Stefan Monnier

@syphist@zoner.work @vogelchr@chaos.social @faheus@chaos.social I'd guess they started with some SBC development board that came with an "SDK" that consist of a patched Linux kernel with some Armbianish tooling on top where the SDK provider set the "root:root" and the charger manufacturer never even considered the possibility of changing it (let alone looking to see if there's an SSH daemon running in the base config). The upside (down) is that once you offer "root:root" you don't need to worry about upgrading the kernel every time a new CVE comes along. 🙃

Why tastes include only sweet, salty, savory, acid, and bitter and not spicy?

@rmondello@hachyderm.io I can't point to a precise place, but the docs you linked to suggest there's a limit to the number of regions that can be "watched". Also it seems rather unlikely that the application wouldn't be notified(!) when a notification is triggered. Can you cite your source for your claim that the application is not told about the location?

@rmondello@hachyderm.io "unless and until you interact with it"? AFAIK the application's code is used when showing the notification (to decide the content of that notification), so the application gets to know about your movement. Technically the application isn't spying on you, but the result is the same: your smartphone is spying on you and informs those applications whenever you move out-of/into designated areas.

Who are the idiots who thought this would be a good idea? If only such incompetent fools could be confined to places where they can hurt only themselves!

https://www.newscientist.com/article/2524962-nhs-england-rushes-to-hide-software-over-ai-hacking-fears/

#NHS #FreeSoftware

A fascinating piece about the relationship between the #SPLCenter and the US banking system, and surrounding pressure tactics and how it played out against Trump/Meta/etc...

https://www.bitsaboutmoney.com/archive/nonprofit-indicted-bank-fraud/

@thenarwhal@mstdn.ca So, IIUC, I should claim to be rancher, setup a bogus oil company, lease some public land for my (virtual) cattle to graze and then have my oil company claim to exploit wells on that land. I won't need actual cattle to graze that land (since the wells exploitation makes it impractical), and I don't need any actual well exploitation either (by the time the government realizes what's going on, that shell company will have vanished anyway)? And I'll just collect the compensation paid for by tax payers?

@evan@cosocial.ca @mayintoronto@beige.party Of course the centralization aspect is a bit worrisome, but another aspect might be interesting here if you decentralize it. It would allow to disambiguate tags, e.g. #diner@tags.us vs #diner@tags.qc.ca vs #diner@tags.fr

@petersuber@fediscience.org $300k, eh? Time to move on, methinks

@drewtowler@mas.to @remixtures@tldr.nettime.org I expect it's standard practice, indeed, for sites that don't care about honesty.

@wearenew_public Just a note to remind people that AT/Bluesky is DINO (Decentralized In Name Only)!

@jpoiret@types.pl I think the ACM is smartly playing the long game: they made the DL useless for non-premium users and obnoxious for premium users, so that eventually they'll be able to ditch the DL and provide just a barebones archive of PDFs, alongside arXiv and friends.

@steggy@sunny.garden @dalias@hachyderm.io @Em0nM4stodon@infosec.exchange It doesn't matter: criticising or mocking such cosmetic details weakens/dilutes the criticism of the real harms and failures that are consequences of actual actions.

@davep@infosec.exchange @maj@cosocial.ca I think asking either question is borderline disrespectful and at best useless. Better skip it and ask them directly what they plan to do about it

@TheBestLeiya@mastodon.social @cmconseils@mastodon.social Actually AFAICT the base of the Democrats is quite leftist/progressive, and it moves further away from it as you go up the "hierarchy"

@scubbo@fosstodon.org There's one thing I don't understand: why "as pejorative"? I've basically never seen it used any other way

@akareilly Hmm for an exorcism shouldn't it be tied securely?

@joshbressers@infosec.exchange I'd tend to expect that from them, indeed. Whether they'd be able to do that, is less clear: as long as my instance only shows me the posts from accounts/hashtags to which I explicitly subscribed (as opposed to using some algorithm controlled by someone else), there's a chance that ads will make their way only following the same kind of paths as email ads. IOW, my optimistic-self hopes tht maybe it's not much easier to monetize the fediverse than it is to monetize email. In this case, it might be more useful to consider Meta's threat in light of things like Gmail's effect on email.