@Anachron@fosstodon.org avatar

Anachron

@Anachron@fosstodon.org

I like Open Source, Void Linux, the CLI, privacy, nature and music of all kinds

This profile is from a federated server and may be incomplete. Browse more on the original instance.

postmastron, to random

The xz supply chain compromise is nuts.

  • It’s hidden as a test case for a corrupt archive.
  • The injection is only in the source tar and not the git repo.
  • The backdoor only targets enterprise Linux distros that patch sshd to notify systemd, eg RHEL/Debian.
  • It came from a main maintainer and was introduced slowly over years. Everything is gpg signed.
  • They pushed for it to be added into Fedora 40 so it would be in RHEL10.
  • A PostGres dev noticed his ssh was slow and caught it by accident.
Anachron,
@Anachron@fosstodon.org avatar

@underlap @postmastron

This is only half of it. It got pushed by mailing lists as well by new people joining claiming the new version fixes something (which is actually just a fix for being able to hide the exploit better).

They also went upstream to modify some source to allow for ifunc which allowed this exploit to happen.

So, a lot of different things needed to be done and coordinated without making it suspicious to anybody. It has to be set up for 2+ years.

Anachron, to random German
@Anachron@fosstodon.org avatar

Holy canneloni, the #xz/ #liblzma issue seems to be around one year in the making.

I guess we really need a way how to prevent new people from doing harm to #oss.

https://news.ycombinator.com/item?id=39866936

underlap, to random
@underlap@fosstodon.org avatar

As someone who stores their dotfiles in a git repo of their home directory, I was horrified when I accidentally typed git clean -dfx into the wrong terminal window.

Fortunately, it was so slow, I managed to ctrl-c apparently before damage was done.

Afterwards I ran with the "dry run" option git clean -ndfx to see what it would have deleted. Quite a lot! (I have a backup, but restoring would be time-consuming.)

Anachron,
@Anachron@fosstodon.org avatar

@underlap I have a copy of my dotfiles always locally.

If I accidentally delete them its a rm and cp away.

Anachron, to foss German
@Anachron@fosstodon.org avatar

Is there interest in a #foss static #forum software? Yes, you heard that right.

Thinking about creating a system for basically periodically scanning the inbox of a mail account, creating a #markdown draft which then can get approved or rejected by simply moving it to the appropiate folder. A #cronjob is then picking it up and compiling the forum page again.

This would work with mailto links, so any email editor is already the writing tool.

#mail #staticcontent #kiss

tuxedocomputers, to linux German
@tuxedocomputers@linuxrocks.online avatar

🤏Our Systems are as small as possible and ideal for any purpose where it comes to size matters.

👉Take a look right here:
https://www.tuxedocomputers.com/en/Linux-Hardware/Linux-Computer-/-PCs/Alle-Systeme.tuxedo#!#2422,2425

Anachron,
@Anachron@fosstodon.org avatar

@tuxedocomputers

Is this the new "Banana for reference"? If yes: I like it.

Anachron, to opensource German
@Anachron@fosstodon.org avatar

and is the only way for me to keep my sanity.

If you are part of it: Thank you!

Anachron, to random German
@Anachron@fosstodon.org avatar

Important:

There is an urgent action everybody has to ... (Unlock this premium content by either agreeing to my ad and tracking policy or by buying a smart abo for just $9,99/month (I will arbitary increase price as I feel and my bank account lusts for)).

Now imagine everybody would do it. Nobody would have any information anymore. So why do news media and alike do it? I really dont get it. It's so stupid. Nobody can afford a "mass-rollout" of this idea. It should have died already.

Anachron, to random German
@Anachron@fosstodon.org avatar

Been 3 months with my and the is still awesome, the phone still works great, the battery still lasts and I am still satisfied with my purchase.

If you're looking for a way to do something good and are looking for a new phone... Look no further.

daviwil, (edited ) to random
@daviwil@fosstodon.org avatar

If a technical book was free to read on the web under a Creative Commons license, would you still buy a digital copy if it were made available in other formats? (Think PDF, ePub, Info, etc)

Anachron,
@Anachron@fosstodon.org avatar

@daviwil I did/do this with music.

Nowadays everything is on youtube, but when I really appreciate the song/album etc. I buy it digitally (even though only some money will go to the artist).

ross, to random
@ross@fosstodon.org avatar

Has someone done parody Hogwarts School Comms yet? Like:

Dear Mr Granger

We have accumulated a large number brooms in the broom shed that seem to have been abandoned.

Can you please ensure that your child’s broom is removed at the end of term. Any brooms left
in the broom shed will be disposed of during the holidays.

Mr Dumbledore
Headteacher

Anachron,
@Anachron@fosstodon.org avatar

@ross

Dear godparents of Mr Potter,

we regret to inform you that Mr Potter repeatedly let his snake loose in the presence of other minors. While it did not lead to any fatality, it does present a major incident on Potters part and had to be resolved in presence of the Commitee of the House (CoH).

After a long discussion we came to the terms that Mr Potter will have his snake removed to prevent any further incidents, whether on purpose or by accident.

[1/?]

Anachron, to linux German
@Anachron@fosstodon.org avatar

If #linux #distros were music ...

#archlinux would be rap
#ubuntu would be pop
#debian would be rock
#kalilinux would be metal
#suse would be alternate
#elementaryos would be kpop
#voidlinux would be techno
#Fedora would be R&B
#ZorinOS would be New Age

(To be continued)

Anachron, to android German
@Anachron@fosstodon.org avatar

It's crazy to think that most people will buy around 2-3 phones in the future while mine will still receive #android upgrades and #security patches.

#Fairphone #FP5 #Fairphone5

Anachron, to Germany German
@Anachron@fosstodon.org avatar

There was a recent survey in #germany about #AI and whether #consumers are more likely to buy a product with AI features.

Turns out, there is barely anybody looking for #AI in products, even 12% said its definitely a reason to look for another product (compared to 6% reason to buy).

https://gfu.de/kuenstliche-intelligenz-ist-nur-fuer-eine-minderheit-ein-kaufanreiz/

Seems like society isn't lost in AI yet. :-)

JoshuaKGoldberg, to random
@JoshuaKGoldberg@fosstodon.org avatar

If your cookie consent banners has an 'accept all' button, it should also have an 'accept only necessary' button accessible in the same number of clicks. 👏👏👏

A hearty 🖕 to every cookie manager whose banner doesn't do this.

Anachron,
@Anachron@fosstodon.org avatar

@JoshuaKGoldberg its even illegal in the EU. We have a law that forces exactly this.

martijnbraam, to random
@martijnbraam@fosstodon.org avatar

How to shut down Linux: run poweroff and start holding the power button at the same time to give systemd a tight deadline.

Anachron,
@Anachron@fosstodon.org avatar

@danct12 @ikt @martijnbraam well sounds like we need a systemd-deadlined then.

frameworkcomputer, to random
@frameworkcomputer@fosstodon.org avatar

We're one phase further on development of a full-size SD Expansion Card. We created a video to share the design and architecture tradeoffs that went into it: https://www.youtube.com/watch?v=n1Ai5whr8vk

Anachron,
@Anachron@fosstodon.org avatar

@frameworkcomputer thanks for the update!

I cannot but notice the missing mission statement in videos.

Maybe we could do something like "Empowering users, protecting nature" to let people know what Framework stands for.

fedora, to fedora

You've heard of this little thing called Asahi Linux right? Don't miss your chance to see a demo of Fedora Asahi Remix in action tomorrow at SCaLE!
https://www.socallinuxexpo.org/scale/21x/exhibit-hall-1

Also, catch two talks from Fedora contributors happening tomorrow:

Anachron,
@Anachron@fosstodon.org avatar

@fedora I'm still having a hard time believing on just how fast implemented Linux support on macs. Like... magic!

lhp, to random
@lhp@mastodon.social avatar

I've now officially spend over ten hours sowing patches onto a jacket this week

Anachron,
@Anachron@fosstodon.org avatar

@lhp good job doing good for the environment!

Anachron, to thinkpad German
@Anachron@fosstodon.org avatar

"Prices start at $2799 for a Thinkpad X13 Gen 5 with a Core Ultra 5 125U processor, 16GB of LPDDR5x-7500 memory and a 256GB M.2 2280 PCIe 4.0 NVMe SSD or $3014 for a 2-in-1 model with similar specs."

"All versions of both laptops ship standard with a 54.7 Wh battery, a 5MP webcam, and a 1920 x 1200 pixel IPS LCD display with a 60 Hz refresh rate and up to 300 nits brightness."

I can get a laptop with mostly double the specs for less than half of the price. What did I miss?

#lenovo #thinkpad

Anachron, to Blog German
@Anachron@fosstodon.org avatar

If you are writing posts you're great!
If you're not using , you're awsome!
If you have or , 1+!

Anachron, to linux German
@Anachron@fosstodon.org avatar

Oh , there is nothing like you.

whynothugo, to random
@whynothugo@fosstodon.org avatar

I need a custom search engine that searches alpine wiki, arch wiki, gentoo wiki and man pages.

Anachron,
@Anachron@fosstodon.org avatar

@whynothugo you can create one with searxng.

Anachron, to apple German
@Anachron@fosstodon.org avatar

Is #Apple stupid?

They are still trying to make their own rules for #pwa apps when clearly the EU is already watching their implementation closely.

Like... who thought this was a good idea? Surely someone at a higher level raised some concern... no?

zenitram, to random

There was only a single bank that I knew of, Wise, that let a customer use their APIs to read your account transactions... but not anymore, because of regulation 🫠

In the EU, that's how PSD2 forces you to "buy" API access to your own personal bank account transaction data through a third-party🤦‍♂️

#gdpr #psd2 #data #api #banks #plaintextaccounting

Anachron,
@Anachron@fosstodon.org avatar

@zenitram PSD2 is bullshit and everybody knows it.

It's so sad to see banks and politicians spending so much time and resources on it. :/

thelinuxcast, to random
@thelinuxcast@fosstodon.org avatar

Ha! Got Jellyfin working.

Anachron,
@Anachron@fosstodon.org avatar

@thelinuxcast it's either DNS, linux permissions or DNS.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • provamag3
  • mdbf
  • ngwrru68w68
  • modclub
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • DreamBathrooms
  • JUstTest
  • GTA5RPClips
  • ethstaker
  • normalnudes
  • tester
  • osvaldo12
  • everett
  • cubers
  • tacticalgear
  • anitta
  • megavids
  • Leos
  • cisconetworking
  • lostlight
  • All magazines
    •