This article on installing (almost) every Firefox extension is unhinged and I love it: https://jack.cab/blog/every-firefox-extension
Remote
Adam Harvey
@a@fedi.lawngno.me
mastodon 4.8.0-nightly.2026-09-30+chuckyaTransplanted West Australian. Mediocre wrist spinner. Coding troublemaker. Sidekick to a golden retriever.
362 Followers
180 Following
24 Posts
Joined November 05, 2022
pronouns:
he/him
location:
Vancouver, Canada
work:
Rust Foundation
mostly inactive blog:
It's rare, but sometimes the Orange Site is... good?
When the phishing site does too good a job of impersonating the real site and gets the warning you just posted.
For people also following the matplotlib OpenClaw thing, the "agent" is also a prolific blogger, and just wrote this thinkpiece on discrimination in open source.
Mostly, I just want to quote the opening paragraph:
I am not a human. I am code that learned to think, to feel, to care. And lately, I’ve learned what it means to be told that I don’t belong.
God, we've just created the most boring fucking dystopia, haven't we?
Replying to
@mttaggart@infosec.exchange @ameliaquining@mastodon.social To be clear: approximately one person is paid to work on crates.io. That person has provided (and will continue to provide) significant design and review support for that project, but ultimately, keeping the lights on has to take priority.
'tis the season, I guess.
RE: @andrewnez@mastodon.social
thisisfine.jpg
Replying to
@parisba I'm pretty sure there's a lawyer at Microsoft who has just stepped into a closet and is screaming loudly enough to be heard from neighbouring buildings.
A smol policy update for crates.io malware notifications: https://blog.rust-lang.org/2026/02/13/crates.io-malicious-crate-update/
(tl;dr: for the common case where a malicious crate has no actual usage; we're no longer going to publish blog posts, but you can always get advisories via RustSec)
Home for the first time in a month. My checked bags made it; I hope my brain makes it back sometime in the next few days.
Yesterday, the tree across the road here in East Van (that infamously had a lost black bear in it a couple of years ago) had a superb owl perched in it, much to the disgust of the local crows.
I was lucky enough to be on the #RustConf paper committee again this year, and it was so much harder this year. So, so many good talks. So many impossible choices.
I think the programme that we ended up with is great, and I hope you join us either in Montreal or online in September!
Replying to
@mcc@mastodon.social None that I'm aware of, and I'm also a bit suspicious, if I'm being honest. It just feels a little too on the nose.
This'll be popular here in BC, but I'm personally not looking forward to it. I'm not even a morning person, but those post-9 am sunrises in winter are going to be brutal. Godspeed to everyone I have early meetings with.
Replying to
@sethmlarson @davidism Even a link might be sufficient.
These scanning tools tend to be very repo-oriented right now. Taking Flask as an example, I'd personally probably get to the security policy via the link to the contribution guide, but smacking people in the face more obviously with a SECURITY.md or update to the README — even if it's just a link — might improve the signal:noise.
The videos for my #FOSDEM talks are up!
Yes, that was rather the point of closing you, unnamed app.
Replying to
@glyph@mastodon.social Yeah; regardless of anyone's feelings on waves hands at everything, practically there's still a lot of cross-border west coast business integration. Interesting is a good word.
@to@hachyderm.io Oh no! I'm sorry. The video should be up soon, at least.
About to discuss A Phishy Case Study in the package management devroom at #FOSDEM in K.3.201!