Seth Larson's Avatar

Seth Larson

@sethmlarson.fosstodon.org.ap.brid.gy

:python: Security, Fellow @ThePSF 🐍 Trans rights, BLM, Minnesoootan, he/him https://sethmlarson.dev [bridged from https://fosstodon.org/@sethmlarson on the fediverse by https://fed.brid.gy/ ]

34 Followers  |  1 Following  |  328 Posts  |  Joined: 01.01.0001  |  1.8688

Latest posts by sethmlarson.fosstodon.org.ap.brid.gy on Bluesky

Preview
PSF Developers in Residence The official home of the Python Programming Language

The PSF Developers-in-Residence program makes this possible, check out how the @ThePSF supports the Python ecosystem with full-time staffing:

https://www.python.org/psf/developersinresidence/

03.06.2025 21:51 β€” πŸ‘ 0    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Original post on fosstodon.org

Thanks to the work of Python Release Managers and all the Developers-in-Residence we have a coordinated #Python #security release of all versions for 5 CVEs all in one day (1 critical, 3 high, 1 medium) […]

03.06.2025 21:48 β€” πŸ‘ 3    πŸ” 8    πŸ’¬ 2    πŸ“Œ 0
Original post on mastodon.social

New article about the GBKISS LINK is live:

https://shonumi.github.io/articles/art38.html

This one examines an infrared modem released by Hudson in 1998. This enabled GB-to-PC connections and opened up the internet to the Game Boy.

Here, I detail the process of emulating its infrared […]

03.06.2025 16:22 β€” πŸ‘ 10    πŸ” 8    πŸ’¬ 1    πŸ“Œ 0
Table showing Pikmin 2 treasures, regions, and areas along with collected datetimes. Some of the treasures have been collected, some haven't yet been collected.

Table showing Pikmin 2 treasures, regions, and areas along with collected datetimes. Some of the treasures have been collected, some haven't yet been collected.

I'm collecting all 242 unique treasures in #Pikmin 2 across the three regions (US, JP, and PAL). I've created this web page which automatically updates as I collect more treasures while playing on real #GameCube hardware.

πŸ‘‰ https://sethmlarson.dev/pikmin-2-international-treasure-hoard

03.06.2025 13:32 β€” πŸ‘ 0    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0

CaitSith2, an original E-Reader hacker from the early 2000s who made most of the E-Reader tools we still use today said this about printing out dotcodes

"The other thing was that refilled <printer ink> cartridges never worked for that purpose, only brand-new ones would"

Printing these is so hard!

01.06.2025 23:24 β€” πŸ‘ 18    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Original post on fosstodon.org

I am observing #VolunteerResponsibilityAmnestyDay this Spring and published my list ahead of the date to give you a chance to reflect on your own responsibilities.

https://sethmlarson.dev/observing-volunteer-amnesty-day

Thanks to @brainwane for creating this time of intentional reflection […]

29.05.2025 19:18 β€” πŸ‘ 0    πŸ” 5    πŸ’¬ 0    πŸ“Œ 0
Original post on mastodon.social

Three key points about the CRA for Open Source maintainers:

1. mere contributors have no obligations, most maintainers have no obligations. Only maintainers that make a profit can be considered manufacturers - the outstanding question is where exactly that line is drawn. (And really, such […]

29.05.2025 20:20 β€” πŸ‘ 5    πŸ” 3    πŸ’¬ 0    πŸ“Œ 0
Original post on fosstodon.org

I am observing #VolunteerResponsibilityAmnestyDay this Spring and published my list ahead of the date to give you a chance to reflect on your own responsibilities.

https://sethmlarson.dev/observing-volunteer-amnesty-day

Thanks to @brainwane for creating this time of intentional reflection […]

29.05.2025 19:18 β€” πŸ‘ 0    πŸ” 5    πŸ’¬ 0    πŸ“Œ 0
The Who Cares Era Earlier this week, it was discovered that the _Chicago Sun-Times_ and the _Philadelphia Inquirer_ had both published an externally-produced "special supplement" that contained facts, experts, and book titles entirely made up by an AI chatbot. There's been a lot written about this (former _Chicago Reader_ editor Martha Bayne's is the best), and I don't need to rehash it all. But the thing that is most disheartening to me is how at every step along the way, nobody cared. The writer didn't care. The supplement's editors didn't care. The biz people on both sides of the sale of the supplement didn't care. The production people didn't care. And, the fact that it took _two days_ for anyone to discover this epic fuckup in print means that, ultimately, the reader didn't care either. It's so emblematic of the moment we're in, the Who Cares Era, where completely disposable things are shoddily produced for people to mostly ignore. AI is, of course, at the center of this moment. It's a mediocrity machine by default, attempting to bend everything it touches toward a mathematical average. Using extraordinary amounts of resources, it has the ability to create something _good enough_ , a squint-and-it-looks-right simulacrum of normality. If you don't care, it's miraculous. If you do, the illusion falls apart pretty quickly. The fact that the userbase for AI chatbots has exploded exponentially demonstrates that _good enough_ is, in fact, good enough for most people. Because most people don't care. (It's worth pointing out that I'm not a full-throated hater and know peopleβ€”coders, mostlyβ€”who work with AI that _do_ care and have used it to make real, meaningful things. Most people, however, use it quickly and thoughtlessly to make more mediocrity.) It's easy to blame this all on AI, but it's not just that. Last year I was deep in negotiations with a big-budget podcast production company. We started talking about making a deeply reported, limited-run show about the concept of living in a multiverse that I was (and still am) very excited about. But over time, our discussion kept getting dumbed down and dumbed down until finally the show wasn't about the multiverse at all but instead had transformed into a daily chat show about the Internet, which everyone was trying to make back then. Discussions fell apart. Looking back, it feels like a little microcosm of everything right now: Over the course of two months, we went from something smart that would demand a listener's attention in a way that was challenging and new to something that sounded like every other thing: some dude talking to some other dude about apps that some third dude would half-listen-to at 2x speed while texting a fourth dude about plans for later. Hanif Abdurraqib, in one of his excellent Instagram mini-essays the other week, wrote about the rise of content that's designed to be consumed while doing something else. In Hanif's case, he was writing about _Time Machine_, his incredible 90 minute deep dive into The Fugees' seminal album _The Score_. Released in 2021, Hanif marveled at the budget, time, and effort that went into crafting the two-part 90 minute podcast and how, today, there's no way it would have happened. He's right. Nobody's funding that kind of work right now, because nobody cares. (It's worth pointing out that Hanif wrote this using Stories, a system that erased it 24 hours later. Another victim of the Who Cares Era.) Of course we're all victims of the biggest perpetrators of this uncaring era, as the Trump administration declares "Who Cares?" to vast swaths of the federal government, to public health, to immigrant families, to college students, to you, to me. As Elon Musk's DOGE rats gnaw their way through federal agencies, not caring is their guiding light. They cut indiscriminately, a smug grin on their faces. That they believe they can replace government workersβ€”people who care an _extraordinary_ amount about their arcane corner of the bureaucracyβ€”with hastily-written AI code is another defining characteristic of right now. I keep coming back to the word "disheartening," because it all really is. Without getting into too many specifics, I recently was involved in reviewing hundreds of applications for something. Over the course of reviewing, I was struck by the nearly-identical phrasing that threaded through dozens of the applications. It was eerie at first, like seeing a shadow in the distance, then frustrating, and ultimately completely disheartening: It was AI. For whatever their reasons, a bunch of people had used a chatbot to help write their answers to questions that asked them to draw from their own, unique, personal experience. They had fed their resumes or their personal websites or their actual stories and experiences into the machine, and it had filled in the blanks, Mad Libs-style. I felt crushed. Until. Until I read an application written entirely by a person. And then another. And another. They _glowed_ with delight and joy and sadness and with the unexpected at every turn. They were human. They were written by people that cared. In the Who Cares Era, the most radical thing you can do is care. In a moment where machines churn out mediocrity, make something yourself. Make it imperfect. Make it rough. Just make it. At a time where the government's uncaring boot is pressing down on all of our necks, the best way to fight back is to care. Care loudly. Tell others. Get going. As the culture of the Who Cares Era grinds towards the lowest common denominator, support those that are making real things. Listen to something with your full attention. Watch something with your phone in the other room. Read an actual paper magazine or a book. Be yourself. Be imperfect. Be human. Care.

giving a shit: underrated

https://dansinker.com/posts/2025-05-23-who-cares/

28.05.2025 16:48 β€” πŸ‘ 0    πŸ” 4    πŸ’¬ 0    πŸ“Œ 0
The instruction manual page for Bomb Hunter. Still a work in progress.

The instruction manual page for Bomb Hunter. Still a work in progress.

Finally getting around to updating the long neglected website. The front page has been redone, and now I'm giving each game their instruction manual pages. Here's Bomb Hunter's page so far.

28.05.2025 14:39 β€” πŸ‘ 32    πŸ” 2    πŸ’¬ 2    πŸ“Œ 0
Original post on fosstodon.org

An awesome development in the #GameCube hacking community: an open source reimplementation of the WaveBird protocol.

https://github.com/loopj/wavephoenix

There are tons of WaveBird controllers with no corresponding receiver out there on the market. This makes me want to collect a 4-set of […]

27.05.2025 16:02 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
NTSC disk is all lime green where the JP disk is yellow and dark green in two halves.

NTSC disk is all lime green where the JP disk is yellow and dark green in two halves.

15/42 GameCube disks archived. I finally opened my Japanese copy of Pikmin I bought from "Super Potato" a year ago and the disk is so much more visually appealing than the NTSC copy!

26.05.2025 15:49 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Now that my #GameCube #FlippyDrive is installed and operational I'm slowly using their backup tool to archive my game collection. There's 42 unique titles, ~40 minutes per archive operation so... see you 28 hours later! 😬

25.05.2025 13:28 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Post image Post image Post image Post image

What have they done to my boy? #FlippyDrive installation day! Blog post will follow, especially for the Ethernet adapter which isn't documented officially yet #GameCube

24.05.2025 17:01 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Original post on mas.to

I don't think it's possible to be where we are in #uspol (and in the global authoritarian slide) without our information ecosystems being such a mess.

There's a ton of work to do on the distribution side of the problem, but also on the info-making side: Even great newsrooms aren't built to make […]

23.05.2025 17:28 β€” πŸ‘ 1    πŸ” 28    πŸ’¬ 2    πŸ“Œ 0
Original post on fosstodon.org

Macho Nacho published a video today about the new VMU Pro (Dreamcast) from the same folks that made the MemCard Pro GC. This reminds me how excited I am to finally test out and build something for the MemCard Pro GC once I install my FlippyDrives... I've been sitting on this device for quite a […]

23.05.2025 17:06 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

While I was away at #PyConUS my two #GameCube FlippyDrives were delivered... 8 player Double-Dash is getting closer πŸ‘€

22.05.2025 12:29 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Original post on fosstodon.org

Apparently the only way @signalapp can opt-out of #Windows #Recall exposing all of your private messages is by setting a "this application is DRM" flag. What a lovely and totally thought-out feature Recall is shaping up to be after a year of "iterating" […]

21.05.2025 17:45 β€” πŸ‘ 0    πŸ” 3    πŸ’¬ 0    πŸ“Œ 0
Preview
Allow us to block Copilot-generated issues (and PRs) from our own repositories Β· community Β· Discussion #159749 Select Topic Area Product Feedback Feature Area Issues Body I find the following two news items on the front page: https://github.blog/changelog/2025-05-19-creating-issues-with-copilot-on-github-co...

Allow us to block Copilot-generated issues (and PRs) from our own repositories on #github

https://github.com/orgs/community/discussions/159749

20.05.2025 07:03 β€” πŸ‘ 28    πŸ” 80    πŸ’¬ 4    πŸ“Œ 0
Preview
Volunteer Responsibility Amnesty Day Volunteer Responsibility Amnesty Day

We're about 1 month away from #VolunteerAmnestyDay on June 21st. Time to take an inventory of your volunteer responsibilities:

https://www.volunteeramnestyday.net

20.05.2025 12:55 β€” πŸ‘ 0    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Preview
Phantom Dependencies: is your requirements.txt haunted? Did you know there’s more than Python code included in Python packages? This might be a surprise, especially if you’ve … Presented by: Seth Michael Larson

My #PyConUS session is later today, let's find out together if your requirements.txt is haunted? πŸ‘»

Join the haunt in Ballroom BC at 1:45PM, don't be scared!

https://us.pycon.org/2025/schedule/presentation/14/

#PyConUS #PyCon #PyConUS2025 #Python #Security

18.05.2025 14:37 β€” πŸ‘ 0    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
William Woodruff giving a talk "Attestations a new generation of signatures on PyPI"

William Woodruff giving a talk "Attestations a new generation of signatures on PyPI"

I attest that this will be a good talk. Come verify!

#PyCon #PyConUS #PyConUS2025

17.05.2025 19:15 β€” πŸ‘ 0    πŸ” 2    πŸ’¬ 0    πŸ“Œ 0
A mirror surrounded by the words "You are the future of Python packaging"

A mirror surrounded by the words "You are the future of Python packaging"

Whoever created this, thank you. This captures the energy of open source perfectly. If you see a problem you can be the one to fix it, and that's amazing! πŸ’ͺ

#PyCon #PyConUS #PyConUS2025

17.05.2025 18:20 β€” πŸ‘ 19    πŸ” 12    πŸ’¬ 1    πŸ“Œ 0
Original post on fosstodon.org

At #PyConUS and wondering what to do after the plenary sessions? Interested in #opensource #security?

Dustin Ingram and I are hosting a supply-chain security open space with many talks! Come hang out and meet fellow security-minded Pythonistas in Room 321 at 10:30 […]

17.05.2025 13:11 β€” πŸ‘ 1    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Post image

Learning about bees from @dmirth (where is @freakboy3742?)

#PyCon #PyConUS #PyConUS2025

16.05.2025 20:35 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
Post image

Cory Doctorow at PyCon US

#PyCon #PyConUS #PyConUS2025

16.05.2025 14:02 β€” πŸ‘ 1    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Seth jumping like a plumber at a question mark block with a pixelated retro gaming style.

Seth jumping like a plumber at a question mark block with a pixelated retro gaming style.

I'm at the @ThePSF booth RIGHT NOW! Come and meet me! :)

#PyCon #PyConUS #PyConUS2025

15.05.2025 21:05 β€” πŸ‘ 3    πŸ” 1    πŸ’¬ 0    πŸ“Œ 0
Seth and Mike hacking in the PyCon rooftop track

Seth and Mike hacking in the PyCon rooftop track

Security is happening, @miketheman at #PyConUS

#PyCon #PyConUS #PyConUS2025

15.05.2025 17:47 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

@sethmlarson.fosstodon.org.ap.brid.gy is following 1 prominent accounts