💽Programming Chat v2

[lone sky]

it's closer to 6 AM on my timezone

READ

[timid quartz]

I thought you were trying to convert it to ATP’s time mb

[lone sky]

REAAAAD

[timid quartz]

kys

[lone sky]

:C

[lavish dove]

When

[spare quartz]

あなたへのおすすめ

[spare quartz]

米を買ったことがない（アメリカの国土を買収したことがないの意）

デバッカーにデバッグどころじゃないって涙目になってもらえて魔女みたいな笑い方してる

[spare quartz]

https://fixupx.com/i/status/1925322469847482479

Comfnani (President of Kris Dreemurr) (@Comfnani)

I love this video so much

**💬 28 🔁 873 ❤️ 5.3K 👁️ 71.0K **

▶ Play video

FixupX · May 21, 2025, 10:47 PM

[spare quartz]

https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417

okay actually doing this now

[spare quartz]

bmbmbmb

JDK 24 has no ASN.1 decoder so i must make my own

[spare quartz]

[ASN1Sequence[2][ASN1Integer(value=63364860536131611615359363549099209173057496495496730956199499144828307646458), ASN1Integer(value=109471171272462600455447291949628282112874345014106893364857269483312157901245)]]

hooray my ASN.1 parser works

thankfully it is quite similar to RIFF and with BSL's new Parser structure registering this is super easy

[timid quartz]

@spare quartz be like this person.

[lone sky]

hop off

smh.

[lavish dove]

Lol

[lone sky]

@timid quartz https://x.com/orhundev/status/1924814885076045936

Orhun Parmaksız 👾 (@orhundev)

Microsoft released an open source text editor for the terminal and it's written in Rust 🦀😳

https://t.co/chyloirDHN

No 3rd party crates - thus no Ratatui/crossterm though

#rustlang #microsoft #text #editor #commandline #terminal

X · May 20, 2025, 1:10 PM

[lone sky]

oh shit that's me, husband and the yellow dude

[spare quartz]

https://fixupx.com/cia/status/1925518661713891793?s=46

CIA (@CIA)

The front gate at Headquarters is closed until further notice. Please use alternate routes for Thursday, May 22nd.

**💬 926 🔁 1.1K ❤️ 7.9K 👁️ 1.17M **

FixupX · May 22, 2025, 11:46 AM

[spare quartz]

Also btw

ASN.1 isn’t in the JDK!

It’s in bouncy castle 🤮

[lavish dove]

brah

[timid quartz]

I saw

[spare quartz]

GOD

i hate crypto so much

but this is making me learn a little

{
                                                                      "type": "urn:ietf:params:acme:error:unsupportedContact",
                                                                      "detail": "Error creating new account :: only contact scheme 'mailto:' is supported",
                                                                      "status": 400
                                                                    }

very close..

woohoo

our very own JWS signing / ASN.1 / ACME encoding works!!!

[timid quartz]

JWTs SUUUUCK

[spare quartz]

JWS

[timid quartz]

wtf is a jws

[spare quartz]

json web signing

[timid quartz]

if it’s affiliated with JWTs it sucks majorly

[spare quartz]

JWT is built on top of it

[timid quartz]

ok it sucks majorly

[spare quartz]

no

JWS just says "this thing was signed by this cert"

it doesn't assert anything other than authenticity

[timid quartz]

me when I mess with that because it’s given to the client and I trick your server

[spare quartz]

?

so, number one: i am the client here

number two: you can't fake an EC/P-256

if you can, you'd destroy 99% of the internet

[timid quartz]

but I CAN change the cert field and the signature :3

[spare quartz]

yeah but then the JWS isn't valid anymore

[timid quartz]

honestly like

funny thing with JWTs

[spare quartz]

which i am not using here btw!

[timid quartz]

yes aware

[spare quartz]

okay ACME time

[timid quartz]

^^

[spare quartz]

well then don't use JWTs

[timid quartz]

and also

and also

[timid quartz]

Yeah I don't lmfao

[spare quartz]

poor library design

[timid quartz]

whoever decided it was a good idea to hand the client the thing that directly controls their permission grants needs to be grounded from the internet forever

[spare quartz]

do you want a free public key btw

[timid quartz]

uh sure

[spare quartz]

Public Key: Sun EC public key, 256 bits
public x coord: 97207803913165164273933472566852445634313409367038390383487170261008944161352
public y coord: 73867857692135068274663726821417592846949822257689193740699179203258480209078
parameters: secp256r1 [NIST P-256,X9.62 prime256v1] (1.2.840.10045.3.1.7)

hmm

i wonder if i could make this a 512 bit EC and it'd still work

[timid quartz]

like versus cookies where the cookie indirectly controls the user's grants because the server uses it to check, vs the JWT where the server directly reads the permissions off of the JWT given it by the client

[spare quartz]

if the JWT was signed by the server, and the library/server designers aren't stupid, and the client just resends it like a cookie, i'd understand more

[timid quartz]

yes but the point is that

people are stupid

and because of that it's been bypassed

[spare quartz]

dumb

[timid quartz]

and like you said

"dont use jwts"

I personally never plan to

and I don't think anyone should

[spare quartz]

hmm

if i ever have to authenticate a client for something

and DONT wanna store cookies in my server

JWSes sound like an interesting idea

[timid quartz]

store cookies

objectively better method

[spare quartz]

memory wise no

[timid quartz]

otherwise I WILL bypass your security and I WILL give myself every single permission

[spare quartz]

cpu / simplicity wise i suppose

[spare quartz]

what? why would a client get to decide its permissions?

JWSes only intrinsically encode the certificate and a payload

[timid quartz]

because that's literally what you're doing with a JWT

[spare quartz]

nothing more

im saying JWS stupid

[timid quartz]

you're relying on something sent by the client to directly decide their permissions

[timid quartz]

idk what the difference is

[spare quartz]

JWS - json web signing (a payload is signed by someone with an embedded certificate)

[timid quartz]

idk how you'd use JWS for auth

[spare quartz]

JWT - json web token (a payload is signed by someone with something more... pretty sure this is built on top of JWS)

[timid quartz]

oh huh

[spare quartz]

you sign something with your servers private key, give that to the client

[timid quartz]

google says it's the other way around

JWS is a more specific kind of JWT

[spare quartz]

client gives it back, you check if its valid against your public key

if it is - OK, they're authenticated
otherwise - no

[spare quartz]

hmm thats interesting

[timid quartz]

so basically

JWS bad because it's a JWT

[spare quartz]

nuh uh

this is basic asymmetric cryptography

[timid quartz]

yep

[spare quartz]

ew

no

its not supposed to have that

[timid quartz]

no JWT is the payload

[spare quartz]

what?

the typ doesn't encode the payload

this is my header

[spare quartz]

ughghgh so much

[timid quartz]

so anyways

you're gonna get alg: "none"'d

[spare quartz]

actually no lemme rephrase that

[spare quartz]

rephrased: "nuh uh"

there

fixed it

[timid quartz]

well

alg none could be valid

[spare quartz]

for who

[timid quartz]

idk someone might not want to encrypt it for whatever reason

user choice

[spare quartz]

bad client design

ddosed

[timid quartz]

also it would be uhm

[spare quartz]

i dunno its just weird to me

[timid quartz]

DDOS(client) or client.DDOS()

[spare quartz]

how could you possibly rely on whatever the client gives you and

somehow let them forge a certificate

thats a total undermining of asymmetry

(and symmetric schemes are bad)

[timid quartz]

it's technically a valid option in jws :3

so

:3

[spare quartz]

nono DDOS is a builder with client as an option

[spare quartz]

yeah but when was beg ever rfc compliant

[timid quartz]

uhm

always?

[spare quartz]

never

i wrote our HTTP parser based on looks

the RFCs are so boring to read through

[timid quartz]

you were so rfc-compliant that you rejected HTTP headers because they weren't uppercased/lowercased properly

[spare quartz]

okay well i read through LITTLE BITS of rfcs

[timid quartz]

mhm sur

[spare quartz]

but if an rfc in some crevice says "no cheese header" i dont care im not listening

https://x.com/Edibleteacup/status/1925482568721605113/photo/1

teacup🍵 (@Edibleteacup)

#まけもあーと 是狐白（コハク）莫！不知不觉就画了一年的“まけもあーと”了呢，这是第二次画狐白（コハク）（第一次没有发在X上）感觉还是有点进步的呢

X · May 22, 2025, 9:23 AM

buy me the kohkau merch

now

[timid quartz]

no

anyways I will personally never use jwt/jws/whatever

so

have fun

[spare quartz]

GUESS

WHO GOT

6 LITERS OF SODA1

1!!!!

[timid quartz]

not u

[spare quartz]

https://tenor.com/view/biden-joe-biden-joe-biden-speech-jill-biden-soda-gif-13746069287899435393

[timid quartz]

that's my soda

[spare quartz]

you're a college student you're ppoor

you have no soda

[timid quartz]

im actually abducting it rn

from you

[spare quartz]

you're gonna end up like bayachao

a freelance programmer whos schizo

OKAY ANYWAYS

now i need to uhh

figure out... how to get a certificate.. with my acme account

https://fixupx.com/i/status/1925386163742814597

Av ☁️ 🌸🦅 (@MarioEmmet)

How ironic that Family Guy is now owned by Disney.

Quoting SonicAndSimsFan  (@SonicAndSimsFan)
︀
What animated show has a tendency to change its art style for that one sequence?

**💬 59 🔁 1.4K ❤️ 21.5K 👁️ 785.5K **

▶ Play video

FixupX · May 22, 2025, 3:00 AM

[spare quartz]

btw

i hate to say this

their rust project is good.

key caching added

[timid quartz]

:3

[spare quartz]

UNFORTUNATELY!!

[timid quartz]

:3333333333333333333333

[spare quartz]

you're vibe coded

you ever wonder

where they keep the root certificate private keys

til https://en.wikipedia.org/wiki/Key_ceremony

still pending....

i should uninstall microsoft authenticator on my phone

the TOTP extractor is more than sufficient

mbmbm

need to make a DNS local protocol

[spare quartz]

TIL java has ACLs

user principal..

very very cool

[timid quartz]

should be vibe coding

enable JetBrains AI

[spare quartz]

IM EATING SALTINE CRACKERS

GO TO SLEEP

[timid quartz]

no

but actually yes

[spare quartz]

yes.

[timid quartz]

Go vibe code

[spare quartz]

no

im awing at my beautiful code.

which ill have to tear apart so it can be merged into BSL

asn1
acme
jws

[timid quartz]

dewit

[spare quartz]

ugh

you're making me mad aera. im going to include our ACME in breadmod

[spare quartz]

hhhhhhhhhhhhhh

need to create an X509 library

[spare quartz]

it worked!!!

[spare quartz]

OID...

[spare quartz]

so many

made it acceptable with java

hopefully it works with tls

[spare quartz]

FINALLY

[spare quartz]

woohoo it works!!!

[spare quartz]

finally

[spare quartz]

Received certificate with unexpected identifiers ("\f\x0fns-2.javart.zip, ns-2.javart.zip"): "identifier does not match expected identifier"

very close..

been coidng for 9 hours straight only just realized

[spare quartz]

IT VERIFIED

[timid quartz]

Shoulda vibe coded

[spare quartz]

our acme server is nearly donE!!!!!!!!

after 10 hours of straight work!!!

[lone sky]

TIL

[spare quartz]

look at this certificate i literally wrote by paw!!!!

[lone sky]

kemu hates me

QEMI*

QEMU*

[spare quartz]

https://wetdry.world/@ipg/114556851605376131

Emma (IPG) (@[email protected])

Wet-Dry World · May 23, 2025, 11:13 AM

[timid quartz]

“by paw” you need help.

[spare quartz]

I JUST NEED TO WRITE ONE MORE CSR

[timid quartz]

did you get your own ca cert hmm

[spare quartz]

wdym

[timid quartz]

I assume you want to act as a ca with this acme server

[spare quartz]

i should elaborate on the name a little bit

right now it's essentially a two fold system

(or three fold depending on how you look at it)

• ACME microclient
• Loopback certificate retreival (gets a key pair from another CA, puts it in a P12, distributes)
• DNS temporary write server

to act as our own CA would require a LOT of money after doing some research

mainly in the focus of security and getting recognition

storing a root certificate on something less secure than an air gapped computer or HSM wouldn't bring the best reputation

we could act as a CA though, and write whatever certificates we want, as we have our own fully custom X.509 reader/writer

(that'd require more research in the ways of CRL/OCSP)

[timid quartz]

or manually importing your self-generated ca cert on your devices and giving everyone else a big fat warning

[spare quartz]

we don't operate any loopback services for that to be realistic though

need to export this to a module and create one for http-01

then when the DNS loopback service is up create dns-01

[spare quartz]

by the way

HSMs are incredibly expensive

but at least we'd have bragging rights?

there is one good thing about being a distributed organization though

we dont have to deal with switches or physical networking crap!

we're on completely different subnets

https://www.forbes.com/sites/danidiplacido/2025/05/21/its-official-michael-bay-will-direct-the-skibidi-toilet-movie/

[timid quartz]

hey networking is fun

[spare quartz]

no

[timid quartz]

yes

[spare quartz]

no

[timid quartz]

yes

[spare quartz]

http_router + maven_microserver is all you need

[timid quartz]

wrong

[spare quartz]

right

if you have more than a router and a modem your setup is bad

actually...

you've given me an idea!

i dunno if my codev will be receptive to me stealing ips from his router though

[timid quartz]

wow atp you have two whole devices for that? smh

[spare quartz]

yes

you need a modem and a router

[timid quartz]

bad design

[spare quartz]

it is conceptually the littlest you need

idiot

[timid quartz]

get a modem-router

[spare quartz]

you IDIOT

[timid quartz]

one device, both functions

[spare quartz]

i have a modem-router

!!!

its still conceptually a modem AND a router though

[timid quartz]

nah you just said you have a modem and also a router

[spare quartz]

omg

you're so stupid

[timid quartz]

what on his internal subnet?

[spare quartz]

and your code smells rusty

[spare quartz]

yes

[timid quartz]

seethe

[spare quartz]

DHCP is really easy to code

[timid quartz]

you have your own internal subnet use yours

[spare quartz]

and i wonder if i can go ahead and expand the amount of ports available on his server

by allocating more ips for the same server

[spare quartz]

my thinkcentre tiny isn't hardware ready for distributed setup yet

that's why i do most of my dev on his

[timid quartz]

leech

[spare quartz]

mf i am a co-owner of our org

rightful use of assets

the 2 japanese voices in my head are very nice to listen to.

[timid quartz]

you should add another router to route between your subnets

[spare quartz]

that's just not possible though

we are on completely different subnets [here].0.0.0

[timid quartz]

it’s totally possible

[spare quartz]

(or in in-addr notation 0.0.0.[here])

[spare quartz]

"get a job at ARIN miko"

"hijack their equipment miko"

yeah sure

[timid quartz]

no

you just get a machine with two NICs (or ig you could bind two IPs to one NIC) that’s connected to both subnets (either virtually or physically) and go from there

[spare quartz]

but why

[timid quartz]

direct connection :3

[spare quartz]

and thats not really a router

[spare quartz]

and ("physically")

[timid quartz]

that is a router because it would be directing traffic between the subnets

[spare quartz]

... let me just

im gonna need a BIG ethernet cable to get to his subnet..

[timid quartz]

physically could be like it’s connected to your home physically and your codev’s home virtually

stupid.

[spare quartz]

its not

theres still the ISP level

therefore its not a router

its just a fancy machine using the same ip

[timid quartz]

it’s still doing routing smh

[spare quartz]

MY OS HAS ROUTING BUILT IN!!!

[timid quartz]

It’s more of a virtual router

but it’s still a router

[spare quartz]

and

[timid quartz]

unless you had physical connections

[spare quartz]

the difference between a physical and virtual routers are neglible

[timid quartz]

but it would be cool :3

networking is fun

[spare quartz]

you're weird and lame.

networking is for stupid people who think getting a cybersecurity degree will get them paid stacks

[timid quartz]

ok bozo

says the one who rewrites literally every piece of software they can think of for 0 reason

[spare quartz]

blah blah blah

[timid quartz]

and also doesn’t go outside

[spare quartz]

okay well

that just means i have pracitcally infinite time

but outside looks REALLY nice rn

its overcast and on the verge of raining

[timid quartz]

I curse you to see no rain

[spare quartz]

no

it already rained and there was lightning too

[timid quartz]

tbh if I went full time after this internship ended I’d be making big bucks

well…pretty damn decent money

[spare quartz]

(working at a mcdonalds)

[timid quartz]

nope

that’s what you’re gonna do

[spare quartz]

unfortunately no company would want their own X.509 parsers

from a person without a diploma 💔

[timid quartz]

after you fail out of basic for not being able to run a mile under 15 minutes

[spare quartz]

mmmmmmm

not true!

the power of bayachao compels me to run fast

[timid quartz]

You’re right

Not under 20 :3

[spare quartz]

die .

can you just got o schoool or work already

[timid quartz]

nope

I don’t work Fridays :3

[spare quartz]

school

[timid quartz]

not yet at least

[timid quartz]

don’t have any summer classes :3

get rekt

[spare quartz]

ugh

[timid quartz]

and guess what I’d be doing atp.

making the big money.

I’d be networking

[spare quartz]

being poor

breaking companies servers

[timid quartz]

nah

[spare quartz]

getting datacenter guards to shoot you

[timid quartz]

nah

networking :3

I’ll just get your isp to disconnect you

[spare quartz]

AT&T would never

[timid quartz]

hard-code a rule in every router to not serve your IP

to black-hole any traffic destined for you

[spare quartz]

do you even know how to operate BIND?

[timid quartz]

get every isp to never issue you an ip again

man and you’re telling me you’re rewriting DNS instead of using BIND?

[spare quartz]

BECAUSE THE ISC SUCKS!!

[timid quartz]

“Whatever your application is, BIND 9 has the required features.”

sounds like you should use it

[spare quartz]

no.

we already have the features

grgrgrgrg

another day another hating it/cs/cybersec people

[timid quartz]

anyways your code is bad and you should feel bad

[spare quartz]

my code is peak and only my opinion matters

💯

[timid quartz]

you when you’re in the military and your network breaks but you killed all the IT people so there’s nobody who can fix it

[spare quartz]

LITERALLY ME

the it people would probably be mostly contractors though

[timid quartz]

mf be like “I hate external dependencies” but then uses the JVM (the biggest external dependency known to man)

[spare quartz]

and im fine with contractors

[spare quartz]

(base*)

[timid quartz]

not base

Your CPU and maybe your OS is the base

[spare quartz]

based

you're right

very based..

[spare quartz]

CPU as a base is bad design

[timid quartz]

very cringe

[timid quartz]

blah blah blah

go bootstrap your own assembler and rewrite all your code in assembly

[spare quartz]

ばにおばにおばにお

[timid quartz]

then you’ll have no external dependencies

[spare quartz]

ばにおばにおばにお

[spare quartz]

yknow

the funniest thing is that we've done that

god i love our experimental projects <333

[timid quartz]

bread experts more like slop experts

[spare quartz]

omg rust foundation mentioned!!!

slop language built by slop corporations and people

[timid quartz]

nah that was a JVM reference (you wouldn’t get it)

[spare quartz]

cause the JVM is peak

i know

[timid quartz]

nah

the JVM was the first piece of slop bloatware ever made

ever wonder why Sun went out of business? they died of cringe after they saw the JVM they made

[spare quartz]

best software and only software sun/oracle needed to develop to finish the human race

[spare quartz]

bought by oracle*

[timid quartz]

cause they died of cringe

[spare quartz]

and made into the physical manifestation of gods will

all hail the JVM

[timid quartz]

that’s called C89

[spare quartz]

❌

nmbmb

im hungry

[lone sky]

oracle is bad

as a company

i despise oracle.

[spare quartz]

oracle is good

oracle is life

[lone sky]

❌

[spare quartz]

but the OpenJDK community is better

[timid quartz]

yknow atp I think your entire purpose in life is just to rage bait people

[spare quartz]

HOW

my entire purpose is to write code.

[timid quartz]

I’d love to do some corporate SWE if getting a job in that field was even remotely possible rn

[spare quartz]

corporate swe...

probably involves java... or kotlin...

best job ever..

[timid quartz]

nah

realistically nowadays

probably involves TS

[spare quartz]

unfortunately still acceptable

TS is super easy to write but 99% of it is googling

[timid quartz]

eugh no TS is terrible

The T in TS stands for Terrible

[spare quartz]

the R in rust stands for

wait i cant say that

[lone sky]

it stands for This

[timid quartz]

LOL

[spare quartz]

the K in kotlin stands for Keratitis

(i dont know any good words for K)

[lone sky]

Reddit

[spare quartz]

TRUE

[lone sky]

cause all rust users are redditors

[timid quartz]

ok have fun fighting with ts-node and ts-node-esm for 30 minutes trying every google solution known to man only do not know what you did to fix it

[spare quartz]

true..

jvm better

💪

[timid quartz]

I actually hate ts-node(-esm) so much

bun and Deno >>>

[sterile ruin]

Java…?

[spare quartz]

JAVA VIRTUAL MACHINE

‼️

[timid quartz]

Java cringe machine

WAIT

[spare quartz]

java god machine

[sterile ruin]

What do you need a JVM for

[timid quartz]

JAVA VOMIT MACHINE HAHAHAHAHAHAHAH

[spare quartz]

KYS

[timid quartz]

exactly this is what I’m saying

[spare quartz]

JAVA VERYGOOD MACHINE

you need a jvm for everything and thats how it should be

[sterile ruin]

EWWWW JAVA

[timid quartz]

JVM == massive bloated external dependency

EWWWW JAVA

[spare quartz]

the JVM is NOT for running java

dont get that mixed up in your head

[timid quartz]

EWWWW JAVA

[spare quartz]

have you even read JVMS 2, 4 and 6????

[sterile ruin]

TOO LATE! HAHAHAHAHA

[spare quartz]

search "rust" on gif search

and click on the second result

https://tenor.com/view/programming-rust-c-lang-cpp-cplusplus-gif-26743262

SO TRUE..

[timid quartz]

C users calling Rust “useless” after their 20th memory vulnerability of the day (their compiler didn’t tell them they did a use-after-free)

[spare quartz]

https://tenor.com/view/rust-femboy-gif-14213674384972433300

unfortunately i am a jvm user and am immune to every memory vulnerability

💪

[sterile ruin]

Unfortunately I am a good programmer so I don’t need

[timid quartz]

Rust programs after they finish and look back at the JVM that’s still warming up

[spare quartz]

we found the c programmer

[spare quartz]

BAAHHH

[sterile ruin]

Shit, they found me

[spare quartz]

I WILL MURDER YOUU

your stupid rust app is probably slower than it takes for startup

[spare quartz]

this might be you.

[timid quartz]

Id sooner gcc -std=c89 -pedantic than javac or kotlinc

[spare quartz]

what does that even mean

are you okay

[timid quartz]

Java user’s reaction to seeing a REAL compiler

[spare quartz]

this guys diseased

get him to a hospital

[timid quartz]

says the chaolet

[spare quartz]

ちゃお

ちゃお！！！！

[sterile ruin]

What

[spare quartz]

https://tenor.com/view/makemon-bayachao-babio-furry-3d-gif-14086784688955344264

[spare quartz]

so sleepy

[spare quartz]

Mbmbmm

Sleeping

ACME CSR & Finalization shall commence ..???

18:00

[timid quartz]

commence NEVER

[timid quartz]

@spare quartz honestly terrorizing noelle with the mice is way more fun than snowgrave

saving this to use against you

[spare quartz]

Mbmb

Aera

I don’t wanna wake up

Please write my finalizing. Code

[lone sky]

@timid quartz YO?

OK SO I WAS CHECKING VALVES STEAMOS PAGE

AND THEY UPDATED IT RECENTLY

https://store.steampowered.com/steamos/buildyourown

I SWEAR IT SAID STUFF ABOUT THE OLD ANICENT DEBIAN ONE

AND NOT THE NEWER ARCH ONE

another thing they updated

technically this SHOULD mean steamOS is public now (sort of)

[spare quartz]

kkkkkkkkkk

just stubeed my kenee

gonna die now

[lone sky]

oh

are you okay??

[spare quartz]

https://youtu.be/X5czp2wjRV4https://youtu.be/X5czp2wjRV4

[lone sky]

ok that just

sounds like it hurts

[spare quartz]

どんな曲作っても自分が作る限りもうダメかもしれんっていう無力感が襲ってきてなかなか動けない。作るのがただ楽しいってあんなに強いことだったんか

pretty cool

6月5日まで何日 works on google

[rustic vine]

Count your Days

oh it says Count Days lol mb

[rustic vine]

ye same

thats me

oh are they sick

thats not me then

[spare quartz]

biohazard

[rustic vine]

also hi how yall been

[spare quartz]

acme

[rustic vine]

whats that mean?

[spare quartz]

https://en.wikipedia.org/wiki/Automatic_Certificate_Management_Environment

[timid quartz]

https://tenor.com/view/acme-daffy-duck-gif-8909993

your code

[spare quartz]

NO

hold on im validating again

[timid quartz]

invalid ‼️

[spare quartz]

KYS‼️

[timid quartz]

acme issuing authority response: kotlin user detected, invalidating all certs and banning ip...

[lone sky]

how was that one discord "alternative" called

crow something?

crowdin??

[timid quartz]

corvy?

[lone sky]

wait no that was the translation website

[timid quartz]

it's neat

[spare quartz]

snowdin

[timid quartz]

haven't used it much

[lone sky]

yes that cabbage

[timid quartz]

OF COURSE IN SEATTLE.

OF COURSE.

[spare quartz]

nede to add... the... error reporting..

[lone sky]

https://starfishneuroscience.com/blog/ultra-low-power-miniature-electrophysiological-electronics/

gabe newell SoC btw

[spare quartz]

"detail": "While processing CAA for tls-stage.javart.zip: DNS problem: query timed out looking up CAA for tls-stage.javart.zip"

GAHH

how

does it want a CAA on that domain..

[rustic vine]

oh ok

[spare quartz]

maybe this will work

[rustic vine]

I was dragged to a convention today

[timid quartz]

it won't

[spare quartz]

it will.

[rustic vine]

it was kinda fun but I didn't know anything there lol

[timid quartz]

if you used a pre-existing program it would /j

[spare quartz]

"pre existing program"

like?

[rustic vine]

idk if any of yall know https://www.momocon.com/ but ye

[spare quartz]

is that where moms meet or smth

[rustic vine]

yea I think so

I didn't know anything there but a some friends dragged me there

they were there to demo some robot

[timid quartz]

like idk. google for whatever ur trying to do.

there exists a program that someone already made

[rustic vine]

it was kinda cool ig

lots of people

[spare quartz]

no

there literally isn't

[rustic vine]

lots of traffic (haha atlanta traffic pt. 20281478274)

[timid quartz]

i hate it please get me out of this city please

[timid quartz]

uhm....

there's plenty of dns servers...

[spare quartz]

and none of them would work here you dolt.

[timid quartz]

they ALL would work there you dolt

[spare quartz]

no they dont

[rustic vine]

LOL are you still in downtown?

[timid quartz]

why not hmmmm

[spare quartz]

because our CAA operations work fine

[rustic vine]

or have to commute through downtown area

[timid quartz]

and also for your "acme" thing

https://letsencrypt.org/docs/client-options/

[spare quartz]

none of these are useful

[timid quartz]

they're all 100% useful

[spare quartz]

they're all useless

they have no knowledge of our DNS server

[timid quartz]

yknow what IS useless: the jvm

[spare quartz]

and cannot issue certificates locally

[timid quartz]

have you even USED certbot before

[spare quartz]

dude

certbot doesn't know how to configure DNS

and it cant support TLS-ALPN-01

you're so dumb

[timid quartz]

ok waah waah configure dns yourself

[spare quartz]

dumb stupid idiot.

[timid quartz]

who needs TLS-ALPN-01

[spare quartz]

blah blah balh.

[spare quartz]

https://cdn.discordapp.com/attachments/1108851440044232766/1238256437722091583/matpat_moment.gif

[timid quartz]

sounds like your use case is just bad

[spare quartz]

no

[timid quartz]

sounds like your server setup is just bad

[spare quartz]

everyones client is bad

[timid quartz]

idk vro the common denominator is you I think you're the one that's bad

[spare quartz]

nah

https://tenor.com/view/air-space-museum-gif-21352465

[lone sky]

@spare quartz is it a bad idea to remove all checkmarks using ublock on twitter

[spare quartz]

no

[lone sky]

(I also got rid of jobs, monetization and gork

[rustic vine]

@grok context?

[timid quartz]

me looking your code to find its usefulness

[spare quartz]

(my code is the house)

[rustic vine]

this is a high level joke

[timid quartz]

yeah and guess what the house is EMPTY

meaning 0 USEFULNESS FOUND INSIDE

[spare quartz]

idiot theres still STRUCTURE

you're still IN IT

[timid quartz]

ERROR 404 NO USE FOUND

[spare quartz]

COMFORTABLE!!!

[lone sky]

in fact

i got rid of the concept of checkmarks

[spare quartz]

https://media.discordapp.net/attachments/906311605774614598/1206116357305933894/ok_blud_-_Made_with_Clipchamp.gif

[timid quartz]

I’m sending this to Terry

[lone sky]

terryiscool160

[rustic vine]

what is kajiu paradise

[timid quartz]

Yeah I hope people don’t use me

I want people to like me not use me smh

[spare quartz]

literally what having a job means

[timid quartz]

ur mom

[spare quartz]

ur dad

[timid quartz]

(you are the coke bottle) (I am going to decapitate you)

[rustic vine]

how

oh the video said how too

yea agreed video

[spare quartz]

I HAVE A COKE BOTTLE

2 LITERS

[timid quartz]

yeah you BUILT like a 2L coke bottle

[spare quartz]

https://tenor.com/view/shower-duolingo-please-take-a-shower-immediately-take-a-shower-gif-23968576

[timid quartz]

https://media.discordapp.net/attachments/951608744729522227/1120878493908082718/IMG_7974.gif

[spare quartz]

yeah okay aera

[timid quartz]

im drinking my beer be quiet

[spare quartz]

ちゃお！！！

[timid quartz]

ちゃお死

[spare quartz]

https://kiro247.booth.pm/

[timid quartz]

耐ちゃお

[spare quartz]

https://kemobayashi.booth.pm/

[timid quartz]

smite

[lone sky]

wasn't this atps profile pic at some point in time when neco was still a thing

[timid quartz]

I think so

[rustic vine]

https://cdn.discordapp.com/attachments/1274612080405905472/1290581810069110794/cat1611bearing.gif?ex=68322339&is=6830d1b9&hm=a4728ebdd32159f7b5e715d454e7a20d0493eb8e8ec304ea4584c8143ea5fedc&width=714&height=953&

[spare quartz]

Copyright (c) 1993-2009 Microsoft Corp.

This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

This file contains the mappings of IP addresses to host names. Each

[lone sky]

@timid quartz do you wanna see furry basil

[timid quartz]

sure

probably bunny

[timid quartz]

yeah bunny guessed it

[spare quartz]

need 2 look into this dns errors...

[timid quartz]

though....why is it vaguely bayachao art style

[lone sky]

that's

[spare quartz]

thats not

[lone sky]

not bayachao

[spare quartz]

you can tell from the eyes

and paws

[timid quartz]

VAGUELY!!!

[spare quartz]

you're blind

its probably by an asian

im gonna take a guess and say korean/japanese

@lone sky whom is it

[lone sky]

the latter

funnily enough, they follow said person that made it

[spare quartz]

hmm

i wonder why the memory stat for dns went up so high after retuning it?

it doesn't appear to be physical memory

but it does cause a tiny blip on cached

maybe its the -server and -XX:+AlwaysPreTouch

[lone sky]

12 days until:

[spare quartz]

Allowing the GC to commit and uncommit memory while the application is running could have a negative impact on the latency of Java threads. If extremely low latency is the main reason for running with ZGC, consider running with the same value for -Xmx and -Xms, and use -XX:+AlwaysPreTouch to page in memory before the application starts.

i see

unfortunately with the update of our dns server

the last screen instance resident in our memory is gone

it lasted 4 days in there 💔

there

CAA fix complete

okay CSR time

[timid quartz]

cause it SUCKS!!!!

[spare quartz]

cause YOU suck

it vented like 90% of it anyways

theres this JVM thing called "flight recorder"

need to figure out what it does/if its useful

okay thats pretty cool

okay

jcmd might be the best thing ever

exposes a ton of data about the jvm

hmm

[flint belfry]

if you hyperfixate on deltarune instead of your gay japanese furry game instead im all for it

[spare quartz]

❓

[flint belfry]

boyacacho or whagever

[spare quartz]

i sent that image for aera since they're deltarune addicted

[flint belfry]

fuck

[spare quartz]

i will murder you eventually

[pastel tinsel]

valid

[spare quartz]

https://www.amazon.com/TEAMGROUP-Internal-Compatible-Desktop-TM8PS7001T0C101/dp/B07GL4M3HX

[lone sky]

ngl

[flint belfry]

bro your about as bad as her when it comes to hyperfixations

[lone sky]

you are just a hater of anything me and atp like

so sybau

smh

||and yes i'm kidding||

[spare quartz]

sigh

we need 314 more microservers

[pastel tinsel]

more mouse bites

[lone sky]

@timid quartz

[pastel tinsel]

qsst logo

[lone sky]

yeah

[spare quartz]

worst subreddit ever..

CSR made..

[spare quartz]

Error parsing certificate request: asn1: structure error: tags don't match (0 vs {class:2 tag:0 length:0 isCompound:false}) {optional:false explicit:false application:false private:false defaultValue:\u003cnil\u003e tag:0xc00169efa0 stringType:0 timeType:0 set:false omitEmpty:false} @129

apparently let's encrypt's ACME backend is written in go

that's pretty cool

Finalize ... [200] {
                                                                         "status": "processing",
                                                                         "expires": "2025-05-31T04:51:15Z",
                                                                         "identifiers": [
                                                                           {
                                                                             "type": "dns",
                                                                             "value": "tls-stage.javart.zip"
                                                                           }
                                                                         ],
                                                                         "authorizations": [
                                                                           "https://acme-staging-v02.api.letsencrypt.org/acme/authz/201708814/17554242134"
                                                                         ],
                                                                         "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/201708814/24855154234"
                                                                       }

[spare quartz]

it finalized!

our acme client works!!!

[spare quartz]

there

now just gotta put it in a P12..

[spare quartz]

works on the live version too

now to add some safety mechanisms to

• renew if a previous cert was detected
• (or revoke)
• issue P12 immediately if neither specified

so many flags

rust user.... vb,l,glfsdf023423;tg/b/

https://furry.engineer/@pastthepixels/113857643523891664

Spike 🏳️‍⚧️ :drgn_verified: (@[email protected])

i present: cmdjewel, a recreation of bejeweled for the terminal

Reblogs

107

Favorites

128

▶ Play video

Furry.Engineer - Duct tape, hotfixes, and poor soldering! · Jan 19, 2025, 11:36 PM

but it is pretty cool

right...

since ive got this working... that means i need to finally put all of this in BSL

pain

first need to make KeyPairFile destroyable

best interface ever made

[lavish dove]

it is

I saw people using it earlier

sadly no arm version for switch

[lavish dove]

😭

[lavish dove]

holy shit that sounds so good

I am downloading now ragh

decompressing its zip crashed pea7z

```./cmdjewel: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.39' not found (required by ./cmdjewel)

I am not finding some obscure version of libc to play a game only my mother is skilled at

[spare quartz]

glibc 2.39 isnt obscure its just annoying

[lavish dove]

It still doesnt come built in so its now osbucre

anyways I finally have a higher half map kernel 😭

[spare quartz]

kernels were never supposed to be at the edge of virtual memory

return to using physical memory addressing

[lavish dove]

but thats annoying

I tried to do that but I would either haved to implement that table thing that I cant find anything on

or find a C compiler that supports using lea

[spare quartz]

as in the LEA instruction?

im not a c programmer

[lavish dove]

yea

Im using it in the bootstrap for the kernel

[spare quartz]

they should all support that

[lavish dove]

they dont apparently

[spare quartz]

LEA is an essential instruction

wtf

[lavish dove]

well they use lea

but they wont use it for addressing

when I compile as a relocatable object it instead makes a symbol table instead and I really dont care to load that too

plus that table also breaks having bootstrap assembly code infront of the kernel

so I'd haved to implement everything in every bootloader instead of simply having the kernel be loaded to a random place in memory then given a memory map like it can be now

[lavish dove]

its dissapointing right :sob;

[spare quartz]

im shorts binging unfortunatel

[lavish dove]

lmao

I completely blocked that stuff so I dont even start shorts binging

and it's really easy to break off the trend now that its giving me shit shorts too lol

[spare quartz]

mbmbm

wanna write another RFC for the JDK too now

realizing it doesn't have (standardized) ASN.1 parsing

unfortunately i cannot write in the formality rfcs want

[lavish dove]

reading in the formality that rfc's want kills my brain

[spare quartz]

woohoo

an issued P12

gonna try this on the production server and see if it really authenticates

[spare quartz]

now, need to make it support multiple site verification..

[timid quartz]

you should try to go sleeb

[spare quartz]

no

i need to complete this CSR

OH

i fixed the CSR

and it works on the linux server!!

even the permission fix

FOUND ISSUING ON STAGING ENDPOINT CAUSING SSL FAILURE

but i fixed that :3

(always check the -acme_directory parameter before running)

now i just need to add http-01 and dns-01

[timid quartz]

What 2 even code

[spare quartz]

acme client!!!!!!

(but actually try and make a comfortable to use x.509 parser/writer)

welp time to go shower

athst enough ACMEing for today

[spare quartz]

https://youtube.com/shorts/CcclLP6UDaM?si=juayYZ3fN-IMSqsG

[spare quartz]

OK, goodnight

[spare quartz]

jkcant sleep

must issue

521 bit certificate.

[spare quartz]

@timid quartz sooo

i was trying to reconfigure the flags on dns to ensure its memory was constant to prevent any instabilities and

i dunno how

but it's somehow at an even lower use on btop with 128 huge pages

[spare quartz]

ALPN/SNI deployed

SNI works

[spare quartz]

come sooner.....

[spare quartz]

added ACME profile support

[spare quartz]

with the save_certificate_sign_requests and tls_alpn_01_save_temporary_certificate flags

[timid quartz]

https://docs.rs/x509-parser/latest/x509_parser/ :3

[spare quartz]

but you didnt write it yourself

lame

anyways i automated our client

https://maven.javart.zip/org/bread_experts_group/acme_microserver-code/1.0.0/
https://github.com/Bread-Experts-Group/acme_microserver

now open source

Okay on bed now.

[timid quartz]

That’s the glory of having an ecosystem

[spare quartz]

And

What does it matter

[timid quartz]

Don’t have to reinvent the wheel

[spare quartz]

the JDK has an X.509 parser built in too, yes

The issue arises when constructing an X.509 certificate / CSR with the exact parameters I need

The only way to do that is

• import bouncy castle, eugh
• rely on sun.* libraries, not allowed

Or the third option

• use BSL Parser and write the ASN.1 data classes

Which is arguably the easiest out of all three

[timid quartz]

I mean sure

Within the constraints you have placed on yourself

That’s the easiest

[spare quartz]

Well it is

Objectively

[timid quartz]

But if you removed the constraints then an easier overall solution would arise

[spare quartz]

Reliance on bouncy castle is massive

And using sun.* classes is not allowed

As agreed by every JDK developer along with Oracle

There isn’t a “constraint” on myself here

just avoidance of worse options

[timid quartz]

uh what about this thing https://docs.oracle.com/javase/8/docs/api/javax/security/cert/X509Certificate.html

[spare quartz]

You cannot construct certificates with that

It is strictly for parsing X.509 data

But, if it’s worth anything, I do use it

[timid quartz]

https://github.com/hongkongkiwi/certificateutils or maybe this :3 it says it can generate CSRs

[rustic vine]

Hong Kong reference??

[spare quartz]

1 contributor… 7 months ago..

I don’t care?

[rustic vine]

Nah he the goat probably

0 bugs

[rustic vine]

😭

[spare quartz]

Additionally this has emphasis on android

And the structure is all crap

Can it even construct ASN.1 data?

Sigh

It uses bouncy castle

[rustic vine]

Why not use bouncy castle

[spare quartz]

Because it is massive and largely unimportant

I do not need dedicated CSR and X.509 classes for every possible scenario

I need these exact OIDs in a specific format

[rustic vine]

Sounds good to me

[timid quartz]

ok but if you don't include them (and the code you include doesn't either) then you won't compile it :3

[spare quartz]

?

What does this have to do with anything

[timid quartz]

makes bouncy castle a less massive requirement

because you don't use it all

[spare quartz]

No

The entire JAR of bouncy castle must be loaded for it to be used in a real application

[timid quartz]

oh ok

womp womp use bouncy castle

[spare quartz]

Compilation is barely an issue WRT JVM anyways

It’s incredibly quick

Especially since javac/kotlinc can do minimal optimizations

[spare quartz]

Shut it rustlet

Eat ramen

[timid quartz]

I will

Ramen is delicious

[spare quartz]

It is not.

[timid quartz]

so is rust once you do the first build

[spare quartz]

Who said anything about rust

Stop being queer.

[timid quartz]

it is

it's so good