Show newer

someone over on bsky asked me if anyone knows of any active Brazilian-focused instances that are good (active and well moderated)

if you know any please reply and i'll make sure your suggestion gets passed along

(If you're not familiar with the history of this, try looking up their old "why no Rust in Chromium" docs page in the Wayback Machine, which said something to the effect of "Rust is too difficult to integrate, and we don't need memory safety anyway, we can do it safely with C++")

Show thread

(This is strongly reminding me of the zeal with which people defended the Chromium sandbox as a replacement for memory safety, even in the face of significant evidence against their security strategy)

Show thread

FYI: jumping into my mentions being weirdly defensive about Yubico and proprietary security keys without even engaging with what I said, is more likely to make me *distrust* security claims about proprietary keys than anything else, it's certainly not going to convince me that you've made a well-reasoned analysis

the yubikey thing 

@astraluma @clarfonthey Look, if you want to be weirdly defensive of Yubico without actually engaging with the points made, that's your prerogative, but please do it somewhere that isn't my mentions, thanks

@Geoffberner Ah, just noticed that a particular bit of information isn't on that page, that was on the page that linked *to* it:

"We’re going to have maximise ventilation, monitor air quality, require masks indoors, and the place will be wheelchair accessible."

(Which I presume is meant specifically to deal with that)

the yubikey thing 

@astraluma What are you even arguing about? I already explicitly acknowledged this in the very first post, and none of my post is about this

Despite my issues with the Matrix Foundation as an organization, their on-site COVID/health guidelines for the conference are looking excellent: 2024.matrix.org/attend/#health

the yubikey thing 

@astraluma But... it didn't? The whole point here is that those Yubikeys were successfully exploited, and did not resist that attack

Can you boost this please? I'm sort of load-testing / trying to reproduce a bug, and I think I need a bit more traffic to do so. Thank you!

Show thread

the yubikey thing 

Sure, sure, most people are unlikely to be affected by the Yubikey vulnerability in practice. But this attack raises two serious questions:

1. How, exactly, was a failure to implement constant time overlooked for 14 years despite many rounds of certification? This should have been caught.

2. I've frequently hear people claim that Yubikeys are safer than FOSS security keys, because the FOSS keys are not resistant against physical tampering. And sure, to some degree they're not, that's the point - but *is* a Yubikey actually any better, if we're treating this vulnerability as "not a big deal" anyway?

Remember when we thought browser toolbars were the worst problem to deal with?

Remember when we thought browser toolbars were the worst problem to deal with?

is there any way to begin to comprehend the widespread damage tech companies have done to the art community, or the psychological damage tech companies have done to writers and artists over the past several years; or are we exclusively going to try to reason around with the tedious, shuffling logics of copyrights and intellectual property?

Does anybody need a terabyte of historical ship movement data that I'm about to delete? It's from aishub.net, circa 2016-2023. I'm done with the project I was collecting it for, but thought I'd check in case anybody else wants it. Yours for the cost of getting it out of AWS.

Update: Looks like we've found a couple of possible takers, so my fellow data hoarders can relax.

Flipped through a book of historical photos and stories from the town I live, Rosmalen, and was pleasantly surprised to find some (now-removed) graffiti street art among the pictures in the "Culture" section, as a piece of historical local art 🙂

hi i'm intellectually disabled and so-called "AI" is making the world worse for me and people like me

the claim that being against using LLMs to do an art challenge for you is somehow ableist or shares a scope with ableism is, itself, an ableist claim

hiring a ghostwriter to do NaNoWriMo for me wouldn't mean i did NaNoWriMo either. this is not ableist to say.

it is not ableist for a challenge i cannot complete to generally exist within the world. that's not what ableism is about.

Like, that whole thing about how most of the infosec industry is just defense contractors with extra steps, under the guise of 'security' but actually prioritizing state interests?

Brian Krebs is practically the personification of that sort of thing

Show thread

Reminder (to nobody in particular) that Brian Krebs is a self-serving "law and order" windbag, and not a particularly credible source

Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.