kbal

Not everything is known yet, so you won't find a comprehensive summary. The latest news I've seen: https://www.openwall.com/lists/oss-security/2024/03/30/36

I'm watching some folks reverse engineer the xz backdoor, sharing some preliminary analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable.

All the technical details that are widely known (and some that aren't yet) seem to be in that thread, including the original report from Andres Freund. For rumours about who might be behind it and high-level speculation about what it all means, you'd have to look elsewhere.

If you have the compose key (mine is caps lock) it should be [compose]---

— At least, that's how I type it and it appears to be the same on gnome based on this: https://help.ubuntu.com/community/GtkComposeTable

The average user? Nothing. Mostly it just affects those who get the newest versions of everything.

The surprise is that apparently 28 percent of "experienced programmers" don't have an ad blocker. I'm not sure how they got the data, but I wonder if their methods are up to the task of sorting out any possible inverse correlation between blocking ads and being willing to respond to polls.

I'm on debian bookworm right now and running rsyslogd and cron, because I prefer them.

Fedi is the worst social media, except for all the others.

This is despite the country briefly exporting designer jeans to Sweden.

The Onion rarely gets better than this

I also am no graphic designer, but: maybe just remove those central lines if you scale it down so much that they're a problem. It'll still be recognizable and true to the spirit of the thing.

My last post there (pointing the way to lemmy) still stands, un-shadowbanned and slightly upvoted since last I saw it. But it's marked NSFW, as I guess the whole sub was set to at the time, which may be why it doesn't show up in search.

Why'd mastodon, lemmy, pixelfed, and friends disappear in the last frame? They'll remain distinguishable even after fedi takes over the universe. It's the others that will be obsolete.

So long as people who care about where their instance is hosted and don't like the big hosting providers can easily find services hosted elsewhere, I don't think it matters too much. But perhaps you can go ahead and start working on plans to some day decentralize web hosting in general and I'm sure lots of people will join in once the worst of the problems at the application layer are solved.

There is no need to go through openrss.org for this.

https://lemmy.world/feeds/c/fediverse.xml?sort=New