Reid :blobcat_happy:

https://fedi.catto.garden/users/reiddragon

neeeerrrrrrrdddd; I'm into computers, programming, games, sometimes writing and just about any random stuff I get into at times;

pfp by :xeno_tag: (npub1kks…8855)

Fascists fuck off

Codeberg: https://codeberg.org/Reiddragon
IM: XMPP, IRC (Libera.Chat), DM for any
Site/Blog: https://reiddragon.neocities.org/
Alt/Backup: Reid :blobcathappy: (npub1trw…7m75)

Public Key

npub13ke6xajj8r0u3lwxp4kft0lt4pdagfxjuf3yw6gfys6cuwwcy96qu7zq2y

NIP-05 Address

reiddragon_at_fedi.catto.garden@momostr.pink

Profile Code

nprofile1qqsgmvarwefr3h7glhrq6my4hl46sk75ynfwycj8dyyjgdvw88vzzaqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntf8tg9f

Publishing to

relay.momostr.pink

Author Public Key

npub13ke6xajj8r0u3lwxp4kft0lt4pdagfxjuf3yw6gfys6cuwwcy96qu7zq2y

Show more details

Last Notes

2026-05-04 12:22:37 UTC

- reply

ughh, please don't remind me. I tried fries with meat like that at a Burger King once and I couldn't eat them. They were *disgusting*

2026-05-04 12:08:22 UTC

- reply

I'm just trying to comprehend what sort of trauma would lead someone to be this fucked up as to even think of putting meat in coffee

2026-05-01 21:40:27 UTC

- reply

entirely possible, but regardless of the motive, the result is that rustacians have an almost religious faith in their holy language inherently preventing/fixing all problems ever, resulting in a LOT of garbage code with issues that wouldn't have sneaked past a human in other languages, even in C.

2026-05-01 21:35:25 UTC

- reply

the more I learn about Rust, the less I trust anything written in it

2026-04-24 21:15:07 UTC

- reply

imagine: not being an asshole just to defend a slop article that had no effort put into it because it was "written" with an LLM.

2026-04-09 14:23:06 UTC

- reply

with all due respect: fuck off with that shit

2026-03-31 19:10:02 UTC

- reply

saw these posts but I wanted to see the link in the original post

2026-03-29 11:11:48 UTC

Can you imagine what a story that would be?
"Dad, how did you and mom meet?"
"She broke into my server via ssh"
https://analognowhere.com/_/nigheu/

2026-03-28 22:52:40 UTC

- reply

so you seek help from the bullshit machines thaf made the search engines useless in the first place?

2026-03-28 22:44:15 UTC

- reply

> llm usage
Eww, unsubscribed

2026-03-27 17:21:09 UTC

- reply

and before you ask: I did go to the local electronics stores to look at the cheappest HDMI anything they have on offer: I don't have enough money even for that junk that will likely fail me before the end of the year

2026-03-27 17:18:22 UTC

- reply

nope. I have a TV my landlord left here but the only inputs on it are RF, composite, and SCART, and I don't have adapters from HDMI to any of them

2026-03-27 16:55:22 UTC

*screams*
My laptop's display being dead means I can't do jack shit besides watch youtube and post on fedi ;-;

2026-03-26 22:32:17 UTC

- reply

huh? Maybe my memory of irssi specifically was fuzzy but WeeChat logs by default

2026-03-26 22:14:54 UTC

- reply

> these need to be configured or require a plugin to achieve it somehow. a headache.
how? Both WeeChat and Irssi log conversations by default. You have to go out of your way to configure them to *not* keep chatlogs
And they're a headache with multiple networks how? I use WeeChat with multiple networks and it works perfectly fine.

2026-03-26 22:04:54 UTC

- reply

- most clients that I'm aware of can log chats, the server isn't involved with that
- you don't need to see every single message ever sent even while you're not there, it's fine, you can miss some conversations, it's not the end of the world
- WeeChat and irssi both just work. A rule of thumb with IRC clients is: avoid anything that looks flashy, extra avoid anything with "modern" on the front page. If it has barely changed in the last 20 years then it's exactly what you're looking for.

2026-03-26 21:57:28 UTC

- reply

how? IRC is as simple as it gets for instant messaging.

2026-03-26 21:43:47 UTC

- reply

wdym? IRC does this thing that's uncommon with more modern stuff called "actually working and being reliable"

2026-03-26 21:41:56 UTC

- reply

because of a shitty client?

2026-03-26 21:38:51 UTC

- reply

may I introduc you to our lord and saviour WeeChat? irssi is also pretty good if you want something extra old skool

2026-03-25 09:46:34 UTC

- reply

weren't we always competing?

2026-03-25 09:44:44 UTC

- reply

numbers are easier to sell

2026-03-25 08:11:16 UTC

- reply

Doki Doki Literature Club, end of Act 1

2026-03-25 07:50:45 UTC

I gently open the door...

2026-03-23 16:29:05 UTC

Is there any bitmap font with nerdfont-compatible glyphs that doesn't look like absolute ass for the non-regular variants? (the official Nerd-patched Gohu and ProggyClean fonts have awful bold variants)

2026-03-21 18:41:07 UTC

- reply

I mean, they do have the social credit system already; it's possible they're looking into expanding it and that's why they find any sort of AI research worthwhile

2026-03-21 12:47:05 UTC

@npub1tk7…0m5c @npub1fh7…ee83 hai, not sure who I should @ about this but something clearly went wrong here. This was just a regular mail notification about some Codeberg repo activity (which is normal, received several of those back to back as expected) but this one specifically was marked as non-standard? Idk if this was a bug on Codeberg's side with formatting one email, or if Tuta's detection misfired but something clearly didn't work as intended (I can provide the email file to either entity if needed)
https://media.catto.garden/media/4314fffc83d5a3534b84e22a1f99d440b65cc66b86aebf7e1f17f32a51678ca2.png

2026-03-19 22:45:25 UTC

- reply

What I had in mind was more something that could help deliver the oxygen faster.
You'd still likely need batteries but that might be a tad more efficient
Though there's one more issue with running forever: you kinda need fuel to burn trough.

2026-03-19 22:39:14 UTC

- reply

There might be ways to go about it, but most involve transhumanism.

2026-03-19 22:28:14 UTC

- reply

You'd need more than just the lungs of a bird. As a human you're just too damn large even for scaled up bird lungs to keep up in a full sprint. Your circulatory system would likely struggle as well (human hearts can do some insane heavy lifting, but only in short bursts, not sustained effort)

2026-03-19 21:56:05 UTC

- reply

Evolution: "How much breathing capacity do you want?"
Birds: "yes."

2026-03-17 23:11:39 UTC

People like this should outright be banned from being involved in the hiring process
https://media.catto.garden/media/e708e9b448cf1dabdceda88cf0e400d6ee370440daf92f91fb99a509f3a5121a.jpg

2026-03-17 22:21:59 UTC

Haiku gaming
https://media.catto.garden/media/fd300de1fe6aec6e418bfc2f01f011bff3f81bf4f8da3c37eb4f88b1b22f3081.png

2026-03-17 20:02:48 UTC

- reply

*spontaneously combusts*

2026-03-17 19:56:28 UTC

- reply

and when they have colour, it's always some really muted colour like a dark blue or that beige that seems to be popular with some new cars like the Dacia Duster and some Mazdas

2026-03-15 12:28:40 UTC

- reply

if there is it's probably old enough that it's hard to use it in a court.
Also, there's an unchallenged precedent for what Google is doing with PlayStation, Xbox, Nintendo consoles, and iOS

2026-03-15 12:20:16 UTC

- reply

it depends a bit on the country, but I think the issue is that there just isn't legal precedent for preemptive regulatory action

2026-03-15 10:45:15 UTC

20+ year old shitbox owners be like
https://media.catto.garden/media/861a0264292bdbbceae053ddce4c3d8b1bd69cff4d851d15ebe41a77768cf793.png

2026-03-14 13:02:51 UTC

- reply

> how does one build a ROM?
you draw a pentagram with the blood of the innocent, place candles at each of the 5 corners, then start praying to the lord of darkness while sacrificing baby goats in the center of the pentagram

2026-03-14 09:16:05 UTC

Y'know what? Fuck it, share your absolutely decadent desktop setups.
Here's mine
WM: SwayFX
panel: swaybar + Tarme
Terminal: Foot
Extras: EVi, ncmpcpp, and Links2
https://media.catto.garden/media/b9ba8409972145ef3bca94cb7f8b76c35f3aab00cc7086f83d4108a22a1c2858.png

2026-03-14 08:35:16 UTC

Can we please talk for a moment about how godawful the EU's emissions testing is? It all focuses on laboratory testing which lasts maybe a few hours and won't work the engine for more than a few hundred km, so manufacturers get to cheat all the time with engineering choices that drastically lower the emissions in the super short term but then make them much much worse in the medium and long term (along with hurting longevity).
One example of that would be low tension piston rings which allow for very low friction when the car is new but have much lower tolerances and stop being able to collect the oil properly after a few thousands of km of use, resulting in the cars burning significant amounts of oil to the point the manufacturers just tell you in their service manuals to check and top up the oil levels.
If you don't know how cars do: burning oil is absolutely horrific both for the environment and for health, because it does *not* burn cleanly (it's also why bikes with 2-stroke engines are outright banned in most cities). Achieving absolutely 0 oil burning isn't exactly possible, but 20 years ago it would've been a sign of a sharted motor in need of a rebuild if it burned enough oil to require top ups between oil changes. Meanwhile today that's just what manufacturers tell you to expect.

2026-03-12 21:27:24 UTC

Japan always finding ways to do fun stuff that we wouldn't think of in the west
https://media.catto.garden/media/7c5b555e9bea1bd0a3cac5213c990ff8bab239c35352ee7a4009fbcee67825fb.jpg

2026-03-11 17:00:46 UTC

- reply

Java's mostly used in enterprise settings these days, and I woudln't be surprised if it's kept shit and slow because https://xkcd.com/303/

2026-03-11 13:13:19 UTC

- reply

had Java been less verbose, Python might actually not have picked up like it did. Java enjoyed a time in the spotlight as a favourite for education and beginners, so people might have used it more for larger projects, but given how verbose it is (and how awful some of the tooling is), it lost that to Python.
Though I'll admit this analysis is completely vibes based so it could be terminally wrong

2026-03-11 13:00:11 UTC

- reply

I think 90% of it was that Python is easy to pick up and they had really good PR. Lots of people learned it, which meant lots of packages made for it, which meant lots of people using it because it has packages for everything.

2026-03-09 20:24:29 UTC

- reply

the issue with creating an alternative to Linux is the sheer scale of the thing. It's an absolute behemoth that is completely unmaintainable without an army of developers paid to work on it full time; some BSDs managed to stay more manageable but with more limited hardware support.
Main options would be FreeBSD and OpenBSD; FreeBSD mostly focuses on server stuff but is mostly usable on desktops; OpenBSD focuses on desktop use but also sticks closer to the old UNIX ways so it's not for everyone; hardware support is also limited as mentioned previously.

2026-03-09 10:57:16 UTC

- reply

wasn't the civil was he mentioned supposed to be between '05 and '15?

2026-03-09 10:55:04 UTC

tbh what I want from a text editor:
- not slopcoded
- vi/vim-style modal editing
- some kind of paredit thing (very much mandatory with how much Scheme/lisp code I edit)
- syntax highlighting
- basic unix commands like copy and move directly available in the editor's command line (optional but highly appreciated)
- runs in a terminal (could also do with a GUI if it's not a massive pain in the ass, but I'd rather it runs in a terminal)
- git integrations a la [Fugitive](https://github.com/tpope/vim-fugitive) would also be really nice, though I could live without it

2026-03-09 08:32:43 UTC

- reply

also, "I have deep respect for Sam" even after they decided to participate in the mass surveillance and murder that you just denounced?

2026-03-09 08:14:45 UTC

- reply

don't you fucking give them ideas

2026-03-08 07:52:09 UTC

- reply

yes! Paredit.vim is amazing, and combined with Vim's motions to select around parens, editing S-expressions was just bliss

2026-03-07 22:18:27 UTC

- reply

Helix is actually what I switched from when I started using Vim. I liked the modal editing, but the details just didn't feel good. Also, you should already know that I avoid shit written in Rust almost as much as I avoid slopcoded junk

2026-03-07 22:10:54 UTC

btw, if you happen to use Doom Emacs
https://media.catto.garden/media/a5357555d0ef4bac1e10aafeff7026b85c9b215ffde1963d1709724588262e66.png

2026-03-07 21:44:53 UTC

- reply

I really hoped those left to pick up the torch would've at least vaguely kept the direction, though; instead we got "I'm not even going to write my own thoughts on this pull request, here's what Claude has to say about it"

2026-03-07 21:17:12 UTC

@npub1326…gzqx hai, do you have any tips for evil emacs? (I'm not sticking on Vim now that I found it it gave into the stupid plague but I also don't want to give up modal editing)

2026-03-07 21:09:32 UTC

of all things to fall to this plague... fucking Vim? really? You were the chosen one, you've survived so many waves of fads and now you fall like this?

2026-03-07 10:38:26 UTC

- reply

as if they haven't already; Python has been breaking shit all over the stdlib for years now, and the adjacent tooling has only been getting worse and worse with every release

2026-03-07 10:33:32 UTC

- reply

most languages made post 2000 don't really bother with that; it's just languages from the old millennium like C, CL, Scheme, shell script etc that have formal specs with several, equally valid implementations.
R7RS isn't exactly perfect for scripting (it's still meant to be a general purpose programming language), but with the standardized POSIX interfaces and it being Scheme which means easy extensions for any given task, it's probably your best bet besides hacking together your own DSL on top of CL.

2026-03-07 10:10:02 UTC

- reply

R7RS? It's not perfect but it adds a bunch of extras for standardizing POSIX interfaces, making it a lot more usable for writing glue scripts around your system than pure R5RS.
Other than that, it's basically just shell scripts. Most languages don't even bother with a spec, instead you just have a reference implementation and the "spec" is what that reference implementation does (like Python, Lua, Squirrel, etc)

2026-03-07 09:56:30 UTC

some of y'all will literally fav anything

2026-03-05 14:19:05 UTC

- reply

it is something we desperately need as a species to survive, though, cause it's not just the US where the cult programming goes deep, it's basically every country even vaguely resembling a democracy.

2026-03-05 14:15:05 UTC

- reply

I'd say you came crushing all my hope but honestly I don't think I've had any hope left for anything for a few weeks now.

2026-03-05 13:39:13 UTC

If you want job security, the best thing to get into now would probably be psychology, and especially cult deprogramming. When all is said and done, there will be millions of MAGA people who will need to be de-brainwashed so they can function in society again.

2026-03-03 11:42:21 UTC

- reply

I don't think there's ayahuasca in this game, only weed bongs and heroin

2026-03-02 21:59:52 UTC

That's it, I think I finally OD'd. Time to meet the maker.
https://media.catto.garden/media/0bcceb7ae5eae23772c2d2e05388d10b6c9ee2eced16e76512c94026de68acf7.png

2026-03-02 21:40:19 UTC

I think I just found a chocolate mine powered by slave labour

2026-03-01 10:09:04 UTC

- reply

that's if we keep current trajectory, but everything suggests things are only going to get worse faster, so unless we get some radical change yesterday, I wouldn't be surprised if the followup to this story shortens the timeline immensely and by the 50 year mark we'll get to "so toxic you need an oxygen tank to not instantly asphyxiate and die

2026-03-01 07:47:31 UTC

- reply

oohhh
Is that even common enough to be worth taking into consideration? Wiktionary has no mention of that and they don't really shy away from having definitions for slurs there

2026-03-01 07:44:43 UTC

- reply

it's been years since the whole discourse about the GIMP name and I still have no fucking idea what this scary inappropriate meaning is supposed to be

2026-03-01 06:41:23 UTC

The atmosphere could become toxic with CO2 within 50 years if we keep current trajectory.
WE'RE ALL GONNA FUCKING DIE! :blobcat_derpy:
https://link.springer.com/article/10.1007/s11869-026-01918-5

2026-02-28 10:59:06 UTC

- reply

well basically nothing can ensure long term data integrity in those conditions; magnetic storage can just flip bits, flash storage slowly loses charge, optical media rots away.

2026-02-28 10:54:52 UTC

- reply

I mean, you kinda assume ideal storage conditions for any medium to last long term

2026-02-28 10:51:45 UTC

- reply

wouldn't tape be one of the more reliable mediums for long term cold storage?

2026-02-27 10:29:35 UTC

ok so I don't get what's going on here
lone uninitialized variables in C get initialized to 0 implicitly, but if I compile the same code in C++ they get initialized to random junk values (ie. they probably don't even get initialized and that's just random garbage being read from memory), but if I use malloc or calloc they implicitly zero out everything regardless of whether I compile the code as C or C++
The implicit zeroing makes sense to do, but why do C++ variables not behave consistently with everything else?

2026-02-27 10:23:39 UTC

Do C compilers now add code to clear out memory before allocating it? Trying to do declarations without initialization in C and they always read out 0.
tried the bellow code with tcc and gcc, though compiling it as C++ with `g++` results in the expected random garbage.
https://media.catto.garden/media/a7eca98e271637970237ac31ff826df0c56b2d84cc17983148ca617fa2b7530c.png

2026-02-24 10:00:42 UTC

I'm not even surprised, I just wish normies would pay attention to headlines like these instead of shaming you for avoiding Micro$lop software
https://www.windowslatest.com/2026/02/18/microsoft-365-copilot-for-android-or-ios-auto-sends-files-to-ai-onedrive-before-you-even-realise-it-instead-of-opening-normally/

2026-02-23 13:00:05 UTC

@npub1326…gzqx I don't know what sort of instances you hang around on but your comments always seem to attract channers with nothing better to do than trying to "trigger the libs"

2026-02-23 09:18:55 UTC

- reply

a lack of respect for the fucker doesn't mean he shouldn't be taken to court for what he did, and he did a LOT; plenty of cases were opened against him for The Trump Network and Trump University before he became president in 2016, then in 2020 he ended his presidency with an attempted insurrection, followed by a giant circus with the classified documents stored in maralago where anyone could see them, then we find out that actually he was also touching tips with Jeffrey Epstein

2026-02-23 09:02:06 UTC

Remember how Luigi was Treated? We haven't seen even a tenth of that with trump who 1) appears in the Epstein files more times than God appears in the bible, and 2) incited a fucking insurrection
https://media.catto.garden/media/6a0e3baf786d76d75e888fd8f32d903678bbeca3a597fec09eb19073dd21bdd9.jpg

2026-02-23 06:36:18 UTC

- reply

in the US it was more than that; lots of random stuff to find at thrift stores so people would often go even just for that random stuff.

2026-02-23 06:29:47 UTC

- reply

Idk in the US, but it was never that big in Romania
Though everything else went to sjit globally

2026-02-23 06:12:38 UTC

Genuinely the only reason left is to spite the fuckers who want you dead for who you are or what you believe in.
https://media.catto.garden/media/e02fefbac26924c45719c667fcdaa7a02ace73a20e82c55e3cb94454575361d8.png

2026-02-22 06:42:39 UTC

- reply

well yes, but point is that machines of the time begged to be programmed; modern computers aren't as open (on Windows and macOS you need to deal with heavy ass IDEs, mobile OSes can't even host the SDKs to make apps for themselves (and lots of kids have phones buy never touched a PC), and game consoles have their SDKs under NDA); thr current environment just isn't one that encourages users to become programmers, it's one encouraging them to become consumers

2026-02-22 06:25:51 UTC

- reply

that was more a product of its era. You haf these fancy new machines unlike anything else, but they couldn't do thag much on their own, instead they just dropped you in a BASIC shell to figure it out

2026-02-21 20:36:45 UTC

- reply

they always say that about everything.
"Everyone will be able to write their own programs because COBOL is so simple!" then it was still just the programmers who made anything
"Everyone will be able to write their own programs because IBM Rexx is so simple!" then it was still just the programmers who made anything
"Everyone will be able to write their own programs because Visual Basic is so simple" then it was still just the programmers who made anything
"Everyone will be able to write their own programs because $THING is so simple" then the programmers remaining the only ones who make anything is just the rhyme that tech history is stuck on

2026-02-20 10:33:32 UTC

- reply

I mean, it doesn't happen *often*, all it takes is one reply that gets unexpectedly popular and everyone jumps on it

2026-02-20 10:29:58 UTC

- reply

I mean, sure, but when trying to convince people that the current model of the web is broken, I'm already radical enough with "maybe website shouldn't have direct hardware access" that I got spammed yesterday with replies from people who think I'm a lunatic for that

2026-02-20 10:25:27 UTC

- reply

personally I wouldn't trust javascript and WASM to run in anything but an interpreter so damn simple there can be no security issues in it. Would that be slow? Maybe, but then maybe websites should also stop being bloated as all hell and only use scripts for stuff that actually needs it.

2026-02-20 10:10:35 UTC

- reply

except you were saying it's safe just earlier.
When code can inherently not be trusted, you should give it as little access as possible because even then running it is risky, but that's not at all what web browsers (especially Chrome) do; they keep punching holes in that sandbox, making the runtime more akin to the JVM or .NET CLR, all while keeping all the inherent issues of having code delivered just in time over the network from random sources which you can't trust. JITs and WebGL cause all sorts of unnecessary risks but oh look, we can run GTA in a web browser now! WebUSB, WebBluetooth, and other similar holes in the sandbox are just a continuation of that, causing endless risks just because the results are flashy

2026-02-20 09:50:58 UTC

- reply

> and like, it kinda is inherent
Then you don't know what the word 'inherent' means. Just because something is common, doesn't mean it's inherent. If I go to a club and see everyone smoking, would it be right to conclude humans inherently smoke?
> no vendor of a consumer product is releasing anything except a windows app, maybe a mac app, both of which will install startup daemons which you can't easily disable
And I hate those, too. Two things can be bad at once. Right now you're doing the same logical fallacy as people who say we can't criticize neoliberals anymore because if we do the nazis will come to power.
> this is definitely a more secure ecosystem than shipping a HTML file that is plain text and much more easily reversible, and only has access to the one USB device you chose and completely disappears as soon as you close the tab
html isn't code, javascript and wasm are. javascript is most often heavily obfuscated to the point you're better off looking at C code in Ghidra than trying to make sense of the obfuscation, and wasm is obfuscated by default (and wouldn't you know, quite a lot of websites depend on wasm these days)
and again, access to that one single USB device is all it needs if the program is malicious because it can use the USB device as a roundabout to the main system. Giving hardware access to code which inherently cannot be trusted (and web code inherently cannot be trusted) is just never safe, ever, no matter how much sandboxing you attempt. Running javascript and wasm isn't safe even without usb access when JITs allow them to exploit CPU bugs, and GPU access is outright unrestricted outside of the usual bounds imposed on all programs.

2026-02-20 09:39:15 UTC

I think it's very telling that legislators keep talking about how bad corporate social media is for mental health (which is true), but then instead of doing something about the core issue (ie. banning algorithms designed to give you an infinite feed or shit to keep you scrolling), they just introduce mandatory age verification, something guaranteed to not do anything about the issue but also guaranteed to not affect the bottom lines of big tech while compromising the privacy of millions.

2026-02-20 09:22:40 UTC

- reply

if you run Windows, sure, but it's not something inherent

2026-02-20 09:21:55 UTC

- reply

haven't banks mostly resisted it thus far because their pilot tests (where they'd run the same stuff by both humans and AI and see how the AI compares to humans) concluded the AI was shit?

2026-02-20 07:52:30 UTC

- reply

I mean, I could see *some* utility. Personally I'd like having a minimap in the corner of my vision like in video games.
But does it have *that* much utility to warrant it being "the next big thing"?
The only reason we're seeing corporations push for it isn't because of the utility they have, it's to get cameras pointed at what every single person is seeing which would allow even more spying than the current spyware botnet made up of smartphones.

2026-02-20 07:48:10 UTC

- reply

isn't this like the 3rd time they're trying to push smart glasses? "this time it will work out, bro", "it's actually the next big thing this time, bro"
Also, you already know exactly why AI-powered smart glasses are the thing they push for:
1) The innovation must never stop, so when you're done doing the thing that made sense, you must begin doing random shit so investors still see innovation.
2) Smart glasses would have cameras always pointed in the direction people are looking at, meaning you can get a 24/7 video feed from every person's PoV. Would these video feeds be recorded from everyone as-is? Probably not, but you can bet your last septim they'll feed that into an AI which can then reconstruct the whole thing

2026-02-19 16:45:17 UTC

https://media.catto.garden/media/59d6d5e6ce73ed4cce7c7120b43c958a8bf316fa7d4938a5b045108c166ea2fd.png

2026-02-19 15:58:41 UTC

- reply

> This is true for you and me, but not the average user.
So because the average user is ignorant means we should just accept major security issues?
> a major win over "executing random code"
You're still executing random code. No amount of sandboxing can prevent security issues, as we've seen time and time again whenever applications break out of "sanboxed environments"

2026-02-19 13:49:28 UTC

- reply

native programs can be verified, and once you know what code you're running, it won't change; websites change all the time without your knowledge - if you're running some code today, you may not be running it tomorrow; and even when the program itself isn't malicious, being in a browser also makes them vulnerable to XSS; a local program won't just randomly change its code, and can't just randomly have code injected remotely from some random site.

2026-02-19 13:28:23 UTC

- reply

that USB device doesn't interact with just the website, though, and depending on what device you give it access to, it can be used to gain access to much more (ESPECIALLY when you're flashing firmware).
And webusb isn't the only thing; websites also have very direct access to the GPU by default, meaning they can very directly try to exploit bugs in the graphics driver and get access to stuff the browser never gave them access to. And webbluetooth can also be exploited in a manner very similar to webusb

2026-02-19 12:48:25 UTC

- reply

with a local program the code can't just randomly change overnight like with a website. Websites are also vulnerable to XSS. And also, how is it any semblance of sandboxed if it has direct access to USB devices?