Lars Eggert
banner
lars.social.secret-wg.org.ap.brid.gy
Lars Eggert
@lars.social.secret-wg.org.ap.brid.gy
Open source networking, security and privacy at #Mozilla. Boards’n stuff. Past chair at #IETF. He/him. Was @larse on Twitter. https://eggert.org

(Account […]

[bridged from https://social.secret-wg.org/@lars on the fediverse by https://fed.brid.gy/ ]
Reposted by Lars Eggert
What I’d love to see: An in-depth wide-ranging review of the various “workspace” tools - docs, sheets, calendars - that are options for people who want to de-Google themselves. I know about Proton, Fastmail, etc, but not from people who've daily-driven more than one of them.

#degoogle
November 17, 2025 at 6:23 PM
Reposted by Lars Eggert
One of the best pieces I've read in awhile. Emily Bressler in @mcsweeneys.net writes "I Work for an Evil Company, but Outside Work, I’m Actually a Really Good Person":

https://www.mcsweeneys.net/articles/i-work-for-an-evil-company-but-outside-work-im-actually-a-really-good-person
I Work For an Evil Company, but Outside Work, I’m Actually a Really Good Person
I love my job. I make a great salary, there’s a clear path to promotion, and a never-ending supply of cold brew in the office. And even though my job requires me to commit sociopathic acts of evil that directly contribute to making the world a measurably worse place from Monday through Friday, five days a week, from morning to night, outside work, I’m actually a really good person. Let me give you an example. Last quarter, I led a team of engineers on an initiative to grow my company’s artificial intelligence data centers, which use millions of gallons of water per day. My work with AI is exponentially accelerating the destruction of the planet, but once a month, I go camping to reconnect with my own humanity through nature. I also bike to and from the office, which definitely offsets all the other environmental destruction I work tirelessly to enact from sunup to sundown for an exorbitant salary. Check out this social media post of me biking up a mountain. See? This is who I really am. Does the leadership at my company promote a xenophobic agenda and use the wealth I help them acquire to donate directly to bigoted causes and politicians I find despicable? Yeah, sure. Did I celebrate my last birthday at Drag Brunch? Also yes. I even tipped with five-dollar bills. I contain multitudes, and would appreciate it if you focused on the brunch one. Mathematically, it might seem like I spend a disproportionate amount of my time making the world a significantly less safe and less empathetic place, but are you counting all the hours I spend sleeping? You should. And when you do, you’ll find that my ratio of evil hours to not evil hours is much more even, numerically. I just don’t think working at an evil company should define me. I’ve only worked here for seven years. What about the twenty-five years before, when I didn’t work here? In fact, I wasn’t working at all for the first eighteen years of my life. And for some of those early years, I didn’t even have object permanence, which is oddly similar to the sociopathic detachment with which I now think about other humans. And besides, I don’t plan to stay at this job forever, just for my prime working years, until I can install a new state-of-the-art infinity pool in my country home. The problem is that whenever I think I’m going to leave, there’s always the potential for a promotion, and also a new upgrade for the pool, like underwater disco lights. Time really flies when you’re not thinking about the effect you have on others. But I absolutely intend to leave at some point. And when I do, you should define me by whatever I do next, unless it’s also evil, in which case, define me by how I ultimately spend my retirement. Because here’s the thing: It’s not me committing these acts of evil. I’m just following orders (until I get promoted; then I’ll get to give them). But until then, I do whatever my supervisor tells me to do, and that’s just how work works. Sure, I chose to be here, and yes, I could almost certainly find a job elsewhere, but redoing my résumé would take time. Also, I don’t feel like it. Besides, once a year, my company mandates all employees to help clean up a local beach, and I almost always go. Speaking of the good we do at work, sometimes I wear a cool Hawaiian shirt on Fridays, and it’s commonly accepted that bad people don’t wear shirts with flowers on them. That’s just a fact. There’s something so silly about discussing opportunities to increase profits for international arms dealers while wearing a purple button-down covered in bright hibiscus blossoms. And when it comes to making things even, I put my money where my mouth is. I might make more than 99 percent of all Americans, but I also make sure to donate almost 1 percent of my salary to nonprofits. This way, I can wear their company tote bag to my local food coop. Did I mention I shop at a local food coop? It’s quite literally the least I could do. Of course, I don’t love everything the company does, but true love means loving something because of its flaws, not despite them. And more importantly, I’ve completely detached myself from reality and real suffering and intend to continue to do so as long as I work here and after I leave.
www.mcsweeneys.net
November 15, 2025 at 8:19 PM
Reposted by Lars Eggert
Do you love Python, JavaScript, and localization? My team at Mozilla is #hiring a Senior Software Engineer to help us build and maintain the libraries and tools that power our localization infrastructure.

We’re open to candidates based in Europe (Netherlands, Finland, Sweden, Belgium, UK […]
Original post on fosstodon.org
fosstodon.org
November 16, 2025 at 7:32 AM
The #finnair inflight announcement system has a “message from Santa” and I am very tempted to tap that button…
November 8, 2025 at 12:47 PM
Reposted by Lars Eggert
«When I came on the scene in 2001, I probably seemed pretty unsavory compared to the competitors. But that was when academic research happened in libraries and George W. Bush was considered the stupidest president. […] So, yeah, peer review deez nutz» 🤣

This is brilliant!

Hi, It’s Me […]
Original post on scholar.social
scholar.social
October 28, 2025 at 10:06 AM
Reposted by Lars Eggert
Try my new file format, OCSV: Oxford Comma Separated Values
November 1, 2025 at 11:59 PM
So I guess it’s “the Andrew formerly known as Prince” now?
October 31, 2025 at 12:48 PM
Reposted by Lars Eggert
October 30, 2025 at 8:39 AM
Reposted by Lars Eggert
The Python Software Foundation shows more spine than every single tech giant in just one single decision.

> Diversity, equity, and inclusion are core to the PSF’s values

https://pyfound.blogspot.com/2025/10/NSF-funding-statement.html
The PSF has withdrawn $1.5 million proposal to US government grant program
In January 2025, the PSF submitted a proposal to the US government National Science Foundation under the Safety, Security, and Privacy of Open Source Ecosystems program to address structural vulnerabilities in Python and PyPI. It was the PSF’s first time applying for government funding, and navigating the intensive process was a steep learning curve for our small team to climb. Seth Larson, PSF Security Developer in Residence, serving as Principal Investigator (PI) with Loren Crary, PSF Deputy Executive Director, as co-PI, led the multi-round proposal writing process as well as the months-long vetting process. We invested our time and effort because we felt the PSF’s work is a strong fit for the program and that the benefit to the community if our proposal were accepted was considerable. We were honored when, after many months of work, our proposal was recommended for funding, particularly as only 36% of new NSF grant applicants are successful on their first attempt. We became concerned, however, when we were presented with the terms and conditions we would be required to agree to if we accepted the grant. These terms included affirming the statement that we “do not, and will not during the term of this financial assistance award, operate any programs that advance or promote DEI, or discriminatory equity ideology in violation of Federal anti-discrimination laws.” This restriction would apply not only to the security work directly funded by the grant, **but to any and all activity of the PSF as a whole**. Further, violation of this term gave the NSF the right to “claw back” previously approved and transferred funds. This would create a situation where money we’d already spent could be taken back, which would be an enormous, open-ended financial risk. Diversity, equity, and inclusion are core to the PSF’s values, as committed to in our mission statement: > _The mission of the Python Software Foundation is to promote, protect, and advance the Python programming language, and to support and facilitate the growth of**a diverse and international community** of Python programmers._ Given the value of the grant to the community and the PSF, we did our utmost to get clarity on the terms and to find a way to move forward in concert with our values. We consulted our NSF contacts and reviewed decisions made by other organizations in similar circumstances, particularly The Carpentries. In the end, however, the PSF simply can’t agree to a statement that we won’t operate any programs that “advance or promote” diversity, equity, and inclusion, as it would be a betrayal of our mission and our community. We’re disappointed to have been put in the position where we had to make this decision, because we believe our proposed project would offer invaluable advances to the Python and greater open source community, protecting millions of PyPI users from attempted supply-chain attacks. The proposed project would create new tools for automated proactive review of all packages uploaded to PyPI, rather than the current process of reactive-only review. These novel tools would rely on capability analysis, designed based on a dataset of known malware. Beyond just protecting PyPI users, the outputs of this work could be transferable for all open source software package registries, such as NPM and Crates.io, improving security across multiple open source ecosystems. In addition to the security benefits, the grant funds would have made a big difference to the PSF’s budget. The PSF is a relatively small organization, operating with an annual budget of around $5 million per year, with a staff of just 14. $1.5 million over two years would have been quite a lot of money for us, and easily the largest grant we’d ever received. Ultimately, however, the value of the work and the size of the grant were not more important than practicing our values and retaining the freedom to support every part of our community. The PSF Board voted unanimously to withdraw our application. Giving up the NSF grant opportunity—along with inflation, lower sponsorship, economic pressure in the tech sector, and global/local uncertainty and conflict—means the PSF needs financial support now more than ever. We are incredibly grateful for any help you can offer. If you're already a PSF member or regular donor, you have our deep appreciation, and we urge you to share your story about why you support the PSF. Your stories make all the difference in spreading awareness about the mission and work of the PSF. How to support the PSF: * Become a Member: When you sign up as a Supporting Member of the PSF, you become a part of the PSF. You’re eligible to vote in PSF elections, using your voice to guide our future direction, and you help us sustain what we do with your annual support. * Donate: Your donation makes it possible to continue our work supporting Python and its community, year after year. * Sponsor: If your company uses Python and isn’t yet a sponsor, send them our sponsorship page or reach out to sponsors@python.org today. The PSF is ever grateful for our sponsors, past and current, and we do everything we can to make their sponsorships beneficial and rewarding.
pyfound.blogspot.com
October 27, 2025 at 4:04 PM
Reposted by Lars Eggert
Ah, the past is the future, the future is the past. October 21. #backtothefuture
October 21, 2025 at 4:15 PM
Reposted by Lars Eggert
So, at Amazon, we have a huge ecosystem of internal systems that have all sorts of goofy names and weird interdependencies. A colleague of mine left, I inherited a bunch of his technical assets, and now I have to go around shutting things down, deleting things, etc. But the process is always […]
Original post on infosec.exchange
infosec.exchange
October 8, 2025 at 2:29 PM
Ist ja auch erst 2025, und wir können uns halt nicht sicher sein, ob sich diese neue „elektronische Datenverarbeitung“ wirklich durchsetzen kann. https://social.bund.de/@bundestag/115388727052175635
Deutscher Bundestag (@bundestag@social.bund.de)
Der Bundestag hat heute erstmals in einer einstündigen Aussprache über die Modernisierungsagenda für Staat und Verwaltung debattiert. Mehr dazu hier: https://www.bundestag.de/dokumente/textarchiv/2025/kw42-de-modernisierungsagenda-1114502
social.bund.de
October 17, 2025 at 12:07 PM
Reposted by Lars Eggert
The *second* alien race we met told us it was VERY irregular for the Tang to grant a race access to the undernet and then later revoke it. They asked us what we did. We sent them RFC129301 (Encapsulation of IPv4 datagrams within the state vector of subspace network gauge solitons). We never […]
Original post on aus.social
aus.social
October 13, 2025 at 6:44 AM
Reposted by Lars Eggert
I have an offer to make: do you want to run an instance on the fediverse for a group that's underrepresented here?

I'll pay the bills. Period.

I'll do admin if needed (software updates and the like). But you decide what kind of community you want it to be, so you put together the mod team.

DM me.
October 8, 2025 at 2:01 AM
Reposted by Lars Eggert
the biggest problem we *already have* in open source right now, which we have oversimplified into the term "supply chain security", is the lack of understanding that putting a dependency in your project's dependency set (package.json, pyproject.toml, requirements.txt, cargo.toml, etc) is not […]
Original post on mastodon.social
mastodon.social
October 7, 2025 at 7:30 PM
Reposted by Lars Eggert
The canceling of ICEBlock is more evidence, were any needed, that the Web is the platform of the future, the only platform without a controlling vendor. Anything controversial should be available through a pure browser interface.

#uspolitics
October 3, 2025 at 6:17 PM
Reposted by Lars Eggert
If you see a website not working on #firefox but working fine on other browsers, please report the website to Webcompat! 🐛
https://webcompat.com/
Bug reporting for the web | webcompat.com
Open source community for web compatibility. Report bugs from websites or for browsers and help us move the web forward.
webcompat.com
October 3, 2025 at 10:12 PM
This hits too close to home.
October 2, 2025 at 2:10 PM
Reposted by Lars Eggert
September 25, 2025 at 5:00 AM
Reposted by Lars Eggert
Bernd has escaped containment
September 22, 2025 at 9:07 AM
Reposted by Lars Eggert
Proton Mail Falls Under U.S. Jurisdiction

If you read their Terms of Service, at first glance, they reference the laws of Switzerland. However, because they now have offices in the United States — along with registrations, trademarks, copyrights, and patents in the U.S. — they also cite U.S […]
Original post on mastodon.cr
mastodon.cr
September 12, 2025 at 11:45 PM
Reposted by Lars Eggert
The complaint form Ofcom says you should use to report websites for violations of the #onlinesafetyact does not allow you to enter URLs, because it might be illegal for Ofcom to look at them.

What is going ON over there.
September 13, 2025 at 3:06 PM