See all results

Damián Búho: generalist, developer, ex-designer

Latest from the blog

How to sing to caged birds

Or what you need to serve the oppressed masses

7 min read

I got the idea for this post when I noticed a couple of issues on the site of one of the resistance groups operating in ruzzia (credit where it’s due: they fixed them fast, and I will not name them). This little guide could be useful for opposition media too.

If you’re making something that is frowned upon by your local Authoritarianism™ franchise, you have a moral obligation to protect not only your cell | group | band | merry wagon, but your visitors too.

Maybe even them first, because, not unlike you, they are not prepared and not vigilant enough.

Some dictatorships will prosecute them for the visit itself; others will use finesse and make an “aggravating circumstance” out of it when they bake another “high treason” case.

You can slap Cloudflare over your site and give yourself a gold star for security, but that’s only the beginning of your saboteur journey. Continue reading…

Featured projects

The Projectfile specification describes “projectfile”, a simple hierarchical file about a project. It can be YAML, TOML or JSON. There is a CLI tool that hides formats from you, reads and writes keys and supports includes, interpolation and other interesting stuff.

MaintainedPinned

SpiderlintMaintained

  • 600+ distinct checks
  • Fact/rule engine: you can override everything and create your own rules declaratively
  • Page-specific and site-specific checks
  • A11Y, SEO, GEO, Lighthouse
  • Validations for every used format
  • Even uncompressed images!
  • Well-known files, TLS, HTTP Headers, Semantic Markup
  • Can and should be self-hosted
MaintainedFeaturedAGPL-3.0-only

Report RelayMaintained

Accepts 16 report formats and sends them to stdout or an OpenTelemetry collector as logs.

  • CAA IODEF incident reports
  • Cross-Origin-Embedder-Policy and Cross-Origin-Opener-Policy reports
  • Browser crash and Deprecation reports
  • Legacy CSP report-uri, HPKP pin validation failure and Expect-CT reports
  • Content Security Policy and Document Policy reports
  • Permissions Policy and Subresource Integrity reports
  • Browser intervention and Network Error Logging reports
  • SMTP TLS reports
MaintainedFeaturedMIT

IgnorelintMaintained

  • Validates 20+ different kinds of ignore files
  • Automatically fixes errors that could be fixed deterministically
  • Informs about dead rules
MaintainedFeaturedMIT

B19 / UbuntuMaintained

B19 is a set of conventions and slightly opinionated tools, with Ubuntu as its foundation and around 100 images built on it. Healthchecks, tests, benchmarks, reports, commands, bootstraps, everything is pre-set and extremely extendable. Perfect for creating in-house manageable image inventories.

MaintainedFeaturedMIT

CustodioWIP, release in Q1'27

Warns you about:

  • natural disasters: fires, floods, volcanos
  • important weather events, UV risks, air quality issues warnings from authorities
  • crashes on markets that can affect you personally
  • holidays, closures, special regimes in your location
  • risks related to crossing borders and travel, expired docs, delayed planes
  • health-related risks: epidemic situation, acclimatization, dehydration, etc
  • crime stats in places where it's available
  • god damn snakes on god damn planes

Risks are recalculated for current geolocation and time, precision and intervals set by user. And you also can calculate in advance for your next destination.

WIP, release in Q1'27FeaturedAGPL-3.0-or-later