Social GL-Como | Diego Roversi @ Social GL-Como

Andrey Konovalov 2 anni fa • mastodon (AP)

Wrote an article about turning a ThinkPad X1 Carbon 6th Gen laptop into a programmable USB device by enabling the xDCI controller 😯

Now I can emulate USB devices from the laptop without any external hardware, including via Raw Gadget or even Facedancer 😁

The overall process included fiddling with Linux kernel drivers, xHCI, DWC3, ACPI, BIOS/UEFI, Boot Guard, TPM, NVRAM, PCH, PMC, PSF, IOSF, and P2SB, and making a custom USB cable 😱

xairy.io/articles/thinkpad-xdc…

🤫 Unlocking secret ThinkPad functionality for emulating USB devices

Enabling and using xDCI controller on ThinkPad X1 Carbon 6th Gen

^{Andrey Konovalov}

Trammell Hudson 2 anni fa • mastodon (AP)

the lock bits being reset during S3 sleep and not re-locked seems like an evergreen design failure. Thunderstrike 2 used a similar mistake (PRR lock bits not re-locked soon enough coming out of S3 sleep) and Prince Harming was a regression (PRR bits not re-locked at all on a new platform). trmm.net/Thunderstrike2_detail…

slide from thunderstrike 2 presentation showing a log of console commands reading FLOCKDN bits, going to sleep, and reading FLOCKDN again, now with no locks enabled

Thunderstrike2 details

Collection of my projects and hacks.

^{Trammell Hudson's Projects}

Marco d'Itri :debian: 2 anni fa • mastodon (AP)

Come chiunque aveva previsto, a meno di un mese dall'attivazione la piattaforma #antipezzotto di #AGCOM oggi ha illecitamente censurato l'IP 188.114.97.7 di Cloudflare che ospita centinaia di migliaia di siti che non c'entrano niente con lo streaming dello sport. Bravi tutti. #piracyshield

#agcom #antipezzotto #piracyshield

1 8

[Ψ] 2 anni fa • mastodon (AP)

probabilmente nel tutorial di cyber sicurezza su YouTube non si parlava di CloudFlare 🦧

Questa voce è stata modificata (2 anni fa)

Marco d'Itri :debian: 2 anni fa • mastodon (AP)

Dopo diverse ore 188.114.97.7 è stato sbloccato, anche se non ho capito su quale base legale visto che i blocchi dovrebbero essere permanenti.

Piero Bosio 2 anni fa • mastodon (AP)

Purtroppo a rimetterci è anche la reputazione dell'Agcom.

dday.it/redazione/48554/piracy…

PiracyShield ci ricasca: decine di siti leciti bloccati dietro un IP di Cloudflare. Danni collaterali o illecito?

Sabato 24 febbraio 2024 la piattaforma PiracyShield ha ordinato ai provider italiani di escludere un IP dalla navigazione, una delle tantissime segnalazioni. Ma si trattava di un IP di Cloudflare: in un colpo "bannati" decine di siti leciti.

^{Gianfranco Giardina (DDay.it)}

Il Gigante 2 anni fa • mastodon (AP)

ma non ci sono gli estremi per una class action per una cosa del genere?

Rozzychan 2 anni fa • mastodon (AP)

A podficcer posted this link about voice acting that is pretty hilarious.
#voices #voiceActing

tumblr.com/seananmcguire/74270…

Seanan's Tumblr

This is such a skill

^Tumblr

#voiceacting #voices

Daniel Keys Moran 2 anni fa • mastodon (AP)

Isaac Asimov:

Fabio 2 anni fa • friendica

This message does not exist

I received an intriguing notification in the Microsoft Outlook 365 web interface: "This message can't be saved because it no longer exists. It can only be discarded. Make sure you copy the contents of the message before you discard if you want to use them later. " I have some ontological questions.

^www.kmjn.org

Italy

Rasmus Bååth 2 anni fa • mastodon (AP)

On my blog: Why pandas feels clunky when coming from R

sumsar.net/blog/pandas-feels-c…

Why pandas feels clunky when coming from R

Five years ago I started a new role and I suddenly found myself, a staunch R fan, having to code in Python on a daily basis. Working with data, most of my Python work involved using pandas, the …

^{Rasmus Bååth's Blog}

Ada Palmer 2 anni fa • mastodon (AP)

"One price of free speech is eternal humility, recognizing that none of us is immune to becoming a tool of censorship if we fail to recognize its manipulative tactics."

“Tools for Thinking About Censorship”

reactormag.com/tools-for-think…

Tools for Thinking About Censorship - Reactor

^{Ada Palmer (Reactor)}

Marcos Abreu 2 anni fa • mastodon (AP)

I would like to say that your article is amaizing! And you are a great writer. Thx for sharing.

Questa voce è stata modificata (2 anni fa)

Ada Palmer 2 anni fa • mastodon (AP)

@abreums Thank you!

@Marcos Abreu

Liam @ GamingOnLinux 🐧🎮 2 anni fa • mastodon (AP)

Since Reddit has now sold out to AI, a reminder if you're into #Linux / #LinuxGaming that Lemmy exists and it's open source.

I'm a mod here too: lemmy.ml/c/linux_gaming@lemmy.…

Linux Gaming - Lemmy

^lemmy.ml

#Linux #linuxgaming

addie 2 anni fa • mastodon (AP)

Stop turning your Linux apps into Docker containers and removing the normal install methods.

nano's old account's rotting corpse 2 anni fa • akkoma (AP)

a tower of blocks captioned "all modern video infrastructure". one tiny block on the bottom is stopping all of it from falling over, and it's labelled "ffmpeg"

1 1

Zand :arch: :terminal: 2 anni fa • mastodon (AP)

Mi preoccupa molto il Piracy Shield introdotto, anche se non vedo partite piratate o sia possessore di "pezzotto", ma per le implicazioni a corto/lungo termine che porta.
È notizia di un paio di giorni fa che insieme agli ip di alcuni siti di streaming video siano stati indiscriminatamente bloccati in toto gli ip di 2 CDN (cloud4c.com e parte di zenlayer), rendendo impossibile anche a chi avesse servizi leciti li sopra di essere raggiunti dall'Italia, l'organo che si occupa della faccenda (agcom) è un organo privato che si erge a "controllore", "multatore" e "bloccatore". Con il mer(d)aviglioso governo fascista che abbiamo ci vorrà poco affinché da un utilizzo anti pirateria si passi ai blocchi per fini politici adducendo motivazioni fantasiose (tipo il decreto antisemitismo di Salvini per gli artisti e le tv).

Zand :arch: :terminal: 2 anni fa • mastodon (AP)

Poi, ovvio, con i dns giusti, vpn, tor ecc te ne sbatti, ma il problema è per l'utente medio e soprattutto per il grande disegno di censura che potrebbero applicare

Lysander il breve 2 anni fa • iceshrimp (AP)

A me stupisce (forse non dovrebbe, non più) il fatto che sta cosa è andata su e come stampa nessuno ne ha parlato. Ne ho sentito giusto di sfuggita come "il governo inventa una innovativa piattaforma anti illegalità" e bon.
Cosa che mi irrita e mi turba profondamente.

Poi, per quanto ne so (chi sa corregga quando dico cazzate!) non bastano dns puliti ma serve proprio una vpn (e questo comunque se gli ip bloccati non sono in un AS gestito da un provider italiano) perché è una sorta di blackhole-on-demand.
Gestito da privati.
Un enorme merdone su un sacco di livelli insomma.

Mi chiedo cosa possano fare i proprietari delle cdn bloccate, se possono fare causa e a chi.

Diego Roversi 2 anni fa friendica

Tutto sacrosanto, ma non mi risulta che Agcom sia privato.

Zand :arch: :terminal: 2 anni fa • mastodon (AP)

@diegor si si è stata una mia inesattezza, ho travisato il privato con indipendente

@Diego Roversi

Enoch 2 anni fa • mastodon (AP)

Happy caturday 🐈! Here’s a cat selfie I found somewhere on the www! 😂 i hope you all have a great weekend ☀️🥳🙌

Gray cat taking a selfie with 2 Rottweilers behind him standing in the snow

Talen Lee 2 anni fa • mastodon (AP)

This youtube video does something I literally had no idea was possible with the subtitle system. Watch it without subtitles to get an idea for what the base video looks like, then watch it with the subtitles on.

youtube.com/watch?v=ZYlaUrj2Zk…

Oshi no Ko Opening (4k 60FPS)┃Creditless

Oshi no Ko OP / Opening Theme "Idol (アイドル)" by YOASOBITV Anime "推しの子" Opening ThemeLyrics by @yaco77 , @ichimonji4kanime , https://www.youtube.com/@JakeUHDv...

^YouTube

bert hubert 🇺🇦🇪🇺🇺🇦 2 anni fa • mastodon (AP)

Very proud that the IEEE has published my article “Why Bloat Is Still Software’s Biggest Vulnerability - A 2024 plea for lean software”:

spectrum.ieee.org/lean-softwar…

Why Bloat Is Still Software’s Biggest Vulnerability

^{Bert Hubert (IEEE Spectrum)}

Zand :arch: :terminal: 2 anni fa • mastodon (AP)

Filippone...
Ok che (come al solito dato che idee tue non ne hai mai avute), hai "copiato" l'impegno profuso da me e @kenobit sul progetto bookwyrm, ok che ti sei preso il dominio bookwyrm .it perché senza atteggiamenti predatori non ci sai stare, ok che hai mantenuto il logo ufficiale così puoi fare il paraculo e attirare gente spacciandoti per "istanza italiana" (tanto la descrizione non la legge nessuno), ma cazzo, copiare lettera per lettera (solo che non sai formattare il testo) il codice di condotta di bookwyrm.gatti.ninja... Dai su un po di fantasia, ce la puoi fare anche da solo no?
Nelle immagini in scuro gattininja in chiaro filippone.

#bookwyrm #gattininja

Policy copiata (male) dal collettivo devol

#Bookwyrm #gattininja @Kenobit

Yaku 🐗 2 anni fa • mastodon (AP)

@guardaminfaccia Daje FilippONE facci sognare, accusa gattinija di aver copiato da te!

@Fata turchina

rag. Gustavino Bevilacqua 2 anni fa • mastodon (AP)

È strano che non abbia ancora registrato puntarella it.

[EDIT]Ah, capito… è GIÀ registrato.

Questa voce è stata modificata (2 anni fa)

Diego Roversi 2 anni fa friendica

Erty 2 anni fa • hometown (AP)

Saw a meme and decided it needed a 4x4 taking it to the furthest extreme

1 3

Wynke 2 anni fa • Messaggio privato mastodon (AP)

Looks to me like Murphy understands the other ones pretty damn well...

brennen 2 anni fa • mastodon (AP)

ok, ok, but in the spirit of the original law, shouldn't murphy's razor be "anything that can be complicated, will be complicated"?

LWN.net is now @LWN@lwn.net 2 anni fa • mastodon (AP)

A locally exploitable glibc vulnerability lwn.net/Articles/960289/ #LWN

A locally exploitable glibc vulnerability

Qualys has disclosed a vulnerability in the GNU C Library that can be exploited by a local attacker for root access. It was introduced in the 2.37 release, and also backported to 2.36.

^lwn.net

#LWN

Julia Evans 2 anni fa • mastodon (AP)

combining branches

wizardzines.com/comics/combini…

combining branches

^{wizard zines}

Questa voce è stata modificata (2 anni fa)

Cat 🐈🥗 (D.Burch) :paw:⁠:paw: 2 anni fa • mastodon (AP)

Google announced that starting in June 2024, ad blockers such as uBlock Origin #uBO will be disabled in Chrome 127 and later with the rollout of Manifest V3 (#Mv3).

The new #Chrome manifest will prevent using custom filters and stops on demand updates of blocklist. Only #Google authorized updates to browser extension will be allowed in the future, which mean an automatic win for Google in their battle to stop YouTube #AdBlockers .

#ManifestV3 is deceitful and threatening to your privacy, and now is a good time to switch to #Firefox (@mozilla) and/or #TorBrowser (@torproject) if you haven't done so already!

EFF (@eff) on Google’s Manifest V3:

⚠️⁠eff.org/deeplinks/2021/12/chro…
⚠️⁠eff.org/deeplinks/2021/12/goog…

Chrome Manifest V3 Transition Timeline (2023-11-16)

🚩⁠developer.chrome.com/blog/resu…

EDIT for clarification: MV3 in Chrome will still allow some ad blocking extensions, but will severely limit their blocking ability and even restricts pre-set filters to 50 MAX.

Chrome Users Beware: Manifest V3 is Deceitful and Threatening

Like FLoC and Privacy Sandbox before it, Google Chrome’s Manifest V3 is another example of the inherent conflict of interest that comes from Google controlling both the dominant web browser and one of the largest internet advertising networks.

^{Electronic Frontier Foundation}

#google #firefox #Chrome #torbrowser #adblockers #manifestv3 #MV3 #ubo @Electronic Frontier Foundation @The Tor Project @Mozilla

Questa voce è stata modificata (2 anni fa)

Cat 🐈🥗 (D.Burch) :paw:⁠:paw: 2 anni fa • mastodon (AP)

Mozilla Firefox

Desktop
📥⁠mozilla.org/en-US/firefox/
Android Play Store
📥⁠play.google.com/store/apps/det…
iOS App Store
📥⁠apps.apple.com/us/app/firefox-…

Tor Browser

Desktop
📥⁠torproject.org/download/
Android Play Store
📥⁠play.google.com/store/apps/det…
Fdroid Repo
📥⁠support.torproject.org/tormobi…
~~iOS App Store~~ (try OnionBrowser)
📥⁠onionbrowser.com/

#Firefox #Mozilla #TorBrowser #Tor #Browser #Privacy

Firefox - Protect your life online with privacy-first products

Firefox is more than a browser. Learn more about Firefox products that handle your data with respect and are built for privacy anywhere you go online.

^Mozilla

#privacy #firefox #tor #Mozilla #browser #torbrowser

Questa voce è stata modificata (2 anni fa)

Mikko Tuumanen 2 anni fa • mastodon (AP)

@mozilla But where is the download link to get Firefox apk? I don't want Google Play in my phone.

@Mozilla

Julian Andres Klode 🏳️‍🌈 2 anni fa • mastodon (AP)

Ah shoot I meant to write EU regulators but I keep forgetting. Like someone should investigate it and if there isn't a law to prevent it, write one.

Fabio 2 anni fa • friendica

Confy 0.7.1

Version 0.7.1 of #Confy, the #gtk4 / #libadwaita conference companion, has been tagged.

This release brings small fixes.
Main highlights are:

New German translation.
Flatpak now will use GNOME Runtime 45

#Arch #AUR packages are updated, #flatpak on #Flathub should be on its way.

sr.ht/~fabrixxm/Confy/

#Arch #confy #flatpak #aur #Flathub #gtk4 #libadwaita

Italy

1 1

Etienne Jacob 2 anni fa • mastodon (AP)

Haven't shared it on Mastodon, this page of my website is popular: bleuje.com/randomanimations/
It was on the frontpage of hackernews a week ago. 200+ of my animations in random order, next one with click or keypress.

Random Animations

^bleuje.com

Ricardo B�nffy 2 anni fa • mastodon (AP)

Lucie / minute 2 anni fa • mastodon (AP)

"qalc" is a nice little calculator and simple equation solver for the terminal.

screenshot of qalc solving two equations for x to help me narrow down a pair of feedback resistors to common values

Graham Sutherland / Polynomial 2 anni fa • mastodon (AP)

it also has a gui frontend (Qalculate!) which is similarly excellent.

the best part of it is the unit handling, especially for electronics design work. I have yet to find a unit it doesn't understand properly.

for example I recently wanted to figure out how much stray inductance I was allowed in a MOSFET gate driver trace, knowing that it dumps about 1.2A into the gate with a rise time of 8.5ns, and I want no more than 200mV drop, so I did 200mV / (1.2A / 8.5ns) and it tells me 1.4nH :)

Bob Machintruc 2 anni fa • mastodon (AP)

qalc is wonderful.

Gerhard D. 2 anni fa • mastodon (AP)

It can also save formulae as functions and allow them to be called later...

pandora 2 anni fa • mastodon (AP)

oh that looks interesting… kinda what I need. Maybe I can finally dump my old school graphics calculator

ℍ𝕠𝕨 2 anni fa • mastodon (AP)

I always use `bc`, I will try qalc!

Light🐧 2 anni fa • mastodon (AP)

qalc is rocks 🤘️, is good enough for most of thing I need, it's my go to minimal calculator app.

pandora 2 anni fa • mastodon (AP)

tested it a bit and it is amazing... how come it is soo unknown

Lysander il breve 2 anni fa • iceshrimp (AP)

Ahh, come migliora la vita l'AI.

Risposta ad una recensione negativa su un noto sito di albergatori, tirata palesemente fuori da chatgpt.

Terry Hancock (Director/Producer) 2 anni fa • misskey (AP)

Hard to get more clear-cut than this: "this is my own performance of Bach. Who died 300 years ago. I own all the rights", and yet...

eff.org/takedowns/sony-finally…

Sony Finally Admits It Doesn’t Own Bach and It Only Took a Bunch of Public Pressure

Here’s the thing about different people playing the same piece of music: sometimes, they’re going to sound similar.

^{Electronic Frontier Foundation}

Octavia Con Amore :pink_moon_and_stars: Succubard's Library 2 anni fa • mastodon (AP)

@LydiaConwell This is a pretty rampant issue, unfortunately. More than the various soundtrack pieces that I play where every composer is alive, I've had Greensleeves (composer unknown, traditional English piece), Londonderry Air (claimed as "Danny Boy" (which is the melody with lyrics added on), an Irish traditional piece), and Liebesleid (Fritz Kreisler (~1962)) all claimed numerous times

Questa voce è stata modificata (2 anni fa)

Olimex 2 anni fa • mastodon (AP)

ESP32-H2-DevKit-Lipo Open Source Hardware board with Zigbee, Threat, Matter, BLE5 is now available for pre-order olimex.wordpress.com/2024/01/1… #zigbee #iot #esp32-h2 #oshw #threat #matter

ESP32-H2-DevKit-Lipo Open Source Hardware board with Thread/Matter/Zigbee and BLE5 is ready for pre-order

Based on ESP32-H2-MINI-1-N4 module with 4MB Flash. ESP32-H2 combines IEEE 802.15.4 connectivity with Bluetooth 5 (LE). The SoC is powered by a single-core, 32-bit RISC-V microcontroller that can be…

^olimex

#esp32 #IoT #oshw #threat #ZigBee #matter

chrysn 2 anni fa • mastodon (AP)

This advertises a UEXT connector but none is visible on the pictures – are they not final yet, or is the feature list wrong?

Olimex 2 anni fa • mastodon (AP)

@chrysn this is pUEXT 10 pin 1mm step connector

@chrysn

chrysn 2 anni fa • mastodon (AP)

Back when I started building hardware, UEXT was my go-to for extensibility because it was simple and well documented. Given there is now both mUEXT and pUEXT, please consider updating the specs.

Wookey 2 anni fa • mastodon (AP)

Is there anyone who lives near Bruxelles Midi station reading this today? I just came though Eurostar on way back to the UK and my friend's ice axe was confiscated, despite the letter from Eurostar saying "alpine equpiment (crampons and ice axe) _is_ permitted". We persuaded them to hold it for 24 hours before destroying it, so I am hoping to find someone very helpful who could go there to rescue it and give it to me at FOSDEM to post back to the UK.

Codeberg 2 anni fa • mastodon (AP)

We are currently having network issues. We are able to connect to our server's onboard recovery system, but the access is slow and unreliable.

We'll keep you updated.

Codeberg 2 anni fa • mastodon (AP)

We (partially) restored service for:

Fully working:
- E-Mail

IPv6-only:
- Webhooks
- Codeberg Pages
- Weblate translate.codeberg.org
- static pages (blog, docs, the Codeberg logo)

IPv6-only and limited functionality:
- Woodpecker CI (should accept Webhooks, but no actual builds are running: Due to IPv6-only, the builds will not connect to GitHub and other prominent sources for dependencies, there is likely no use in having most builds fail due to this)

Weblate

This site runs Weblate for localizing various software projects.

^Weblate

Codeberg 2 anni fa • mastodon (AP)

A quick glimpse at the monitoring (until network access went away) indicated that it's either a grave network misconfiguration or an active DDoS going on. It looked like an inrush of junk data at the maximum link speed of our server.

Codeberg 2 anni fa • mastodon (AP)

We are waiting for our provider to help us out with our current situation.

Codeberg 2 anni fa • mastodon (AP)

Our provider confirmed an incoming DDoS. We have got access to our systems and currently considering next steps.

kirby: classic edition 2 anni fa • pleroma (AP)

againë

Forgive me if I'm stating a commonly asked question but why don't you guys use cloud flare. You just host code

Codeberg 2 anni fa • mastodon (AP)

@kirby cloudFlare is a privacy nightmare for many. And it costs a lot of $$$, see fosstodon.org/@drewdevault/111…

@kirby: classic edition

adamghill 2 anni fa • mastodon (AP)

An electrician had to cut a hole in our drywall and instead of just patching it up, my wife decided to make a little scene with miniatures embedded in the wall. 😂🖼️🤯

Edit: pixelfed.social/@thisfunhouse has some more pictures of the subway and I will post lots more quirky art over there.

#art #miniatures

✰ This Fun House ✰ (@thisfunhouse@pixelfed.social)

2 Posts, 1 Following, 1 Followers · Documenting the quirky art, designer toys, weird projects, and collectibles in our house.Will provide links to the artist’s site when possible — please show ❤️ and support them if possible! 🎨

^Pixelfed

#art #miniatures

Questa voce è stata modificata (1 anno fa)

Kristen Wixx 2 anni fa • mastodon (AP)

Then I'm going to be immortal.

People who are always running late tend to end up living longer and healthier lives, according to Harvard researchers.

Pseudo Nym 2 anni fa • mastodon (AP)

My million dollar idea I want someone to steal and do, so I can be a customer.

"Dumb Stuff" we sell electronic appliances that aren't Internet connected. That's all.

That's it. That's the pitch. I would buy the <bleep> out of this company if their electronic gadgets were even half way decent, and repairable.

Electronic, no wifi, regular screws to open it up. That's it. Do those three things, and you can be sold by this store.

I will pay this business to curate and find these devices for me.

1 9

Lars Rinde 2 anni fa (Ricevuto 1 anno fa) • mastodon (AP)

would love this! Can merge with my long-time wish for a No-Frills brand/aggregator of electronics without unnecessary touch screens, touch buttons, RGB everywhere, etc. It requires some effort these days to buy decent computer parts that don’t light up the room for example!

Questa voce è stata modificata (2 anni fa)

Holir_ 2 anni fa (Ricevuto 1 anno fa) • mastodon (AP)

@taharez Like the Victronox of appliances?

@Lars Rinde

clacke@libranet.de is my main 1 anno fa • iceshrimp (AP)

Isn't buying a knife and getting a screwdriver, nail file and corkscrew the opposite of the simplicity requested here?

@clacke

@clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛

Holir_ 1 anno fa • mastodon (AP)

@notclacke @clacke @taharez The Victronox brand has more than the Swiss army knife. Low frills, good quality and reasonably priced. The 8" chef knife is $60 and one of the best under $100. I've heard good things about their luggage as well.

@clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 @Lars Rinde @clacke@libranet.de is my main

clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 1 anno fa • friendica (via ActivityPub)

@Holir_ Ok! I learned something today. Thank you!

@Lars Rinde @clacke@libranet.de is my main @Pseudo Nym

@Pseudo Nym @Lars Rinde @Holir_ @clacke@libranet.de is my main

clacke: exhausted pixie dream boy 🇸🇪🇭🇰💙💛 1 anno fa • friendica (via ActivityPub)

@Pseudo Nym Renewed relevance today with the largest IT incident in history.

@Pseudo Nym

John Goerzen 2 anni fa • mastodon (AP)

My advice to consider #security first when evaluating systems: changelog.complete.org/archive… This is part of my decision to migrate my #RaspberryPi devices to running pure #Debian.

#security #Debian #RaspberryPi

John Goerzen 2 anni fa • mastodon (AP)

I have a new post: Live Migrating from #RaspberryPiOs #bullseye to #Debian #bookworm. changelog.complete.org/archive…

I got annoyed that #Raspbian officially has no upgrade path, the security situation, the lag behind Debian, lack of backports, and lack of initramfs in its custom kernel. So I managed to live migrate some Pis to Debian.

#Debian #raspbian #bullseye #bookworm #RaspberryPiOS

John Goerzen 2 anni fa • mastodon (AP)

@gregoa_ I hear you. I have also generally upgraded my Pis in-place despite the warnings against it, but it seems the warnings were particularly strident this time. I don't follow testing, but I know the stable releases lag significantly. Debian Bookworm came out on June 10, and RPi Bookworm took 4 more months. It's pretty annoying having all my other systems on bookworm, having to deal with bullseye differences for months, and then warnings not to upgrade after that.

@gregor herrmann

Diego Roversi 2 anni fa friendica

Compile your kernel (or whatever) withour wearing your ssd:

If you have /tmp on your SSD, instead of a tmpfs mount:

- create a new directory and mount it as tmpfs (1Gb)

# mkdir /tmp/tmp
# mount -t tmpfs -o size=1G tmpfs /tmp/tmp

- now tell gcc to use it:

# export TMPDIR=/tmp/tmp

Paolo Melchiorre 2 anni fa • mastodon (AP)

I highly recommend supporting the Standard Ebooks project. 📚

«Standard Ebooks is a volunteer-driven project that produces new editions of public domain e-books that are lovingly formatted, open source, free of copyright restrictions, and free of cost.»

Donate 👇
standardebooks.org/donate

Please boost 🙏

#standardebook #standardebooks #ebook #ebooks #publicdomain #book #books #reading #epub #standard

#publicdomain #books #book #ebook #ePUB #reading #ebooks #Standard #StandardEbooks #standardebook

Questa voce è stata modificata (2 anni fa)

nixCraft 🐧 2 anni fa • mastodon (AP)

The predictable network interface device names in #Linux 🤣

#Linux

ChiefGyk3D 2 anni fa • mastodon (AP)

Happy Festivus everyone! youtu.be/1njzgXSzA-A?si=YuQnjV…
#festivus #holidays #miracle

The Story Of Festivus | Seinfeld

It's that time of year, so we're embracing our roots and looking back at why we celebrate this Festivus for the rest of us!Find your local listing | http://...

^YouTube

#holidays #festivus #miracle

Jonas Schäfer 2 anni fa • mastodon (AP)

postfix.org/smtp-smuggling.htm…

"SMTP Smuggling" vulnerability in Postfix allows to spoof senders even in the presence of some DMARC checks. Configuration workarounds exist.

Also, a wholehearted f* you to SEC Consult, who sat on this since June and disclosed it to some closed-source vendors and MSPs, but could apparently not be bothered to give e.g. Postfix a heads-up, publishing this close to the holidays.

Boosts for awareness welcome.

Edit: So this has kinda blown up. and especially because the author of the SEC advisory is going to have a slot at 37C3, I would like to add something important: I intentionally wrote "SEC Consult" above, not "$individual". Do not start harassing that person. For all we know, this is a corporate failure and the individual would actually appreciate guidance and tips. That does not mean to not ask the hard questions, but keep the framing in mind. They might genuinely have been told by their managers that that is how responsible disclosure works.

SMTP Smuggling

^{www.postfix.org}

Questa voce è stata modificata (2 anni fa)

Deborah Pickett 2 anni fa • hometown (AP)

I see SEC Consult has amended their page sec-consult.com/blog/detail/sm… with something of an acknowledgment that they might have stuffed up disclosure a bit here. It does read a bit like "We contacted both vendors, Microsoft _and_ Cisco!"

A hearty Fuck You to SEC Consult for being bad at their one job, and a hearty side of Fuck You to Cisco for their arrogant "It's not a bug".

Now, after I have patched my Postfix server at $dayjob, back to my previously scheduled long weekend.

SMTP Smuggling - Spoofing E-Mails Worldwide

Introducing a novel technique for e-mail spoofing

^{SEC Consult Unternehmensberatung GmbH}

Mad Villain 2 anni fa • mastodon (AP)

The internet is a big place. We can all have our own fedi. Each of us can have whatever kind of experience, community, connections, etc, we want here.

That’s the beauty of this place. There is enough room for everyone.

Be wary of anyone who tries to force you to be in community with them because of their myopic view of what online spaces should be.

We can make different decisions. We can make better decisions.

1 1

sjolsen (MP3 & JPEG compatible!) 2 anni fa • mastodon (AP)

2024 is the year of no more "sprints." for security reasons, "snprints" is recommended instead.

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.

Note sull'uso di cookie da parte di questo sito.