Hard Pass

Cat memes will solve all our problems. If they arent all fixed, we just gotta post more!

I looked at the rsync commit log and basically every commit since March says "tridge and claude committed." Andrew Tridgell, the guy who literally invented rsync in 1996. Now hes using a chatbot to write the code and proudly displaying its name right there in the commit.

And before anyone goes "calm down its just a typo fix" no. The recent stuff is the security fixes for 3.4.3. The symlink race CVEs.. You know, the exact part where you want an actual human who understands what hes doing, not a machine that spits out code that looks correct but has correctness errors.

Do you get how insane this is? Rsync is the thing holding up basically every backup system on earth. Your NAS uses it. Distro mirrors use it. The server with you grandmas photos uses it. And now the plan is to let a token predictor that can't even count the amount of letter R's in "strawberry" write code for it.

"But the tests pass." The tests pass because the AI probably wrote the tests too you walnut. Its a loop of confident nonsense thats grading its own homework, and the first time it hits an edge case nobody fed it its gonna silently corrupt something and noone notices till the backups are already poisoned.

I'm pinning v3.4.1 and not updating again. If you defend this, dont say nobody warned you when the data loss posts start appearing.

نُشر تبادليًا من: https://hexbear.net/post/8634381

Today, I write with a heart heavy with fear for my family… I try to hide my exhaustion from my children, but the needs around us have become greater than I can bear. All I hope for is a little support to provide healthy food, medicine for my husband who suffers from heart disease, and days that feel less harsh for my children.

Your support, even a small one, could make a real difference in our lives. Support link: [https://gofund.me/1d3ea05b6]

#Gaza #HelpGaza #Palestine #Donate

Public records turned up by The Ellis Collective, a student-led research group, have revealed that the UC system shared data collected by automated license plate readers at multiple campuses with U.S. Customs and Border Protection and other federal agencies, in apparent violation of state law.

In an incensed social media post, President Trump suggested that the ruling might prompt him to cast the center aside after more than a year at its helm.

Ms Lindsey's got some bad kompromat.

NutriTrace is a self-hosted nutrition + wellness tracker, alternative to MyFitnessPal / Cronometer / LoseIt. Runs entirely on your own server: no telemetry, no analytics, no account hosted by anyone but you. First public release was 26 April 2026; currently at v1.0.0-rc.42.

Repo (AGPL-3.0) · Release notes + APK · CHANGELOG

What's new in this release

• AI Meal Photos. Attach a meal photo and Trace returns an editable FDA-style Nutrition Facts card. Save as Quick Calories (one-off) or as a reusable Food entry in your library. Estimates cover the full ~30-nutrient profile, not just the headline macros.
• LiftTrace workout sync. The sister weightlifting app can now push completed workouts to NutriTrace via the federation API. Sessions appear in Workout History alongside Fitbit / Garmin / Health Connect, and feed the dynamic calorie goal.
• Smart Log Voice Input Language picker. Pick the mic language independently of device locale (useful if your device is set to English but you speak another language at meals).
• API Tokens panel is now open to single-user installs (was multi-user + env-gated before).
• Wizard celebration screen on onboarding completion.

Fixes worth calling out

• Local Open Food Facts mirror search returning empty results despite the backend finding real hits (DuckDB Node v1.x VARCHAR shape regression).
• Tapping a reminder notification on Android no longer just dismisses without opening the app.
• Env-locked AI deployments now actually run Trace's tools instead of silently dropping every tool call (this one was invisible: the model would reply in plain text instead of using your real data).

App overview (for anyone new)

• Diary: calories, ~30 macros / micros, water, body stats, meal photos, per-day notes
• Food sources: your own foods, Open Food Facts (with optional local DuckDB mirror for offline / air-gap), USDA, Mealie cookbook federation
• Saved meals + recipes, copy / move / clone across meal slots and dates
• Wellness sync: Fitbit, Garmin, Withings, Google Health (Health Connect on Android)
• Calorie goals: fixed, dynamic (target = base + daily burn), or adaptive TDEE
• Intermittent fasting tracker with schedules and reminders
• Optional Trace AI Assistant: multi-provider (Claude / OpenAI / Gemini / any OpenAI-compatible endpoint), BYO key, off by default, browser calls the provider directly so the server never sees your key
• Multi-user with invites, per-user admin, optional OIDC SSO (Authentik / Pocket-ID / Authelia tested)
• Android app (Capacitor 8): offline-first SQLite + sync, biometric sign-in, native Health Connect, native barcode scanner
• Backup: full server ZIP + per-user JSON export / import. Nothing leaves your server.

Deployment

services:
  nutritrace:
    image: ghcr.io/traceapps/nutritrace:latest
    ports: ["3000:3000"]
    volumes: ["./data:/data"]
    environment:
      - JWT_SECRET=<long-random-string>

Full docker-compose + env reference in DEPLOY.md. Signed Android APK attached to every GitHub release; in-place upgrades work.

Quick update post for the new v1.0.0-rc.4 release.

LiftTrace is a self-hosted lifting tracker I posted here a few days ago. It's an open, AGPL-3.0 alternative to subscription apps like Strong ($5/mo), Hevy ($6/mo Pro), Jefit ($7/mo Pro), Fitbod (~$80/yr), and the coaching tier of Trainerize / Caliber. Single Docker container, PWA plus a signed Android APK.

Repo: https://github.com/TraceApps/lifttrace Image: ghcr.io/traceapps/lifttrace Latest release (with APK): https://github.com/TraceApps/lifttrace/releases/latest Full changelog: https://github.com/TraceApps/lifttrace/blob/main/CHANGELOG.md

What's new in v1.0.0-rc.4

• NutriTrace federation: if you also self-host my sister app (NutriTrace), each completed workout's estimated calories burned auto-logs to your NutriTrace diary. Wearable data (Fitbit / Garmin / Health Connect) still wins for overlap so you don't double-count. Set up in Settings → Integrations → NutriTrace with a personal access token.
• Editable workout duration on the completion summary: the Duration tile is now a button. Tap to pick from quick presets (30 / 45 / 60 / 75 / 90 / 120 min) or enter a custom value. Useful for the "forgot to start the timer" case, and the kcal estimate updates live.
• Fallback kcal estimate when no duration was tracked, derived from completed set count and badged "rough" so you know it's less precise than a timed session.
• Persistent "Connected" pill on the federation card so you can tell at a glance the integration is still healthy, plus a shared loading spinner across Diary, Programs, Coaching, Exercise detail, Statistics, and the Workout editor.
• Polish pass: stronger affordance on the editable Duration tile, title-case sweep across about 20 button and menu labels, better error surfacing for Settings → Backup and Radio when the upstream isn't reachable, and a small wizard celebration screen at the end of first-run setup.
• Fixed: workout-complete notification firing on every set toggle when re-opening a completed workout's summary (rc.3 caught the main flow; this patches the toggle edge case).

What's in it (full feature list)

• Diary with sets, reps, weights, RPE, persistent rest timer that survives navigation, supersets, warm-up generator, and natural-language Smart Add (e.g. "bench 3x5 @ 225, A1: curls 3x12 @ 30").
• Programs: build mesocycles, assign templates by day, progress through weeks.
• Exercises: full library from wger, free-exercise-db, and exercisedb, plus your own custom entries with images, GIFs, or YouTube links.
• Statistics: volume, PRs, frequency, body stats trends, RPE overlays, sparklines.
• Coaching: trainers can prescribe workouts to athletes, leave per-set feedback, two-way reply threads. Replaces a Trainerize or Caliber subscription for small training rosters.
• Trace AI: optional chat coach, multi-provider (Claude, OpenAI, Gemini, or any OpenAI-compatible endpoint like Ollama, LM Studio, DeepSeek, Groq). BYOK, opt-in, disabled by default.
• Radio: built-in music player for Subsonic, Jellyfin, Plex, and Emby libraries plus Icecast, Shoutcast, and HLS streaming stations. Lockscreen controls, now-playing metadata, frequency visualizer on the FAB.
• OIDC SSO: Authentik, Keycloak, Pocket ID, Authelia, Auth0, Google, anything OIDC 1.0. Multi-provider supported.
• Import from Strong, Hevy, FitNotes, and Jefit CSV exports so you can leave your existing app in about a minute.
• Android: local SQLite mirror with optional server sync, native ExoPlayer for radio, biometric sign-in, signed release APK on every release.

Deployment

services:
  lifttrace:
    image: ghcr.io/traceapps/lifttrace:latest
    ports:
      - "3002:3003"
    volumes:
      - ./data:/data
    environment:
      JWT_SECRET: ${JWT_SECRET}        # required in production
      INSECURE_COOKIES: "1"            # only if not terminating TLS

docker compose up -d, browse to http://localhost:3002/, finish the first-run wizard. Full env-var reference, reverse-proxy examples (Caddy, nginx), OIDC setup, SMTP setup, and the four supported "connecting from Android" paths are in DEPLOY.md.

Signed APK SHA-256 is published with each GitHub Release for verification. Debug APK (accepts HTTP and self-signed certs) is npm run android:debug for LAN-only setups.

No telemetry, no analytics, no anonymous usage pings. The app phones home only to your own server, or doesn't phone home at all in Android local mode.

cross-posted from: https://lemmy.dbzer0.com/post/69711352

Most onomatopoetic town name rule