Replying to
@kajer@infosec.exchange @cR0w@infosec.exchange @catsalad@infosec.exchange Except that Lilith wasn't one of the Magi.
Remote
Stijn van Drongelen
@stiiin@infosec.space
mastodon 4.8.0-alpha.3+glitchToots do not represent employer's opinion.
120 Followers
295 Following
50 Posts
Joined January 07, 2025
Replying to
@Michkov@mas.to @nyrath@spacey.space @isaackuo@spacey.space @deivudesu@mastodon.social @pluralistic@mamot.fr That website needs to not fuck with my touchscreen scrolling.
Replying to
@bjn@mstdn.social @kaneel@mas.to @ludicity@mastodon.sprawl.club I'm not sure if I agree with Scrum being anti-Agile. But I've never seen any form of scaled Scrum succeeding to meet the promises that Agile makes.
In part, I think it's because there's often a viscious cycle between not setting goals for sprints that "the business" recognises, developers presenting the changes rather than discussing the product at every review, and "the business" not showing up at reviews. Some would say "but then it's clear that you're doing Agile wrong". The thing is that those people keep saying that phrase. Maybe it was never fit for running a whole operation on. Because if everyone syncs their sprint, all the devs are presenting at the same time, and "the business" has to pick a bad option somewhere between "ignore all teams but one" and "have a shallow interaction with all teams" (such as listening to a ticket number lottery slide deck).
Replying to
@mttaggart@infosec.exchange omg @LoadingReadyRun@kind.social can we get a crapshot for this
Replying to
@queen_fennec@mas.to Het zijn moderne charlatans: bangmakerij verspreiden over een onderwerp dat in mystiek gehuld is (en die sfeer ook vasthouden), gevolgd door "koop dit".
Replying to
Replying to
@sophie@social.translunar.academy @cR0w@infosec.exchange The RFC has three use cases: if you know the agent and organisation, if you know the organisation but not the agents, and if you know the "capability" but neither the organisation nor the agent. But this is useless: the first usecase doesn't add anything that HTTP redirects can't do, and the other two usecases are pretty much entirely out of scope of this specification.
These people need to find a different kind of job.
Replying to
@pluralistic@mamot.fr @MichelPatrice@jasette.facil.services This popup seems to be more about the ePrivacy Directive than the GDPR, but even so, if it were that clear-cut, there wouldn't be an EDPB opinion on it of over 40 pages: https://www.edpb.europa.eu/documents/opinion-of-the-board-art-64/opinion-082024-on-valid-consent-in-the-context-of-consent-or_en
Also note that Opinion 08/2024 is limited to "behavioural advertisements on large online platforms". There is no general guidance yet.
It's behaviour that should be clearly forbidden, though.
Replying to
@edgeofeurope@mastodon.social Of van die mensen die het over "vernieling" hebben waar ze "vernieuwing" bedoelen.
Replying to
@RandamuMaki@mstdn.social @bert_hubert@mastodon.nl Alleen als besturen er gezeik mee krijgen.
Replying to
@gtronix@infosec.exchange I'm really at a loss why nobody is explicitly criticising Primeagen/ThePrimeagen/Michael B. Paulson for his consistent association with DHH (and Bryan Lunduke, for that matter).
Replying to
@ErikJonker@mastodon.social @waxle@mastodon.social @bert_hubert@mastodon.nl Sorry, heb m'n post aangepast nu ik zie dat dit op 1 juni al werd bewaarheid.
Het punt is dat Meta hun enorme kapitaalinvesteringen in GenAI aan het herpositioneren is, op zoek naar iemand die hun verliezen kunnen dempen. Investeerders moeten inzien wat voor signaal dat afgeeft aan andere afnemers "die niet achter konden blijven".
Replying to
@alienmelon@mastodon.social I'd be in violation of the EULA if I run it on my computer. Section 3.1 precludes running the game on Proton.
Replying to
@avuko@infosec.exchange 60 hits on the term "Log4j" in the advisory. These people are unserious.
Replying to
@leo@60228.dev @mcc@mastodon.social Yeah, unless you're actively seeking out low-latency at the cost of unreliable transport, WebTransport isn't what you want. As far as I understand it, its main purpose is to expose QUIC datagram frames (IETF RFC 9221) in HTTP/3 connections to frontend code. It's as close as you'll get to custom plain UDP connections, but your data is still encrypted, and there is a tiny bit of ack-ing going on (but I'm not sure how detectable that really is from WebTransport).
WebTransport doesn't necessarily need HTTP/3 to work, but it's all a bit pointless if it ends up using HTTP/2 instead.
Replying to
@whitequark@social.treehouse.systems It's simple, one is "Octal DDR" and the other is "DDR Octal". That determines which code is for which operation.
Replying to
@tiefling@bardicperspiration.club What has the Apache Software Foundation done this time?
Replying to
@fifonetworks@infosec.exchange Is there a way to backup/restore all settings related to a mailbox? Or to get an audit trail of changes to the settings?
Replying to
@aeva@mastodon.gamedev.place @archiloque@felin.social @gsuberland@chaos.social Have you ever believed a falsehood about, um, leave bout, ab, ab- about hood, you'll be, you- you gram, you, you could falsy gram, you- you'll prog, July- you, you gramps, you falsehood him into doing programming so much you could believe anything?
Replying to
@mttaggart@infosec.exchange "Pure DC did tell Dutch newspaper NRC that the attack had no impact on construction, and that it intended to pursue legal action against those responsible."
No impact, no damages, no case.
Replying to
@kajer@infosec.exchange @cR0w@infosec.exchange @catsalad@infosec.exchange My desktop is named sylvatica, the specific epithet in the scientific name for the European beech (Fagus sylvatica). I think I named it about nine years ago, and I thought it would make for a good start for a naming scheme. It's the only nameable machine I owned until recently, though.
I bough a laptop this year and named it laevigata, after the English hawthorn (Crataegus laevigata). Not only is a hawthorn typically smaller than a beech, but it makes me think of my partner. We met last year, and as the hawthorns started blooming, she taught me the simple art of eating one or two blossoms as a snack.
Replying to
@smveerman@zug.network Ik ontdekte laatst deze parodie: https://schatkamer.beeldengeluid.nl/serie/2101608030021822731/borreltijd
Replying to
@lcamtuf@infosec.exchange Huh, I thought it was because the skin got waterlogged or something. It's apparently much more interesting. https://onlinelibrary.wiley.com/doi/10.1002/mus.10323
Paniek!
Het nieuws maakt duidelijk hoe de AI-kaarten zijn geschud en waar Europa staat. Experts vrezen dat als Amerika's AI-voorsprong zo groot blijft, de Europese economie ineen zal storten. Ook zou het Witte Huis met één druk op de knop al onze computers kunnen hacken.
Maar welke expert vertelde Nieuwsuur dat we op het punt staan massaal gecylond te worden?
Nieuwsuur? Hallo? Waar is je bron?
Fucking "journalisten".
The KPMG report, initially flagged by the Register, surveyed 2,145 senior execs across 20 countries, finding that an astonishing 29 percent of them had no idea where the growing costs associated with AI were coming from.
(from: "Execs Confused and Horrified by the Huge AI Bills After Thinking They Could Replace Workers for Free" on Yahoo Finance)
Sometimes, I feel like the world would be a better place if execs like these would just get shipped off to some sort of kindergarten, where nobody else is bothered by their seemingly boundless ignorance and incompetence.
Replying to on mastodon.foxocube.xyz
Replying to
@smveerman@zug.network Ik denk terug aan mijn eigen recente uitspraak "These buttons are very buttony."
Replying to
@skinnylatte@hachyderm.io What's pictured is not "hagelslag" (sprinkles), but "vlokken" (flakes). Hagelslag not only comes in various chocolate-like flavours, but there are also fruit-flavoured-sugar sprinkles.
Replying to
Replying to
@da_667@infosec.exchange "Critically, for many of these security header options, the plugin does not properly enforce sufficient authorization checks before saving." This is why you don't let people run WordPress.
Replying to
@waxle@mastodon.social @bert_hubert@mastodon.nl De volgende om in de gaten te houden is Meta, vooral wat er na de komende earnings call (29 juli) gebeurt. Ze zijn grootverbruiker GenAI, zonder het als dienst aan te bieden. Hun investeringen op dat vlak moeten echt zichzelf bewijzen, in plaats dat ze naar de volgende bag holder kunnen worden doorberekend.
Replying to
@nina_kali_nina@tech.lgbt @weddige@gruene.social @gloriouscow@oldbytes.space So... it's a combination of EICAR and the Acid test?
Replying to
@juliamon@kind.social @mttaggart@infosec.exchange @LoadingReadyRun@kind.social I looked a little bit into the source, and it seems 404 Media is a bit late to the party (but so are we). The Github skill is from early April, and PCWorld wrote about it within two weeks: https://www.pcworld.com/article/3115406/claude-users-are-teaching-it-to-talk-like-a-caveman-heres-why.html
So there's a decent chance are that they've already seen it :)
Replying to
@edgeofeurope@mastodon.social Disproportioneel, want "volgens de lobbyclubs zijn de regels voor wegwerpplastics vooral bedoeld voor verpakkingen en vapes, en niet voor voedingsproducten als kauwgom." Totaal gestoorde redenering. De bestuurders en woordvoerders moesten zich schamen.
Replying to
@queen_fennec@mas.to Geduchte concurrerentie van NOS en Nieuwsuur op het gebied van cyberpaniek, zo te zien.