Natalie

Out of curiosity, what languages do you tend to use for your (computerish) devices?

@Mara@hachyderm.io While the rest of us have to stick to /dev/mem for our crimes.. :(

@GossiTheDog@cyberplace.social Ah yes, "need to know", that eternal hallmark of trustworthy and upstanding organizations. Lovely.

@0xabad1dea@infosec.exchange Yet another day of what in the actual fuck. >.<

@0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk In fact, that prompt /is/ the improvement over back in the day when editors would just do it completely silently. If anything, it feels like LSP was a bit of a turning point around editors asking at all. (That said, the prompts are still pretty awful.. lsp-mode (in Emacs) just asks "would you like to import this project?".. would you expect that to allow arbitrary code execution too?)

@sgued@pouet.chapril.org @0xabad1dea@infosec.exchange (and build.rs scripts! :'D)

@vantiss @cmccullough @Cheeseness Or the even more blatant nazi shit that he's pulled since… fun times. :/

@amd@gts.amd.im @NetscapeNavigator@social.vivaldi.net @alice@lgbtqia.space At least to me, the barrier isn't just "a human pressing okay", it's "is my presence here even welcome, even if I'm not already in the club?". I don't think growth-at-all-costs is worthwhile, but I also know that closed-registration would have scared at least me off from even trying. "Please justify your existence" is just about the most terrifying thing you can ask me. And if it's easier for you… well… lucky you, I guess.

@lindsey@recurse.social Haven't thought about "train" that way before, but "human resources" always rubbed me the wrong way for similar reasons.

@tay @alexia Not my personal cup of tea but it also works better than it has any right to.

@dalias@hachyderm.io @0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk If anything… LSP bundling up "all the risky things that /should/ be sandboxed" behind one RPC protocol makes me more hopeful that someone could just… go and transparently do that for all LSP servers, but I haven't seen much push in that direction.

@dalias@hachyderm.io @0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk Good analysis (autocomplete, inline errors, etc), metaprogramming (whether that's macros, codegen, or just plain dynamic typing), fully static analysis: pick two. LSP is the cool baby to hate on, but flycheck&co were mainstream before that and had the same issues.

@adamshostack@infosec.exchange @jbcrawford@hachyderm.io Kinda? My understanding is that GPS positioning is derived from the time measurement, so location spoofing /is/ time spoofing. But the damage you could do in the short run should be fairly limited; NTP clients tend to be configured to only allow very minute incremental adjustments. So over a longer duration you could get them a few seconds/minutes off, but you couldn't get people to instantly accept that TLS certificate that expired back in 2015.

@Ashedryden@xoxo.zone And post menu sheets on it! (You'd think it was obvious, but...)

@adamshostack@infosec.exchange (And I can only assume that the stratum 0 servers would have similar protections in place as well.)

@davidrevoy I mean, I'm not super familiar with that whole world (and obviously they're *allowed* by the CC-BY license) but at first blush 10% of *profits* seems.. kind of absurd? Given that we're talking about the profits (so after both taxes and any actual printing/shipping/handling costs) on a print-to-demand campaign (so no unsold-inventory risk) for a work that already exists (so presumably no advance or other carrot to make up for.. aside from the one on the cover :p). Where's the 90% going‽

@TechTangents@dialup.space "Cleanup" indeed.

@atax1a@infosec.exchange "Please be another Castro please be another Castro please be another Castro... oh no, RIP I guess"

@david_chisnall@infosec.exchange Ah dang, too bad about the UK req.

@david_chisnall@infosec.exchange Cross-Site Prompting isn't much better in that regard..

@alexia@shrimp.starlightnet.work @mrconorae@wetdry.world Was about to suggest it too but, yeah, that sucks… :/