Little roundup of the news around the ‘xz’ supply chain compromise that I have seen so far;
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
https://lists.debian.org/debian-security-announce/2024/msg00057.html
https://www.openwall.com/lists/oss-security/2024/03/29/4
This is unlikely to impact people who run stable or LTS versions of Linux distributions, but if you are on Fedora 41 or Rawhide, for example, it's worth checking for updates.
Same goes for Debian testing, and unstable.
xz-utils was backdoored by its upstream. Tracked as CVE-2024-3094 and thoroughly documented by vuln discoverer Andres Freund on oss-security@: https://www.openwall.com/lists/oss-security/2024/03/29/4
@robinsyl I normally use Organic Maps which has quite good bike routing (uses OSM data), but due to a corrupted microSD card and some Android nonsense I'm currently unable to get it working :(
Got routed over a footpath thrice and through a closed dike path once, also for some fucking reason it made me go *around* a perfectly serviceable street
about "compromising on values to grow a movement"
One of the most frequent bits of advice I hear towards radical activist groups, is that they shouldn't be so demanding of people, and they should compromise on their values to have a broader reach.
Let's talk about why that strategy doesn't really make sense, when you think about it.
Now, let's start with the goal of such a movement: it's, usually, to 'shift the frame' in public debate, to change what is considered morally acceptable by a general public. For that, you only usually need a relatively small group of people to start with (think hundreds or thousands).
The unspoken assumption in the advice is that if you don't compromise, then there will simply not be enough people who agree with you, to create that change. But that assumption is not actually true!
So if you have the choice between "sticking with your values and reaching like-minded people", and "compromising on values and reaching people who don't really agree", the former makes a lot more sense.
This then sets into motion a gradual shift of the public opinion, which will slowly grow the group of like-minded people - and with it, the group of people interested in getting involved. All without any compromise on values!
In short: we don't actually *need* to compromise on our values, to reach our goal. That would only be helpful to instantaneously have broad reach while getting little done - but that is the goal of marketing companies, not of activists.
"But it's important to get criticism from people who think differently, or it'll be an echo chamber!"
First off, "echo chambers" in that sense do not exist - they are right-wing rhetoric, not some sort of social-scientific concept. Really. Go look for the origins.
Secondly, the values we're talking about here are values like equality and basic human rights like agency. We generally don't really care about the opinions of people who do not share those values, like transphobes or racists.
"But you might miss out on valuable criticism that way!"
This hides another unspoken assumption - that racists, transphobes, etc. are somehow uniquely qualified to provide criticisms that *nobody else* who isn't a transphobe, racist etc. would come up with.
I would invite you to sit for a bit and think about what you're implying with that, and what that means for your own worldview.
We are pleased to announce that we'll be conducting basic fit testing at our upcoming panels at @lasvegasfurcon and #GSFC2024! Come wearing your favorite mask, and we'll see if we can detect any leaks - right at the panel!
We'll be using a simplified version of a real quantitative fit test procedure where we test whether you can taste a bitter or sweet solution through your mask.
If you'd like to get a fit test but can't make the panel time, reach out and we can find an alternative time!
new blog post! "A Brief Survey of Alternative Search Engines"
@ipg @Rairii@fedi.nano.lgbt @nano@fedi.nano.lgbt I feel like "malicious intent" is a very poor qualifier for this (it's vague, nominally subjective, hard to determine, ...) and "without consent" is much more appropriate.
Have any other transfems noticed their startle reflex increasing since starting HRT? I feel like I used to never startle from anything, but now I'll jump at something like the doorbell ringing. /gen
#AskTransgender
@eloy @noracodes (More generally, the perspective of a company is not going to be one of responsibility, like in your post, but one of entitlement or exploitation - which is why "supply chain" to them means "what do we get out of it", and not "what responsibilities do we have here")
@eloy @noracodes In commercial circles, "supply chain" is often taken to imply an obligation on the part of the supplier to continue providing services reliably, and I suspect that that's the rationale behind this post
In the process of moving to @joepie91. This account will stay active for the foreseeable future! But please also follow the other one.
Technical debt collector and general hype-hater. Early 30s, non-binary, ND, poly, relationship anarchist, generally queer.
- No alt text (request) = no boost.
- Boosts OK for all boostable posts.
- DMs are open.
- Flirting welcome, but be explicit if you want something out of it!
- The devil doesn't need an advocate; no combative arguing in my mentions.
Sometimes horny on main (behind CW), very much into kink (bondage, freeuse, CNC, and other stuff), and believe it or not, very much a submissive bottom :p
My spoons are limited, so I may not always have the energy to respond to messages.
Strong views about abolishing oppression, hierarchy, agency, and self-governance - but I also trust people by default and give them room to grow, unless they give me reason not to. That all also applies to technology and how it's built.