yo. anyone else tired of the murky UX of GNU screen and other terminal multiplexers I won't call out here!? so were me and my boy Claudio! so we sat down for a week and reward-hacked and dogfed a new terminal multiplexer into existence: slosh I am standing on the shoulders of giants of course; massive shoutout to @mitchellh and the rest of the contributors of libghostty-vt! below you will find a small preview teaser for slosh I recorded the other day. slosh makes the mouse a first-class citizen again and introduces the concept of terminal "shaders". these shaders can be applied to the chrome or the contents of a terminal pane. and you can (ab)use them for all sorts of useful things: dimming inactive panes, drawing attention to panes that got a BEL, visualizing scrollback with fades, and many other interesting things. I have battle-tested it a fair bit, and the full development/clank seshes were streamed on sl0p dot foo. if there's enough interest, I will carry on, start properly packaging it, and try to be a good maintainer for this new toy. so just to be clear; everything you see in the video is rendered inside of a single "native" (somewhat modern) terminal. you can `ssh` into a box, `slosh` to attach/spawn and get this experience. there's more cool stuff not demo'd in the video! random example: responsive layouts. if your terminal window becomes too narrow it'll start rendering the pane grids as a single "stack" instead. so managing your slosh working env from an iPhone (example) becomes chill. (also expands to original grid layout again once terminal grows again, etc.) RT for reach would be welcome! 🙏 P.S. soundtrack has been composed by `tristan` from Kakiarts, and is featured in their 64KiB demo "Vortex 2" :)

at #38c3 @rdjgr did a pretty good job at explaining the lore of how they scammed me before we ultimately joined forces. make sure to check out the full talk ("Dialing into the Past: RCE via the Fax Machine – Because Why Not?"), great stuff!

who's going to be the first to flood the internet with udp 631 traffic that adds printers with eggplant and sweat droplet emoji's to all those UNIX suckers their computers

mastodon.social/@q3k@hackers… q3k from @DragonSectorCTF has figured out the string/symbol obfuscation in the xz backdoor! there's appears to be a lot more going on then reported in the initial report.

Lexmark published an advisory in response to my published work: publications.lexmark.com/pub… -- apparently it affects ~130 of their printer models, not a bad haul! *pats himself on the back* 🤣 Only took them 13 days to come up with a response/fix; irresponsible disclosure works!