Raven667

@sten @darkuncle The old joke that _everyone_ has a testing environment, some are fortunate enough to have a separate Production environment :-)

@alexanderkjall Brad Spender (GRSecurity) has been highly critical of the Linux Kernel security bug handling process since forever, and one of those criticisms is that the members of security@kernel.org don't notify the linux-distros security list, or really triage severity in a way that he approves of as a security vendor and practitioner, their "security bugs are just bugs" stance that refuses to give priority to security issues is infuriating to some people who see security bugs as higher priority than any other kind of bug.

@foone@digipres.club I mean, I think most people who want a GUI write HTML and skip the other toolkits, that is pretty robust compared to CLI

@davidculley@hachyderm.io @rzeta0@mastodon.ie Yeah, when faced with a large dissonance like this the human reaction is often to just play pretend (it's hard to get someone to understand something when their paycheck (aka survival) depends on them not understanding it). Dissonance can be maintained in human systems for a distressingly long time, the only thing which can't be fooled is physics

@puppygirlhornypost2@transfem.social @ireneista@adhd.irenes.space People talking about UX are often talking about GUIs but aside from GNU making clean copyleft license versions of the (at the time) proprietary Unix utils, GNU also spent a lot of effort in UX like long options and fewer arbitrary restrictions (which made sense on a PDP but not on the larger systems of the 90's and later) which is how they got to be so popular, before Linux was even created. It's too bad that some of the other systems keep looking back farther for inspiration rather than looking around and forward for what the UX of a Unix should be.

@paul_ipv6 @SecureOwl my favorite was a customer of mine who had an AS400 and set up their LAN *just* like the IBM documentation, including using some random public IBM subnet that was used for the examples, lol. 192.0.2.0/24 is a very useful thing indeed.

@OmegaPolice @alexanderkjall yes and the majority of Linux kernel development is not volunteers, its a consortium of vendors organized through the Linux Foundation trade org which _does_ pay people. There are still volunteers who work on Linux but they shouldn't be a shield for the majority to pretend they are "just a smol bean, uwu" and dont have some responsibilities. I'm the *first* to say that dragging volunteer FOSS maintainers is shitty (and that volunteers shouldn't cosplay as commercial vendors, by doing things like having public issue trackers, as it is nonsense to "open a support case" with a tracking number against a *volunteer*) but Linux kernel has volunteers it is not a volunteer led project anymore, its a consortium of major companies which benefit from pooling effort and having a neutral forum to collaborate. I think security focused people, whose customers are also prioritizing security sometimes dont have empathy for or understand people who don't have security as their top priority, and treat people who don't share their priorities as stupid and incompetent, rather than understanding the differences in goals and constraints. That said there is probably room for improvement on kernel security, but more from a better systematic approach to prevent defects than treating every bug with a website as some super secret special thing. the current design makes a constant stream of local exploits inevitable

@sundogplanets thats just facts :-)

@alice@lgbtqia.space I have basic guy firmware, but I usually ignore the scenario setup because there is so so much "step-sibling" stuff out there, and that is not a positive for me, it takes away from the experience. Who is actually in to all that stuff? Teenagers? Maybe its some sort of PH filter bubble but it seems like this is one area of human endeavor that people have put the most creativity into, so it shouldn't be hard to find a wide array of situations depicted. They exist, but not on the PH homepage. Maybe they should dedicate 20% of their recommendations to just randomness to allow for serendipity, I dont see PH as all that different than YT when it comes to recommendation algorithms. People make and consume what gets boosted by the platform, so maybe they could steer away from "incest" themes and see if the demand is organic or induced, maybe we all really want hot doordash drivers or something ;-)

@tomjennings @monkeyninja sure, SPLC is legit, but the government using its investigative powers to harass them and their donors, is not

@ahltorp@mastodon.nu @ryanboswell@sfba.social not only the development of isolated single family home suburbs but the mechanization of farm labor hollowed out all the little rural towns, leaving just owner/operators and marginalized immigrant labor

@sng@bsd.network @michelestrider@mastodon.social @liferstate@mas.to TIL In my limited experience, ex-Mormons are the nicest people, they internalized all the positive messages, then noped-out when they couldn't square their beliefs with the reality of an authoritarian organization and lifestyle.

@unchartedworlds@scicomm.xyz @danluu@mastodon.social I don't think so, I think it should be mandatory, by law, to disclose or watermark anything using generative models

@MissGayle @Urban_Hermit @oli @Strandjunker One thing I unfortunately learned as a child at my first funeral, when I had a childs guileless understanding, is that the adults around me who said "the Bible is literal truth" and that Heaven was real, didn't really believe what they were saying because they didn't act like they understood or internalized the practical consequences of people being functionally immortal. Then I could question and recontextualize religious teachings as practical applied philosophy and long family traditions, rather than whatever rationalizations these chuckleheads are doing.

@Two9A@hachyderm.io @JoshuaACNewman@xeno.glyphpress.com @angusm@mastodon.social thats the irony, both the literary palantir and the company Palantir exist to facilitate doom scrolling that warps your perception of humanity, replacing hope, compassion, empathy and cooperation with a dark vision of all against all conflict. Its literally creating Denathors.

@Strandjunker@mstdn.social I guess we shouldn't get disheartened if he doesn't usher in some socialist utopia and his reforms are half undone by entrenched interests, better is still better and we can continue to build and push off that

@federicomena@mstdn.mx I took my 8yo EV to get the brakes looked at for squeeking, and they said the pads were only 30% worn (70% life still in them) but the rotor was rusty from disuse and the slide pins needed lube, it had dried out.

@futurebird@sauropods.win there is good stuff out there, like SciShow, for teachers to use, but the best it can do is give an overview to set the stage for deeper learning which requires two way communication. Actually I think with YouTube and podcasts there is more well researched and thoughtful popular educational material out there from small (often single person) production companies than any time before, because the recording equipment and distribution infrastructure is so cheap and plentiful. I feel like I have learned more from history podcasts for *fun* than I learned in high school.

@LJ and if you have a partner, a "tick check" can be a fun activity

@brianvastag @cornelius had that happen when visiting Mt Evans in Colorado, used a bunch of energy to get up there that we regained half of on the way back toward Denver

@brianvastag I just had the brakes on my 8yo 110k miles EV serviced (slide pins needed lube) and they said the pads were only 30-40% worn, but the rotors are rusty and pitted from disuse. I turned down the regen to help clean the rotors off and might see if i can get the rotors resurfaced

@futurebird@sauropods.win @temptoetiam@eldritch.cafe those Aussie ants sound terrifying if theyve developed a taste for pig, but when they drag a boar back to the colony I'm sure thats a feast indeed! :-)

@Strandjunker@mstdn.social I mean, hes only been in my office a short time, these announcements are the beginning of the new process not the end, so there are lots of places where the established powers in the agencies which actually implement policy could drag their feet.

@federicomena@mstdn.mx I will say spending a kilobuck on tires every 3rd year is a thing, and I have a separate set of winter tires, so thats been my biggest maintenance expense, that and normal wear.

@owen@mastodon.transneptune.net I would rather understand the tradeoffs and rationale as well, while sometimes business interests put their fingers on the scale to accumulate power, there is often a real problem behind these kinds of security practice, and sometimes its hard to see the underlying problem because its masked by the restrictions preventing it from being a popular avenue of attack.

@owen@mastodon.transneptune.net I'm not sure I understand all of it but at first guess those APIs are ones that aren't considered safe against MITM attacks, if the connection isn't encrypted then any device on the local segment or network between client and server can takeover the connection and inject malicious data into it, the gamepad support is probably not hardened against attack, its not considered a security boundary, so they don't let the browser open it up for attack. There may be a bit of "better safe than sorry" thinking too, even if the computer owner attests that they accept the risk, if anything goes wrong the browser maker might still be afraid of catching liability. I dunno, but having some documented thinking could help have a productive discussion about it

@TeflonTrout@beige.party @moriel@chaosfem.tw @danluu@mastodon.social can confirm, Bazzite is a joy to use, and has helped make computers fun again, for me

@ancoghlan@mastodon.social @joshbressers@infosec.exchange I think it would be a good outcome if the new EU laws encouraged companies basing their products on FOSS to set up their own trade orgs to handle maintenance and security response rather than trying to to fob that off on the original volunteers who donated the code but aren't getting paid. There needs to be a way to funnel money back to the people doing work, and making big claims about developer responsibility deflects from the commercial orgs who base products on FOSS

@uecker@mastodon.social To reiterate what he said, they do have a list its everyone, when they publish the CVE.

@cassidy@mastodon.blaede.family I think it's great that they include both, plus the TrackPoint requires real physical buttons, so you get that option too. I imagine that some people really love it over touchpads if they are long time ThinkPad users and have the muscle memory for it. One thing I've noticed is that the TrackPoint works OK for FPS games while a touchpad doesn't.

@Sassinake @keithpjolley @heidilifeldman could have named that character "Clarence" ...

@bodil I wasn't really thinking about Canonical, but this makes perfect sense. They've always struggled to build any community around their development (mostly because of their CLA), the name "Canonical" has always been an ironic joke, so they've never had the resources to generate code to match their ambition, but with LLM-based statistical code generation they *do*. They have a sycophantic agent to replace the community they could never have and can generate a castle of ambition built out of all the low-quality code they want.

@quinn @argv_minus_one @apz I think one of the forces pushing for "age verification" laws is Facebook/Meta to try and regulate the victims of social media manipulation, in a way that makes personal data collection more valuable, rather than having Facebook regulated out of existence

@ajroach42@retro.social @keithzg@fediverse.keithzg.ca sure, some are, they are the ones who know the score, but not every sponsor or legislator who votes for this shit is on the payroll, I would guess that most really do believe this stuff is OK, for the same reasons as randos on here do, because they aren't magically any smarter, or they are an institutionalist who figure that someone "above their pay grade" approves, so they don't have to think for themselves (even though they are top of government, whose job is to troubleshoot and fix societal legal problems)

@Migueldeicaza @slightlyoff I hope we can find someone with that energy here, Biden is a decent person, but he was not that guy. Hopefully they are out there and will stand up and we too can have nice things (not like it was but something new and better for the future). Hopeful.

@Rosita311 an old roommate of mine had a steady business maintaining the websites of various bars and restaurants in our area, they didn't take a lot of work PR generate a lot of money individualy, but if you had enough clients it was a good living

@lunarloony@dosgame.club @foone@digipres.club I think that was part of the design for MS switching Edge from a bespoke engine to Chromium, so they could make Teams and Outlook share an Electron-compat runtime with the OS

@fsinn@mas.to you'd think but I'm guessing the regime are worried/embarrassed about the pilots telling the truth, that Iran shot them down and how difficult extracting them actually was, they don't want to bring attention to all the losses, and Trump doesn't see rescuing a downed pilot as "success" eg "I prefer soldiers who haven't been captured" when talking about McCain.

@georgetakei happy birthday!

@jenniferplusplus@hachyderm.io I dunno if this fits the bill but we got a Ugee M708 tablet recently for the kiddo, its not fancy but it worked out of the box on Bazzite/GNOME and the vendor setting app for customizing the hotkeys actually has a Linux RPM which also just worked. I was pleasantly surprised. It worked with Krita without any fuss.

@ajroach42 @keithzg I guess that shit works on me as a parent more than I'd like to admit. I think too that many legislators aren't in some grand conspiracy, they are just as susceptible as everyone else to bullshit justification, only a few maybe know the real score, the rest are well-meaning but misguided.

@CliffsEsport@mastodon.social @GossiTheDog@cyberplace.social you've never been high enough because they can afford gobs of the real good stuff, their CEO is clearly so high he can't feel his face, lol

@foone@digipres.club imma guess Electron, because thats "efficient" :-)

@mhoye@cosocial.ca While this is bad computing, this is all the "normie" take on how they think computers _should_ work and what "AI" marketing exploits.

@sng@bsd.network @liferstate@mas.to @michelestrider@mastodon.social aspiring to kindness puts you head and shoulders above people who believe whatever they do is right by definition, or who don't think about it at all

@Strandjunker@mstdn.social at least they are pointed in the right direction and people of good conscience will advocate internally to boost these good policies, so maybe the worst case is something like the ACA, where lots has been done to undermine it but its survived long enough to do some good

@Arcaik @alexanderkjall thats probably a better framing, and it points to the fundamental disagreement, security vendors see the kernel issuing thousands of CVEs as malicious compliance rather than an admission that _any_ of those bugs could have security implications, and they are all important, so none of them are _more_ important. The security people are right about something too though, high profile bugs with websites and such are more likely in practice to be exploited because the likelihood is based on human choice or preference, not strictly technical possibility.

@davidgerard It's creating Justin Long's doctor character from Idiocracy.