{"version":"https://jsonfeed.org/version/1","title":"Micro.blog - Ariadne Conill","home_page_url":"https://micro.blog","feed_url":"https://micro.blog/posts/ariadne","_microblog":{"about":"https://micro.blog/about/api","id":"1725515","username":"ariadne","bio":"","pronouns":"she/her or they/them","is_following":false,"is_you":false,"following_count":1,"discover_count":0},"author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://avatars.micro.blog/avatars/2025/05/1725515.jpg"},"items":[{"id":"93448675","content_html":"

@lproven.bsky.social some thoughts:

\n\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mma3ul2rts2t","date_published":"2026-05-19T19:12:16+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-19 19:12","date_timestamp":1779217936,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448676","content_html":"

@fedi.nytpu.com apk add docs

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mlhzib5ozs2s","date_published":"2026-05-10T05:25:41+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-10 05:25","date_timestamp":1778390741,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448677","content_html":"

@tlpavlich.gay damn

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mlejr3nsjc2s","date_published":"2026-05-08T20:06:19+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-08 20:06","date_timestamp":1778270779,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448678","content_html":"

@ariadne.space interestingly, openpax kernels kill the exploit early in the exploit chain.

\n

either way, 6.18.28 fixes it for everyone.

\n

but it goes to show the danger of #SUID binaries and why SUID-less solutions like #capsudo are important.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mleiwcww5k2o","date_published":"2026-05-08T19:51:20+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-08 19:51","date_timestamp":1778269880,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448679","content_html":"

@sammanthajane.bsky.social the exploit fails because it runs /usr/bin/su instead of /bin/su as the donor SUID binary. modifying it to use /bin/bbsuid causes the exploit to hang.

\n

on OpenPaX kernel, the exploit is killed due to a memory safety violation

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mlehw3w3nc2o","date_published":"2026-05-08T19:33:19+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-08 19:33","date_timestamp":1778268799,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448680","content_html":"

@mlbiam.dev and Rowling still gets paid even when it’s free…

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3ml7y7ty5yk2t","date_published":"2026-05-07T00:41:48+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-05-07 00:41","date_timestamp":1778114508,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448681","content_html":"

@ariadne.space current mood: stabby

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mk4cvvses22p","date_published":"2026-04-22T20:17:14+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-22 20:17","date_timestamp":1776889034,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448682","content_html":"

@sinthoid.bsky.social we would say no. it is important to us that alpine remain independent of any corporate influence.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mjybsbain22p","date_published":"2026-04-21T05:46:40+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-21 05:46","date_timestamp":1776750400,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448683","content_html":"

@ariadne.space

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mjpl5sa3ck2y","date_published":"2026-04-17T18:40:13+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-17 18:40","date_timestamp":1776451213,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448684","content_html":"

@waeaves.com gitlab.alpinelinux.org/alpine/aports

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mjpgiew3tc2y","date_published":"2026-04-17T17:16:39+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-17 17:16","date_timestamp":1776446199,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448685","content_html":"

@waeaves.com contribute it to aports? we would love to have it…

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mjoar35idk2g","date_published":"2026-04-17T06:01:28+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-17 06:01","date_timestamp":1776405688,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448686","content_html":"

@omg.jacky.wtf QNX is oldschool microkernel-ish unix clone. it is actually really neat. unfortunately, they open sourced it, and then blackberry rugpulled the open source version.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mjo766cvic2g","date_published":"2026-04-17T05:33:01+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-17 05:33","date_timestamp":1776403981,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448687","content_html":"

@chrisarmstrong.link oh? what sort of unholy things? i am trying to improve the user experience of pkgconf on windows right now.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj5y345awc2v","date_published":"2026-04-10T18:43:26+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 18:43","date_timestamp":1775846606,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448688","content_html":"

@proptermalone.bsky.social it does not matter if they are lying or not, people need to be building their systems as if it were true anyway

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj5wobm5zs24","date_published":"2026-04-10T18:18:21+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 18:18","date_timestamp":1775845101,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448689","content_html":"

@ariadne.space the reason i bring this up is because it highlights my earlier thesis: complex systems are exploitable systems.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47wydwxk2v","date_published":"2026-04-10T01:58:58+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:58","date_timestamp":1775786338,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448690","content_html":"

@ariadne.space as an aside, a random fun fact: most CVEs in sudo are not related to memory safety at all, but rather in the way that sudo processes its access control rules.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47suzs7k2v","date_published":"2026-04-10T01:56:40+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:56","date_timestamp":1775786200,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448691","content_html":"

@ariadne.space and in a world where anyone can rent APT-level capability for $200/month…

\n

you can’t afford to rely on “probably safe.”

\n

you need to build systems which are correct by construction.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47in7los2v","date_published":"2026-04-10T01:50:56+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:50","date_timestamp":1775785856,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448692","content_html":"

@ariadne.space but capability systems only work if “starting from nothing” is real.

\n

if there’s hidden ambient authority, the whole model collapses.

\n

in capability systems, security is not obtained through enforcement, but rather through construction.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47guphdk2v","date_published":"2026-04-10T01:49:57+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:49","date_timestamp":1775785797,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448693","content_html":"

@ariadne.space the alternative to chipping away at default ambient authority is to build a capability system.

\n

in a capability system, your program receives all of the authority it needs to run, and nothing more, when the program starts.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47fkeprk2v","date_published":"2026-04-10T01:49:13+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:49","date_timestamp":1775785753,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448694","content_html":"

@ariadne.space seccomp, however, is much worse. seccomp is fragile: i have had to downgrade musl on a few occasions in alpine because upgrading it broke everyone due to the seccomp policy included with containerd not being updated for newer syscalls.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj47bzo5mk2v","date_published":"2026-04-10T01:47:15+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:47","date_timestamp":1775785635,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448695","content_html":"

@ariadne.space the problem with subtractive sandboxing is that they are imperfect.

\n

while approaches like landlock and pledge reduce authority more strictly, the runtime environment and programs must voluntarily facilitate installation of a landlock or pledge policy.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj474m6zus2v","date_published":"2026-04-10T01:44:13+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:44","date_timestamp":1775785453,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448696","content_html":"

@ariadne.space a subtractive sandbox starts from a position of ambient authority and voluntarily reduces that authority before executing code in the sandbox.

\n

subtractive sandboxes are built with things like seccomp, openbsd’s pledge and landlock.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj46zamrjs2v","date_published":"2026-04-10T01:42:20+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:42","date_timestamp":1775785340,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448697","content_html":"

@ariadne.space so how do we actually reduce ambient authority?

\n

there are two broad approaches: subtractive sandboxes and capability systems.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj46wpqbis2v","date_published":"2026-04-10T01:40:55+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:40","date_timestamp":1775785255,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448698","content_html":"

@ariadne.space but even when you get isolation right… it’s still not enough.

\n

because while isolation reduces ambient authority, it doesn’t eliminate it.

\n

and ambient authority is where things get dangerous.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj46rmcnts2v","date_published":"2026-04-10T01:38:04+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:38","date_timestamp":1775785084,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"93448699","content_html":"

@ariadne.space and that has turned out to be a lot harder than expected, because you’re constantly balancing strong guarantees vs. real-world usability.

\n

but it is necessary work because if you get that balance wrong, the system doesn’t fail securely… it just gets disabled instead.

\n","url":"https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mj46phbmfc2v","date_published":"2026-04-10T01:36:51+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-04-10 01:36","date_timestamp":1775785011,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"87145524","content_html":"

Why I am looking for Jellycat alternatives now: ariadne.space

","summary":"","url":"https://ariadne.space/2026/03/28/why-i-am-looking-for.html","date_published":"2026-03-28T15:44:47+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-03-28 15:44","date_timestamp":1774712687,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/116307577590327945","https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3mi4y4u53ft2q"]}},{"id":"82647889","content_html":"

Why leaders often disappoint us: ariadne.space

","summary":"","url":"https://ariadne.space/2026/01/22/why-leaders-often-disappoint-us.html","date_published":"2026-01-22T21:54:41+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2026-01-22 21:54","date_timestamp":1769118881,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/115940981468758349","https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3md26iafnq52r"]}},{"id":"80176281","content_html":"

vm.overcommit_memory=2 is always the right setting for servers: ariadne.space

","summary":"","url":"https://ariadne.space/2025/12/16/vmovercommitmemory-is-always-the-right.html","date_published":"2025-12-17T00:23:19+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2025-12-17 00:23","date_timestamp":1765930999,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/115732054419159546","https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3ma5fh7norx2y"]}},{"id":"79873680","content_html":"

Rethinking sudo with object capabilities: ariadne.space

","summary":"","url":"https://ariadne.space/2025/12/12/rethinking-sudo-with-object-capabilities.html","date_published":"2025-12-12T13:36:06+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2025-12-12 13:36","date_timestamp":1765546566,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/115706860041301973","https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3m7s7g4yz6222"]}},{"id":"79213226","content_html":"

I want you to understand: ariadne.space

","summary":"","url":"https://ariadne.space/2025/12/02/i-want-you-to-understand.html","date_published":"2025-12-03T03:22:23+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2025-12-03 03:22","date_timestamp":1764732143,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/115653486021445618"]}},{"id":"68448943","content_html":"

Two weeks of wayback: ariadne.space

","summary":"","url":"https://ariadne.space/2025/07/07/two-weeks-of-wayback.html","date_published":"2025-07-08T04:28:10+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2025-07-08 04:28","date_timestamp":1751948890,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/114815722988075979"]}},{"id":"57123894","content_html":"

C SBOMs, and how pkgconf can solve this problem: ariadne.space

","summary":"","url":"https://ariadne.space/2025/02/08/c-sboms-and-how-pkgconf.html","date_published":"2025-02-09T03:45:37+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2025-02-09 03:45","date_timestamp":1739072737,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":["https://social.treehouse.systems/@ariadne/113971871216923889","https://bsky.app/profile/did:plc:nzvhaimlxdiyozqrflpwlzwk/post/3lhppqknufg2n"]}},{"id":"57030013","content_html":"

The XZ Utils backdoor is a symptom of a larger problem: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2024/04/01/the-xz-utils-backdoor-is.html","date_published":"2024-04-02T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2024-04-02 00:00","date_timestamp":1712016000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029981","content_html":"

Most breaches actually begin in corp: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2023/12/06/most-breaches-actually-begin-in.html","date_published":"2023-12-07T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2023-12-07 00:00","date_timestamp":1701907200,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57030014","content_html":"

Writing portable ARM64 assembly: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2023/04/12/writing-portable-arm-assembly.html","date_published":"2023-04-13T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2023-04-13 00:00","date_timestamp":1681344000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029983","content_html":"

Help migrate a community from Discord to something else: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2023/03/07/help-migrate-a-community-from.html","date_published":"2023-03-08T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2023-03-08 00:00","date_timestamp":1678233600,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029984","content_html":"

pkgconf, CVE-2023-24056 and disinformation: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2023/01/23/pkgconf-cve-and-disinformation.html","date_published":"2023-01-24T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2023-01-24 00:00","date_timestamp":1674518400,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029985","content_html":"

Building fair webs of trust by leveraging the OCAP model: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/12/02/building-fair-webs-of-trust.html","date_published":"2022-12-03T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-12-03 00:00","date_timestamp":1670025600,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57030015","content_html":"

Twitter's demise is ActivityPub's future: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/11/11/twitters-demise-is-activitypubs-future.html","date_published":"2022-11-12T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-11-12 00:00","date_timestamp":1668211200,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57030016","content_html":"

The internet is broken due to structural injustice: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/10/26/the-internet-is-broken-due.html","date_published":"2022-10-27T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-10-27 00:00","date_timestamp":1666828800,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57030017","content_html":"

So you've decided to start a free software consultancy: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/08/10/so-youve-decided-to-start.html","date_published":"2022-08-11T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-08-11 00:00","date_timestamp":1660176000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029986","content_html":"

Free software grows as a function of social utility: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/08/05/free-software-grows-as-a.html","date_published":"2022-08-06T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-08-06 00:00","date_timestamp":1659744000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029987","content_html":"

Migrating away from WordPress: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/08/03/migrating-away-from-wordpress.html","date_published":"2022-08-04T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-08-04 00:00","date_timestamp":1659571200,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029988","content_html":"

How efficient can cat(1) be? ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/07/16/how-efficient-can-cat-be.html","date_published":"2022-07-17T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-07-17 00:00","date_timestamp":1658016000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029989","content_html":"

a silo can never provide digital autonomy to its users: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/06/30/a-silo-can-never-provide.html","date_published":"2022-07-01T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-07-01 00:00","date_timestamp":1656633600,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029990","content_html":"

it is correct to refer to GNU/Linux as GNU/Linux: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/03/29/it-is-correct-to-refer.html","date_published":"2022-03-30T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-03-30 00:00","date_timestamp":1648598400,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57030018","content_html":"

the tragedy of gethostbyname: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/03/26/the-tragedy-of-gethostbyname.html","date_published":"2022-03-27T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-03-27 00:00","date_timestamp":1648339200,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029991","content_html":"

how to refresh older stuffed animals: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/02/11/how-to-refresh-older-stuffed.html","date_published":"2022-02-12T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-02-12 00:00","date_timestamp":1644624000,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029992","content_html":"

JSON-LD is ideal for Cloud Native technologies: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/02/10/jsonld-is-ideal-for-cloud.html","date_published":"2022-02-11T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-02-11 00:00","date_timestamp":1644537600,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}},{"id":"57029993","content_html":"

how I wound up causing a major outage of my services and destroying my home directory by accident: ariadne.micro.blog

","summary":"","url":"https://ariadne.micro.blog/2022/02/03/how-i-wound-up-causing.html","date_published":"2022-02-04T00:00:00+00:00","author":{"name":"Ariadne Conill","url":"https://ariadne.space","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Favatars.micro.blog%2Favatars%2F2025%2F05%2F1725515.jpg","_microblog":{"username":"ariadne"}},"_microblog":{"date_relative":"2022-02-04 00:00","date_timestamp":1643932800,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":false,"is_linkpost":true,"is_mention":false,"is_podcast":false,"note":"","syndication":[]}}]}