Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.
But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.
There is a guy named Arthur David Olson who maintains a small database of all the time zones in the world, including things like leap seconds and such. It’s used by everybody and it is updated several times a year. See here:
If we could all just stop making changes to time zones, that would make my job very slightly easier.
Perhaps we’ll move to UTC+10¼, and then move forward 45 minutes in the summer.
If the day number is a prime, then we’ll go back π hours.
Hope that will help!
I bet he’s paid nothing to do it. Then one day, when a timing attack happens that can be traced to the DB, some knobhead CTOs and tech influencers will start talking about “securing the supply chain”. They’ll want other such bullshit and responsibilities to be shoved unto volunteers.
Two quotes come to mind “Fuck you, pay me” and “Open source maintainers owe you nothing”.
It would make sooo much more sense for the ISO to set something up, and make governments each responsible for keeping it updated, since they’re the ones doing the changing.
Require all participants to amend their law/regulations, so there’s a note to prompt whoever is in power and changes it next.
I’m sure some places would still neglect to do it… Haha
It has organizational support from ICANN, so it’s not done in total isolation.
Oh neato, then all good!
It’s also worth pointing out that this was sued in a copyright lawsuit some time ago. The wikipedia article mentions it, but here’s the slashdot discussion if you want to feel like stepping into a time machine: https://m.slashdot.org/story/158778
It caused a momentary panic when everyone realized that this thing runs the system clocks for everything everywhere, and if it got taken down by a copyright suit it would be disastrous for, well, everybody.
Wasn’t there also very recently a whole thing about the single guy who maintains the NTP spec threatened to retire so he could get a “real” job, which caused a gigantic internet-wide panic as pretty much everything we do relies on computer’s clocks being perfectly synced?
Sqlite isn’t quite one person, but it is a very small team and is extremely widely used. https://www.sqlite.org/mostdeployed.html
And their website is quirky
As is their code of ethics.
Have something to share?
Lmao yo wtf
Jesus Christ
I see you like the first rule.
SQLite devs are trolls to their suppliers that’s great 😂
They said they’re quite serious about it, actually. While it’s quirky, I don’t see anything wrong with it. It’s… weirdly charming? I’d never use anything like it, but it’s fun to see something different amidst a world of copy-pasted contributor covenants.
I mean, to make such a point that the only point of the page was simply to satisfy a requirement of someone else’s volition and yet creating that page and apparently saying what you’re saying—seems like there’s something misaligning here :P
Also I no doubt that they hate people who talk too much and hate making jokes — there’s some seriously unserious stuff inside of the rules they posted. They are serious folks who have zero tolerance for laughter apparently :D
My headcanon is they’re a bunch of people who have a super religious supplier with strict checkbox rules and they are fucking with them.
“be not drowsy”
It looks pretty decent to me, at least on mobile. Definitely better than 95% of websites.
Damn, I wanted to mention sqlite.
It’s not too late. Mention it!
Curl comes to mind. Libcurl is at the foundation of almost all networking.
And they still get emails from randos when some program that uses curl doesn’t work (the Readme is top notch).
I cannot for the life of me find what you’re referencing. I only remember the
sqlite/etilqsfiasco with McAfee.https://github.com/mackyle/sqlite/blob/a009acaca1fe25d909d8b5180c0120af1abc2b82/src/os.h#L56-L79
https://bagder.github.io/emails/ has the email collection.
Thanks for sharing these gems. I can almost feel the exasperation in some of the emails and their replies.
Thank you!! I knew I must have been missing something.
Here’s an example from NASA
curl is most definitely not developed solely by one person though, it has thousands of contributors. in fact, there is so much red tape around curl that you can’t even discuss making a change to it without first writing an RFC and having it approved by a committee.
Libcurl is at the foundation of almost all networking.
That’s not remotely true, but it is nevertheless outstanding work and very much deserving of recognition and support.
NTP is the one that comes to mind for me.
Basically every device uses it and until fairly recently was maintained by a single person
Network Time Protocol? Cool, didn’t know that!
Though OpenNTPD, Chrony or timesyncd if you’re on Systemd, are usually better suited.
So they have a donation/support page?
I saw a post earlier about Empress returning to game cracking. For modern video games that use Denuvo DRM, she’s the only person who can really crack it, as far as I know. Singlehandedly holding up the AAA game piracy scene.
She is kind of a shithead tbf and fwiw it’s more like she’s the only person who is willing to do it. granted cracking denuvo is something that is extremely difficult and only a small subset of people can do but it’s not like she’s literally the only person on the planet who can. There was that guy who would just release the yearly update of football manager, for one.
It’s far more likely the people who have that skill set just don’t really want to bother with cracking videogames and the potential legal issues that come with distributing them online.
True, but being the only person willing to do something is kind of laudable in it’s own right. Like all of the open source projects relied upon by millions that are sometimes developed primarily by one person in their free time.
but my (not really my) conspiracy theory for this is the opposite of open source: when someone is good at cracking games companies like denuvo track them down and offer them jobs to harden their product and take another cracker out of the scene. like I bet denuvo is just filled with nerds that spent their teenage years in sketchy irc rooms with handles like -DooMSlAyEr- and used to actually be members of razor1911 before they realized they could get game companies to pay them 200k a year
It’s not a conspiracy theory. It’s exactly what Malus did and why it’s harder to root iPhones nowadays (but the EU is seeing to that by forcing them to start opening up their walled garden).
Can’t remember where I read it, but I think it’s the dude who started AsahiLinux that shared part of his story in the scene. And a few dudes were tracked down and had the choice between a lawsuit and employment. Makes the decision pretty easy.
Doesn’t help that they did their thing on Github and other public platforms instead of I2P or something.
I ain’t gotta laud that transphobic fascist for shit
In other words, the Scene is Dead
I can’t help but laugh at how batshit crazy she is. Didn’t she write a rap at some point??
I’ll never not be convinced that she’s on a fair amount of meth and/or crack.
Writing poetry => meth + crack???
Not for most people no, but Empress? I will believe it straight away.
You should read the rap lol.
It was somewhat weird waiting for the HP release on her TG channel.
Like I’ve seen my fair share of terf transphobes, but she’s honestly best described as a hater.
There were so many rants.
But like with Harry Potter, I like to separate the artist from the art.
I’m surprised that no one seems to have brought up curl, which is maintained by Daniel Stenberg who is Just Some Guy™
Eh, bagder is more than “just some guy” to a lot of people! To me he’s kinda been my tech idol for 20 years lol, he also was a core part of building Rockbox (open source firmware for MP3 players) which was the first open source project I got seriously involved in as a kid ☺️
“Just some guy” doesn’t mean they aren’t amazing. I would argue the opposite. It just means they didn’t use their abilities to become rich and famous like some other assholes. They’re almost certainly more capable than them, not less.
I think that would be a great situation to be in.
You have created a cool thing a lot of people use, by being good at something. You’ve done something.
Also, people have no idea who you are. Nobody is digging through your trash, harassing the people you love, taking pictures of you wherever you go including on your bad hair days, etc. You’re just some guy.
Fair point! I think that’s part of why I admire him, humble greatness
I second Rockbox here, it’s fucking great.
Holy shit, I remember Rockbox… Big time nostalgia on that one!
Holy shit Rockbox was amazing. I might still be subscribed to the mailing list. I used that on a few different MP3 players as a kid. I had no idea. Fuck I am old.
Edit: For a list of what he has worked on - https://daniel.haxx.se/opensource.html
I mean, it was either Richard Stallman or Dennis Ritchie that created grep in an evening so that a buddy of his could do research on volumes of text that wouldn’t fit in the RAM of a PDP-11 (or similar machine. I’m telling this story from memory). It’s designed to do what you would do with the ancient text editor ed using the commands Global, Regular Expression, and Print. g re p. grep. Probably the most important piece of software ever written in a couple hours.
Relevant, for those interested in the history of grep. Computerphile
That’s actually the video I was retelling from memory.
I’m telling this story from memory
pun intended? ;D
Wikipedia credits it to Ken Thompson, PDP-11 to me implies early Unix.
It’s also, in my opinion, the most verb-able of all *NIX commands.
I don’t know, rm being short for “remove” is very verbaceous.
Oh go fsck yourself (maybe that works better written…).
Yeah I’ve told someone to grep something despite knowing they had a windows server
Original grep was pretty much a wrapper around sed (or actually maybe ed, I don’t remember). That’s why it’s called g/re/p, which is the sed command to do the same thing.
TIL
I believe you’re thinking of ed, and yes, grep was made out of ed. I remember reading about a university professor who, if memory serves, gave his students the code for ed and told them to turn it into (basically) grep. Said that no one ever managed, despite having more time than the original took in total. That’s not to say I think this was fair or cool of the professor, it’s just an interesting tale.
If he hadn’t written it someone else would have. Searching through text is an obvious thing to want to do.
but thank fuck specifically he has cos now it’s a brilliant piece of software xD
And seems easy until you try to implement it yourself from scratch before most of us here were conscious of their workd
Based on my cheatsheet, GNU Coreutils, sed, awk, ImageMagick, exiftool, jdupes, rsync, jq, par2, parallel, tar and xz utils are examples of commands that I frequently use but whose developers I don’t believe receive any significant cashflow despite the huge benefit they provide to software developers. The last one was basically taken over in by a nation-state hacking team until the subtle backdoor for OpenSSH was found in 2024-03 by some Microsoft guy not doing his assigned job.
And those are only fully packaged user-facing software.
I’d guess almost all of the Rust code for low level hardware access is maintained by a single person. Most of them once joined forces and created a standard, it had 4 developers last time I checked. The only usable cryptography library for C# has a single developer, and while on crypto, that meme got widespread because of OpenSSL, that had a single developer who spent most of his time on OpenSSH and other BSD user-facing software.
Also, while we are on crypto, the modern algorithms were all created by a single researcher, that got famous for a work on how to decide if you can trust a crypto algorithm. Almost everybody uses his code.
Anyway, that meme first appeared because of Javascript, when a developer removed his library (with ~10 lines of code) from the language’s repository and almost every Javascript software broke.
I heard about that last one on a podcast and it was the first thing I thought of when I saw this post. Genuinely interesting story (if you’re into that sort of thing). The pod was saying how it’s both a flaw of open source that it could happen that way and an advantage because it was discoverable due to the fact that the code is open source.
Which podcast? Sounds like something I’d be interested in listening to
Also replied to another comment, sounds like this one here: https://opensourcesecurity.io/2024/04/01/xz-bonus-spectacular-episode/
Do you have a link to the podcast?
Sounds like the open source security podcast. Specifically this episode: https://opensourcesecurity.io/2024/04/01/xz-bonus-spectacular-episode/
Kurt and Josh are great, one of my favourites.
remember heartbleed?
Runk means masturbation in Icelandic so that adds another layer of hilarity to this
Same in Swedish
I’m from the west coast of Canada, a euphemism for jerking off where/when I grew up is “pulling the pud.” Moving to the UK had some funny bits…like Christmas Pud…as in pudding(dessert). Pronounced slightly different, but my inner 6 year old had a laugh anyway.
I’ve heard “shaking hands with the unemployed”.
https://www.etymonline.com/word/pudendum
It’s a more general English phrase. Could come up with a good insult for transphobes with this though. “Pud CHUDs?”
Well…that’s kinda disappointing 😞.
I think we can workshop something out of Pud for transphobes. But it’s going to have to be tomorrow for me.
Well, what is it?
If I’m remembering correctly, this phrase was immortalized in a Primus track at one point. There’s a weird, short track (or maybe an intro to a longer song?) on “Sailing the Seas of Cheese” that’s just one guy singing along with running water, and as I remember them, the lyrics are: “As I stand here in the shower, singing opera and such/pondering the possibility that I pull the pud too much/there’s a scent that fills the air; is it flatus? just a touch/and it makes me think of you.”
Which apparently is still in my brain, even though I didn’t think I’ve listened to that album since the 90’s. My brain is weirdly prone to storing old audio, though.
God…Primus is such a great band. I’ll have to dig out my albums and have a listen again.
Wasn’t the phrase supposed to be “Primus sucks”? I seem to remember that being a self-identification thing for fans back in the day.
That does ring a bell. I wouldn’t say I was a fan, I bought a few of their albums, and enjoyed them, but idk if I’d be able to name one of their albums or songs…
deleted by creator
I nominate Paul Eggert and Arthur Olson before him, for the tz database, which we all depend upon whenever the time at which something happens (or did or will happen) matters.
Edit: Tom Scott touches on the subject here.
When the US came close to going on permanent daylight savings time there were interesting discussions there.
The guy that runs Rufus.
Paul Eggart is the primary maintainer for tzdb, and has been for the past 20 years.
Tzdb is the database that maintains all of the information about timezones, timezone changes, leap whatever’s and everything else. It’s present on just about every computer on the planet and plays an important role in making sure all of the things do time correctly.If he gets hit by a bus, ICANN is responsible for finding someone else to maintain the list.
Sqlite is the most widely used database engine, and is primarily developed by a small handful of people.
ImageMagick is probably the most iconic example. Primarily developed by John Cristy since 1987, it’s used in a hilarious number of places for basic image operations. When a security bug was found in it a bit ago, basically every server needed to be patched because they all do something with images.
Pretty much every basic terminal command for linux. Grep is the one that comes to mind.
The modern man uses
ripgrep👍What does that offer offer grep/egrep
-
much faster
-
proper unicode (and other encodings) support
-
automatic recursion (no extra flags needed)
-
can search inside compressed files/archives like gz/xz/zip (also see ripgrep-all) for even more archive support)
-
honors
.gitignoreand ignores binary/hidden files
probably a lot more things too
-
Speed and memory efficiency, mostly. If you ever have to grep for something in a large number of files ripgrep will be done while regular grep will only be reaching the 25% mark.
deleted by creator
Until very recently the whole Resident Evil modding community relied solely on a Maya 3DS script that a Chinese dude named Maliwei777 created in 2012. The community cherished that script but it got harder and harder to get the correct 3DS version to run it.
I think this probably applies…
So Thief: The Dark Project (1999) and Thief 2: The Metal Age (2000), are a couple of classic stealth FPS games, proto-immersive-sims, and still some of my all time favorite games. They both use the Dark Engine, an in-house engine from the now defunt Looking Glass Studios, which also powered System Shock 2.
In 2010, the source code to a System Shock 2 port (for the dreamcast or ps2 iirc…) leaked online, and on 2012 someone used that code to create NewDark and TFix, patches to make these old games work on modern computers (and some bugfixes, support for HD, etc).
There are still updates regularly released for it too!
I must emphasize that these games are still sold on Steam, GOG, etc and this patch is essentially required for them to work. And these are hardly the only games like this, just the ones most personal to me. Retrogaming is built on the backs of unsung individual heroes who backwards-engineer, hack, patch, and mod their favorite games to keep them running for everyone long after the publishers have died or abandoned their work.
There’s also Arx Libertatis for Arx Fatalis. Arkane (yes, that Arkane) released the source code for the game. This is a new engine and patch that is basically required. Even if you could play the game on a modern computer (you can’t really) you wouldn’t want to play without this patch. It does things like making drawing the runes for casting spells more reliable. (For those not aware, you drew runes on your screen and combined them to create spells. You didn’t just press a fireball button. You had to figure out what spells combined to make a fireball, and then draw it.)
If you like ImSims or Arkane games, I highly recommend Arx Fatalis. No one has done magic like it since. To be fair, it was one of the slowest and most cumbersome ways to do magic, but it did actually feel like you were part of it. You could cast spells before you learned them if you had the rune and guessed the combination (they all make sense). There were even some spells never told in game that you were expected to figure out. Cheats were even activated using the system, by drawing a certain combination of runes. It’s all very cool, and I wish we would get a second modern version of the idea.
making drawing the runes for casting spells more reliable
Huh…guess I might actually be able to give it a proper go then. I couldn’t ever play more than 2-3 30min sessions every few years as I’d get so so so very frustrated with trying to draw runes.
The OG solution was to use stretched 4:3/resolution, nyt Arx Libertatis allows easy casting with modern resolution.
You might like the dark mod if you haven’t heard of it
