Mastodon Feed
Reblogged by kornel ("Kornel"):
xkcd@mastodon.xyz ("XKCD Bot") wrote:
Cesium-133, let it be. Cesium-134, let it be even more.
https://xkcd.com/2913/
Mastodon Feed
Mastodon Feedxor@tech.intersects.art ("Parker Higgins") wrote:
wrote my name down so sloppily i have to resign in disgrace
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
duncaned@tech.lgbt ("Duncan Campbell") wrote:
Professor Ross Anderson, FRS, FREng Our dear friend and treasured long term campaigner for privacy and security, Professor of Security Engineering at Cambridge University and Edinburgh University, Lovelace Medal winner, died suddenly at the family home in Cambridge overnight. His wife, Shireen is with their children and grandchildren. Ross had suffered heart problems for some years. He recently mentioned experiencing Covid reinfection, causing brain fog as a sequel. He was 67. His loss leaves a void for his family and for us all who care about digital privacy and security, as an inspiration and a doughty fighter, over many decades. Goodbye, my friend
Attachments:
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
esther@strangeobject.space ("Esther is finally relaxing") wrote:
Wow. I don't think I've ever seen an "immediately stop using your computer" warning for a security issue. Usually it's "update your stuff as soon an possible"
This is very bad.
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
mrtnsnp ("Maarten Sneep") wrote:
If you use homebrew (on a mac), please run brew update; brew upgrade; immediately. This will downgrade the xz package and the lzma library to remove malicious code that has been introduced in the current versions.
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
bentsukun@mastodon.sdf.org ("ベンツくん") wrote:
Wow, this was a real rollercoaster ride. xz versions 5.6.0 and 5.6.1 contain a backdoor.
Mastodon Feedjsonstein@masto.deoan.org ("Jeff Sonstein") wrote:
kowabunga!
Mastodon FeedGargron ("Eugen Rochko") wrote:
Attachments:
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
nixCraft ("nixCraft 🐧") wrote:
Sama somehow convinced Microsoft to spend another 100 billion dollars. He still needs 6.9 trillion, tho. Let’s go 😂 Microsoft & OpenAI are working on plans for a data center project that could cost as much as $100 billion and include an artificial intelligence supercomputer called "Stargate" set to launch in 2028 https://www.reuters.com/technology/microsoft-openai-planning-100-billion-data-center-project-information-reports-2024-03-29/
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
vegard ("Vegard Nossum") wrote:
Upstream backdoor discovered in xz-utils/liblzma: https://www.openwall.com/lists/oss-security/2024/03/29/4
It seems to affect ssh authentication.
As far as we know, only xz-utils 5.6.0/5.6.1 are affected and these are luckily not yet widely deployed.
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
Aissen@treehouse.systems ("Anisse") wrote:
Wow, that's very scary. It seems like a regular contributor (for 2 years) to an open source project (xz/liblzma) has planted exploit code that has heavy repercussion on ssh security. When the issue was caught by valgrind, the attacker fixed it, and then updated the exploit code ("test files") to keep it working.
Luckily it seems to have been caught early (before widespread distro integration). You can use @vegard 's script to analyze if your system is compromised.
https://mastodon.social/users/vegard/statuses/112179869758119960
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
NPR@press.coop ("NPR :press:") wrote:
Texas appeals court acquits Crystal Mason's illegal voting conviction
The court said the state did not have enough evidence to prove that Mason knew she was ineligible to vote when she cast a ballot in the 2016 election. She was facing a five-year prison sentence. #press
Attachments:
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
I accidentally found a security issue while benchmarking postgres changes.
If you run debian testing, unstable or some other more "bleeding edge" distribution, I strongly recommend upgrading ASAP.
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
thisismissem@hachyderm.io ("Emelia 👸🏻") wrote:
Specifically, there's a bunch of what look like fake accounts all posting a pro-Israel set of hashtags / messages; The other posts by these accounts seem completely random garbage, like a quote from breaking bad with a picture of flamingos, or random "feel good" quotes. https://josh.tel/@josh/112180104323769056
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
Catherine Rampell, in the Washington Post:
"Got that? Trump owes this money because he fraudulently misrepresented the value of his assets, and now apparently no one will accept those assets as collateral. Oops."
"Imagine you sold someone a glass engagement ring that you claimed was a real diamond. Then, when a judge found you liable for fraud, you tried to use the “diamond ring” as collateral for an appeal bond. That’s the level of chutzpah we’re working with here."
Mastodon Feedjsonstein@masto.deoan.org ("Jeff Sonstein") wrote:
https://www.inquirer.com/opinion/baltimore-bridge-collapse-immigrant-deaths-20240328.html
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
briankrebs@infosec.exchange ("BrianKrebs") wrote:
This is so badass: Ukraine is using a network of thousands of mobile phones deployed across the country to track incoming drones and missiles.
h/t to @riskybusiness which notes on this week's podcast that Iranian drones apparently are really loud. So they use these network of phones to hear when lawn-mower drones trundle on by, and then shoot them down with small arms fire.
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
gtconway3@threads.net ("George Conway") wrote:
how it started/how it went/face-eating leopards etc etc etc
RE: https://www.threads.net/@washingtonpost/post/C5GxA4ZObGG
Attachments:
Mastodon Feedjsonstein@masto.deoan.org ("Jeff Sonstein") wrote:
a long over-due move
https://www.bbc.com/news/world-middle-east-68684069
h/t @jockr
Mastodon FeedReblogged by jsonstein@masto.deoan.org ("Jeff Sonstein"):
cstross@wandering.shop ("Charlie Stross") wrote:
Sir Jeffrey Donaldson has resigned as leader of the Democratic Unionist party after being charged with historical sexual offences, throwing Northern Ireland politics into turmoil.
(Note for foreigners: the DUP are a right-wing Loyalist protestant party, so think of them as Northern Ireland's equivalent of the US Republican party.)
Mastodon FeedReblogged by kornel ("Kornel"):
Truth social has 5 million users but is somehow worth 6 billion dollars. Nothing funny going on here. Nice legal loophole for foreign dirty money to be passed through to the 78% stakeholder.
Mastodon FeedReblogged by fromjason ("fromjason.xyz 🖤"):
pluralistic@mamot.fr ("Cory Doctorow") wrote:
For the wealthy to successfully impoverish us, they had to provide something that made us *feel* like we were still doing OK, even as they stole our wages, our savings, and our futures. So, even as they shipped our jobs overseas in search of weak environmental laws and weaker labor protection, they shared some of the savings with us, letting us buy more with less. But if your wages keep stagnating, it doesn't matter how cheap a big-screen TV gets, because you're tapped out.
15/
Mastodon Feedxor@tech.intersects.art ("Parker Higgins") wrote:
I was trying to explain to a friend (being helpful!) that I was so lost on an issue there wasn't even a good starting point to learn, and even in explaining that it was obvious there was a starting point. There's always a starting point
Mastodon FeedReblogged by kornel ("Kornel"):
joeyh@hachyderm.io ("see shy jo") wrote:
I rag on github a whole lot, but this is one feature it has that I really like.
Since JiaT75 backdoored xz-utils, I have blocked him and now get to see a warning in every project he touched.
I hope wasmtime et all are doing some careful review..
Attachments:
Mastodon FeedReblogged by kornel ("Kornel"):
barometz@tech.lgbt ("dominic") wrote:
After observing a few odd symptoms around liblzma (part of the xz package) on
Debian sid installations over the last weeks (logins with ssh taking a lot of
CPU, valgrind errors) I figured out the answer:The upstream xz repository and the xz tarballs have been backdoored.
have a good weekend everybody!
Mastodon FeedI've been participating in a long-term test whether my browsers are trackable via fingerprinting:
https://browser-fingerprint.cs.fau.de/
and oooof, they are ;(
Mastodon Feedcollinsworth@hachyderm.io ("Josh Collinsworth") wrote:
I don't generally like critiquing app redesigns, but since Slack updated a couple months ago, I feel like I regularly have a little (1) notification number in the Activity tab, with no idea where the "new" message is.
After just going into a click frenzy until I finally found it about a half dozen times, I finally realized there's a very, VERY slight change in font weight and color.
Designers: if a difference in design indicates something meaningful, PLEASE make it obvious.
Mastodon FeedReblogged by cstanhope@social.coop ("Your friendly 'net denizen"):
thoughtshrapnel@micro.blog ("Thought Shrapnel") wrote:
Endlessly clever thoughtshrapnel.com
Attachments:
Mastodon FeedOoops. Mixed up VCC and GND when connecting my LED matrix. Looks like everything survived tho, phew 😅
Mastodon FeedReblogged by isagalaev ("Ivan Sagalaev :flag_wbw:"):
The Czech counterintelligence service "BIS" uncovered a large Pro-Russian propaganda network. "Voice of Europe" has been used as a Kremlin mouthpiece, trying to sow discord and further Russian lies. The Czech authorities sanctioned "Voice of Europe".
The Czech newspaper "Denik N" is even more specific and adds more information. According to sources from intelligence services, this platform has been also used to fund Anti-European parties in the West.