Remote
Usagi
@bunny@mk.absturztau.be
Hopping around on the fediverse
22
Followers
1
Following
44
Posts
Posts
Replying to
@i0null@infosec.exchange
@i0null@infosec.exchange Until the OS provides a better method of organizing files ~/Downloads it is :abunhd:
Replying to
@spiegelmama@infosec.exchange
@spiegelmama@infosec.exchange @neilk@xoxo.zone @maxleibman@beige.party However, that finance is a social construct. There very much is a collective society that makes that happen :abunhd:
Replying to
@goofpunk@wetdry.world
@goofpunk@wetdry.world @foone@digipres.club No, HTML+CSS suck absurdly at laying out interfaces, they are designed for laying out static documents, and even at that they suck. The problem that Electron solves is doing the platform integration for all platforms once in the Electron runtime making your application suck equally on all platforms :bunhdgoogly:
Replying to
@mxchara@seattle.pink
@mxchara@seattle.pink @xgranade@wandering.shop The thing is that 'free software' was initially an alternative to the 'commercial' software that was developed behind the closed doors of corporate offices, and largely unavailable to the general public.
Things changed. One thing is that both computers and commercial software became more available. Other thing is that the corporations that initially feared 'free software' found how to exploit it.
When a corporation finds value in a piece of 'free software' it can pay developers to work on it, and thus shape it to its benefit. With 5 day work week a paid developer works on the same project 5 days compared to 2 potentially available to an enthusiast.
And another thing changed that made the 'free software' almost entirely irrelevant. What has been called personal computer, a device that is under the control of a person, and any vendor restrictions are examined with great scrutiny has been re-classified as a 'smartphone'. Vast majority of computer users today do not have access to a 'personal' computing device, only a 'smart' device.
A 'smartphone' is a device that can be locked down arbitrarily. In the current pincer manoeuvre to use any 'official' application a device that is verified to be under control of one of two major vendors is required. At the same time both of these vendors completely control what software can be installed on such vendor-controlled device. What use is 'free software' when you cannot run it because your device is locked down? :bunhdsad:
Replying to
@GossiTheDog@cyberplace.social
@GossiTheDog@cyberplace.social The CEO of Kraftoff :abunhd:
Replying to
@Beasley@troet.cafe
@Beasley@troet.cafe @cmconseils@mastodon.social So long as they live in a culture that perpetuates this myth :abunhd:
Replying to
@distrowatch@mastodon.social
@distrowatch@mastodon.social @DrHyde@fosstodon.org @koen_hufkens@mastodon.social That you cannot change the brand of operating system without knowing much about operating systems is a failure of the industry. It's just garbage all around :abunhd:
Replying to
@humanhorseshoes@mastodon.world
@humanhorseshoes@mastodon.world @SylvieLorxu@chaos.social The problem is that both in Denmark and France you are not supposed to be able to access 'social media' unless you are at least 15 years old, and in Australia and Brazil unless you are at least 16 years old, and the list is probably growing.
I am sure that the definition of 'social media' and 'access' is very clear and completely consistent across the jurisdictions, and well-tested in courts so that everyone knows if something like a Linux support forum, a git forge, or a bug tracker fall under that category, or if view-only access is OK /s
I do not envy the legal department of whoever is running that infra :bunhdgoogly:
Replying to
@humanhorseshoes@mastodon.world
@humanhorseshoes@mastodon.world @SylvieLorxu@chaos.social France and Denmark are also part of the EU and it somehow does not matter. :bunhdgoogly:
Replying to
@tranquillity@mastodon.minionflo.net
@tranquillity@mastodon.minionflo.net @SylvieLorxu@chaos.social Or 'free' software development completely moves to the 'dark web' because in the jungle of various discriminatory regulations going dark is easier than comply :bunhdgoogly:
Replying to
@lunareclipse@snug.moe
@lunareclipse@snug.moe @SylvieLorxu@chaos.social Which solidifies the position of current monopolies, and stifles innovation that could unseat them. It's not like a monopoly needs good engineers to provide good service or innovate. Works as indented. :bunhdgoogly:
Also fresh graduates can't get a job because it does not align with the 'efficiency' doctrine that requires providing as little service as possible while squeezing as much money as possible out of customers through monopolistic control over the market. The AI is merely an excuse. Those who tried to replace people doing work they needed done by AI mostly re-hired.:abunhd:
Replying to
@humanhorseshoes@mastodon.world
@humanhorseshoes@mastodon.world @SylvieLorxu@chaos.social And Australian, and UK, and Denmark's, and France's, ...
https://www.youthrights.org/the-harms-of-social-media-restrictions-and-bans-for-minors/
https://github.com/BryanLunduke/DoesItAgeVerify
Replying to
@totoroot@ibe.social
@totoroot@ibe.social @TwraSun@mastodon.social @meatpuppet@troet.cafe He also misses that the GDP may be going up but it's propped up by the income of the top 10%, the benefit is not necessarily seen by all people.
Also cost of housing and cost of living in general going up faster than the salary of people entering the workforce. Young people are generally poorer then the generation of their parents was at their age :bunhdsad:
Replying to
@aristot73@infosec.exchange
@aristot73@infosec.exchange @wdormann@infosec.exchange This whole article is laughable.
Historically a lot of vulnerability reporting and interactions happened between researchers and companies.For Linux the 'company' is LF that Greg is part of. He is not a poor underfunded hobbyist.The researchers have an incentive also.
If they are looking for prestige, they want to find critical vulnerabilities.Greg has an incentive too. If he is looking for prestige it is in his interest to withhold information on critical vulnerabilities, paint himself as the messiah of Linux security, and everyone else as incompetents.
GKH:Why is linux-distros somehow "special" enough to get these types of announcements and not everyone else?Yeah, well, they subscribed to that security list that is supposed to announce things like that. That way they made it clear that they care.
GKH:As I have said for quite some time now, all early-disclosure lists are leaks, otherwise why would your government allow them to be in existence?He forgot to mention that when people are shown to be source of leaks they are kicked from the list. Certainly not perfect but disclosing to the list is far from the same as making the vulnerability public.
GKH has been also heard on multiple occasions dunking on distributions maintaining their own kernels as opposed to using stable Linux branches.
From the article againAnyway, companies have more on the hook when there is a vulnerability. They don’t get to cut a release and they’re done. They will need to talk to customers, run some support sessions.Yet Debian which is a community distribution, not a company, using GKH's promoted stable tree, not their own got nothing. No notification, no fix. As it happens Greg did not backport the fix to the stable trees himself, he left that to the distributions. Yes, those distributions that nobody notified of the importance of this vulnerability. So no fix for anybody who is running any 'stable' Linux distribution. :bunhdgoogly:
Replying to
@argv_minus_one@mastodon.sdf.org
Replying to
@djstreethawk@mastodon.scot
@djstreethawk@mastodon.scot @manu@freiburg.social @phooky@hexa.club @mjd@mathstodon.xyz That mathematical proof (if real) says nothing about its makers boosting it to supremacy :hide_pancakes:
Replying to
@b0rk_reruns@social.jvns.ca
@b0rk_reruns@social.jvns.ca The zen of bash debugging:
Don't write in bash :hide_pancakes:
Replying to
@mosiwo@mastodon.social
@mosiwo@mastodon.social @openrisk@mastodon.social @markhughes@mastodon.social @ironicbadger@techhub.social Yeah, 'official' banking apps.
What do the banks need those for?
To track you?
To spam you with product offers?
What does an 'official' blackbox app offer over an audited opensource app in terms of security?
God forbid that you could use one app for all banks, and would not have to learn new app to switch banks. Or features could be added to the app without paying for premium banking services. :bunhdgoogly:
Replying to
@AAKL@infosec.exchange
@AAKL@infosec.exchange @catsalad@infosec.exchange I would expect they prefer to be treat models :abunhdhop:
Replying to
@mrmasterkeyboard@mastodon.social
@mrmasterkeyboard@mastodon.social The "Fix: Avoid Free After Use ...." is gold :bunhdgoogly:
Replying to
@jonathanhogg@mastodon.social
@jonathanhogg@mastodon.social @wolf480pl@mstdn.io To me it looks like Arduino largely succeeded at that.
Note however that it was more than a library. It was also a specialized tooling for that one use case that made it simple. It was also an ecosystem of user-provided libraries that made many tasks simple, typically driving a specific piece of hardware.
And a community of people who wrote about what they did and how to the greatest detail to the point that anyone who could read could replicate it.
And yes, a company seeding and promoting this tooling and libraries at the start to promote their hardware. :abunhd:
Replying to
@flesh@transfem.social
@flesh@transfem.social @andrewt@mathstodon.xyz @rysiek@mstdn.social warmmm :blobcatpnd_longlong_a::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_b::blobcatpnd_longlong_c:
Replying to
@flesh@transfem.social
@flesh@transfem.social @andrewt@mathstodon.xyz @rysiek@mstdn.social It's the same mindset, though :abunhd:
Replying to
@andrewt@mathstodon.xyz
@andrewt@mathstodon.xyz @PinoBatch@peoplemaking.games I am not sure it's a good reason but most 'application's today don't really have a protocol, they are intended to run an up-to-date collection of minified javasctipts directly off the platform provider's cloud server, and out-of-date collection of javascripts is not supported.
It's possible to repackage that collection of javascripts as an electron 'application' but it's not really feasible to replicate and maintain that in a different language. :abunhd:
Replying to
@flesh@transfem.social
@flesh@transfem.social @rysiek@mstdn.social @andrewt@mathstodon.xyz Do you have a personal bunker? :hide_pancakes:
Replying to
@valpackett@social.treehouse.systems
@valpackett@social.treehouse.systems At the time the secure boot was initially designed Windows was still going strong. They could get away with locking down all consumer PC hardware to run only Windows (or OS X for that other part), market-wise. Write off anyone not willing to run Windows as weird, suspicious, and potentially criminal. At least in the western PC market. Not sure how well it would go in China or India. Surprising amount of non-Apple consumer hardware was running Windows that was obtained with varying degrees of legitimacy back then :abunhd:
Replying to
@valpackett@social.treehouse.systems
@valpackett@social.treehouse.systems @sleepyowl@chaos.social Originally it was intended to be locked down to only boot Windows, as were the first Windows Arm machines.
The reason you can run Linux on your PC at all today without hacks is previous rounds of pushback :abunhd:
Replying to
@david_chisnall@infosec.exchange
@david_chisnall@infosec.exchange @kde@floss.social See the things listed as comparable, and ask the same thing. That should give you the answer :abunhd:
Replying to
@kat_cal2@ck.catwithaclari.net
:boosts_ok: looking for sources and info, JKR, anti-trans orgs
Hover or focus to reveal
Sensitive
@kat_cal2@ck.catwithaclari.net @SmashToday@discuss.smash.today While Discworld is a great series it's much more complex than HP, and may not be suitable for young children because of that.
There is a number of classics that may do a better job - like Narnia, Mary Poppins, Pippi Longstocking :abunhd:
Replying to
@indigoparadox@mastodon.social
@indigoparadox@mastodon.social @mcc@mastodon.social @LordCaramac@discordian.social @Lenni@fosstodon.org @RogerBW@discordian.social You can compile 32bit if you insist. Many distributions still support it, at least on x86.
Also the way to do the global variable is you put an extern declaration in the header, and non-extern declaration in one C file. :abunhd:
Replying to
@suetanvil@freeradical.zone
@suetanvil@freeradical.zone @athas@freeradical.zone Unix did many bad abstractions. In fact you would be hard pressed to find any that is good from the point of view of what we know today.
But that's not the point. The point is that the industry is rotten when in 40 years it cannot move on from those bad abstractions.
And as you pointed out people do know how to solve many of the problems that unix tried to solve in a better way.
The problem is industry inertia. People get certifications for using the old cruft, it's very very hard to find a job that involves making something new :bunhdsad:
Replying to
@afewbugs@social.coop
@afewbugs@social.coop @freyablekman@fediscience.org Do you get tentacles growing from under your nails when doing biology? :abunhdhappyhop:
Replying to
@anthropy@mastodon.derg.nz
@anthropy@mastodon.derg.nz That's where I have to disagree.
Berating people for not having agency is elitism.
Lack of agency is exactly what marginalization is about.
Agency is what privilege boils down to. :abunhd:
Replying to
@anthropy@mastodon.derg.nz
@anthropy@mastodon.derg.nz You say "Not every problem is someone else's problem" while you are saying the exact opposite.
As in the argument seems to boil down to the elitist "Somebody pulled me up by my bootstraps so everyone else should pull themselves by theirs. I's not my problem if theirs are torn."
Counseling is part of health care, and there are politics for making it widely available, and politics for dismantling public healthcare. If you are concerned about learned helplessness epidemic blocking achieving your goals that should inform where you stand on this issue.
Introspection requires that people are well and not constantly fighting for survival. Things like worker rights, unionization, public welfare programs make it more likely that people have the leeway to think about their choices, as opposed being squeezed to work endless hours just to survive. If you are concerned about epidemic of learned helplessness that blocks the progress you want to see that should inform your position on these issues as well.
Monopolies reduce the choice available to people and cause real helplessness. There are politics to strengthen and politics to dismantle anti-monopoly law. If you are concerned about choice that should inform your position of the matter.
Of course, there isn't always on opportunity to do something about these problems. Nonetheless, knowing who is working for you and who is working against you is useful. Not only politicians but also friends, relatives, colleagues, etc. :abunhd:
Replying to
@anthropy@mastodon.derg.nz
@anthropy@mastodon.derg.nz @netopwibby@social.coop Let's consider your diagnosis is correct, and we are experiencing an epidemic of learned helplessness, and that's the thing that gets in the way of the improvements you would want to see.
Learned helplessness is a medical condition which has causes and treatments.
If you want to see the progress that is blocked by learned helplessness you need to eradicate the causes of it and promote treatments. :abunhd:
Replying to
@anthropy@mastodon.derg.nz
@anthropy@mastodon.derg.nz @netopwibby@social.coop It's not so trivial.
Ever heard of tyranny of the defaults? That's the reason why Google pays billions to be the default search engine.
Ever heard of network effect and customer lock-in? They make it nearly impossible to get away once trapped in one of the 'big standard things' towards which people are pushed by default.
Or as someone put it when your proposed solution starts with "If all people just ..." it's not a solution. :abunhd:
Replying to
@david_chisnall@infosec.exchange
@david_chisnall@infosec.exchange @zkat@toot.cat @xgranade@wandering.shop Regarding the branch predictors: you could avoid them completely if OS vendors did not pretend they are writing code for PDP11, and CPU vendors did not have to cover up that their CPUs have a pipeline.
Branch delay slots are well known technology, and compilers are completely capable of loop unrolling and filling the slots with instructions that are useful.
Exposing the fact that the CPU has a pipeline avoids the need for statistical branch predictor as well as it avoids multiple forms of Spectre vulnerabilities.
There, solid solution without use of AI. Unfortunately, for reasons outlined here https://archive.org/details/lca2020-What_UNIX_Cost_Us solving problems is not viable, only papering over them is. Reasons boil down basically to entrenched industry inertia. :bunhdsad:
Replying to
@david_chisnall@infosec.exchange
@david_chisnall@infosec.exchange @zkat@toot.cat @xgranade@wandering.shop The actual translators beg to differ: https://linuxiac.com/ai-controversy-forces-end-of-mozilla-japanese-sumo-community/
That said, it could technically be implemented correctly. Hard to do in current marketing environment pushing artificial idiocy everywhere under high pressure :bunhdsad:
Replying to
@star@fed.amazonawaws.com
@star@fed.amazonawaws.com @AurraKo@tech.lgbt Does the tuxedo have buttons? :abunhdhappy:
Replying to
@evamik@uwu.mikkonen.com
@evamik@uwu.mikkonen.com @scarlet@chaos.social It's most likely an issue with their UI design or documentation, whicheever applies :bunhdpeek:
Replying to
@sil@mastodon.social
@sil@mastodon.social @slightlyoff@toot.cafe Does generating HTML by a script running from cron, committing it to a git repository, and pushing it to github to be displayed as github page count as web development? :bun_flip: