“When he reached the New World, Cortezh burned hish ships. Ash a reshult hish men were well motivated.” —Capt. Ramius, played by Sean Connery in The Hunt for Red October

Yay

Now what was I going to make …last Tuesday?

This only applies if you’re not extremely wealthy, though.

So there’s that.

Sigh

Mint is a good recommendation. I’ve used it for most of a decade because I just want my system to work.

Nobody is both that bored and that motivated. Unless paid.

deleted by creator

Emotionally? No. Linguistically, sure.

It’s seriously insane growing up on star trek and then seeing it come to life.

Still holding out for flying cars.

And warp drive!

The whole “woke” buzzword thing is just dumb. It’s just the latest bigotry dogwhistle / Fox “News” Pavlovian Response Training, where chuds are trained to react with visceral disgust at any word.

They made the chuds flip about WelFaRe QuEeN, HilLaRy, bEnGaZi, SoCiaLiSM and LIbRuLS and now WoKe. Fox could train these people to hate the word TURNIP.

“if you want to tell me what to do put me on the fucking payroll!”

Great clip.

This feels very “just found out about politics and damn” tbh.

Ok.

I think this would be of value for sharing with people that aren’t aware (my kid when she was younger).

Or is there a better resource to do this?

This is all I’ve run across on reverse engineering, so far but it is quite interesting.

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

I have a feeling there are a lot of busy people trying to answer that question, now. Yikes.

Yeah it sounds pretty wild already with some kind of, like, door knock mechanism using certificates? So you can’t scan for it. And some reverse engineering countermeasures.

Like everyone else, I have to wonder what libraries have been compromised in a way that nobody has noticed yet.

Some of the trust comes from eyes on the project thanks to it being open source. This thing got discovered, after all. Not right away, sure, but before it spread everywhere. Same question of trust applies to commercial software too.

Ideally, PR reviews help with this but smaller projects esp with few contributors may not do much of that. I doubt anyone has spent time understanding the software supply chain (SSC) attack surface of their product but that seems like a good next step. Someone needs to write a tool that scans the SSC repos and flags certain measures like the # of maintainers.

PS: I have the worst allergies I’ve had in ages today and my brain is in a histamine fog so maybe I shouldn’t be trying to think about this stuff right now lol cough uuugh blows nose

Remember Star Trek III…?

Is there really anything they couldn’t collect?

I would go nuts or od if not for the pill organizer. Refilling sucks. But I sigh loudly every Sunday and manage to do it lol

Fortunately they can write up 3 Rx and then send to the pharmacy every month until my next appt.

Of course my pharmacy can’t get the stuff due to the shortage so I have been without for 2wks now. It’s a process to have the Rx sent over to a different pharmacy. Easy for someone normal. But ADHD without meds? Yeah.

Very annoying - the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it’s “great new features”. We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added). We had to race last night to fix the problem after an inadvertent break of the embargo.

He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise.

Damn. I would love to see a full post mortem on this compromise.