Show newer

And to be clear, this is not to say that dependency security efforts are not important.

But it's important to understand that this is like car vs. plane safety; planes (dependencies) *look* really scary, but the actual thing that's likely to kill you is a car (rolling your own).

That doesn't mean that improving plane (dependency) safety doesn't matter, but it's a background process by people whose job this is, not some acute crisis that you need to deal with yourself.

Show thread

I hope this Email doesn't find you. I hope you have escaped, that you are free.

Why is it that when a streaming service decides to embrace audio description, the ability to enable it, is rarely able to be done without sighted assistance.

(For completeness' sake: this is in the JS ecosystem. It's difficult to compare this to other ecosystems, because many ecosystems don't *have* a meaningful set of single-purpose libraries, and them being single-purpose is an important factor affecting security.)

Show thread

Regarding "supply chain security" with dependencies: as a professional dependency auditor I can tell you that malicious dependencies are extremely rare... and what's far more common is security issues in utilities that large dependencies insisted on reimplementing despite safe off-the-shelf options being available.

If your takeaway from dependency security stuff is "avoid dependencies", then that is absolutely the wrong takeaway.

On the subject of Kiwifarms as a "necessary evil". 

The insane notion that KF is "a necessary evil" as a source of information needs to die already.

90% of what they say is total fabrication or deformation of facts. They just use a minority of real facts to anchor all that bullshit in the truth.

Also, regardless of the accuracy of the facts they state, you HAVE to remember their entire mission statement.

Their primary goal is harassment.

They take joy in making people utterly miserable and scared. They want to invade their private lives AND ruin them if possible.

SO WHY, UNLESS YOU'RE A COMPLETE DICKHEAD, WOULD YOU WANT TO CONTRIBUTE TO THAT BY GIVING THE WEBSITE ANY SORT OF LEGITIMACY?!

*siigh* I'm thinking of muting a certain word but before I do I need you all to agree that we need to rename a sequence of messages to be a "chain", the basic unit of parallel computation to be a "lane", and the really great CPU from AMD to be a "seam ripper"

Was really heartened to see approx 3,000 people turn out for trans & intersex pride Dublin today. The national gender service provides the worst trans healthcare in Europe with a decade long waiting list and dehumanising abusive and traumatizing assessments. The NGS needs to be abolished and replaced with informed consent primary healthcare in the community now! Get your psychiatry out of our sex lives! My body my choice! #Trans #Pride #MastoDaoine

Hey remember that one time I was like 'hey some admins have been in meetings with facebook and they're coming to fedi' and one dude got so mad at me talking shit about FB and 'spreading rumours' that he blocked our entire instance, then this other dude gave us shit about defederating him with a week notice while applauding the first dude for standing up for FB, then the first dude decided to block FB after all and the second dude had nothing to say about that

Must be nice being a dude

i'm glad the discourse evolved to "throw bricks at fascists" because for a while it was "throw milkshakes at fascists" and i could never. i'm trying to drink that

I don't know who needs to hear this...

But whether you're talking about neurotypes, mental illnesses, addiction, sexuality, or gender congruence with assignment...

There is not a strict dichotomy between essential predisposition and absolute choice.

animalfound.family. now also drops packets from Google corporate ASNs (excluding Google Cloud, Google Fiber, Google Wi-Fi, etc).

One thing that’s intensely disappointing about Threads is watching people join it who resolutely refused to join Mastodon, as if something needs to be run by a giant megacorp to be considered worthwhile.

I have solved the problem by mapping it onto a domain that I do not understand

Racism, the "there are two wolves" meme 

Since I've been seeing it pop up a bunch again this week in various forms, have a reminder that the "inside you there are two wolves" meme has a racist, anti-Indigenous origin: apihtawikosisan.com/2012/02/ch

I'm not personally sure what version to make instead, but I'm also not someone who can reclaim it.

#Racism

nlpol/ukpol shitpost 

congrats to Mark Rutte on a respectable score of 94.9 Liz Trusses

Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.