Mastodon Feed: Posts

glyph ("Glyph") wrote:

to put a finer point on it: the underlying problem is that the authority in the "infosec community", such as it is, comes _exclusively_ from a few megacorps with an overtly monopolistic level of control over different user populations. These corporations are under no obligation to explain themselves, so they just… don't. There's no public record of why they are doing what they're doing, and they either strictly mandate certain practices (codesigning, TLS) or aggressively promote them (passkeys)

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
Floppy@mastodon.me.uk ("James Smith 💾") wrote:

“Black academic hounded to death by the press for plagiarism allegations started by a known racist” versus “AI companies owned by white billionaires pushing industrial plagiarism machines down everyone’s throats whether they want them or not”

I don’t see the lawyers or academics who let an LLM produce fake citations getting the same treatment. Remember kids, plagiarism is *super cool* if you use Claude to write your code, or ChatGPT to write that essay!

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
mikehendley@vis.social ("Mike Hendley") wrote:

Quick raven sketch, mid call. Worked the .3 and .5 graphite pencils to get that near black feather range without losing the shape. Ravens hold grudges for years apparently, feels right for a bird drawn looking this deliberate. Done at a coffee shop table in Ithaca, NY #sciart #bird

Boosted by andrewnez ("Andrew Nesbitt"):
a@paperbay.org ("Alexandre Dulaunoy") wrote:

How mature is this repository? My long quest for open-source software metrics

When I discover an open-source software project for the first time, how can I estimate whether it is mature, healthy and usable?

I just released OSSTRL - Open Source Software Technology Readiness Level to help me calculating the maturity of open-source projects.

#opensource #metrics #open #floss #osstrl #freesoftware #community

🔗 https://www.foo.be/2026/08/Open-Source-Metrics.html

🔗 https://github.com/adulau/osstrl

glyph ("Glyph") wrote:

but the rollouts are almost all done in a way which looks like "well, we tried to ask you to turn this on, and nobody did, so, time to opt you all in without your knowledge or consent. don't worry it's easy and fun!"

I have zero evidence to prove this but it feels to me like the pitch of this skepticism has gone up as this tone is also adopted by AI companies rolling out obvious bullshit, making everyone feel like maybe security tech has also always been obvious bullshit

glyph ("Glyph") wrote:

I have some sympathy to the folks doing these rollouts because to some extent, the necessity *is* just too complex to explain to the mass market who needs to adopt them. I am not saying that we should be giving lectures on Bleichenbacker attacks and PQ cipher suites at the local library, but there needs to be like a public, standard reference threat model that we can refer to so people understand what *their* part is

glyph ("Glyph") wrote:

to be very clear: *no shade* to anyone expressing such skepticism, the problem is not that people are saying dumb things, it's that infosec in general has done a very bad job of communicating the problems that these technologies address and why the tradeoffs have been made. the downsides are obvious to everyone because we're smacking into them every day, the necessity is obscure and complex. so much advocacy is done with such condescension and "don't worry about it, it's easy!" dismissiveness

glyph ("Glyph") wrote:

over the last few months it has been dawning on me that infosec as a field in general has done an extremely terrible job of communicating itself, even to highly technical users. my feed here has been full of highly skilled and experienced programmers expressing something between skepticism and outright hostility towards load-bearing security tools like codesigning, TLS, biometric auth, SSH host key verification, and passkeys, while promoting useless fidget spinners like GPG and VPNs

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
NorcalGma2@sfba.social ("Norcal Gma 2") wrote:

While I wasn't sleeping last night I was stitching.
One more flour sack dish towel for a Mastodon friend. Tomorrow I will look at the list and figure out where it's going.
#Embroidery

glyph ("Glyph") wrote:

This article advertising an "agentic" text editor has an on-the-nose promotional image too devastating for even the most bitter critic to use to lampoon it

https://thedailytechfeed.com/notepad-exe-a-swift-lightweight-code-editor-for-mac/

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

Still better than GitHub lol

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

Wow my server just spontaneously broke for the first time.

~1hr outage.

You know how I keep the server off at night? I think this interrupts with the media cleanup job. Ergo, storage filled up and broke everything.

dysfun@treehouse.systems ("gaytabase") wrote:

i'm not ignoring you, signal just glitched

Boosted by glyph ("Glyph"):
lrhodes@merveilles.town ("⁂ L. Rhodes") wrote:

One thing I'll say for LLMs: They may routinely give wrong answers to factual questions and claim that they've done things they haven't and/or can't, but they've been super reliable at revealing which communities are organized around people who either don't care about, or don't understand, community.

Boosted by glyph ("Glyph"):
davidgerard@circumstances.run ("David Gerard") wrote:

when hot young goth twinks get old and go for a pint down the local cricket club

local amateur sport is in fact praxis

me with @aidanskinner

dysfun@treehouse.systems ("gaytabase") wrote:

phew i've nailed dependently typing that elaborator with only one minor hack that makes it unquoteable. now how do i undo that hack?...

Boosted by soatok@furry.engineer ("Soatok Dreamseeker 🔜 Megaplex"):
pinoaffe@hsnl.social wrote:

@john @joepie91 people do activism "degoogle! be secure! use grapheneos! it's the solution!" and at the same time don't actually put in the work to make it so that grapheneos and the like can be a realistic solution for a significant portion of the population. When that is pointed out they get defensive and dismissive

That is what joepie seems to be miffed about, and I very much second that sentiment

Boosted by soatok@furry.engineer ("Soatok Dreamseeker 🔜 Megaplex"):
drwho@masto.hackers.town ("The Doctor") wrote:

@MaddieM4 @heathen_cat @soatok @sec_yote_agenda @0xabad1dea Another example: Talking about dumpster diving for parts in the 90's should not (but occasionally does) cause pearl clutching indignation in some people. Illegal, etc..

Come on.

Boosted by soatok@furry.engineer ("Soatok Dreamseeker 🔜 Megaplex"):
MaddieM4@raphus.social wrote:

@heathen_cat @soatok @sec_yote_agenda @stefanie @0xabad1dea

For that matter, being able to talk casually and without pearl-clutching with other adults about, for example, being a lesbian dominatrix, IS healthy adult behavior. In some sense, I *am* being a healthy role model, just with some caveats, like how I would not talk the same way to a child directly, and if they have questions I need to have some age-appropriate answers ready (and *any* topic can be discussed in an age-appropriate way, it might just be very high-level with little detail or whatever).

Have you ever talked to a fellow well-adjusted adult and thought "thank god they were sheltered as a child"? No? Every former sheltered child was unprepared for adult life and uniquely broken by authoritarian totalism enforced by a loved one? GOSH! It's almost like we can use our pattern recognition to foresee outcomes and tell good policy from bad!

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
bich@apobangpo.space ("Bich Nguyen") wrote:

"About 200,000 low-income Arkansans could see major changes to their health coverage next year after the Trump administration recently informed state officials it will not renew a key Medicaid agreement with the federal government."

https://kffhealthnews.org/medicaid/trump-cms-medicaid-expansion-1115-waivers-budget-neutrality-arkansas/

#healthcare #medicaid #insurance #ACA #CMS #1115waiver #arkansas

Boosted by jsonstein@masto.deoan.org ("Jeff Sonstein"):
samlitzinger@journa.host ("Sam Litzinger") wrote:

“More than 170,000 people have signed a petition to the Canadian Parliament, submitted by a Calgary resident on July 21, calling for the removal of the ambassador, Pete Hoekstra.”

https://www.nytimes.com/2026/08/15/world/canada/hoekstra-ambassador-petition-canada-trump.html?unlocked%5Farticle%5Fcode=1.5lA.uy7b.FEA5RRoRuDmw&smid=nytcore-ios-share

Boosted by cwebber@social.coop ("Christine Lemmer-Webber"):
brooke@bikeshed.vibber.net ("Brooke Vibber :neocat_cofe:") wrote:

@cwebber

Boosted by fromjason ("fromjason.xyz ❤️ 💻 ✍️ 🥐 🇵🇷"):
Standard_Phil@infosec.exchange ("Phil Burg (he/him)") wrote:

@fromjason Also in Australia. It's not widely understood that there were small numbers of permanent buildings in parts of this country before white settlement.

dysfun@treehouse.systems ("gaytabase") wrote:

13,000 calorie

just a little one then?

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
Teaceratops@peoplemaking.games ("Teaceratops/GameDev Mum") wrote:

Why I hate growing carrots. A photo montage.

This is the first carrot 8 picked today. It looked good at the shoulders, and then... *Sad fart noise*.

Boosted by dysfun@treehouse.systems ("gaytabase"):
TheCentralScrutinizer@pixelfed.social ("ole skovgaard 🇩🇰 🇬🇱 🍉🌻") wrote:

I agree with this graffiti by unknown artist
#art #artwork #painting #streetart #graffiti #mural #urbanart #fediart #mastoart

Boosted by dysfun@treehouse.systems ("gaytabase"):
jbz@indieweb.social wrote:

⛓️‍💥 Samsung is using Claude to verify chip designs, and it's not going smoothly

｢ During an unspecified verification task, a check kept flagging an error somewhere; instead of fixing that error, Claude Code actually downgraded the message's severity from an error to normal info.
Elsewhere, when asked to revert one feature, Claude undid unrelated finished work from a different place. And in a third case, it tried editing circuit code it wasn't authorized to touch ｣

https://www.neowin.net/news/samsung-is-using-claude-to-verify-chip-designs-and-its-not-going-smoothly/

cwebber@social.coop ("Christine Lemmer-Webber") wrote:

Hack & Craft is happening now! https://fossandcrafts.org/hack-and-craft/

Actually it has been, though you missed me giving a long lecture about the history of some obscure capability security concepts

jscalzi@threads.net ("John Scalzi") wrote:

This is one reason why I use the "Following" feed and not the "For You" feed, but also, one reason why I continue to spend time on Bluesky: the "following" feed there, which is the default feed, is strictly who I am following, with their in chronological order.

jscalzi@threads.net ("John Scalzi") wrote:

Kitten in the milkweed
I know, I know
It's serious