Jae's Blog

More vulnerability databases!

Previously, I’ve shared about EUVD, the European Vulnerability Database.

Turns out in the wake of the whole CVE debacle, a bunch of other initiatives were also announced!

As more alternatives pile up, this paints a good outlook for the future, shall CVE go definitely down the drain.

Amazing things are happening with “vibe” coders

The motto of “vibe” coders really is “let the thing do it, don’t check anything ever” because the whole cohort of Cursor users (an IDE with built-in LLMs) really believed a support bot that came up with a fake policy.

Shortly afterward, several users publicly announced their subscription cancellations on Reddit, citing the non-existent policy as their reason. “I literally just cancelled my sub,” wrote the original Reddit poster, adding that their workplace was now “purging it completely.” Others joined in: “Yep, I’m canceling as well, this is asinine.” Soon after, moderators locked the Reddit thread and removed the original post.

This is maybe too much on the nose when talking about LLM users. Vibes-based support is apparently a thing nowadays as well.

You can find the full article on ArsTechnica: https://arstechnica.com/ai/2025/04/cursor-ai-support-bot-invents-fake-policy-and-triggers-user-uproar/

Headless road to ARM: status

Being currently assigned to the issue about ARM support for Resonite headlesses (GH-2555), time for an update since there hasn’t been one in some time.

First off, everything is looking great, current status being:

  • 6 PRs are currently open (FreeImage, Opus, Crunch, Assimp, MSDFGen, RNNoise)
  • 1 PR has been merged 🎉 (Brotli)
  • 1 repo is missing (Freetype)

This marks the first ARM-related PR being reviewed and merged into an official repository, being the PR #1 on the Brotli repo, which bundled Windows, Linux x64 and Linux ARM CI/CD builds.

As a reminder, I am currently providing a complete package of all libraries built directly for ARM on my website.

Next steps would be to:

  • Get an official fork of the Freetype repository (requested on 2025/04/09)
  • Create a container image bundling my libraries and a way to download the headless easily on ARM machines
  • Get all the current PRs reviewed and merged

The second one is more important as distribution is probably the biggest issue for complete ARM support of the headless, SteamCMD not supporting this architecture.

I am very confident to say that we will reach official support very soon, given how well this has been going so far.

My plans after this feature is shipped is to work on the macOS support (GH-1412) as it’s also marked as “community help wanted”.

Music recommendations for April 2025

This month, I bought a bunch of music on Bandcamp, here are some recommendations:

  • Selected Works : Jørgen Bryde by Xerxes: an album I wanted to buy a long time ago, but that I forgot to get. Generally really calm and nice music, especially the tracks “Picture of Her” and “Blessed”, which are my personal favourites of this album.
  • Feed Me Weird Things (Remastered) by Squarepusher: this is actually a really fresh recommendation, being shared with me today by a friend. The first track “Squarepusher Theme” was an instant hit for me, and the rest of the album itself is quite strong.
  • ZeroRanger FM Arrangement Project by +TEK: I just love how that stuff sounds, I was following this artist for a while now, and this latest release is not disappointing as usual.
  • WAVESTATION-FM by Lordsun and CubeNatural: this one has been sitting on my wishlist for a while, and I finally got it today. The album itself strikes a good balance of dynamic and chill sounds which I can definitely recommend.

That’s all for this month’s recommendations. This might become a more recurring thing, but wait until the next Bandcamp Friday, I’ll have plenty of those after it.

Interesting links: Open-Source DMR Radio

A friend sent me a link to an interesting blog post talking about making an Open-Source DMR radio using a LimeSDR board and GNU Radio.

Digital Mobile Radio (DMR) is a mobile radio standard created by ETSI, which is very popular within the amateur radio community. […]
A very basic DMR modem (receiver and transmitter), capable of voice calls, that could emulate a subscriber radio using a SDR transceiver as the radio interface is described in this page.
While this modem is just a proof-of-concept interpretation of the DMR standard with no real use-case, there exists at least one open source project which proposes to create an open source DMR transceiver.

You can see the full blog post over there: https://qradiolink.org/open-source-DMR-transceiver-implementation.html

Getting Steam game changelogs in your RSS reader

A little known feature of Steam is that it offers RSS feeds for any app/game/whatever shared using it.

The URL is also very simple to use:

https://store.steampowered.com/feeds/news/app/$AppIDCode language: JavaScript (javascript)

You can then replace $AppID by the application ID of your game.

For instance, if we want to monitor Resonite, app ID 2519830, you will need the following URL:

https://store.steampowered.com/feeds/news/app/2519830Code language: JavaScript (javascript)

There, super easy!

Screenshot of the Resonite Steam RSS feed, showing the 2025.4.10.1305 changelog.
How it looks in a RSS reader
Fixing ffmpeg missing codec issues on Fedora

At some point, I had some issues converting some files with ffmpeg, most particularly videos on my Fedora install.

Turns out fixing this is really easy with the help of RPMFusion.

If you haven’t enabled it at the system installation, you can do that really easily via a single command which will install the free and nonfree variants of the repository:

sudo dnf install https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpmCode language: JavaScript (javascript)

Now, you can just swap ffmpeg for the RPMFusion one like so:

sudo dnf swap ffmpeg-free ffmpeg --allowerasing

This will install a bunch of codecs and replace the regular build of ffmpeg by a more permissive one (in terms of what you can do, not licensing).

Keep in mind that if you want to keep your system free (as in freedom), you might not want to do this.

Comments are now enabled again

It’s something I had enabled back on Mataroa, but that I didn’t really bother enabling again: comments.

As a bonus, if you don’t want to type your email and name in the field below, you can also reply via any ActivityPub-enabled software (Mastodon, Misskey, etc). Just paste the link to a blog post in there and reply to the post.

It goes without saying: please remain civil in there.

As the second bonus, pingbacks should also be enabled now, though not sure how they work.

Starbound, 10 years later

I recently started playing Starbound again after a hiatus of a few years.

For the context, I have a pretty big history with the game, buying one of the old supporter tiers (Pixel Tier, in March 2014) and playing though all the first betas up until the final release and subsequent (rare) updates. I also ended up contributing quite a lot to the mod adding French translations to the game which was fairly fun to me at the time.

This time, I’m not using the official game client, but rather another one called OpenStarbound which corrects some bugs and adds some features taken from other patch sets.

It’s honestly good to see that the community still has its passion for the game, and still maintaining that sort of stuff.

Here are some pics of my colony, made on the first planet I spawned on:

I finished the main quest in about 5 hours of gameplay, without rushing for anything and right now progressing through the endgame steadily.

I still need to get all the unique boss drops to upgrade them to on the weapons upgrade anvil at some point. The bounty hunter side also needs some work.

And yes, this is basically without any content mods, the vanilla game is fun enough to me.

Green bird in light clothes, with a summer hat and red wings.
My character being a basic Avian.
The European vulnerability database

I’ve recently discovered that the EU has their own vulnerability database: EUVD.

As noted by the message on top of the page:

This website is currently in its beta phase. We appreciate your collaboration in reporting any inaccurate or incomplete information via the link below “Provide feedback”.

The site is still in a really early stage, but hopefully it gains a bit more traction as the future of other vulnerability databases is uncertain (for instance, with CVE almost dying abruptly due to a contract ending).

As of now, there also are no feeds (RSS more particularly) to watch this database, so hopefully this will be added soon.

Newer Posts · Older Posts
Jae 2012-2025, CC BY-SA 4.0 unless stated otherwise.