vorlon

vorlon, 10 months ago to random

A lot of people seem to be upset about the kolektiva.social database compromise because the data was unencrypted on a disk. I think this displays a failure to understand how little effective encryption of data happens on servers.

The admin should have been using encryption on their local drives. They also shouldn't have had the data local where it could be caught up by an unrelated warrant.

But if the warrant had been for kolektiva.social itself, served against a cloud provider?

juliank, 20 days ago to random

The whole "illegals vote I'm US elections" discussion is funny as a German because here

• everyone needs to register their home address with the city within a week or two of moving there, you are automatically "registered to vote" by this and assigned the closest place to vote when an election happens.
• to vote, you need to present ID and it's checked against the people allowed to vote in that place.

vorlon, 10 months ago to random

Apparently all the fine folks from #FOSSY have been sharing the Oregon Convention Center the past few days with https://www.hervoicemvmt.com/

Who had as one of their speakers Lou Engle, who traveled to Uganda and spoke in support of their anti-homosexuality legislation.

So how's that going, folks

vorlon, 10 months ago to bluesky

And right away in my feed, another example of focusing on the wrong things.

https://blahaj.zone/notes/9gzbzpdeo6

People aren't going to join #bluesky because it claims to have an open federated protocol.

Server admins aren't going to switch protocols from ActivityPub to be able to federate with Bluesky.

If you've found community, HERE, you're going to stay for that.

And if you join Bluesky, it's going to be because there are people there that you want to follow.

juliank, 2 days ago to random

It's very hard to find stuff about SAT solving, you just get "how to master your SATs"

juliank, 3 days ago to random

apt-cache can't tell you here why pbuilder is installed:

$ aptitude why pbuilder
i ansible-role-devel Depends ubuntu-dev-tools
i A ubuntu-dev-tools Recommends pbuilder | cowbuilder | sbuild

$ apt-cache why pbuilder
pbuilder:amd64=0.231build1 -> pbuilder:amd64

That's because pbuilder is autoremovable under the current solver3 regime, so it didn't find a reason to keep it - it picked sbuild to satisfy the Recommends above (as sbuild is manually installed).

vorlon, 5 months ago to random

"if the stranger is an expert in their field"

So .. Mastodon is doing blue checkmarks now?

https://journa.host/@stribley/111501595141040729

vorlon, 10 months ago to random

I'm starting to flirt with the idea of setting up my own mastodon or #calckey instance. General rhetoric around server administration is off-putting; huge server requirements, moderation time sink, etc.

https://n00q.net/articles/guide-mastodon-hometown/ is the first guide I've seen that puts a price tag on it. 50GiB database + 250GiB object store is a pretty manageable cost.

That guide is also way too manual for me.

1/x

vorlon, 7 months ago to random

Many people who could not implement encryption, or even explain it, nevertheless have absorbed the message that they should use it, because it keeps their information secret from prying eyes.

This is good.

But encryption is not a panacea, not even "end-to-end" encryption. The problem arises when people believe "it's encrypted, therefore it's safe".

Because encryption relies on you having a secret that no one else has, that you use to do math, to reveal the plain text.

1/6

vorlon, 6 months ago to random

Anyone else remember the period in American history when a substantial fraction of advertising dollars in the economy were spent on selling chewing gum, or

vorlon, 4 months ago to random

Just received a letter informing me that my PII has been compromised in a data breach at a company that stopped being the servicer of the mortgage on our house in 2016.

So that's cool.

Seriously, does anyone know a lawyer willing to take on a class action suit against these fuckers who are losing data that they shouldn't have/retain access to? This is the second one in a year.

juliank, 9 days ago to random

One thing that becomes really interesting are versioned Recommends. Consider

X Recommends: A (>= 2) | B

Let X become available before A=2. The solver will install B.

Arguably a better solution is to ignore lower bounds on Recommends and instead optimize for "eventual satisfaction". i.e. we install A=1 now because A=2 will become available later and then satisfy the Recommends.

juliank, 6 days ago to random

Getting triggered each time I go to an Italian place and they pronounce pistacchio wrong. It's pi-stak-kio (/piˈstakkjo/).

Sorry but if you work in an Italian restaurant you should learn to pronounce the words correctly.

As a helper, this is the Italian version of πιστάκιον. That might make it more clear to you if you can't follow the Italian pronunciation from the spelling.

juliank, 7 days ago to random

Why is Boulogne-sur-Mer not a partner city of Bologna, this is a missed opportunity

vorlon, 1 month ago to random

For Ubuntu 24.10, we should patch bash so that when it's given content on stdin, it checks the process tree and if the sending process is curl, launches x-www-browser with a page on basic Internet safety instead of executing the command.

vorlon, 4 months ago to random

I don't know, am I supposed to feel bad about the deaths of people who took medical advice from Donald Trump?

(I don't.)

https://med-mastodon.com/@rchusid/111704562891696305

vorlon, 11 months ago to debian

"he's polling high because his name is Kennedy"
Ah fuck, the impact of name recognition on elections is not to be underestimated. Even in #debian project leader elections, where one maybe assumes an informed electorate that votes on the issues, I witnessed this over a decade ago where a candidates who were less well known ranked poorly, regardless of platform content - and one of these candidates who ran multiple years got a boost from having run before.
https://mastodon.social/@baratunde/110611956826840593

vorlon, 1 month ago to random

Makes a good story but expecting fiscal accountability for government spooks is like expecting criminal accountability for cops, when it happens it has no correlation with the severity of the offense
https://infosec.exchange/@tinker/112196180295212632

vorlon, 4 months ago to random

A lot of people pointing out that the sudden scrutiny of executive compensation at Mozilla is driven by someone with an ulterior motive, and that's good information to have.

But, look. That is not a reason to DEFEND a CEO being paid $7 million. The reason Lunduke zeroed in on this is because it is ACTUALLY DISGUSTING AND HE KNOWS PEOPLE WILL BE BOTHERED BY IT. When surveyed about CEO compensation, people say a good ratio is less than 5:1.

https://www.corporate-rebels.com/blog/ideal-ceo-to-employee-pay-ratio

1/2

vorlon, 9 months ago to random

Can we stop using the term TERF, please

These people are neither radical nor feminists, they're just reactionary garbage

vorlon, 14 days ago to random

Ahahaha happy 16th birthday to CVE-2008-0166, still going strong
https://infosec.exchange/@briankrebs/112428503842956186