That weird dude with the mission to make sure Objective-C works on every platform this planet invented.

Homepage: https://nil.im
Blog: https://blog.nil.im
GitHub: https://github.com/Midar
Matrix: @js:nil.im

Last Notes

Are any of my followers using #Nostr? How is it?

2026-02-14 13:47:37 UTC

OK, so #AI #bots have managed to bypass #Anubis - again. How much is the AI DDoS by now? So much that the Linux kernel can't handle it anymore:
nf_conntrack: nf_conntrack: table full, dropping packet
And yes, this is seconds after rebooting the VM even.
This is insane.
OK, that's it. Let's shut down the internet, there is no point anymore. AI bots have destroyed it completely, there is no point in keeping iy anymore.

2025-10-12 22:25:53 UTC

- reply

Yeah, that's true. The SQL-like queries were very nice indeed.
But the good news is that BeOS isn't dead and you can use Haiku today ;).

2025-10-12 22:22:20 UTC

- reply

You can have that today on Linux and macOS. On macOS most browsers record it by default in xattr. On Linux (and macOS) some command line tools like ofhttp record in xattr as well.

2025-06-17 13:46:04 UTC

- reply

I don’t know about mobile, so let’s exclude that from the discussion. As for desktop; what do you think is missing for full site isolation? It is forking a process per site and using a separate Linux namespaces for each site from what I remember. This is the one thing where you weaken Firefox security if you put Firefox itself into its own namespace (e.g. by using Flatpak), as namespace nesting for non-root users is not allowed by default. That is currently being worked on, though.

2025-06-17 13:40:39 UTC

- reply

This is just not true. Firefox has sandboxing for content for what, 4 years now?

2025-06-17 13:09:50 UTC

- reply

Or you could just use fastboot like a normal person 🙄… https://grapheneos.org/install/cli
I’m very glad Firefox doesn’t have this nonsense. I hope it stays this way. There’s always Chrome for those who want unnecessary bloat that doesn’t respect your privacy and security.

2024-12-02 03:10:58 UTC

AI scrapers now seem to employ botnets to scrape websites, effectively DDoSing them with multiple thousand requests per second from residential IPs all over the world. As they know they'll get banned, they randomize the user agent, using stuff like Firefox on Windows 98. Yeah, sure, the last version of Firefox on Windows 98 wouldn't even be able to do the TLS handshake.
They can still be identified by doing things no human would ever do. Like for a repository, requests every single commit as an archive. Or requesting blame on a file that nobody would ever be interested in.
In any case, has anyone found an effective way to ban this AI bullshit? I fear I need to employ some JavaScript to return the actual site contents, but that would reduce accessibility.

2024-08-28 09:09:46 UTC

@npub1kwa…e0nj Are there plans to support the Pixel 9 Pro Fold?

2024-08-22 09:47:09 UTC

- reply

Did you try -current?

2024-08-18 15:01:54 UTC

- reply

Jetzt nur noch ohne Popup, das man wegklicken muss.

2023-08-10 22:02:53 UTC

- reply

`cat /dev/scream >/dev/null` - screaming into the void.