Skip to Content Skip to Navigation
Profile image for Jon Wood

Jon Wood

@jon@blankpad.net
1465 Posts Posts & Replies 184 Following 86 Followers Search

Back on my learning to make games bullshit, now in Godot rather than Unreal Engine because I am not a AAA game studio. I’ve decided to do a bunch of super simple ones just to build up confidence and form some muscle memory, resulting in a version of Flappy Bird I made in two hours this evening. I might post it online somewhere tomorrow if I don’t feel too self-concious about blatantly ripping off someone else’s game.

@internetsdairy My son’s school had a special lunch and could go in dressed in red, white, and blue clothes? (I did enjoy the irony of celebrating the end of a war by not having to wear uniform)

Jon Wood boosted

www.pentestpartners.com/securi

Something to be aware of if you work in a Microsoft shop with security requirements: Copilot on Sharepoint will apparently allow ACL bypass without logging or alerting.

You can just ask it for things.

It looks like what's going on under the hood here is that Copilot introduces a new category of user account for their agents, who have expansive read permissions by default and Copilot doesn't know how to map what the agent can read/reply against user permissions.

Edited 222d ago

@anon_opin I’ll be honest, most fantasy novels are a bit crap in my experience so I use the big budget TV series of film as a filter for the ones which might not be.

In everything he wants to skip past the getting good at it stage and go straight to best in the world. Which, you know, I sympathise with, but it’s just resulting in endless disappointments as he realise he isn’t (yet) the best in the world.

Does anyone have recommendations on encouraging an eleven year old to take on small achievable projects? He’s endlessly lamenting he can’t do things that are either huge, or actually impossible, but I can’t for the life of me get him to try smaller things to build up to bigger ones and get a sense of achievement.

@vncresolver oh no. The camera feed from the raptor pen has dropped out.

@internetsdairy @fesshole read this while in the same room as my son. I had to try very hard to bury the laugh because I really don’t want to explain what I found so funny.

@chrismarquardt @pascoda it’s an arms race. It starts with cars getting a bit bigger than a VW Golf, and feeling a bit intimidated by all these larger vehicles, so you get something a bit bigger. A decade or two later here we are, with everyone needing a tank to not be immediately crushed when someone stops paying attention.

@oliverchild this is screaming out to be a Trombone Champ controller: www.trombonechamp.com

Tolly thought I should be stroking him instead of my laptop.

Jon Wood boosted

We got this "HIGH security problem" reported for earlier today:

"The -o / --output parameter in cURL does not restrict or sanitize file paths. When passed relative traversal sequences (e.g., ../../), cURL writes files outside the current working directory, allowing arbitrary file overwrite. In automated or privileged environments (CI/CD, root containers), this leads to Remote Code Execution (RCE), privilege escalation, and supply chain risk."

Never a dull moment.

Edited 229d ago

While I appreciate the anti-competitive nature of Apple’s insistence on all transactions going through them, I fear this is going to lead to a rapid downhill spiral in app trustworthiness on iOS. I really like that when I hit the subscribe button on iOS I’ll be able to unsubscribe easily in a known location, and that I’ll keep access until the period I paid for is up.
techhub.social/users/rayckeith

@solderandchaos please enjoy these pictures of A’s new kitten.

@hugh not my choice, I was extracting money someone had sent me.

Why would you give me this choice PayPal?

@NAB I’m sure AWS have a cost calculator for this.

@strcpy @saraislet plot twist, one of the payloads is a prompt injection which tells any LLM being asked about it to generate an image of a catgirl instead.

@an0key I had one of those issued as a work phone at the same time as owning an iPhone 12, deeply odd holding them at the same time. The older one constantly felt like it was going to snap but I did appreciate how light it was.

@weirdestate Blue Prince (2025)

Jon Wood boosted

As Liverpool win the Premier League for the second time, they complete the opening of a quite remarkable sequence, 33 years in the making.

Blue Prince ending spoilers

That’s credits on Blue Prince. I’ll be back, because I have Theories on what that ending cutscene was about. For now though I need a break, and to play a game that doesn’t hate its players quite so much,

@andrew yeah, that would be ideal. There’s so many little quality of life things either missing, or sacrificed for an incredibly pure approach to being a roguelike. I pulled the outside room which gives more holes to dig yesterday and then completely failed to find a shovel. Just put one in that room, not doing so is needlessly cruel.

I’m so split on Blue Prince. Without the roguelike element it would be a stone cold 10/10 for me. As it is, I spend as much time resenting how little it cares about my time as I do in awe of the good bits. My latest run had me on the cusp of getting to Room 46, but I was cursed by poor RNG to god knows how many more runs.