.exchange.ap.brid.gy · 17/10/2026

I'm more upset than I've been in a while. Windows 11 sets the default documents folder to onedrive\documents. Anything that gets saved there gets backed up to one drive. This includes various save games, all my Reaper stuff, and various other odds and ends that I like to, you know, save. To […]

infosec.exchange

Original post on infosec.exchange

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 17/10/2026

Tänään opittu: Ei pidä usko imperfektissä ilmaistua ”laitoin lähetteen” Maisassa. Pitää osata katsoa, mihin näkymään lähete tulisi näkyviin, jos lähete olisi olemassa, ja osata itse havaita, ettei lähetettä ole, ennen kuin käyttää aikaa siihen, että tekee toimia sillä oletuksella, että lähete on […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 17/10/2026

Do I understand correctly that Google no longer allows new CTAP1 tokens to be added to Google account—even ones that already have CTAP1 token? That seems bad. (Of phishing-resistant login things, CTAP1 was the last one that a person who isn’t part of the group speccing it could explain to […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 15/10/2026

Poe’s Law continues to apply to C discourse: “Was it tested on a machine other than with 8-bit characters? If not, whatever is the point?”

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 14/10/2026

It looks like there should be legislation about data (not just user data but employee messages, too; see Delta) held by bankrupt companies. Imagine how much more e.g. OpenAI has.

mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 12/10/2026

Re-boost for the edit. Not true after all, it seems.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 12/10/2026

I wonder if suggested fixes accompanying LLM-discovered security bugs are a net benefit or a net hindeance. I now have both the experience of not taking the bot fix and getting a new security bug report about my fix when the bot fix would have avoided it and the experience of spending too much […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

Boosting Slovenian domain sales at the expense of Anguilla. www.theverge.com/ai-artificial-inte…

Silicon Valley is falling in line with Trump’s attempt to rename AI

Musk, Benioff, Huang, and now Nadella have all capitulated to Trump’s ‘super intelligence’ rebrand.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

The minimum age for Adobe ID is 13 years (unless obtained via school). You need an Adobe ID to read e-book wrapped in Adobe Digital Edition DRM. People under 13 are not supposed to read books (in a way not involving school)?

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

@suihkulokki No. The HTTP version has nothing to do with the content. Servers support multiple HTTP versions and are placed as reverse proxies in front of older servers that can have ancient content.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

… Later, I was able to remove support for non-UTF-8 file paths for C++ callers by pointing out that we had already accidentally shipped the JS part as UTF-8-only without calamity.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

Aside: Sometimes the problem is that too many people are paying attention and have concerns. In Firefox, we got rid of support for non-UTF-8 local file paths on Gtk platforms by happy accident. A colleague added a file access API for front end JavaScript, made it UTF-8-only, and at review time […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

And we do support unlabeled UTF-8 in local files. Browsers can in practice assume that local HTML files are finite and not massive. Python/Ruby/Java have to deal with larger files and also with streams. Fortunately, before Hololens was canceled, before layoffs, and before putting Copilot into […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

I have a canned answer for why we aren’t doing this for the Web platform: hsivonen.fi/utf-8-detection The key difference is that the Web behavior is consistent across operating systems and supports Existing Content out there on the Web. The Python/Ruby/Java behavior wasn’t consistent […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

Now if glibc could remove non-UTF-8 behaviors that are obsolete but can still be triggered by mistake. (To get an idea of major distro reality: Ubuntu is young enough to have always defaulted to UTF-8, Red Hat switched in 2002 and Debian, unreasonably late, in 2007.)

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 11/10/2026

Python shipped peps.python.org/pep-0686 just now in late 2026 to make the implicit text file io encoding UTF-8 on Windows, too. The PEP says Java did this in 2022 and Ruby in 2020, both of which seem unreasonably late.

peps.python.org

PEP 686 – Make UTF-8 mode default | peps.python.org

This PEP proposes enabling UTF-8 mode by default.

Reposted by Henri Sivonen

Robin Berjon @robin.berjon.com · 07/10/2026

A running theme of #Disinfo2026h this year is about the US as FIMI actor. In a completely unrelated turn of events, a few sponsors pulled out at the last moment, including the @eudiplomacy.bsky.social (yet another case of our institutions making me ashamed to be European).

Panel showing sponsors of Disinfo2026, with three sponsors with white stickers over them: Canada, Lithuania, and the EEAS.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 07/10/2026

Reviewers feeding not-yet-public papers to in-cloud LLMs seems relevant to accusations related to math breakthroughs.

fediscience.org

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 06/10/2026

@syvash To encapsulate `unsafe`.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 06/10/2026

I’m again skewing the statistics for how many UTF-8 decoders the average person writes per year.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 06/10/2026

We keep teaching people that your code—not the compiler or the computer—is broken, and then as a browser developer I look at a crash report and one of my first thoughts is that the CPU is defective and I’m just annoyed at how much time from multiple many people is required to become confident […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 05/10/2026

C++ being very C++ again: dryperspective.github.io/posts/comp…

dryperspective.github.io

The complement of true is true, except when it's false

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 27/09/2026

Good to see a TV review outlet publish a guide for using “smart” TVs offline without the surveillance instead of just saying that “dumb” TVs aren’t available. www.rtings.com/tv/learn/how-to-use-…

How To Use A Smart TV Offline

Nearly all TVs on the market in 2026 have built-in smart platforms, but with so many privacy concerns around them, what if you want to convert your modern smart TV into a dumb TV?

Reposted by Henri Sivonen

laura lemay @lemay.mastodon.social.ap.brid.gy · 26/09/2026

Thinking about how for years teenagers and curious nerds were prosecuted and thrown in jail because poking at a web site was a clear sign of being a ☠️ CR1MIN4L H4CK3R ☠️ Now it's all like oh no! the computer did an oopsie! no one is to blame, nothing can be done! ¯\\_(ツ)_/¯

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 24/09/2026

Some see a security hole. Some see an AGPL compliance mechanism. www.theverge.com/ai-artificial-inte…

Muse will apparently let you download its entire filesystem

With a little coaxing, Meta’s AI will reveal all its secrets.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 15/09/2026

Points to whoever came up with the name Chavre for an oat-based goat cheese alternative.

Reposted by Henri Sivonen

David Gerard @davidgerard.circumstances.run.ap.brid.gy · 13/09/2026

It's been obvious for a few years that the AI industry is building a great big financial bomb made of recycled debt, but I'm sort of amazed at just *how* big the bomb is. Even if AI was *all that* technically - which it isn't - the financial bomb will *still* go off. At this point the […]

circumstances.run

Original post on circumstances.run

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 13/09/2026

This weekend, I’m trying to figure out how to replace worn-out seasonal clothing when the known-good configuration has been discontinued, helping someone else migrate off an email domain that is increasingly embarrassing due to executive racism, trying to figure out what to do about Apple Watch […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 13/09/2026

I know this is a minor inconveniece compared to dealing with war or climate disasters, but I’m so tired of having to rethink ongoing or recurring product/service choices due to discontinuation, price hikes, reputational changes due to what the leadership is up to, or unwanted changes to product […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 13/09/2026

Serious question: Why aren’t we seeing news of Chinese LLMs attacking various third-party systems? I suspect that the Chinese LLM labs are aware that if they acted like OpenAI, the reaction would be different, and they are doing something differently, but what are they doing differently?

Reposted by Henri Sivonen

Kaisa S @kaisasaurio.bsky.social · 09/09/2026

Mitä ihmettä @hs.fi ?

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 10/09/2026

I thought there had been layoffs in MSVC and was expecting Microsoft to be on track to giving up on their own compiler like they gave up on their own browser engine. I guess my impression was wrong and at least the back end is alive enough to get investment like this […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 09/09/2026

Is having Siri Recap enabled allowed in Apple offices? How long until the transcripts show up in legal discovery?

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 09/09/2026

I know that if you are unhappy with a crate author’s schedule or decisions, you can publish your own fork to crates.io under a different name. Strange to do it only for clippy lints, though.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 08/09/2026

This is over 2 hours long but worth watching about 1) what LG TVs collect by design and 2) what an attacker can do with it given that it’s a vulnerable Linux box with microphones. (Those two distinct aspects aren’t well separated in teaser clips.) www.youtube.com/watch?v=6IFVTcM28KA […]

mastodon.social

Original post on mastodon.social

Reposted by Henri Sivonen

Cassandrich @dalias.hachyderm.io.ap.brid.gy · 08/09/2026

@gabrielesvelto It's also equating a medium (for reading, learning, social interaction, artistic expression, self-discovery, evasion of malicious authority, etc.) with one particular low-value use of that medium (brainrot drivel).

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 08/09/2026

Should have guessed this from Servo becoming available on crates.io, but TIL that Servo is publishing the ICU4X changes that I made for SpiderMonkey but haven’t gotten into the upstream, yet, to crates.io: github.com/servo/mozjs/tree/main/mo… […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 08/09/2026

Rust nightly from 2026-09-04 to 2026-09-05 regressed by 15% benchmarks that are important for SpiderMonkey strings and Gecko DOM text nodes. I disassembled both binaries and compared functions of interest: Identical. To prepare a bug report, I made a copy of the test harness and deleted all […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 07/09/2026

It took a couple of years longer than I expected, but Evernote has reached the stage of trying to squeeze €199 per year from customers who were previously paying €99 per year.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 04/09/2026

Says something about Apple rumor journalism that AV1 hardware decoder is typically not mentioned as a new feature of the upcoming Apple TV, even though watching video is the primary purpose of the device and the rumored SoC is known to have an AV1 decoder.

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 04/09/2026

Trying to understand what’s going on with “AI” is quite an exercise in assessing what’s BS and what’s not when folks who write about it extrude their point of view in a way that’s not believable but their starting point may be true. I see both “this is bad; none of it actually works” (even when […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 19/08/2026

Is there a retailer inside the customs union that is filling the opening left by Brexit breaking the usefulness of amazon.co.uk for the purpose of buying Blu-rays intended for UK & Ireland from EU countries other than .ie/.fr/.it/.es (which appear to have some special arrangement with .co.uk […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 19/08/2026

I don’t like it _at all_ when two ways of writing a small thing that are supposed to be just a syntax difference result in very different performance characteristics: phabricator.services.mozilla.com/D3… Aside: I think folks who want LTS Rust because they are afraid of the standard […]

mastodon.social

Original post on mastodon.social

Henri Sivonen @hsivonen.mastodon.social.ap.brid.gy · 17/08/2026

It’s been zero days since I’ve learned about a compiler toolchain update regressing codegen for my code: github.com/rust-lang/stdarch/issues… The previous counter reset was on Thursday: bugzilla.mozilla.org/show_bug.cgi?i…

Bad codegen for _mm_packus_epi16 · Issue #2208 · rust-lang/stdarch

Consider https://rust.godbolt.org/z/dY8schnG4 Input: #![feature(portable_simd)] use std::simd::ToBytes; use core::simd::u8x16; use core::simd::u16x8; use core::arch::x86_64::_mm_packus_epi16; #[inl...