- Ploum.net En - listes.ploum.net

Offpunk 3.0 "A Community is Born" Release
by Ploum.net (English posts only) 09 Feb '26

09 Feb '26

OFFPUNK 3.0 "A COMMUNITY IS BORN" RELEASE by Ploum on 2026-02-09 https://ploum.net/2026-02-09-offpunk3.html For the last four years, I’ve been developing Offpunk, a command-line Web, Gemini, and Gopher browser that allows you to work offline. And I’ve just released version 3.0. It is probably not for everyone, but I use it every single day. I like it, and it seems I’m not alone! Offpunk, the offline-first command-line browser gemini://offpunk.net Something wonderful happened on the road leading to 3.0: Offpunk became a true cooperative effort. Offpunk 3.0 is probably the first release that contains code I didn’t review line-by-line. Umerdify (by Vincent Jousse), all the translation infrastructure (by the always-present JMCS), and the community packaging effort are areas for which I barely touched the code. So, before anything else, I want to thank all the people involved for sharing their energy and motivation. I’m very grateful for every contribution the project received. I’m also really happy to see "old names" replying from time to time on the mailing list. It makes me feel like there’s an emerging Offpunk community where everybody can contribute at their own pace. There were a lot of changes between 2.8 and 3.0, which probably means some new bugs and some regressions. We count on you, yes, you!, to report them and make 3.1 a lot more stable. It’s as easy at typing "bugreport" in offpunk! From the deepest of my terminal, thank you! But enough with the cheering, let’s jump to… The 11 most important changes in Offpunk 3.0 ============================================ Instructions to install Offpunk gemini://offpunk.net/install.gmi Dowload Offpunk 3.0 https://git.sr.ht/~lioploum/offpunk/refs/v3.0 0. Use Offpunk in your language. ================================ Offpunk is now translatable and has been translated into Catalan, Galician, and Dutch. Step-in to translate Offpunk into your language! (awesome work by JMCS with the help of Bert Livens) How to help translating Offpunk (offpunk.net) gemini://offpunk.net/translation.gmi 1. Openk as a standalone tool ============================= "opnk" standalone tool has been renamed to "openk" to make it more obvious. Openk is a command-line tool that tries to open any file in the terminal and, if not possible, opens it in your preferred software, falling back to xdg-open as a last resort. People using opnk directly should change it everywhere. Users not using "opnk" in their terminal are not affected. 2. See XKCD comics in your terminal =================================== "xkcdpunk" is a new standalone tool that allows displaying XKCD comics directly in your terminal. XKCDpunk in action https://ploum.net/files/offpunk3_xkcd.png 3. Get only the good part and remove cruft for thousands of websites ==================================================================== Offpunk now integrates "unmerdify," a library written by Vincent Jousse that extracts the content of HTML articles using the "ftr-site-config" set of rules maintained by the FiveFilters community. Unmerdify on Codeberg https://codeberg.org/vjousse/unmerdify You can contribute by creating or improving rules for your frequently visited websites. Site Patterns | FiveFilters.org Docs (help.fivefilters.org) https://help.fivefilters.org/full-text-rss/site-patterns.html#github-reposi… fivefilters/ftr-site-config: Site-specific article extraction rules to aid content extractors, feed readers, and 'read later' applications. (github.com) https://github.com/fivefilters/ftr-site-config If no ftr rule is found, Offpunk falls back to "readability," as has been the case since 0.1. "info" will tell you if unmerdify or readability was used to display the content of a page. To use umerdify, users should manually clone the ftr-site-config repository: git clone https://github.com/fivefilters/ftr-site-config.git Then, in their offpunkrc: > set ftr_site_config /path/to/ftr-site-config Automating this step is an objective for 3.1 4. Offpunk goes social with "share" and "reply" =============================================== New social functions: "share" to send the URL of a page by email and "reply" to reply to the author if an email is found. "Reply" will remember the email used for each site/capsule/hole. 5. Browse websites while logged in ================================== Offpunk doesn’t support login into websites. But the new "cookies" command allows you to import a cookie txt file to be used with a given http domain. From your traditional browser (Firefox, Librewolf, Chromium, … ), log into the website. Then export the cookie with the "cookie-txt" extension. Once you have this "mycookie.txt" text file, launch Offpunk and run: > cookies import mycookie.txt https://domain-of-the-cookie.net/ This allows you, for example, to read LWN.NET if you have a subscription. (contributed by Urja) 6. Bigger, better images, even in Gemini ======================================== Images are now displayed by default in gemini and their display size has been increased. Gemini capsule of Thierry Crouzet displayed in Offpunk https://ploum.net/files/gemini_crouzet This can be reverted with the following lines in offpunkrc: > set images_size 40 > set gemini_images false Remember that images are displayed as "blocks" when reading a page but if you access the image URL directly (by following the yellow link beneath), the image will be displayed perfectly if you are using a sixels-compatible terminal. 7. Display hidden RSS/Atom links ================================ If available, links to hidden RSS/Atom feeds are now displayed at the bottom of HTML pages. This makes the "feed" command a lot less useful and allows you to quickly discover interesting new feeds. 8. Display blocked links ======================== Links to blocked domains are now displayed in red by default. A blocked link to X on standblog.org https://ploum.net/files/standblog_blocked.png This can be reverted with the following lines in offpunkrc: > theme blocked_link none 9. Preset themes ================ Support for multiple themes with "theme preset." Existing themes are "offpunk1" (default), "cyan," "yellow" and "bw." Don’t hesitate to contribute yours! 10. Better redirects and true blocks ==================================== "redirects" now operate on the netcache level. This means that no requests to blocked URLs should ever be made (which was still happening before) And many changes, improvements and bugfixes =========================================== - "root" is now smarter and goes to the root of a website, not the domain. Old behaviour can still be achieved with "root /" - "ls" command is deprecated and has been replaced by "links" - new "websearch" command configured to use wiby.me by default - "set default_cmd" allows you to configure what Offpunk will do when pressing enter on an empty command line. By default, it is "links 10." - "view switch" allows you to switch between normal and full view (contributed by Andrew Fowlie) - "help help" will allow you to send an email to the offpunk-users mailing list - "bugreport" will send a bug report to the offpunk-devel mailing list - And, of course, multiple bugfixes… Come and join the Offpunk community! gemini://offpunk.net/help.gmi

1 0

The Disconnected Git Workflow
by Ploum.net (English posts only) 31 Jan '26

31 Jan '26

THE DISCONNECTED GIT WORKFLOW by Ploum on 2026-01-31 https://ploum.net/2026-01-31-offline-git-send-email.html Using git-send-email while being offline and with multiple email ================================================================ accounts ======== > WARNING: the following is a technical reminder for my future self. If you don’t use the "git" software, you can safely ignore this post. The more I work with git-send-email, the less I find the GitHub interface sufferable. Want to send a small patch to a GitHub project? You need to clone the repository, push your changes to your own branch, then ask for a pull request using the cumbersome web interface, replying to comments online while trying to avoid smileys. With git send-email, I simply work offline, do my local commit, then: > git send-email HEAD^ And I’m done. I reply to comments by email, with Vim/Mutt. When the patch is accepted, getting a clean tree usually boils down to: > git pull > git rebase Yeah for git-send-email! Guide to setup git send-email (git-send-email.io) https://git-send-email.io/ And, yes, I do that while offline and with multiple email accounts. That’s one more reason to hate GitHub. How GitHub monopoly is destroying the open source ecosystem (ploum.net) https://ploum.net/2026-01-05-unteaching_github.html We need to talk about your GitHub addiction (ploum.net) https://ploum.net/2023-02-22-leaving-github.html One mail account for each git repository ======================================== The secret is not to configure email accounts in git but to use "msmtp" to send email. Msmtp is a really cool sendmail replacement. In .smtprc, you can configure multiple accounts with multiple options, including calling a command to get your password. account 1 - pro =============== account work host smtp.company.com port 465 user login(a)company.com from ploum(a)company.com password SuPeRstr0ngP4ssw0rd tls_starttls off personal account for FLOSS ========================== account floss host mail.provider.net port 465 user ploum(a)mydomain.net from ploum(a)mydomain.net from ploum*(a)mydomain.net passwordeval "cat ~/incredibly_encrypted_password.txt | rot13" tls_starttls off The important bit here is that you can set multiple "from" addresses for a given account, including a regexp to catch multiple aliases! Now, we will ask git to automatically use the right msmtp account. In your global .gitconfig, set the following: [sendemail] sendmailCmd = /usr/bin/msmtp --set-from-header=on envelopeSender = auto The "envelopesender" option will ensure that the sendemail.from will be used and given to msmtp as a "from address." This might be redundant with "--set-from-header=on" in msmtp but, in my tests, having both was required. And, cherry on the cake, it automatically works for all accounts configured in msmtprc. Older git versions (< 2.33) don’t have sendmailCmd and should do: [sendemail] smtpserver = /usr/bin/msmtp smtpserveroption = --set-from-header=on envelopesender = auto I usually stick to a "ploum-PROJECT(a)mydomain.net" for each project I contribute to. This allows me to easily cut spam when needed. So far, the worst has been with a bug reported on the FreeBSD Bugzilla. The address used there (and nowhere else) has since been spammed to death. In each git project, you need to do the following: 1. Set the email address used in your commit that will appear in "git log" (if different from the global one) > git config user.email "Ploum <ploum-PROJECT(a)mydomain.net>" 2. Set the email address that will be used to actually send the patch (could be different from the first one) > git config sendemail.from "Ploum <ploum-PROJECT(a)mydomain.net>" 3. Set the email address of the developer or the mailing list to which you want to contribute > git config sendemail.to project-devel(a)mailing-list.com Damn, I did a commit with the wrong user.email! =============================================== Yep, I always forget to change it when working on a new project or from a fresh git clone. Not a problem. Just use "git config" like above, then: > git commit --amend --reset-author And that’s it. Working offline =============== I told you I mostly work offline. And, as you might expect, msmtp requires a working Internet connection to send an email. But msmtp comes with three wonderful little scripts: msmtp-enqueue.sh, msmtp-listqueue.sh and msmtp-runqueue.sh. The first one saves your email to be sent in ~/.msmtpqueue, with the sending options in a separate file. The second one lists the unsent emails, and the third one actually sends all the emails in the queue. All you need to do is change the msmtp line in your global .gitconfig to call the msmtpqueue.sh script: [sendemail] sendmailcmd = /usr/libexec/msmtp/msmtpqueue/msmtp-enqueue.sh --set-from- header=on envelopeSender = auto In Debian, the scripts are available with the msmtp package. But the three are simple bash scripts that can be run from any path if your msmtp package doesn’t provide them. You can test sending a mail, then check the ~/.msmtpqueue folder for the email itself (.email file) and the related msmtp command line (.msmtp file). It happens nearly every day that I visit this folder to quickly add missing information to an email or simply remove it completely from the queue. Of course, once connected, you need to remember to run: /usr/libexec/msmtp/msmtpqueue/msmtp-runqueue.sh If not connected, mails will not be sent and will be kept in the queue. This line is obviously part of my do_the_internet.sh script, along with "offpunk --sync". How I use Offpunk (by Ploum) (offpunk.net) https://offpunk.net/workflow_ploum.html It is not only git! =================== If it works for git, it works for any mail client. I use neomutt with the following configuration to use msmtp-enqueue and reply to email using the address it was sent to. set sendmail="/usr/libexec/msmtp/msmtpqueue/msmtp-enqueue.sh --set-from- header=on" unset envelope_from_address set use_envelope_from set reverse_name set from="ploum(a)mydomain.net" alternates ploum[A-Za-z0-9]*(a)mydomain.net Of course, the whole config is a little more complex to handle multiple accounts that are all stored locally in Maildir format through offlineimap and indexed with notmuch. But this is a bit out of the scope of this post. At least, you get the idea, and you could probably adapt it to your own mail client. Conclusion ========== Sure, it’s a whole blog post just to get the config right. But there’s nothing really out of this world. And once the setup is done, it is done for good. No need to adapt to every change in a clumsy web interface, no need to use your mouse. Simple command lines and simple git flow! Sometimes, I work late at night. When finished, I close the lid of my laptop and call it a day without reconnecting my laptop. This allows me not to see anything new before going to bed. When this happens, queued mails are sent the next morning, when I run the first do_the_internet.sh of the day. And it always brings a smile to my face to see those bits being sent while I’ve completely forgotten about them…

1 0

Why there’s no European Google?
by Ploum.net (English posts only) 22 Jan '26

22 Jan '26

WHY THERE’S NO EUROPEAN GOOGLE? by Ploum on 2026-01-22 https://ploum.net/2026-01-22-why-no-european-google.html And why it is a good thing! =========================== > With some adjustments, this post is mostly a translation of a post I published in French three years ago. In light of the European Commission’s "call for evidence on Open Source," and as a professor of "Open Source Strategies" at École Polytechnique de Louvain, I thought it was a good idea to translate it into English as a public answer to that call. Pourquoi n’y a-t-il pas de Google européen ? (ploum.net) https://ploum.net/2023-06-27-un-google-europeen.html European Commission issues call for evidence on open source (lwn.net) https://lwn.net/Articles/1053107/ Google (sorry, Alphabet), Facebook (sorry, Meta), Twitter (sorry, X), Netflix, Amazon, Microsoft. All those giants are part of our daily personal and professional lives. We may even not interact with anything else but them. All are 100% American companies. China is not totally forgotten, with Alibaba, TikTok, and some services less popular in Europe yet used by billions worldwide. What about European tech champions? Nearly nothing, to the great sadness of politicians who believe that the success of a society is measured by the number of billionaires it creates. Despite having few tech-billionaires, Europe is far from ridiculous. In fact, it’s the opposite: Europe is the central place that allowed most of our tech to flourish. The Internet, the interconnection of most of the computers in the world, has existed since the late sixties. But no protocol existed to actually exploit that network, to explore and search for information. At the time, you needed to know exactly what you wanted and where to find it. That’s why the USA tried to develop a protocol called "Gopher." At the same time, the "World Wide Web," composed of the HTTP protocol and the HTML format, was invented by a British citizen and a Belgian citizen who were working in a European research facility located in Switzerland. But the building was on the border with France, and there’s much historical evidence pointing to the Web and its first server having been invented in France. It’s hard to be more European than the Web! It looks like the Official European Joke! (And, yes, I consider Brits Europeans. They will join us back, we miss them, I promise.) The Official European Joke (ploum.net) https://ploum.net/the-european-joke/index.html Gopher is still used by a few hobbyists (like your servitor), but it never truly became popular, except for a very short time in some parts of America. One of the reasons might have been that Gopher’s creators wanted to keep their rights to it and license any related software, unlike the European Web, which conquered the world because it was offered as a common good instead of seeking short-term profits. While Robert Cailliau and Tim Berners-Lee were busy inventing the World Wide Web in their CERN office, a Swedish-speaking Finnish student started to code an operating system and make it available to everyone under the name "Linux." Today, Linux is probably the most popular operating system in the world. It runs on any Android smartphone, is used in most data centers, in most of your appliances, in satellites, in watches and is the operating system of choice for many of the programmers who write the code you use to run your business. Its creator, the European Linus Torvalds, is not a billionaire. And he’s very happy about it: he never wanted to become one. He continued coding and wrote the "git" software, which is probably used by 100% of the software developers around the world. Like Linux, Git is part of the common good: you can use it freely, you can modify it, you can redistribute it, you can sell it. The only thing you cannot do? Privatize it. This is called "copyleft." In 2017, a decentralized and ethical alternative to Twitter appeared: Mastodon. Its creator? A German student, born in Russia, who had the goal of allowing social network users to leave monopolies to have humane conversations without being spied on and bombarded with advertising or pushed-by-algorithm fake news. Like Linux, like git, Mastodon is copyleft and now part of the common goods. Allowing human-scale discussion with privacy and without advertising was also the main motivation behind the Gemini protocol (whose name has since been hijacked by Google AI). Gemini is a stripped-down version of the Web which, by design, is considered definitive. Everybody can write Gemini-related software without having to update it in the future. The goal is not to attract billions of users but to be there for those who need it, even in the distant future. The creator of the Gemini protocol wishes to remain anonymous, but we know that the project started while he was living in Finland. I could continue with the famous VLC media player, probably the most popular media player in the world. Its creator, the Frenchman Jean- Baptiste Kempf, refused many offers that would have made him a very rich man. But he wanted to keep VLC a copyleft tool part of the common goods. Don’t forget LibreOffice, the copyleft office suite maintained by hundreds of contributors around the world under the umbrella of the Document Foundation, a German institution. We often hear that Europeans don’t have, like Americans, the "success culture." Those examples, and there are many more, prove the opposite. Europeans like success. But they often don’t consider "winning against the whole society" as one. Instead, they tend to consider success a collective endeavour. Success is when your work is recognized long after you are gone, when it benefits every citizen. Europeans dream big: they hope that their work will benefit humankind as a whole! We don’t want a European Google Maps! We want our institutions at all levels to contribute to OpenStreetMap (which was created by a British citizen, by the way). Google, Microsoft, Facebook may disappear tomorrow. It is even very probable that they will not exist in fourty or fifty years. It would even be a good thing. But could you imagine the world without the Web? Without HTML? Without Linux? Those European endeavours are now a fundamental infrastructure of all humanity. Those technologies are definitely part of our long-term history. In the media, success is often reduced to the size of a company or the bank account of its founder. Can we just stop equating success with short-term economic growth? What if we used usefulness and longevity? What if we gave more value to the fundamental technological infrastructure instead of the shiny new marketing gimmick used to empty naive wallets? Well, I guess that if we changed how we measure success, Europe would be incredibly successful. And, as Europeans, we could even be proud of it. Proud of our inventions. Proud of how we contribute to the common good instead of considering ourselves American vassals. Some are proud because they made a lot of money while cutting down a forest. Others are proud because they are planting trees that will produce the oxygen breathed by their grandchildren. What if success was not privatizing resources but instead contributing to the commons, to make it each day better, richer, stronger? The choice is ours. We simply need to choose whom we admire. Whom we want to recognize as successful. Whom we aspire to be when we grow up. We need to sing the praises of our true heroes: those who contribute to our commons. Picture by Frans Snik of a LEGO version of the European Extremely Large Telescope. Yes, LEGO is a European invention too. https://commons.wikimedia.org/wiki/File:High-resolution_photo_of_the_E-ELT_…

1 0

Giving University Exams in the Age of Chatbots
by Ploum.net (English posts only) 19 Jan '26

19 Jan '26

GIVING UNIVERSITY EXAMS IN THE AGE OF CHATBOTS by Ploum on 2026-01-19 https://ploum.net/2026-01-19-exam-with-chatbots.html What I like most about teaching "Open Source Strategies" at École Polytechnique de Louvain is how much I learn from my students, especially during the exam. I dislike exams. I still have nightmares about exams. That’s why I try to subvert this stressful moment and make it a learning opportunity. I know that adrenaline increases memorization dramatically. I make sure to explain to each student what I was expecting and to be helpful. Here are the rules: 1. You can have all the resources you want (including a laptop connected to the Internet) 2. There’s no formal time limit (but if you stay too long, it’s a symptom of a deeper problem) 3. I allow students to discuss among themselves if it is on topic. (in reality, they never do it spontanously until I force two students with a similar problem to discuss together) 4. You can prepare and bring your own exam question if you want (something done by fewer than 10% of the students) 5. Come dressed for the exam you dream of taking! This last rule is awesome. Over the years, I have had a lot of fun with traditional folkloric clothing from different countries, students in pajamas, a banana and this year’s champion, my Studentausorus Rex! An inflatable Tyranosaurus Rex passing my exam in 2026 https://ploum.net/files/tyranosaurestudent.jpg My all-time favourite is still a fully clothed Minnie Mouse, who did an awesome exam with full face make-up, big ears, big shoes, and huge gloves. I still regret not taking a picture, but she was the very first student to take my words for what was a joke and started a tradition over the years. Giving Chatbots Choice to the Students ====================================== Rule N°1 implies having all the resources you want. But what about chatbots? I didn’t want to test how ChatGPT was answering my questions, I wanted to help my students better understand what Open Source means. Before the exam, I copy/pasted my questions into some LLMs and, yes, the results were interesting enough. So I came up with the following solution: I would let the students choose whether they wanted to use an LLM or not. This was an experiment. The questionnaire contained the following: > # Use of Chatbots > > Tell the professor if you usually use chatbots (ChatGPT/LLM/whatever) when doing research and investigating a subject. You have the choice to use them or not during the exam, but you must decide in advance and inform the professor. > > Option A: I will not use any chatbot, only traditional web searches. Any use of them will be considered cheating. > > Option B: I may use a chatbot as it’s part of my toolbox. I will then respect the following rules: > 1) I will inform the professor each time information come from a chatbot > 2) When explaining my answers, I will share the prompts I’ve used so the professor understands how I use the tool > 3) I will identify mistakes in answers from the chatbot and explain why those are mistakes > > Not following those rules will be considered cheating. Mistakes made by chatbots will be considered more important than honest human mistakes, resulting in the loss of more points. If you use chatbots, you should be held accountable for the output. I thought this was fair. You can use chatbots, but you will be held accountable for it. Most Students Don’t Want to Use Chatbots ======================================== This January, I saw 60 students. I interacted with each of them for a mean time of 26 minutes. This is a tiring but really rewarding process. Of 60 students, 57 decided not to use any chatbots. For 30 of them, I managed to ask them to explain their choices. For the others, I unfortunately did not have the time. After the exam, I grouped those justifications into four different clusters. I did it without looking at their grades. The first group is the "personal preference" group. They prefer not to use chatbots. They use them only as a last resort, in very special cases or for very specific subjects. Some even made it a matter of personal pride. Two students told me explicitly "For this course, I want to be proud of myself." Another also explained: "If I need to verify what an LLM said, it will take more time!" The second group was the "never use" one. They don’t use LLMs at all. Some are even very angry at them, not for philosophical reasons, but mainly because they hate the interactions. One student told me: "Can I summarize this for you? No, shut up! I can read it by myself you stupid bot." The third group was the "pragmatic" group. They reasoned that this was the kind of exam where it would not be needed. The last and fourth group was the "heavy user" group. They told me they heavily use chatbots but, in this case, were afraid of the constraints. They were afraid of having to justify a chatbot’s output or of missing a mistake. After doing that clustering, I wrote the grade of each student in its own cluster and I was shocked by how coherent it was. Note: grades are between 0 and 20, with 10 being the minimum grade to pass the class. The "personal preference" students were all between 15 and 19, which makes them very good students, without exception! The "proud" students were all above 17! The "never use" was composed of middle-ground students around 13 with one outlier below 10. The pragmatics were in the same vein but a bit better: they were all between 12 and 16 without exceptions. The heavy users were, by far, the worst. All students were between 8 and 11, with only one exception at 16. This is, of course, not an unbiased scientific experiment. I didn’t expect anything. I will not make any conclusion. I only share the observation. But Some Do =========== Of 60 students, only 3 decided to use chatbots. This is not very representative, but I still learned a lot because part of the constraints was to show me how they used chatbots. I hoped to learn more about their process. The first chatbot student forgot to use it. He did the whole exam and then, at the end, told me he hadn’t thought about using chatbots. I guess this put him in the "pragmatic" group. The second chatbot student asked only a couple of short questions to make sure he clearly understood some concepts. This was a smart and minimal use of LLMs. The resulting exam was good. I’m sure he could have done it without a chatbot. The questions he asked were mostly a matter of improving his confidence in his own reasoning. This reminded me of a previous-year student who told me he used chatbots to study. When I asked how, he told me he would tell the chatbot to act as the professor and ask exam questions. As a student, this allowed him to know whether he understood enough. I found the idea smart but not groundbreaking (my generation simply used previous years’ questions). The third chatbot-using student had a very complex setup where he would use one LLM, then ask another unrelated LLM for confirmation. He had walls of text that were barely readable. When glancing at his screen, I immediately spotted a mistake (a chatbot explaining that "Sepia Search is a compass for the whole Fediverse"). I asked if he understood the problem with that specific sentence. He did not. Then I asked him questions for which I had seen the solution printed in his LLM output. He could not answer even though he had the answer on his screen. But once we began a chatbot-less discussion, I discovered that his understanding of the whole matter was okay-ish. So, in this case, chatbots disserved him heavily. He was totally lost in his own setup. He had LLMs generate walls of text he could not read. Instead of trying to think for himself, he tried to have chatbots pass the exam for him, which was doomed to fail because I was asking him, not the chatbots. He passed but would probably have fared better without chatbots. Can chatbots help? Yes, if you know how to use them. But if you do, chances are you don’t need chatbots. A Generational Fear of Cheating =============================== One clear conclusion is that the vast majority of students do not trust chatbots. If they are explicitly made accountable for what a chatbot says, they immediately choose not to use it at all. One obvious bias is that students want to please the teacher, and I guess they know where I am on this spectrum. One even told me: "I think you do not like chatbots very much so I will pass the exam without them" (very pragmatic of him). But I also minimized one important generational bias: the fear of cheating. When I was a student, being caught cheating was a clear zero for the exam. You could, in theory, be expelled from university for aggravated cheating, whatever "aggravated" could mean. During the exam, a good number of students called me panicked because Google was forcing autogenerated answers and they could not disable it. They were very worried I would consider this cheating. First, I realized that, like GitHub, Google has a 100% market share, to the point students don’t even consider using something else a possibility. I should work on that next year. Second, I learned that cheating, however lightly, is now considered a major crime. It might result in the student being banned from any university in the country for three years. Discussing exam with someone who has yet to pass it might be considered cheating. Students have very strict rules on their Discord. I was completely flabbergasted because, to me, discussing "What questions did you have?" was always part of the collaboration between students. I remember one specific exam where we gathered in an empty room and we helped each other before passing it. When one would finish her exam, she would come back to the room and tell all the remaining students what questions she had and how she solved them. We never considered that "cheating" and, as a professor, I always design my exams hoping that the good one (who usually choose to pass the exam early) will help the remaining crowd. Every learning opportunity is good to take! I realized that my students are so afraid of cheating that they mostly don’t collaborate before their exams! At least not as much as what we were doing. In retrospect, my instructions were probably too harsh and discouraged some students from using chatbots. Stream of Consciousness ======================= My 2025 banana student! https://ploum.net/files/banane_exam.jpg Another innovation I introduced in the 2026 exam was the stream of consciousness. I asked them to open an empty text file and keep a stream of consciousness during the exam. The rules were the following: > In this file, please write all your questions and all your answers as a "stream of consciousness." This means the following rules: > > 1. Don’t delete anything. > 2. Don’t correct anything. > 3. Never go backward to retouch anything. > 4. Write as thoughts come. > 5. No copy/pasting allowed (only exception: URLs) > 6. Rule 5. implies no chatbot for this exercice. This is your own stream of consciousness. > > Don’t worry, you won’t be judged on that file. This is a tool to help you during the exam. You can swear, you can write wrong things. Just keep writing without deleting. If you are lost, write why you are lost. Be honest with yourself. > > This file will only be used to try to get you more points, but only if it is clear that the rules have been followed. I asked them to send me the file within 24h after the exam. Out of 60 students, I received 55 files (the remaining 5 were not penalized). There was also a bonus point if you sent it to the exam git repository using git-send-email, something 24 managed to do correctly. The results were incredible. I did not read them all but this tool allowed me to have a glimpse inside the minds of the students. One said: "I should have used AI, this is the kind of question perfect for AI" (he did very well without it). For others, I realized how much stress they had but were hiding. I was touched by one stream of consciousness starting with "I’m stressed, this doesn’t make any sense. Why can’t we correct what we write in this file" then, 15 lines later "this is funny how writing the questions with my own words made the problem much clearer and how the stress start to fade away". And yes, I read all the failed students and managed to save a bunch of them when it was clear that they, in fact, understood the matter but could not articulate it well in front of me because of the stress. Unfortunately, not everybody could be saved. Conclusion ========== My main takeaway is that I will keep this method next year. I believe that students are confronted with their own use of chatbots. I also learn how they use them. I’m delighted to read their thought processes through the stream of consciousness. Like every generation of students, there are good students, bad students and very brilliant students. It will always be the case, people evolve (I was, myself, not a very good student). Chatbots don’t change anything regarding that. Like every new technology, smart young people are very critical and, by defintion, smart about how they use it. The problem is not the young generation. The problem is the older generation destroying critical infrastructure out of fear of missing out on the new shiny thing from big corp’s marketing department. Most of my students don’t like email. An awful lot of them learned only with me that Git is not the GitHub command-line tool. It turns out that by imposing Outlook with mandatory subscription to useless academic emails, we make sure that students hate email (Microsoft is on a mission to destroy email with the worst possible user experience). I will never forgive the people who decided to migrate university mail servers to Outlook. This was both incompetence and malice on a terrifying level because there were enough warnings and opposition from very competent people at the time. Yet they decided to destroy one of the university’s core infrastructures and historical foundations (UCLouvain is listed by Peter Salus as the very first European university to have a mail server, there were famous pioneers in the department). By using Outlook, they continue to destroy the email experience. Out of 55 streams of consciousness, 15 ended in my spam folder. All had their links destroyed by Outlook. And university keep sending so many useless emails to everyone. One of my students told me that they refer to their university email as "La boîte à spams du recteur" (Chancellor’s spam inbox). And I dare to ask why they use Discord? Another student asked me why it took four years of computer engineering studies to get a teacher explaining to them that Git was not GitHub and that GitHub was part of Microsoft. He had a distressed look: "How could I have known? We were imposed GitHub for so many exercises!" How GitHub monopoly is destroying the open source ecosystem (ploum.net) https://ploum.net/2026-01-05-unteaching_github.html Each year, I tell my students the following: > It took me 20 years after university to learn what I know today about computers. And I’ve only one reason to be there in front of you: be sure you are faster than me. Be sure that you do it better and deeper than I did. If you don’t manage to outsmart me, I will have failed. > > Because that’s what progress is about. Progress is each generation going further than the previous one while learning from the mistakes of olders. I’m there to tell you about my own mistakes and the mistakes of my generation. > > I know that most of you are only there to get a diploma while doing the minimal required effort. Fair enough, that’s part of the game. Challenge accepted. I will try to make you think even if you don’t intend to do it. In earnest, I have a lot of fun teaching, even during the exam. For my students, the mileage may vary. But for the second time in my life, a student gave me the best possible compliment: — You know, you are the only course for which I wake up at 8AM. To which I responded: – This is reciprocal. I hate waking up early, except to teach in front of you.

1 0

How Github monopoly is destroying the open source ecosystem
by Ploum.net (English posts only) 05 Jan '26

05 Jan '26

HOW GITHUB MONOPOLY IS DESTROYING THE OPEN SOURCE ECOSYSTEM by Ploum on 2026-01-05 https://ploum.net/2026-01-05-unteaching_github.html I teach a course called "Open Source Strategies" at École Polytechnique de Louvain, part of the University of Louvain. As part of my course, students are required to find an open source project of their choice and make a small contribution to it. They send me a report through our university Gitlab. To grade their work, I read the report and explore their public interactions with the project: tickets, comments, pull requests, emails. This year, during my review of the projects of the semester, Github decided to block my IP for one hour. During that hour, I simply could not access Github. Github telling me I made too many requests https://ploum.net/files/githubblock.png It should be noted that, even if I want to get rid of it, I still have a Github account and I was logged in. We need to talk about your Github addiction (ploum.net) https://ploum.net/2023-02-22-leaving-github.html The block happened again the day after. This gave me pause. I wondered how many of my students’ projects were related to projects hosted on Github. I simply went into the repository and counted 238 students reports in the last seven years: > ls -l projects_*/*.md | wc -l > 238 Some reports might be missing. Also, I don’t have the reports before 2019 in that repository. But this is a good approximation. Now, let’s count how many reports don’t contain "github.com". > grep -L github.com projects_*/*.md | wc -l > 7 Wow, that’s not a lot. I then wondered what those projects were. It turns out that, out of those 7, 6 students simply forgot to add the repository URL in their report. They used the project webpage or no URL at all. In those 6 cases, the repository happened to be hosted on Github. In my course, I explain at great length the problem of centralisation. I present alternatives: Gitlab, Codeberg, Forgejo, Sourcehut but also Fossil, Mercurial, even Radicle. Radicle: peer-to-peer collaboration with Git (lwn.net) https://lwn.net/Articles/966869/ From Git to Fossil (lucio.albenga.es) gopher://lucio.albenga.es/0/lfa/en/articles/2025/20251112-from_git_to_fossil.txt I literally explain to my students to look outside of Github. Despite this, out of 238 students tasked with contributing to the open source project of their choice, only one managed to avoid Github. The immediate peril of centralisation ===================================== As it was demonstrated to me for one hour, the immediate peril of centralisation is that you can suddenly lose access to everything. For one hour, I was unable to review any of my students’ projects. Not a great deal, but it serves as a warning. While writing this post, I was hit a second time by this block. A few years ago, one of my friends was locked out of his Google account while travelling for work at the other end of the world. Suddenly, his email stopped working, most of the apps on his phone stopped working, and he lost access to all his data "in the clouds". Fortunately, he still had a working email address (not on Google) and important documents for his trip were on his laptop hard drive. Through personal connections at Google, he managed to recover his account a few weeks later. He never had any explanations. Et si vos comptes disparaissaient demain ? (ploum.net) https://ploum.net/et-si-vos-comptes-disparaissaient-demain/index.html More recently, Paris Buttfield-Addison experienced the same thing with his Apple account. His whole online life disappeared, and all his hardware was suddenly bricked. Being heavily invested in Apple doesn’t protect you. 20 Years of Digital Life, Gone in an Instant, thanks to Apple (hey.paris) https://hey.paris/posts/appleid/ I’m sure the situation will be resolved because, once again, we are talking about a well-connected person. But this happens. All the time. Institutions are blindly trusting monopolies that could lock you out randomly or for political reasons as experienced by the French magistrate Nicolas Guillou. The Judge at the End of Europe (www.project-syndicate.org) https://www.project-syndicate.org/commentary/europe-enforcing-us-sanctions-… Worst: as long as we are not locked out, we offer all our secrets to a country that could arbitrarily decide to attack yours and kidnap your president. I wonder how much Venezuelan sensitive information was in fact stored on Google/Microsoft services and accessed by the US military to prepare their recent strike. Big institutions like my Alma Mater or entire countries have no excuse to still use American monopolies. This is either total incompetence or corruption, probably a bit of both. The subtle peril of centralisation ================================== As demonstrated by my Github anecdote, individuals have little choice. Even if I don’t want a Github account, I’m mostly forced to have one if I want to contribute or report bugs to projects I care about. I’m forced to interact with Github to grade my students’ projects. 237 out of 238 is not "a lot." It’s everyone. There’s something more than "most projects use Github." According to most of my students, the hardest part of contributing to an open source project is finding one. I tell them to look for the software they use every day, to investigate. But the vast majority ends up finding "something that looks easy." That’s where I realised all this time my students had been searching for open source projects to contribute to on Github only. It’s not that everything is on Github, it is that none of my students can imagine looking outside of Github! The outlier? The one student who contributed to a project not on Github? We discussed his needs and I pointed him to the project he ended up choosing. Github’s centralisation invisibilised a huge part of the open source world. Because of that, lots of projects tend to stay on Github or, like Python, to migrate to Github. The solution ============ Each year, students come up with very creative ways not to do what I expect while still passing. Last year, half of the class was suddenly committing reports with broken encoding in the file path. I had never seen that before and I asked how they managed to do it. It turns out that half the class was using VS Code on Windows to do something as simple as "git commit" and they couldn’t use the git command line. This year, I forced them to use the command line on an open source OS, which solved the previous year’s issue. But a fair number of the reports are clearly ChatGPT-generated, which was less obvious last year. This is sad because it probably took them more effort to write the prompt and, well, those reports are mostly empty of substance. I would have preferred the prompt alone. I’m also sad they thought I would not notice. But my main mistake was a decade-long one. For all those years, I asked my students to find a project to contribute to. So they blindly did. They didn’t try to think about it. They went to Github and started browsing projects. For all those years, I involuntarily managed to teach my students that Open Source was a corner of the web, a Microsoft-managed repository of small software one can play with. Nothing serious. This is all my fault. I know the solution. Starting this year, students will be forced to contribute to a project they use, care about or, at the very least, truly want to use in the long term. Not one they found randomly on Github. If they think they don’t use open source software, they should take a better look at their own stack. And if they truly don’t use any open source software at all and don’t want to use any, why do they want to follow a course about the subject in the first place?

1 0

Prepare for That Stupid World
by Ploum.net (English posts only) 19 Dec '25

19 Dec '25

PREPARE FOR THAT STUPID WORLD by Ploum on 2025-12-19 https://ploum.net/2025-12-19-prepare-for-that-world.html You probably heard about the Wall Street Journal story where they had a snack-vending machine run by a chatbot created by Anthropic. At first glance, it is funny and it looks like journalists doing their job criticising the AI industry. If you are curious, the video is there (requires JS). We Let AI Run Our Office Vending Machine. It Lost Hundreds of Dollars.(www.wsj.com) https://www.wsj.com/tech/ai/anthropic-claude-ai-vending-machine-agent-b7e84… But what appears to be journalism is, in fact, pure advertising. For both WSJ and Anthropic. Look at how WSJ journalists are presented as "world class", how no-subtle the Anthropic guy is when telling them they are the best and how the journalist blush at it. If you are taking the story at face value, you are failing for the trap which is simple: "AI is not really good but funny, we must improve it." The first thing that blew my mind was how stupid the whole idea is. Think for one second. One full second. Why do you ever want to add a chatbot to a snack vending machine? The video states it clearly: the vending machine must be stocked by humans. Customers must order and take their snack by themselves. The AI has no value at all. Automated snack vending machine is a solved problem since nearly a century. Why do you want to make your vending machine more expensive, more error-prone, more fragile and less efficient for your customers? What this video is really doing is normalising the fact that "even if it is completely stupid, AI will be everywhere, get used to it!" The Anthropic guy himself doesn’t seem to believe his own lies, to the point of making me uncomfortable. Toward the ends, he even tries to warn us: "Claude AI could run your business but you don’t want to come one day and see you have been locked out." At which the journalist adds, "Or has ordered 100 PlayStations." And then he gives up: "Well, the best you can do is probably prepare for that world." Still from the video where Anthropic’s employee says "probably prepare for that world" https://ploum.net/files/prepareworld.png None of the world class journalists seemed to care. They are probably too badly paid for that. I was astonished to see how proud they were, having spent literally hours chatting with a bot just to get a free coke, even queuing for the privilege of having a free coke. A coke that cost a few minutes of minimum-wage work. So the whole thing is advertising a world where chatbots will be everywhere and where world-class workers will do long queue just to get a free soda. And the best advice about it is that you should probably prepare for that world.

1 0

How We Lost Communication to Entertainment
by Ploum.net (English posts only) 15 Dec '25

15 Dec '25

HOW WE LOST COMMUNICATION TO ENTERTAINMENT by Ploum on 2025-12-15 https://ploum.net/2025-12-15-communication-entertainment.html > All our communication channels are morphed into content distribution networks. We are more and more entertained but less and less connected. A few days ago, I did a controversial blog post about Pixelfed hurting the Fediverse. I defended the theory that, in a communication network, you hurt the trust in the whole network if you create clients that arbitrarily drop messages, something that Pixelfed is doing deliberately. It gathered a lot of reactions. Is Pixelfed sawing off the branch that the Fediverse is sitting on? (ploum.net) https://ploum.net/2025-12-04-pixelfed-against-fediverse.html When I originally wrote this post, nearly one year ago, I thought that either I was missing something or Dansup, Pixelfed’s creator, was missing it. We could not both be right. But as the reactions piled in on the Fediverse, I realised that such irreconcilable opinions do not arise only from ignorance or oversight. It usually means that both parties have vastly different assumptions about the world. They don’t live in the same world. Two incompatible universes ========================== I started to see a pattern in the two kinds of reactions to my blog post. There were people like me, often above 40, who like sending emails and browsing old-fashioned websites. We think of ActivityPub as a "communication protocol" between humans. As such, anything that implies losing messages without feedback is the worst thing that could happen. Not losing messages is the top priority of a communication protocol. And then there are people like Dansup, who believe that ActivityPub is a content consumption protocol. It’s there for entertainment. You create as many accounts as the kinds of media you want to consume. Dansup himself is communicating through a Mastodon account, not a Pixelfed one. Many Pixelfed users also have a Mastodon account, and they never questioned that. They actually want multiple accounts for different use cases. On the Fediverse threads, nearly all the people defending the Pixelfed philosophy posted from Mastodon accounts. They usually boasted about having both a Mastodon and a Pixelfed account. A multiplicity of accounts ========================== To me, the very goal of interoperability is not to force you into creating multiple accounts. Big Monopolies have managed to convince people that they need one account on each platform. This was done, on purpose, for purely unethical reasons in order to keep users captive. That brainwash/marketing is so deeply entrenched that most people cannot see an alternative anymore. It looks like a natural law: you need an account on a platform to communicate with someone on that platform. That also explains why most politicians want to "regulate" Facebook or X. They think it is impossible not to be on those platforms. They believe those platforms are "public spaces" while they truly are "private spaces trying to destroy all other public spaces in order to get a monopoly." People flock to the Fediverse with this philosophy of "one platform, one account", which makes no sense if you truly want to create a federated communication protocol like email or XMPP. But Manuel Moreale cracked it for me: the Fediverse is not a communication network. ActivityPub is not a communication protocol. The spec says it: ActivityPub is a protocol to build a "social platform" whose goal is "to deliver content." > The ActivityPub protocol is a decentralised social networking protocol based upon the ActivityStreams 2.0 data format. It provides a client to server API for creating, updating and deleting content, as well as a federated server-to-server API for delivering notifications and content. (official W3C definition of ActivityPub) On open protocols (manuelmoreale.com) https://manuelmoreale.com/thoughts/on-open-protocols No more communication ===================== But aren’t social networks also communication networks? That’s what I thought. That’s how they historically were marketed. That’s what we all believed during the "Arab Spring." But that was a lie. Communication networks are not profitable. Social networks are entertainment platforms, media consumption protocols. Historically, they disguised themselves as communication platforms to attract users and keep them captive. The point was never to avoid missing a message sent from a fellow human being. The point was always to fill your time with "content." We dreamed of decentralised social networks as "email 2.0." They truly are "television 2.0." They are entertainment platforms that delegate media creation to the users themselves the same way Uber replaced taxis by having people drive others in their own car. But what was created as "ride-sharing" was in fact a way to 1) destroy competition and 2) make a shittier service while people producing the work were paid less and lost labour rights. It was never about the social! The lost messages ================= My own interpretation is that social media users don’t mind losing messages because they were raised on algorithmic platforms that did that all the time. They don’t see the point in trusting a platform because they never experienced a trusted means of communication. Facebook m’a rendu injoignable (ploum.net) https://ploum.net/facebook-ma-rendu-injoignable/index.html Now that I write it, it may also explain why instant messaging became the dominant communication medium: because if you don’t receive an immediate answer, you don’t even trust the recipient to have received your messages. In fact, even if the message was received, you don’t even trust the recipient's attention span to remember the message. Multiple studies have confirmed that we don’t remember the vast majority of what we see while doomscrolling. While the "view" was registered to increase statistics, we don’t have the slightest memory of most of that content, even after only a few seconds. It thus makes sense not to consider social media as a means of communication at all. There’s no need for a reliable communication protocol if we assume that human brains are not reliable enough to handle asynchronous messages. A Society That Lost Focus (ploum.net) https://ploum.net/2024-03-18-lost-focus.html It’s not Dansup who is missing something. It is me who is unadapted to the current society. I understand now that Pixelfed was only following some design decisions and protocol abuses fathered by Mastodon. Pixelfed was my own "gotcha" moment because I never understood Instagram in the first place, and, in my eyes, Pixelfed was no better. But if you take that route, Mastodon is no better than Twitter. Many reactions pointed, justly, that other Fediverse tools such as PeerTube, WriteFreely, or Mobilizon were just not displaying messages at all. I didn’t consider it a big problem because they never pretended to do it in the first place. Nobody uses those tools to follow others. There’s no expectation. Those platforms are "publish only." But this is still a big flaw in the Fediverse! Someone could, using autocompletion, send a message pinging your PeerTube address and you will never see it. Try autocomplete "@ploum" from your Mastodon account and guess which suggestion is the only one that will send me a valid notification! On a more positive note, I should give credit to Dansup for announcing that Pixelfed will soon allow people to optionally "not drop" text messages. How we lost email ================= I cling to asynchronous reliable communications, but those are disappearing. I use email a lot because I see it as a true means of communication: reliable, asynchronous, decentralised, standardised, manageable offline with my own tools. But many people, even barely younger than me, tell me that email is "too formal" or "for old people" or "even worse than social network feeds." And they are probably right. I like it because I’ve learned to use it. I apply a strong inbox 0 methodology. If I don’t reply or act on your email, it is because I decided not to. I’m actively keeping my inbox clean by sharing only disposable email addresses that I disable once they start to be spammed. Why you are probably not at inbox 0 (but should be) (ploum.net) https://ploum.net/why-you-are-not-at-inbox-0/index.html But for most people, their email inbox is simply one more feed full of bad advertising. They have 4 or 5 digit unread count. They scroll through their inbox like they do through their social media feeds. Boringness of communications ============================ The main problem with reliable communication protocols? It is a mostly solved problem. Build simple websites, read RSS feeds, write emails. Use IRC and XMPP if you truly want real-time communication. Those are working and working great. And because of that, they are boring. Communications protocols are boring. They don’t give you that well- studied random hit of dopamine. They don’t make you addicted. On Social Media (gem.sdf.org) gemini://gem.sdf.org/beej/blog/2025-01-10-socialmedia.gmi Experiential Pica (www.lesswrong.com) https://www.lesswrong.com/posts/9ZodFr54FtpLThHZh/experiential-pica They don’t make you addicted which means they are not hugely profitable and thus are not advertised. They are not new. They are not as shiny as a new app or a new random chatbot. The problem with communication protocols was never the protocol part. It’s the communication part. A few sad humans never wanted to communicate in the first place and managed to become billionaires by convincing the rest of mankind that being entertained is better than communicating with other humans. As long as I’m not alone ======================== We believe that a communication network must reach a critical mass to be really useful. People stay on Facebook to "stay in touch with the majority." I don’t believe that lie anymore. I’m falling back to good old mailing lists. I’m reading the Web and Gemini while offline through Offpunk. I also handle my emails asynchronously while offline. Offpunk, an offline-first command-line browser (offpunk.net) https://offpunk.net/ There Is No Content on Gemini (ploum.net) https://ploum.net/2022-10-05-there-is-no-content-on-gemini.html I may be part of an endangered species. It doesn’t matter. I made peace with the fact that I will never get in touch with everyone. As long as there are people posting on their gemlogs or blogs with RSS feeds, as long as there are people willing to read my emails without automatically summarising them, there will be a place for those who want to simply communicate. A protected reserve. You are welcome to join! https://ploum.net/files/framagroupes.jpg Illustration of a message board piled with messages by David Revoy (CC By 4.0) https://www.peppercarrot.com/en/viewer/framasoft__2023-05-20_Framalistes_by… Illustration of animal meeting at an intersection with messages by David Revoy (CC By 4.0) https://www.peppercarrot.com/en/viewer/framasoft__2023-05-20_Framagroupes_b…

1 0

Is Pixelfed sawing off the branch that the Fediverse is sitting on?
by Ploum.net (English posts only) 04 Dec '25

04 Dec '25

IS PIXELFED SAWING OFF THE BRANCH THAT THE FEDIVERSE IS SITTING ON? by Ploum on 2025-12-04 https://ploum.net/2025-12-04-pixelfed-against-fediverse.html > In January 2025, I became aware that there was a real problem with Pixelfed, the "Instagram inspired Fediverse client". The problem is threatening the whole Fediverse. As Pixelfed received a lot of media attention, I choose to wait. In March 2025, I decided that the situation was quieter and wrote an email to Dansup, Pixelfed’s maintainer, with an early draft of this post. Dan’s promptly replied, in a friendly tone. But didn’t want to acknowledge the problem which I’ve confirmed many times with Pixelfed users. I want to bring the debate on the public place. If I’m wrong, I will at least understand why. If Dan is wrong on this very specific issue, we will at least open the debate. This post will be shared to my Fediverse audience through my @ploum@mamot.fr Mastodon account. But Pixelfed users will not see it. Even if they follow me, even if many people they follow boost it. Instead, they will see a picture of my broken keyboard that I posted a week ago. The latest post of Ploum according to Pixelfed. https://ploum.net/files/pixelfedploum.png Ploum’s real Fediverse timeline (mamot.fr) https://mamot.fr/@ploum That’s because, despite its name, Pixelfed is NOT a true Fediverse application. It does NOT respect the ActivityPub protocol. Any Pixelfed user following my @ploum@mamot.fr will only see a very small fraction of what I post. They may not see anything from me for months. But why? Simple! The Pixelfed app has unilaterally decided not to display most Fediverse posts for the arbitrary reason that they do not contain a picture. This is done on purpose and by design. Pixelfed is designed to mimic Instagram. Displaying text without pictures was deliberately removed from the code (it was possible in previous versions) in order to make the interface prettier. This is unlike a previous problem where Pixelfed would allow unauthorised users to read private posts from unknowing fediverse users, which was promptly fixed. Pixelfed leaks private posts from other Fediverse instances (fokus.cool) https://fokus.cool/2025/03/25/pixelfed-vulnerability.html In this case, we are dealing with a conscious design decision by the developers. Being pretty is more important than transmitting messages. Technically, this means that a Pixelfed user P will think that he follows someone but will miss most of the content. On the opposite, the sender, for example a Mastodon user M, will believe that P has received his message because M follows him. This is a grave abuse of the protocol: messages are silently dropped. It stands against everything the Fediverse is trying to do: allow users to communicate. My experience with open protocols allows me to say that it is a critical problem and that it cannot be tolerated. Would you settle for a mail provider which silently drop all emails you receive if they contain the letter "P"? The principle behind a communication protocol is to create trust that messages are transmitted. Those messages could, of course, be filtered by the users but those filters should be manually triggered and always removable. If a message is not delivered, the sender should be notified. In 2025, I’ve read several articles about people trying the Fediverse but leaving it because "there’s not enough content despites following lot of people". Due to the Pixelfed buzz in January, I’m now wondering: "how many of those people were using Pixelfed and effectively missing most of the Fediverse content?" The importance of respecting the protocol ========================================= I cannot stress enough how important that problem is. If Pixelfed becomes a significant actor, its position will gravely undermine the ActivityPub protocol to the point of making it meaningless. Imagine a new client, TextFed, that will never display posts with pictures. That makes as much sense as the opposite. Lots of people, like me, find pictures disturbing and some people cannot see pictures at all. So TextFed makes as much sense as Pixelfed. Once you have TextFed, you realise that TextFed and PixelFed users can follow each other, they can comment on post from Mastodon users, they can exchange private messages but they will never be able to see post from each other. For any normal users, there’s no real way to understand that they miss some messages. And even if you do, it is very hard to find that the cause is the absence of pictures in them make them "not pretty enough" to Pixelfed developers. Worse of all : some Mastodon posts do contain a picture but are not displayed in Pixelfed. That’s because the picture is from a link preview and was not manually uploaded. Try to explain that to your friends that reluctantly followed you on the Fediverse. Have a look at any Mastodon account and try to guess which posts will we showed to the Pixelfed followers! That’s not something any normal human is supposed to understand. For Pixelfed users, there’s no way to see they are missing on some content. For Mastodon users, there’s no way to see that some of their audience is missing on some content. With the trust in the protocol broken, people will revert to create Mastodon accounts to follow Mastodon, Pixelfed accounts to follow Pixelfed and Textfed to follow Textfed. Even if it is not 100% needed, that’s the first intuition. It’s already happening around me: I’ve witnessed multiple people with a Mastodon account creating a Pixelfed account to follow Pixelfed users. They do this naturally because they were used to do that with Twitter and Instagram. Congratulations, you have successfully broken ActivityPub and, as a result, the whole Fediverse. What Meta was not able to do with Threads, the Fediverse did it to itself. Because it was prettier. How to Kill a Decentralised Network (such as the Fediverse) (ploum.net) https://ploum.net/2023-06-23-how-to-kill-decentralised-networks.html Pixelfed will be forced to comply anyway ======================================== Now, imagine for a moment that Pixelfed takes off (which is something I wish for and would be healthy for the Fediverse) and that interactions are strong between Mastodon users and Pixelfed users (also something I wish for). I let you imagine how many bug reports developers will receive about "some posts are not appearing in my followers timeline" or "not appearing in my timeline". This will result in a heavy pressure for Pixelfed devs to implement text-only messages. They will, at some point, be forced to comply, having eroded trust in the Fediverse for nothing. Once a major actor in a decentralised network starts to mess with the protocol, there are only two possible output: either that actor lose steam or that actor becomes dominant enough to impose its own vision of the protocol. In fact, there’s a third option: the whole protocol becomes irrelevant because nobody trust it anymore. What if Pixelfed becomes dominant? ================================== But imagine that Pixelfed is now so important that they can stick to their guns and refuse to display text messages. Well, there’s a simple answer: every other fediverse software will now add an image with every post. Mastodon will probably gain a configurable "default picture to attach to every post so your posts are displayed in Pixelfed". And now, without having formerly formalised it, the ActivityPub protocol requires every message to have a picture. That’s how protocol works. It already happened: that’s how all mail clients started to implement the winmail.dat bug. The Winmail.dat Syndrome (ploum.net) https://ploum.net/winmail-dat-syndrome/index.html Sysadmins handling storage and bandwidth for the Fediverse thank you in advance. We are not there yet ==================== Fortunately, we are not there yet. Pixelfed is still brand new. It still can go back to displaying every message an end user expect to see when following another Fediverse user. I stress out that it should be by default, not a hidden setting. Nearly all Pixelfed users I’ve asked were unaware of that problem. They thought that if they follow someone on the Fediverse, they should, by default, see all their public posts. There’s no negotiation. No warning on the Pixelfed website will be enough. In a federated communication system, filters should be opt-in. If fact, that’s what older versions of Pixelfed were doing. But, while text messages MUST be displayed by default (MUST as in RFC), they can still me displayed as less important. For example, one could imagine having them smaller or whatever you find pretty as long as it is clear that the message is there. I trust Pixelfed devs to be creative here. The Fediverse is growing. The Fediverse is working well. The Fediverse is a tool that we urgently ned in those trying times. Let’s not saw off the branch on which we stand when we need it the most. Illustration by David Revoy, CC-By-SA https://www.peppercarrot.com/en/viewer/misc__2024-09-09_My-Neighboor-Mastod…

1 0

Don’t Do Snake Oil Writing
by Ploum.net (English posts only) 26 Nov '25

26 Nov '25

DON’T DO SNAKE OIL WRITING by Ploum on 2025-11-26 https://ploum.net/2025-11-26-snake-oil-writing.html In computer security, it is often said that the fact you don’t see any vulnerability in the code you write is no proof that your code is secure. It is proof that you are blind to all the mistakes you made in your shitty code. The less competent you are, the more confident you will be and the more vulnerable code you will write. And people will exploit vulnerabilities of your code. Even if you honestly believe in your aptitude, you will end up writing "snake-oil" security systems. Schneier on Security (www.schneier.com) https://www.schneier.com/crypto-gram/archives/1999/0215.html#snakeoil But I’m not a cryptographer. I’m a writer. When you use an LLM to generate text, the fact that you find the output good doesn’t mean that it is good. It only means that you are blind to the shit you’ve generated. The simple idea that you think you could get people read your bland generated text and not notice is the proof that you are totally incompetent at writing. You should not trust yourself with that the same way I would never trust myself to check if LLM-generated source code is secure. Did you really expect nobody to notice that your text was generated? Seriously? People will notice how stupid your writing is. Some, like myself, will be offended. Other will simply walk away with a bad feeling. One sure is certain: nobody will think it is interesting. Nobody will care about what you wrote. People will simply stop reading you. People will stop sharing you, stop discussing about your writing. Because you are doing snake-oil writing. Fortunately, the cure is very simple. Even if you think that what you produce is bad, be honest, straight. People will notice that you want to improve. Some will even offer advice. You will learn. You will make mistakes, which is an essential part of learning. If you acknowledge those mistakes, people will appreciate your work even more. Writing secure code is not about magical genius thinking from behind a Guy Fawkes mask. It is about tediously learning patterns of vulnerabilities, about humility that you can’t catch everything alone. Writing text is not about doing beautiful sentences. It is thinking about the information you really want to transmit. Some really good writers make awful sentences. But they are still good because each sentence gives you something, because you feel information and emotions flowing from the writer to you. If you are tempted to use an LLM to generate a text, don’t publish the output of the LLM. Publish the prompt! That’s where your information is. It is what people want to hear. You were tricked into doubting your own ability to write and to use a very costly text generator instead of trusting yourself. This impairs your ability to learn, to improve while insulting all the people that may read you. Like a cocaine addict, you are destroying yourself and destroying your reputation by screaming like a maniac. But you feel good because your brain is altered to believe that "you are better and more productive". Stop the slop while you can. If you are holding an MBA and using LLM to generate marketing content, it may be too late. If that’s the case, follow Bill Hicks advice and, please, kill yourself! Picture by Jeff Nelson https://commons.wikimedia.org/wiki/File:Snake_oil_ink_stamp.jpg

1 0

How I felt in love with calendar.txt
by Ploum.net (English posts only) 03 Sep '25

03 Sep '25

HOW I FELT IN LOVE WITH CALENDAR.TXT by Ploum on 2025-09-03 https://ploum.net/2025-09-03-calendar-txt.html The more I learn about Unix tools, the more I realise we are reinventing everyday Rube Goldberg’s wheels and that Unix tools are, often, elegantly enough. Months ago, I discovered calendar.txt. A simple file with all your dates which was so simple and stupid that I wondered 1) why I didn’t think about it myself and, 2) how it could be useful. Calendar.txt (terokarvinen.com) https://terokarvinen.com/2021/calendar-txt/ I downloaded the file and tried it. Without thinking much about it, I realised that I could add the following line to my offpunk startup: > !grep `date -I` calendar.txt --color And, just like that, I suddenly have important things for my day everytime I start Offpunk. In my "do_the_internet.sh", I added the following: > grep `date -I`calendar.txt --color -A 7 Which allows me to have an overview of the next seven days. But what about editing? This is the alias I added to my shell to automatically edit today’s date: > alias calendar="vim +/`date -I` ~/inbox/calendar.txt" It feels so easy, so elegant, so simple. All those aliases came naturally, without having to spend more than a few seconds in the man page of "date". No need to fiddle with a heavy web interface. I can grep through my calendar. I can edit it with vim. I can share it, save it and synchronise it without changing anything else, without creating any account. Looking for a date, even far in the future, is as simple as typing "/YEAR-MONTH-DAY" in vim. Recurring events ================ The icing on the cake became apparent when I received my teaching schedule for the next semester. I had to add a recurring event every Tuesday minus some special cases where the university is closed. Not a big deal. I do it each year, fiddling with the web interface of my calendar to find the good options to make the event recurrent then removing those special cases without accidentally removing the whole series. It takes at most 10 minutes, 15 if I miss something. Ten minutes of my life that I hate, forced to use a mouse and click on menus which are changing every 6 months because, you know, "yeah, redesign". But, with my calendar.txt, it takes exactly 15 seconds. > /Tue To find the first Tuesday. > i To write the course number and classroom number, escape then > n.n.n.n.n.n.nn.n.n.n.nn.n.n.n.n. I’m far from being a Vim expert but this occurred naturally, without really thinking about the tool. I was only focused on the date being correct. It was quick and pleasant. Shared events and collaboration =============================== I read my email in Neomutt. When I’m invited to an event, I must open a browser to access the email through my webmail and click the "Yes" button in order to have it added to my calendar. Events I didn’t respond show in my calendar, even if I don’t want them. It took me some settings-digging not to display events I refused. Which is kinda dumb but so are the majority of our tools those days. With calendar.txt, I manually enter the details from the invitation, which is not perfect but takes less time than opening a browser, login into a webmail and clicking a button while waiting at each step the loading of countless of JavaScript libraries. Invitations are rare enough that I don’t mind entering the details by hand. But I’m thinking about doing a small bash script that would read an ICS file and add it to calendar.txt. It looks quite easy to do. I also thought about doing the reverse : a small script that would create an ICS and send it by email to any address added to an event. But it would be hard to track down which events were already sent and which ones are new. Let’s stick to the web interface when I need to create a shared event. Calendar.txt should remain simple and for my personal use. The point of Unix tools is to allow you to create the tools you need for yourself, not create a startup with a shiny name/logo that will attract investors hoping to make billions in a couple of years by enshitifying the life of captive users. And when you work with a team, you are stuck anyway with the worst possible tool that satisfies the need of the dumbest member of the team. Usually the manager. With Unix tools, each solution is personal and different from the others. Other source of inspiration : Jouraling with neovim/coreutils and dateutils (tangled.sh) https://tangled.sh/@oppi.li/journal Simplifying calendaring ======================= Another unexpected advantage of the system is that you don’t need to guess the end date of events anymore. All I need to know is that I have a meeting at 10 and a lunch at 12. I don’t need to estimate the duration of the meeting which is, anyway, usually only a rough estimation and not an important information. But you can’t create an event in modern calendar without giving a precise end. Calendar.txt is simple, calendar.txt is good. I can add events without thinking about it, without calendaring being a chore. Sandra explains how she realised that using an online calendar was a chore when she started to use a paper agenda. When calendar was a verb (idiomdrottning.org) gemini://idiomdrottning.org/calendaring Going back to a paper calendar is probably something I will end up doing but, in the meantime, calendar.txt is a breeze. Trusting my calendar ==================== Most importantly, I now trust my calendar. I’ve been burned by this before: I had created my whole journey to a foreign country on my online calendar only to discover upon landing that my calendar had decided to be "smart" and to change all events because I was not in the same time zone. Since then, I actually write the time of an event in the title of the event, even if it looks redundant. This also helps with events being moved by accident while scrolling on a smartphone or in a browser. Which is rare but happened enough to make me anxious. I had the realisation that I don’t trust any calendar application because, for events with a very precise time (like a train), I always fall back on checking the confirmation email or PDFs. It’s not the case anymore with calendar.txt. I trust the file. I trust the tool. There are not many tools you can trust. Mobile calendar.txt =================== I don’t need notifications about events on my smartphone. If a notification tells me about an event I forgot, it would be too late anyway. And if my phone is on silent, like always, the notification is useless anyway. We killed notifications with too much notification, something I addressed here : Une vie sans notifications (ploum.net) https://ploum.net/2025-09-02-mudita.html I do want to consult/edit my calendar on my phone. Getting the file on my phone is easy as having it synchronised with my computer through any mean. It’s a simple txt file. Using it is another story. Looking at my phone, I realise how far we have fallen: Android doesn’t allow me to do a simple shortcut to that calendar.txt file which would open on the current day. There’s probably a way but I can’t think of one. Probably because I don’t understand that system. After all, I’m not supposed to even try understanding it. Android is not Unix. Android, like other proprietary Operating System, is a cage you need to fight against if you don’t want to surrender your choices, your data, your soul. Unix is freedom: hard to conquer but impossible to let go as soon as you tasted it.

1 0