Kelsos
@kelsos.bsky.social
Open Source software developer. MusicBee remote, Full-stack rotkiapp, Android Hobbist and Vue.js dev
Reposted by Kelsos
Vibe coding PRs - STOP please...
November 10, 2025 at 5:02 AM
Vibe coding PRs - STOP please...
So we got another failure in the "security scan" for PCI DSS compliance because they match OpenSSH CVEs against the upstream, ignoring the fact that LTS releases backport the fixes to older versions.
Then I am asked to resent the e-mail, for "security" including information that it's already there.
Then I am asked to resent the e-mail, for "security" including information that it's already there.
October 28, 2025 at 9:51 AM
So we got another failure in the "security scan" for PCI DSS compliance because they match OpenSSH CVEs against the upstream, ignoring the fact that LTS releases backport the fixes to older versions.
Then I am asked to resent the e-mail, for "security" including information that it's already there.
Then I am asked to resent the e-mail, for "security" including information that it's already there.
Reposted by Kelsos
📅 Happy 11th anniversary to Alien: Isolation!
💾 Alien: Isolation was released on October 6th, 2014!
💾 Alien: Isolation was released on October 6th, 2014!
October 6, 2025 at 11:00 AM
📅 Happy 11th anniversary to Alien: Isolation!
💾 Alien: Isolation was released on October 6th, 2014!
💾 Alien: Isolation was released on October 6th, 2014!
I am looking about PCI DSS 6.4.3 and 11.6.1 compliance and it makes me angry.
As angry as it makes me to have to relax Content Security Policy because otherwise "3DSecure" won't work because each bank has to run code on their own domain for this to work.
As angry as it makes me to have to relax Content Security Policy because otherwise "3DSecure" won't work because each bank has to run code on their own domain for this to work.
September 9, 2025 at 10:04 AM
I am looking about PCI DSS 6.4.3 and 11.6.1 compliance and it makes me angry.
As angry as it makes me to have to relax Content Security Policy because otherwise "3DSecure" won't work because each bank has to run code on their own domain for this to work.
As angry as it makes me to have to relax Content Security Policy because otherwise "3DSecure" won't work because each bank has to run code on their own domain for this to work.
Reposted by Kelsos
1. Never manually enter your GitHub or npm password; use a Passkey instead.
2. Enable npm 2FA for both authorization and publishing.
3. Use trusted publishing and remove all npm CI tokens.
4. Only invite maintainers who follow these security practices.
2. Enable npm 2FA for both authorization and publishing.
3. Use trusted publishing and remove all npm CI tokens.
4. Only invite maintainers who follow these security practices.
All the packages affected by this attack had not enabled trusted publishing and provenance.
- The top four packages were all impacted.
- More than half of the top ten packages were affected.
github.com/sxzz/npm-top...
- The top four packages were all impacted.
- More than half of the top ten packages were affected.
github.com/sxzz/npm-top...
September 8, 2025 at 5:01 PM
1. Never manually enter your GitHub or npm password; use a Passkey instead.
2. Enable npm 2FA for both authorization and publishing.
3. Use trusted publishing and remove all npm CI tokens.
4. Only invite maintainers who follow these security practices.
2. Enable npm 2FA for both authorization and publishing.
3. Use trusted publishing and remove all npm CI tokens.
4. Only invite maintainers who follow these security practices.
Reposted by Kelsos
We just launched rotki Release Sponsorships.
Each release now has a collectible NFT tied to it (starting with v1.41). Sponsoring helps fund local-first, privacy-focused software and gives recognition to both individuals and companies inside rotki itself.
Learn more & mint: rotki.com/sponsor/mint
Each release now has a collectible NFT tied to it (starting with v1.41). Sponsoring helps fund local-first, privacy-focused software and gives recognition to both individuals and companies inside rotki itself.
Learn more & mint: rotki.com/sponsor/mint
August 30, 2025 at 2:55 PM
We just launched rotki Release Sponsorships.
Each release now has a collectible NFT tied to it (starting with v1.41). Sponsoring helps fund local-first, privacy-focused software and gives recognition to both individuals and companies inside rotki itself.
Learn more & mint: rotki.com/sponsor/mint
Each release now has a collectible NFT tied to it (starting with v1.41). Sponsoring helps fund local-first, privacy-focused software and gives recognition to both individuals and companies inside rotki itself.
Learn more & mint: rotki.com/sponsor/mint
Reposted by Kelsos
Vitest 4 runs simple test files faster! You can already check it out by installing Vitest 4 beta. On average, Vitest now takes 25% less time to start the test. Due to parallelisation, the overall time difference can vary.
We are focusing our efforts on improving the time even more in the next beta!
We are focusing our efforts on improving the time even more in the next beta!
August 27, 2025 at 3:29 PM
Vitest 4 runs simple test files faster! You can already check it out by installing Vitest 4 beta. On average, Vitest now takes 25% less time to start the test. Due to parallelisation, the overall time difference can vary.
We are focusing our efforts on improving the time even more in the next beta!
We are focusing our efforts on improving the time even more in the next beta!
Reposted by Kelsos
android-developers.googleblog.com/2025/08/elev...
Since they're working on it, can I please just develop my apps without needing to register somewhere?
Can we educate about trusted app sources, instead of enforcing arbitrary rules for everyone?
Since they're working on it, can I please just develop my apps without needing to register somewhere?
Can we educate about trusted app sources, instead of enforcing arbitrary rules for everyone?
A new layer of security for certified Android devices
Starting in 2026 and in select countries first, Android apps must be registered to a verified developer in order to be installed.
android-developers.googleblog.com
August 26, 2025 at 5:48 AM
android-developers.googleblog.com/2025/08/elev...
Since they're working on it, can I please just develop my apps without needing to register somewhere?
Can we educate about trusted app sources, instead of enforcing arbitrary rules for everyone?
Since they're working on it, can I please just develop my apps without needing to register somewhere?
Can we educate about trusted app sources, instead of enforcing arbitrary rules for everyone?
Reposted by Kelsos
Good news from ESLint! The 10 years old parallel linting issue is finally resolved.
Issue: github.com/eslint/eslin...
PR: github.com/eslint/eslin...
Issue: github.com/eslint/eslin...
PR: github.com/eslint/eslin...
Lint multiple files in parallel [$500] · Issue #3565 · eslint/eslint
This is a discussion issue for adding ability to run eslint in parallel for multiple files. The idea is that ESLint is mostly CPU bound, not IO bound, so creating multiple threads (for machine with...
github.com
August 15, 2025 at 4:30 PM
Good news from ESLint! The 10 years old parallel linting issue is finally resolved.
Issue: github.com/eslint/eslin...
PR: github.com/eslint/eslin...
Issue: github.com/eslint/eslin...
PR: github.com/eslint/eslin...
Reposted by Kelsos
The latest upgrade to rotki is its onchain capabilities. You can send tokens on any EVM chain to any address (or ENS) directly from the app!
Thanks to @kelsos.bsky.social the wallet connection next release will happen all completely locally.
🐦Use rotki, own your crypto! rotki.com/download
Thanks to @kelsos.bsky.social the wallet connection next release will happen all completely locally.
🐦Use rotki, own your crypto! rotki.com/download
August 6, 2025 at 10:03 AM
The latest upgrade to rotki is its onchain capabilities. You can send tokens on any EVM chain to any address (or ENS) directly from the app!
Thanks to @kelsos.bsky.social the wallet connection next release will happen all completely locally.
🐦Use rotki, own your crypto! rotki.com/download
Thanks to @kelsos.bsky.social the wallet connection next release will happen all completely locally.
🐦Use rotki, own your crypto! rotki.com/download
Is there any good tool to help detect unused code in a Vue/TypeScript project? on that does not mark half the project unused preferably.
August 4, 2025 at 11:30 AM
Is there any good tool to help detect unused code in a Vue/TypeScript project? on that does not mark half the project unused preferably.
So the certificate costs more than 100$ on yearly basis, and if you want to use it on CI, say GitHub actions where you can not use a Yubikey, you have to use a subscription service that costs 20$ per month for 20 signings...
July 25, 2025 at 9:01 AM
So the certificate costs more than 100$ on yearly basis, and if you want to use it on CI, say GitHub actions where you can not use a Yubikey, you have to use a subscription service that costs 20$ per month for 20 signings...
I wonder how other open-source projects deal with code signing on Windows.
Originally we got a certificate for 5 years, due to industry changes, we were forced to re-issue it after 3.
Now PFX is not available, and you can either pay extra for a singing service or an expensive hardware token.
Originally we got a certificate for 5 years, due to industry changes, we were forced to re-issue it after 3.
Now PFX is not available, and you can either pay extra for a singing service or an expensive hardware token.
July 25, 2025 at 7:38 AM
I wonder how other open-source projects deal with code signing on Windows.
Originally we got a certificate for 5 years, due to industry changes, we were forced to re-issue it after 3.
Now PFX is not available, and you can either pay extra for a singing service or an expensive hardware token.
Originally we got a certificate for 5 years, due to industry changes, we were forced to re-issue it after 3.
Now PFX is not available, and you can either pay extra for a singing service or an expensive hardware token.
Reposted by Kelsos
You probably tried various apps for crypto accounting, expecting a nice plug&play experience, only to realize it's an impossible task
We know.
This is why we rotki are offering an accounting service for individuals, companies & DAOs.
Use our experience & commitment to privacy: rotki.com/bespoke
We know.
This is why we rotki are offering an accounting service for individuals, companies & DAOs.
Use our experience & commitment to privacy: rotki.com/bespoke
July 24, 2025 at 11:27 AM
You probably tried various apps for crypto accounting, expecting a nice plug&play experience, only to realize it's an impossible task
We know.
This is why we rotki are offering an accounting service for individuals, companies & DAOs.
Use our experience & commitment to privacy: rotki.com/bespoke
We know.
This is why we rotki are offering an accounting service for individuals, companies & DAOs.
Use our experience & commitment to privacy: rotki.com/bespoke
I spend quite some time trying to figure out an annoying issue where the navigation bar turns black momentarily during activity transitions.
Turns out it's not something I can fix...
issuetracker.google.com/issues/42008...
Turns out it's not something I can fix...
issuetracker.google.com/issues/42008...
Google Issue Tracker
issuetracker.google.com
July 3, 2025 at 8:22 PM
I spend quite some time trying to figure out an annoying issue where the navigation bar turns black momentarily during activity transitions.
Turns out it's not something I can fix...
issuetracker.google.com/issues/42008...
Turns out it's not something I can fix...
issuetracker.google.com/issues/42008...
Nothing really wakes you up in the morning than having to clean the glass you broke while making coffee, but I would still rather enjoy the coffee, even if it takes more time to wake up 😂
June 28, 2025 at 8:59 AM
Nothing really wakes you up in the morning than having to clean the glass you broke while making coffee, but I would still rather enjoy the coffee, even if it takes more time to wake up 😂
Lately I have seen this strudel.cc/workshop/get... on a various TikTok videos and it looks really impressive.
I have not done anything music related for close to two decades now.
And most of the stuff I worked as a teenager was using www.madtracker.org
I have not done anything music related for close to two decades now.
And most of the stuff I worked as a teenager was using www.madtracker.org
Getting Started 🚀 Strudel
Strudel is a music live coding editor that brings TidalCycles to the browser.
strudel.cc
June 25, 2025 at 6:35 PM
Lately I have seen this strudel.cc/workshop/get... on a various TikTok videos and it looks really impressive.
I have not done anything music related for close to two decades now.
And most of the stuff I worked as a teenager was using www.madtracker.org
I have not done anything music related for close to two decades now.
And most of the stuff I worked as a teenager was using www.madtracker.org
So what I find funny while I slowly prepare an update for @musicbeeremote.bsky.social is that some of the features I am adding to the update or some of the issues I am resolving are either a decade old or close to a decade old.
June 25, 2025 at 6:17 PM
So what I find funny while I slowly prepare an update for @musicbeeremote.bsky.social is that some of the features I am adding to the update or some of the issues I am resolving are either a decade old or close to a decade old.
The problem with having to occasionally check issues on Windows, means that each time the environment is completely outdated and it runs into a lot of unforeseen problems.
June 5, 2025 at 2:16 PM
The problem with having to occasionally check issues on Windows, means that each time the environment is completely outdated and it runs into a lot of unforeseen problems.
Reposted by Kelsos
I am extremely proud to announce we released rotki 1.39.0!
This includes the work of the past 3 months and brings with it a ton of new features and improvements such as Pectra support, onchain transactions, history consolidation and more!
Download: github.com/rotki/rotki/...
This includes the work of the past 3 months and brings with it a ton of new features and improvements such as Pectra support, onchain transactions, history consolidation and more!
Download: github.com/rotki/rotki/...
June 5, 2025 at 11:12 AM
I am extremely proud to announce we released rotki 1.39.0!
This includes the work of the past 3 months and brings with it a ton of new features and improvements such as Pectra support, onchain transactions, history consolidation and more!
Download: github.com/rotki/rotki/...
This includes the work of the past 3 months and brings with it a ton of new features and improvements such as Pectra support, onchain transactions, history consolidation and more!
Download: github.com/rotki/rotki/...
Really nice game so far.
www.youtube.com/watch?v=UQ9A...
www.youtube.com/watch?v=UQ9A...
Tainted Grail: Fall of Avalon - Official Gameplay Trailer
YouTube video by IGN
www.youtube.com
June 5, 2025 at 11:18 AM
Really nice game so far.
www.youtube.com/watch?v=UQ9A...
www.youtube.com/watch?v=UQ9A...
Reposted by Kelsos
Today we're announcing previews of the native port of TypeScript! These nightly previews will be available on npm and the VS Code marketplace!
npm install -D @typescript/native-preview
npx tsgo --version
Read up more on our blog!
npm install -D @typescript/native-preview
npx tsgo --version
Read up more on our blog!
Announcing TypeScript Native Previews - TypeScript
Previews of the native TypeScript port are now available on npm and for VS Code through the Visual Studio Marketplace!
devblogs.microsoft.com
May 22, 2025 at 3:09 PM
Today we're announcing previews of the native port of TypeScript! These nightly previews will be available on npm and the VS Code marketplace!
npm install -D @typescript/native-preview
npx tsgo --version
Read up more on our blog!
npm install -D @typescript/native-preview
npx tsgo --version
Read up more on our blog!
That point in Cyberpunk 2077: Phantom Liberty where the game suddenly turns to Alien Isolation...
April 10, 2025 at 6:29 PM
That point in Cyberpunk 2077: Phantom Liberty where the game suddenly turns to Alien Isolation...
Reposted by Kelsos
@lefterisjp.bsky.social of Rotki, will challenge the idea of “nothing to hide,” exploring privacy in the age of oversharing, public blockchains and centralized data. He’ll examine the trade-offs users and builders face, and propose a more compelling, benefits-driven vision for a privacy-first future
April 10, 2025 at 11:17 AM
@lefterisjp.bsky.social of Rotki, will challenge the idea of “nothing to hide,” exploring privacy in the age of oversharing, public blockchains and centralized data. He’ll examine the trade-offs users and builders face, and propose a more compelling, benefits-driven vision for a privacy-first future
Reposted by Kelsos
Customize rotki your way! 🎛️
With Amount Settings, you control how numbers are displayed across your portfolio. Adjust formatting, rounding, abbreviations, and more, so your data looks exactly how you want it.
🐦 Watch the video to see how easy it is! Own your data with rotki!
rotki.com/download
With Amount Settings, you control how numbers are displayed across your portfolio. Adjust formatting, rounding, abbreviations, and more, so your data looks exactly how you want it.
🐦 Watch the video to see how easy it is! Own your data with rotki!
rotki.com/download
April 2, 2025 at 4:23 PM
Customize rotki your way! 🎛️
With Amount Settings, you control how numbers are displayed across your portfolio. Adjust formatting, rounding, abbreviations, and more, so your data looks exactly how you want it.
🐦 Watch the video to see how easy it is! Own your data with rotki!
rotki.com/download
With Amount Settings, you control how numbers are displayed across your portfolio. Adjust formatting, rounding, abbreviations, and more, so your data looks exactly how you want it.
🐦 Watch the video to see how easy it is! Own your data with rotki!
rotki.com/download