@vorlon@mastodon.social avatar

vorlon

@vorlon@mastodon.social

Portland, OR. 1312. Exiled from Twitter before it was cool. I was there at the dawning of the Third Age of Free Software.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

vorlon, to random
@vorlon@mastodon.social avatar

Ahahaha happy 16th birthday to CVE-2008-0166, still going strong
https://infosec.exchange/@briankrebs/112428503842956186

tzimmer_history, to random
@tzimmer_history@mastodon.social avatar

This is the type of comment I’ve been getting a lot for my latest piece: Always from self-regarding liberals who never want to grapple with the fact that the civil rights protests of the 1950s and 60s – the legacy of which they surely want to claim – clearly violated those principles.

vorlon,
@vorlon@mastodon.social avatar

@shansterable @tzimmer_history yes? This is the correct answer. Do not ask the government for permission to protest.

vorlon, to random
@vorlon@mastodon.social avatar

For Ubuntu 24.10, we should patch bash so that when it's given content on stdin, it checks the process tree and if the sending process is curl, launches x-www-browser with a page on basic Internet safety instead of executing the command.

gabek, to random

I noticed the company who wanted to add their service directly into Owncast, and I said no, started releasing their own version of Owncast with their own changes in it to support this use case.

I'm not sure how to feel about this. It's kind of a fork, but it's really just another release of Owncast by somebody else. They're releasing something called Owncast with functionality and decisions that have nothing to do with the real Owncast. It specifically says stuff like "Owncast does X", and Owncast does not do X, and will never do X. Only their changes do X.

I fear this may confuse people. If something goes wrong with their version of the software, people are going to ask me for support, and might make the real Owncast look bad. But I don't know if this is wrong, or if this is completely acceptable. It's open source, and the name "Owncast" isn't owned by anybody, as Owncast is an open source project, not a company. So I guess they have the right to do whatever they want and call it Owncast.

But it feels wrong, and it seems like really bad things could come of this.

vorlon,
@vorlon@mastodon.social avatar

@gabek @IzzyOnDroid @darnell It is a lot more expensive to overturn an invalid mark in court than it is to defensively register one. If and only if you are concerned about such adverse registration does it make sense to register the mark and stash it with a trusted holding entity.
3/3

vorlon, to random
@vorlon@mastodon.social avatar

Makes a good story but expecting fiscal accountability for government spooks is like expecting criminal accountability for cops, when it happens it has no correlation with the severity of the offense
https://infosec.exchange/@tinker/112196180295212632

Andres4NY, to random
@Andres4NY@social.ridetrans.it avatar

"wait, you keep saying 'the 80s'.. Do you mean the 1800s?" -- my

vorlon,
@vorlon@mastodon.social avatar

@Andres4NY I was talking to the 8yo this week about the eruption of Vesuvius that buried Pompeii being in AD79 and he asks, "did you mean 1879? Because 8079 is far in the future"

vorlon, to random
@vorlon@mastodon.social avatar

I don't know, am I supposed to feel bad about the deaths of people who took medical advice from Donald Trump?

(I don't.)

https://med-mastodon.com/@rchusid/111704562891696305

vorlon, to random
@vorlon@mastodon.social avatar

Just received a letter informing me that my PII has been compromised in a data breach at a company that stopped being the servicer of the mortgage on our house in 2016.

So that's cool.

Seriously, does anyone know a lawyer willing to take on a class action suit against these fuckers who are losing data that they shouldn't have/retain access to? This is the second one in a year.

vorlon, to random
@vorlon@mastodon.social avatar

A lot of people pointing out that the sudden scrutiny of executive compensation at Mozilla is driven by someone with an ulterior motive, and that's good information to have.

But, look. That is not a reason to DEFEND a CEO being paid $7 million. The reason Lunduke zeroed in on this is because it is ACTUALLY DISGUSTING AND HE KNOWS PEOPLE WILL BE BOTHERED BY IT. When surveyed about CEO compensation, people say a good ratio is less than 5:1.

https://www.corporate-rebels.com/blog/ideal-ceo-to-employee-pay-ratio

1/2

vorlon,
@vorlon@mastodon.social avatar

There's not a CEO in the world doing $7 million worth of work. Saying this is in line with exec compensation elsewhere is not a defense, it's an indictment. Nor is gender equity in pay an argument when ALL execs are overpaid and where pay equity is worst is at the entry level and among the precariat.

Seriously, stop trying to justify a $7 million salary. Executive compensation is a PROBLEM, and while it's nothing specific to Mozilla, you can say this without pretending it's healthy.

2/2

vorlon, to random
@vorlon@mastodon.social avatar

"if the stranger is an expert in their field"

So .. Mastodon is doing blue checkmarks now?

https://journa.host/@stribley/111501595141040729

vorlon, to random
@vorlon@mastodon.social avatar

The 7yo has learned the word "cyberpunk" and after a Dad symposium about its true definition, wants to know if there are any cyberpunk movies he could watch.

Anyone have any ideas? By the nature of the genre it's going to target more mature audiences. Something with a PG-13 rating might be ok depending, but definitely not R. And I'm having a hard time thinking of many that are true cyberpunk. Johnny Mnemonic is about the only one I can think of that unconditionally qualifies.

vorlon, to random
@vorlon@mastodon.social avatar

Anyone else remember the period in American history when a substantial fraction of advertising dollars in the economy were spent on selling chewing gum, or

vorlon, to portland
@vorlon@mastodon.social avatar

Portland parents! Earlier this year, PPS placed an order for additional in-classroom air purifiers, with input from the school communities, from the Oregon Health Authority; at no cost to the district; to help combat poor air quality affecting our children's learning environment.

The air purifiers have arrived at the district office.

And the district has decided not to distribute them to the schools.

1/5

vorlon, to random
@vorlon@mastodon.social avatar

Many people who could not implement encryption, or even explain it, nevertheless have absorbed the message that they should use it, because it keeps their information secret from prying eyes.

This is good.

But encryption is not a panacea, not even "end-to-end" encryption. The problem arises when people believe "it's encrypted, therefore it's safe".

Because encryption relies on you having a secret that no one else has, that you use to do math, to reveal the plain text.

1/6

vorlon, to random
@vorlon@mastodon.social avatar

Can you explain this gap in your CVE

vorlon, to random
@vorlon@mastodon.social avatar

Can we stop using the term TERF, please

These people are neither radical nor feminists, they're just reactionary garbage

vorlon, to random
@vorlon@mastodon.social avatar

QR code for Union position to the OCC

vorlon, to random
@vorlon@mastodon.social avatar

Apparently all the fine folks from have been sharing the Oregon Convention Center the past few days with https://www.hervoicemvmt.com/

Who had as one of their speakers Lou Engle, who traveled to Uganda and spoke in support of their anti-homosexuality legislation.

So how's that going, folks

vorlon, to bluesky
@vorlon@mastodon.social avatar

And right away in my feed, another example of focusing on the wrong things.

https://blahaj.zone/notes/9gzbzpdeo6

People aren't going to join because it claims to have an open federated protocol.

Server admins aren't going to switch protocols from ActivityPub to be able to federate with Bluesky.

If you've found community, HERE, you're going to stay for that.

And if you join Bluesky, it's going to be because there are people there that you want to follow.

vorlon, to random
@vorlon@mastodon.social avatar

XR in the UK had (has?) serious problems, trivializing/glamorizing incarceration in the name of the cause. Ruining golf courses, though, looks like some good praxis. https://www.cnn.com/2023/07/04/europe/extinction-rebellion-golf-course-spain-climate-intl/index.html

vorlon, to random
@vorlon@mastodon.social avatar

I'm starting to flirt with the idea of setting up my own mastodon or instance. General rhetoric around server administration is off-putting; huge server requirements, moderation time sink, etc.

https://n00q.net/articles/guide-mastodon-hometown/ is the first guide I've seen that puts a price tag on it. 50GiB database + 250GiB object store is a pretty manageable cost.

That guide is also way too manual for me.

1/x

vorlon, to random
@vorlon@mastodon.social avatar

A lot of people seem to be upset about the kolektiva.social database compromise because the data was unencrypted on a disk. I think this displays a failure to understand how little effective encryption of data happens on servers.

The admin should have been using encryption on their local drives. They also shouldn't have had the data local where it could be caught up by an unrelated warrant.

But if the warrant had been for kolektiva.social itself, served against a cloud provider?

vorlon, to debian
@vorlon@mastodon.social avatar

"he's polling high because his name is Kennedy"
Ah fuck, the impact of name recognition on elections is not to be underestimated. Even in project leader elections, where one maybe assumes an informed electorate that votes on the issues, I witnessed this over a decade ago where a candidates who were less well known ranked poorly, regardless of platform content - and one of these candidates who ran multiple years got a boost from having run before.
https://mastodon.social/@baratunde/110611956826840593

vorlon, to random
@vorlon@mastodon.social avatar

I have been uncomfortable with boosting these kinds of messages, because

It's not okay to just care about the software.

It's not ok to decide to care about the fate of trans people only because they give you something.

They are PEOPLE. You should care about them because they're PEOPLE.

If seeing these messages helps you understand that they're people IN YOUR COMMUNITY, then that's good.

If you need to be told this in order to care what happens to people, that's bad.

https://mastodon.online/@danirabbit/110421372391376663

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • kavyap
  • DreamBathrooms
  • cisconetworking
  • Durango
  • mdbf
  • magazineikmin
  • ethstaker
  • osvaldo12
  • rosin
  • Youngstown
  • slotface
  • everett
  • tacticalgear
  • megavids
  • thenastyranch
  • ngwrru68w68
  • modclub
  • cubers
  • normalnudes
  • InstantRegret
  • GTA5RPClips
  • tester
  • khanakhh
  • provamag3
  • anitta
  • Leos
  • lostlight
  • All magazines
    •