Nuke 🌄

crates.io: Rust Package Registry

crates.io now supports GitLab for Trusted Publishing — one more step towards "less dependence on GitHub for everything" 🎉 crates.io/docs/trusted...

Terminal window showing cargo-nextest running a Rust test with rust-gdb debugger. The test 'test_argument_parsing' from cargo-nextest is being executed. GDB (GNU Debugger) version 15.0.50.20240403 starts up, displaying copyright information, GPL v3+ license notice, and configuration details for x86_64-linux-gnu. The debugger is reading symbols from the cargo_nextest binary in the target/debug/deps directory. The prompt shows '(gdb)' ready for debugging commands.

Just released cargo-nextest 0.9.113, with support for a long-requested feature that I realized I needed all of a sudden: debugger support! Run individual tests under gdb, lldb, WinDbg, or Visual Studio Code via CodeLLDB! This preserves all the environment setup done by nextest.

YouTube video by Benn Jordan The Cameras Tracking You Are A Security Nightmare

New feature is up:
The Cameras Tracking You Are A Security Nightmare
youtu.be/uB0gr7Fh6lY

I've done a 180 on supply chain security - I used to think it was mostly a theoretical problem: between communities of mostly good actors, many eyes to review, good policies for announcing vulns and removing crates, and basic due diligence, issues would be found and addressed before doing damage

rust-unofficial / awesome-rust A curated list of Rust code and resources.

rust-unofficial / awesome-rust: A curated list of Rust code and resources. ★53386 https://github.com/rust-unofficial/awesome-rust

Atlas of Surveillance Documenting Police Tech in Our Communities with Open Source Research

Alongside armored vehicles, local police are getting surveillance technology with help from the federal government. Learn what tech law enforcement have in your area with EFF's Atlas of Surveillance, where we’ve documented thousands of examples: atlasofsurveillance.org/

Technology like Flock and Ring doesn’t make people safer, it just subjects them to a round-the-clock warrantless digital dragnet. “Privacy isn’t dangerous, but giving privacy up for a false sense of security is very dangerous,” EFF’s Jennifer Pinsof told @CNBC.com. www.cnbc.com/2025/10/16/...

Street Level Surveillance EFF Presents: A Field Guide to Police Surveillance

Learn about the spying technologies police are deploying in our communities at EFF's Street-Level Surveillance hub.
www.eff.org/sls

asking people who hates Windows all raise hands asking people who would stop using it and switch to Linux... No one.

But we can help! Those who haven't tried Linux yet just need opportunities and willing people to (gently) pressure and be overjoyed to help when they are willing to try things.

In the #denver #colorado area? Join me for the end of Windows 10 event tomorrow
luma.com/rndz6ti5?tk=...

Blocking Access to Harmful Content Will Not Protect Children Online, The UK is having a moment. In late July, new rules took effect that require all online services available in the UK to assess whether they host content considered harmful to children, and if so,

When platforms are forced to block “anything that might harm kids,” the result is overreach. A real rights-respecting solution to keeping people safe online is one that's built on user control, privacy, and smart design, not censorship. www.eff.org/deeplinks/2...

LA County moves to limit license plate data sharing amid ICE raids State law prohibits local police from assisting federal immigration enforcement in California

ALPRs can still be abused given the sheer volume of data collected and the lack of transparency in who can request it. “What we actually need, if we want these laws to mean something, are robust oversight measures,” EFF’s @maassive.bsky.social told Spectrum News 1.
spectrumnews1.com/ca/southern...

Voices grow louder in debate over license-plate reader technology Three dozen speakers opposed to Flock license-plate readers spoke at a recent Eugene City Council meeting, while Eugene police have touted use of the technology in making arrests.

It’s unsurprising that Eugene police have been crediting all their successes to license-plate readers, EFF’s @tsnvaa.bsky.social told @lookout-es.bsky.social; police often do that when Flock contracts are the subject of public outrage. “That is play-for-play from the playbook.”

Not so secret: X’s new encrypted chat feature puts users at risk, experts say X's new XChat feature does not remove sensitive metadata from images, which could lead to the exposure of GPS coordinates.

“Social media sites and chat apps normally strip metadata by default,” which protects privacy, EFF’s Jacob Hoffman-Andrews told Straight Arrow News. ”If XChat is failing to strip metadata, it’s putting its users at risk.” san.com/cc/not-so-s...

Unfortunately, Bluesky is unavailable in Mississippi right now, due to a new state law that requires age verification for all users.

While intended for child safety, we think this law poses broader challenges & creates significant barriers that limit free speech & harm smaller platforms like ours.

Controversial Surveillance Startup Flock Adds AI to Police Tech Flock Safety said Thursday it will add artificial intelligence to its surveillance products used by US police departments, an update the company said will help make society safer and that privacy advo...

Surveillance tech companies like Flock “are serving their investors first, their customers second and members of the public third,” EFF’s @maassive.bsky.social told @bloomberg.com. “Their primary goal is not to make it safer, it’s to make money.”

helix-editor / helix A post-modern modal text editor.

helix-editor / helix: A post-modern modal text editor. ★39171 https://github.com/helix-editor/helix

By default, when you select the write:packages scope for your personal access token (classic) in the user interface, the repo scope will also be selected. The repo scope offers unnecessary and broad access, which we recommend you avoid using for GitHub Actions workflows in particular. For more information, see Secure use reference. As a workaround, you can select just the write:packages scope for your personal access token (classic) in the user interface with this url: https://github.com/settings/tokens/new?scopes=write:packages.

🤦 to log into github's docker registry, you need a "classic" API token. But when you check "write:packages" it enables a bunch of other permissions. You can't uncheck those. But you can use a special URL.

Screams "we have a security team with no agency" imho

docs.github.com/en/packages/...

You Shouldn’t Have to Make Your Social Media Public to Get a Visa The Trump administration is continuing its dangerous push to surveil and suppress foreign students’ social media activity. The State Department recently announced an unprecedented new requirement that...

The Trump administration’s new policy requiring applicants for student and exchange visas to set social media accounts to “public” for government review is a dangerous expansion of existing social media collection efforts. This policy gravely chills free expression.

Comic. The Three Types of Unsolved Physics Problem (First panel) Vague. PERSON [next to curved diagram] What is the nature of time in quantum gravity? Is it a background parameter, a dynamic aspect of spacetime, or an emergent phenomenon? (Second panel) Precise. PERSON 2 with short hair [device with equation below: 71Ga + νe → 71Ge + e- .] Why does the *S.A.G.E.* Gallium Neutrino Capture Experiment produce only 75% as much germanium as predicted? (Third panel) Cursed. PERSON 3 with white hat [rectangular block with hairs growing out of it labeled Zinc Whiskers] Why does some metal randomly grow hairs? It keeps causing short circuits and we have no idea what’s going on. OFF-PANEL: Is this a joke? PERSON 3: No! Please help!

Unsolved Physics Problems

xkcd.com/3115/

I realize now an important missed detail of my LLM post: no Rust programmer needs an LLM to generate code; they can just post Go code anywhere on the Internet and say "I don't think this could be expressed better in Rust".

crates.io: development update | Rust Blog Empowering everyone to build reliable and efficient software.

Trusted publishing on crates.io! 🎉

#rustlang

Header text: "HEY YOU! YES YOU! TAKE THIS SHIT OUT OF LINKS!" This is followed by a couple example urls, with a red square highlighting the sections with source identifiers. The rest of the text is as follows: Source identifiers are used to track your activity on a site. Where you came from, what device you use, and even who you talk to. Whether it's written clearly in the url or tied to a random string of characters, it's assigned to your activity. When you send a link containing a source identifier to somebody and they click it, it signals to the website that you two are connected. And that data goes right back to the website operators, and thus their advertisers. Whenever you select "share" or "copy link" on a social app or website, it creates a link like this. If you give even the smallest shit about online privacy, it's important to remove them. Everything after the "?" symbol can be removed without issue, especially sections starting with "si=" or "utm_source="

I saw an infographic a couple years ago about how to remove source identifiers from links and why it's important, but I can't find it again and too many people I know are sending me links with them so here's an infographic straight from the oven

What do blinking LEDs, lang tooling, & billion-user platforms have in common? They all run better on Rust.

#rustconf is where Rustaceans come together to learn, teach, & push boundaries.

🧠 Inspiring talks
🛠️ Hands-on workshops
💬 Deep hallway convos

Sept 2-5, 2025 Seattle

ti.to/rustconf/2025

When will Colorado’s new battery collection and recovery system start? Here’s a primer.  Battery recycling and reuse for all Coloradans is on the way, but will take a few more years to fully implement.

When will Colorado’s new battery collection and recovery system start? Here’s a primer.

New video series for homelab beginners! 🎥 Part 1 is all about Proxmox + Tailscale: see how to spin up VMs on Proxmox and secure them with your own private Tailscale network. No more port forwarding nightmares and only accessible by you. 🙌 youtu.be/zngSuqCM4d8 #Homelab

Coinbase logo  4/12/2025 Update to the Coinbase User Agreement We are emailing you about an important upcoming update to the Coinbase User Agreement. This update will revise our Arbitration Agreement with you. We made these updates to streamline the process for resolving disputes. You can read the entire agreement here. The revised terms are in sections 9.9, 9.10 and Appendix 6. These terms apply only to disputes that you or we initiate after May 15, 2025. The current terms will continue to apply until May 15. Please make sure you read the updated User Agreement. Thank you for being part of the crypto economy! Team Coinbase

9.9. Class, Collective, Representative, and Mass Action Waiver and Jury Trial Waiver. You and Coinbase agree that, except as specified in the Batch Arbitration Provision set forth above, each of us may bring claims against the other only on an individual basis and not on a class, representative, or collective basis or as part of a mass action (such as a mass arbitration), and the parties hereby waive all rights to bring or to participate in such actions in arbitration or in court to the maximum extent permitted by applicable law. This provision does not prevent you or Coinbase from participating in a class-wide settlement of claims. YOU AND WE AGREE TO WAIVE OUR RIGHTS TO A JURY TRIAL. To the extent that any Dispute proceeds in court, and to the maximum extent permitted by applicable law, you and we agree to waive any right to a jury trial and have such matter resolved by a judge (also known as a bench trial). 9.10 Forum Selection. Unless you and Coinbase agree otherwise, to the maxim

In April, Coinbase announced changes to its user agreement that added two clauses limiting class action lawsuits and requiring lawsuits to be filed in New York. The changes apply to disputes initiated after May 15.

On May 14, Coinbase disclosed a data breach.

Day 1 of the RustWeek conference is a wrap 🎊 🦀 🎊

Thanks to everyone for attending & thanks to our sponsors.
See you all tomorrow!

#rustweek #rustlang

#bubble #windsurf #cursor #ide #microsoft #ai

Use match exhaustively—even when you're “sure” you covered all cases.
The compiler’s insistence? It’s your safety net.

Enums + match = ✨ fearless refactoring.

#rustlang #programming #buildinpublic

Announcing the Local-First Landscape

A comprehensive guide to help developers choose the right tools for building local-first applications.

localfirst.fm/landscape