Benvenuto nel Poliverso

Big Tech joins the race to build the world’s heaviest airplane

Pluralistic: Big Tech joins the race to build the world’s heaviest airplane (09 Dec 2025) – Pluralistic: Daily links from Cory Doctorow

^{pluralistic.net}

#technology

dflemstr likes this.

Big Tech joins the race to build the world’s heaviest airplane

Pluralistic: Big Tech joins the race to build the world’s heaviest airplane (09 Dec 2025) – Pluralistic: Daily links from Cory Doctorow

^{pluralistic.net}

#technology

Big Tech joins the race to build the world’s heaviest airplane

Pluralistic: Big Tech joins the race to build the world’s heaviest airplane (09 Dec 2025) – Pluralistic: Daily links from Cory Doctorow

^{pluralistic.net}

#technology

thisisbutaname likes this.

Big Tech joins the race to build the world’s heaviest airplane

Pluralistic: Big Tech joins the race to build the world’s heaviest airplane (09 Dec 2025) – Pluralistic: Daily links from Cory Doctorow

^{pluralistic.net}

#technology

like this

reshared this

Big Tech joins the race to build the world’s heaviest airplane

Pluralistic: Big Tech joins the race to build the world’s heaviest airplane (09 Dec 2025) – Pluralistic: Daily links from Cory Doctorow

^{pluralistic.net}

#technology

reshared this

Paramount Pictures X Account Hacked to Read ‘Proud Arm of the Fascist Regime’

The official account for Paramount Pictures on X(Twitter) was compromised Tuesday. The description in the account’s bio was changed to read: “Proud arm of the fascist regime.”

Note: the account has been recovered.

Sources:
- ScreenRant;
- Variety.

Paramount X/Twitter Account Hacked to Read 'Proud Arm of the Fascist Regime'

The official account for Paramount Pictures on X was seemingly hacked, to alter the account's bio as "Proud arm of the fascist regime."

^{Todd Spangler (Variety)}

#technology

dflemstr likes this.

Paramount Pictures X Account Hacked to Read ‘Proud Arm of the Fascist Regime’

The official account for Paramount Pictures on X(Twitter) was compromised Tuesday. The description in the account’s bio was changed to read: “Proud arm of the fascist regime.”

Note: the account has been recovered.

Sources:
- ScreenRant;
- Variety.

Paramount X/Twitter Account Hacked to Read 'Proud Arm of the Fascist Regime'

The official account for Paramount Pictures on X was seemingly hacked, to alter the account's bio as "Proud arm of the fascist regime."

^{Todd Spangler (Variety)}

#technology

dflemstr likes this.

TIL Howling Mad Murdock from the A-Team (1983) is also Lt. Barclay from Star Trek: TNG

Actor: Dwight Schultz

I was watching the 2010 version of the A-Team (great movie imo), and I wanted to know what cameos there were (because I suck at recognizing actors). Lo and behold, to my delight, the cross-over of all cross-overs: Star Trek and A-Team.

~I love it when a plan comes together.~

Edit: This just keeps getting better!!!! 53:58 on Netflix.

Dwight Schultz - Actor, Music Department, Additional Crew

Dwight Schultz. Actor: Star Trek : Premier Contact. Dwight Schultz is an American actor who is known for playing Howling Mad Murdock from The A-Team and Reginald Barclay from Star Trek: The Next Generation.

^IMDb

#til

Questa voce è stata modificata (1 settimana fa)

in reply to dohpaz42

Damage

in reply to dohpaz42 • 1 settimana fa • •

Tank Girl was in Voyager!

Lori Petty

Lori Petty (born 14 October 1963; age 62) is the actress who played Noss in the Star Trek: Voyager fifth season episode "Gravity". Petty's career breakthrough came with her role in Point Break (1992, featuring Jack Kehler and Christopher Pettiet).

^{Contributors to Memory Alpha (Fandom, Inc.)}

HaraldvonBlauzahn via Linux

1 settimana fa • •

HaraldvonBlauzahn
1 settimana fa • •

The (successful) end of the kernel Rust experiment

The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The consensus among the assembled developers is that Rust in the kernel is no longer experimental — it is now a core part of the kernel and is here to stay. So the "experimental" tag will be coming off. Congratulations are in order for all of the Rust for Linux team.

The end of the kernel Rust experiment

The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The cons [...]

^LWN.net

#linux

Questa voce è stata modificata (1 settimana fa)

like this

in reply to HaraldvonBlauzahn

Strit

in reply to HaraldvonBlauzahn • 1 settimana fa • •

This means that drivers written in Rust will have just a good a chance to be accepted as drivers written in C?

in reply to Strit

HaraldvonBlauzahn

in reply to Strit • 1 settimana fa • •

I guess that still depends on the maintainer which is responsible. But since drivers often deal with untrusted data, which can lead to security exploits, this makes a lot of sense.

like this

in reply to HaraldvonBlauzahn

sga

in reply to HaraldvonBlauzahn • 1 settimana fa • •

If i remeber correctly, the current approach is each device/vendor family is free to choose how they want to move. for example, gpu folks are actually interested to do rust stuff (for example novo, tyr by redhat,collabora). there may be some families who do not want to move fast.

in reply to HaraldvonBlauzahn

davel

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Ambiguous title is ambiguous ಠ_ಠ

like this

in reply to davel

TheFermentalist

in reply to davel • 1 settimana fa • •

Yep. Came here ready to rant

like this

in reply to davel

CHOPSTEEQ

in reply to davel • 1 settimana fa • •

My heart stopped. Sheesh.

in reply to davel

HiddenLayer555

in reply to davel • 1 settimana fa • •

Yeah ambiguity is for C code /s

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

sun_is_ra

in reply to HaraldvonBlauzahn • 1 settimana fa • •

You scared me for a second

in reply to HaraldvonBlauzahn

Buffalox

in reply to HaraldvonBlauzahn • 1 settimana fa • •

I would have guessed that mixing different programming languages would cause problems. But apparently it's working well.
It's been 20 years since I did any serious programming, so I'm a bit rusty, is that what Rust is for?

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

No, Rust is to make you feel like you haven't programmed seriously in 20 years when you first pick it up, even though you are actively doing it.

Before the angry rust "mob" comes to get me: this is a joke. I tried Rust out of genuine curiosity, cobbled together a silly little thing, and quite liked it. The borrow checker made me feel like a total beginner again, in some aspects, and it was great to get that feeling again.

Ultimately it does not fit my needs, but there are a few features I am pretty envious of. I can totally see why it's getting such a following, and I hope it keeps growing.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

Thanks, I might take a look at it just for fun. 😀

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

Enjoy! I don't know what you used to seriously program on but I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you, unless you forced yourself to code that way anyways.

Plus, as long as you're doing silly little home projects, the compiler errors are the absolute best I've ever seen. Literally just learn basic syntax, try it out, and when it does not compile, the compiler not only tells you why but also what it thinks you're trying to do and how to fix.

Absolute gem of a learning tool.

Questa voce è stata modificata (1 settimana fa)

like this

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you

Absolutely, I am more used to program closer to the iron mostly C. My favorite was 68000 Assembly, python is nice, but I prefer compiled languages for efficiency. Although that efficiency isn't relevant for basic tasks anymore.

The compiler error messages sound extremely cool. 👍

Questa voce è stata modificata (1 settimana fa)

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

Ah, a fellow C coder. Never did do assembly with chips older than x86_64 basically. The only old school stuff I touched was writing an interpreter for the CHIP-8. I tried writing some CHIP-8 too, but coming from more recent paradigms, it seemed quite unwieldy to me.

I like python for quick and dirty stuff, I don't like python for being interpreted and it being not obvious what happens under the hood, memory wise, at a glance.

Seeing as you do C I'll say this. The one thing I really did not enjoy, subjectively, with Rust, is that writing "C-style loops" comes with a performance penalty because there are bound checks happening, so the idiomatic version of a loop in Rust usually involves iterators and function composition.

I am stupid. C-loops are easy for me to understand. More sophisticated stuff is hard for my little brain. I'd rather be trusted with my memory access, and be reminded of my stupidity when comes the inevitable segfault. Keeps you humble.

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

it being not obvious what happens under the hood

To me it feels like it does things I didn't ask it to. So I'm not 100% in control 😋

the idiomatic version of a loop in Rust usually involves iterators and function composition.

What? You need to make a function to make a loop? That can't be right???

C-loops are easy for me to understand.

Absolutely, the way C loops work is perfect. I'm not so fond of the syntax, but at least it's logical in how it works.

in reply to Buffalox

TriangleSpecialist

in reply to Buffalox • 1 settimana fa • •

What? You need to make a function to make a loop? That can't be right???

Ah no, there is a misunderstanding. You can write C-loops, of course, they just could involve more work under the hood because in order to enforce memory safety, there needs to be some form of bounds checking that does not happen in C. Caveat: I don't know whether that's always true, and what the subtleties are. Maybe I'm wrong about that even, but what is true is that what I am about to say, you will encounter in Rust codebases.

By function composition I meant in the mathematical sense. So, this example explains the gist of it. You may need to throw in a lambda function in there to actually do the job, yeah. I don't know what the compiler actually reduces that to though.

It's just the more functional approach that you can also see with Haskell for example. I find it harder to parse, but that may be lack of training rather than intrinsic difficult.

EDIT: pasted the wrong link to something totally irrelevant, fixed now

Function Composition and Pipelines in Rust: Building Complex Functionality

Explore the art of building complex functionality by composing simple functions and creating pipelines in Rust. Learn how to chain functions using method notation, leverage iterators and combinators, and enhance code readability and maintainability.

^{Software Patterns Lexicon}

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

Buffalox

in reply to TriangleSpecialist • 1 settimana fa • •

OK thanks for clarifying. 👍

in reply to Buffalox

Melmi

in reply to Buffalox • 1 settimana fa • •

If you don't like the functional syntax you can usually use for each loops to the same effect.

for element in array.iter() {
    println!("{element}");
}

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

The one thing I really did not enjoy, subjectively, with Rust, is that writing "C-style loops" comes with a performance penalty because there are bound checks happening, so the idiomatic version of a loop in Rust usually involves iterators and function composition.

IIRC you can speed up such checks by putting an assertion in front that checks for the largest index - this will make repeated checks for smaller indices unnecessary. Also, bound checks are often not even visible on modern CPUs because speculative execution, branch prediction, and out-of-order execution. The CPU just assumes that the checks will succeed, and works on the next step.

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

I had no idea about the assertion! Thanks.

Yes, this is plain wrong or often unimportant on modern architecture, you're right. I, certainly mistakenly, thought this was one of the reasons for the idiomatic version involving function composition, which is the thing I, subjectively, don't enjoy as much.

I stand corrected.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

The function composition style comes from functional programming and Rust's OCaml heritage. It can make it easier to reason about invriants and possible sets of values of the result of a computation step.

Rust transforms these to the same or a close equivalent of hand-written loops.

Similar methods are used in specialized, high-performance C++ libraries such as blitz++ and Eigen. But if you mess up bounds, you will get UB with them.

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

I like Python for quick and dirty stuff

There is one more little secret that not everyone knows:

You do not need lifetime annotations and full borrow checking if you do not care to press out the last drop of performance out of the CPU, or if you just draft experimental code.

In fact, you can very much program in a style that is similar to python:

just pass function arguments as references, or make a copy (if you need to modify them)
just return copies of values you want to return.

This makes your code less efficient, yes. But, it avoids to deal with the borrow checker before you really need it, because the copied values get an own life time. It will still be much faster than Python.

This approach would not work for heavily concurrent, multi-threaded code. But not everyone needs Rust for that. There are other quality-of-life factors which make Rust interesting to use.

... and of course it can't beat Python for ease of use. But it is in a good place between Python and C++. A bit more difficult than Java, yes. But when you need to call into such code from Python, it is far easier than Java.

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

Enjoy! I don't know what you used to seriously program on but I am willing to bet that the ownership paradigm that it enforces is going to feel at least moderately new to you, unless you forced yourself to code that way anyways.

Thinking about ownership is the right way e.g. for C++ as well, so if one has coded professionally in larger systems, it should not be too alien.

One still needs to learn life time annotations. So, assuming that you know, for example, C++, it is an a bit larger hurdle than picking up Java or Go, but it is worth the time.

In many aspects, Rust is far more productive and also more beginner-friendly than C++:

far better compiler error messages
a superb and easy-to-use packaging system
Unicode support
support for unit testing right in the language
strong support for a side-effect-free or "functional programming" style which is great for testing and tasks like data analysis or parsing
better modularization
avoids implementation inheritance, and the trait system is a bit different but superb
no undefined behavior (in safe Rust) which means nothing less than that the code does what it says - and this is extremely useful in larger projects
great support for safe concurrency
the language and library frees one to think about interfaces and algorithms which is where the big wins for performance are hidden (and IMO one of the key factors for the astounding success of Python).

I could go on... but I need to do other stuff

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Thanks for the detailed answer. Preaching to the choir.

The existence of the concept of ownership in languages like C++ is why I threw "moderately" in there. I agree depending on what you take that to mean, it may or may not do some heavy lifting.

For the rest, I'd divide it into hard facts (compiler messages are absolutely undeniable, in any circumstance) and things that can definitely be true depending on your personal use cases. I'm with you on this: for the vast vast majority of tasks commonly understood as software engineering, memory safety is a concern, and a lot, if not all, of your points, are valid.

I must humbly insist that it does not fit my needs, in the sense that memory safety is of no concern to me, and that the restrictions that a compiler-enforced approach imposes make me less productive, and, subjectively, also less enjoyable because causing more friction.

That being said, you may also not consider what I'm currently doing to be software engineering, and that's totally fine. Then we'd agree entirely.

EDIT: also, there are very few languages less productive and beginner-friendly than C++ in my opinion. The proverbial bar is in hell. But you are talking to an unreasonable C++ hater.

Questa voce è stata modificata (1 settimana fa)

in reply to TriangleSpecialist

HaraldvonBlauzahn

in reply to TriangleSpecialist • 1 settimana fa • •

EDIT: also, there are very few languages less productive and beginner-friendly than C++ in my opinion.

I am a professional C++ developer with 20 years of experience and have worked in about eight other languages professionally, while learning and using a dozen more in hobby projects.

I agree with you here. The only areas where specifics are worse are package management in Python, and maintainability of large SIMULINK models.

in reply to HaraldvonBlauzahn

TriangleSpecialist

in reply to HaraldvonBlauzahn • 1 settimana fa • •

That's the sort of indictment of C++ I like to hear. It's not just me then. I sometimes feel like I'm taking crazy pills with some colleagues who are super enthusiastic about it still.

But again, I'm stupid, I know I'm stupid, and C++ has way too many features and convoluted behaviours which are hard for me to remember and reason about. It often feels like it makes me think more about the language problems than the actual problem I'm supposed to work on. It may say more about me than the language, but I do feel validated with comments like this.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

jaybone

in reply to HaraldvonBlauzahn • 1 settimana fa • •

What’s wrong with implementation inheritance? Don’t you want that?

in reply to jaybone

pr06lefs

in reply to jaybone • 1 settimana fa • •

The consensus seems to be that implementation inheritance leads to code that is difficult to understand and difficult to reuse. Its perhaps the main reason C++ is banned from the kernel.

Questa voce è stata modificata (1 settimana fa)

in reply to jaybone

HaraldvonBlauzahn

in reply to jaybone • 1 settimana fa • •

Generally no. As soon as a class hierarchy becomes moderately complex, implementation inheritance makes code very hard to maintain, because you need to read the whole stack of classes to see what a single change will actually do.

Rust has another system, traits and trait implementations.

in reply to Buffalox

Victor

in reply to Buffalox • 1 settimana fa • •

What have you been doing since you stopped programming?

Alternatively, why did you stop (seriously) programming?

in reply to Victor

Buffalox

in reply to Victor • 1 settimana fa • •

It was never a major part of my job description, and I lost interest doing small hobby projects.

in reply to Buffalox

Victor

in reply to Buffalox • 1 settimana fa • •

Understandable

in reply to Buffalox

Ephera

in reply to Buffalox • 1 settimana fa • •

Lots of "modern" languages don't interop terribly well with other languages, because they need a runtime environment to be executed.
So, if you want to call a Python function from Java, you need to start a Python runtime and somehow pass the arguments and the result back and forth (e.g. via CLI or network communication).

C, C++, Rust and a few other languages don't need a runtime environment, because they get compiled down to machine code directly.
As such, you can call functions written in them directly, from virtually any programming language. You just need to agree how the data is laid out in memory. Well, and the general agreement for that memory layout is the C ABI. Basically, C has stayed the same for long enough that everyone just uses its native memory layout for interoperability.

And yeah, the Rust designers weren't dumb, so they made sure that Rust can also use this C ABI pretty seamlessly. As such, you can call Rust-functions from C and C-functions from Rust, with just a bit of boilerplate in between.
This has also been battle-tested quite well already, as Mozilla used this to rewrite larger chunks of Firefox, where you have C++ using its C capabilities to talk to Rust and vice versa.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

zaphod

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Oh well, time to switch to TempleOS.

like this

in reply to zaphod

kubofhromoslav

in reply to zaphod • 1 settimana fa • •

Or get a catgirl ears. And safer memory.

like this

in reply to kubofhromoslav

Hule

in reply to kubofhromoslav • 1 settimana fa • •

My memory is safe. Nobody ever knows what I'm going to forget..

in reply to Hule

kubofhromoslav

in reply to Hule • 1 settimana fa • •

Then catgirl ears are enough 😉

in reply to zaphod

HiddenLayer555

in reply to zaphod • 1 settimana fa • •

Pff you know how many layers of abstraction HolyC still has? Real computing enthusiasts write their OS in machine code. Not assembly, that's an abstraction too, literally tapping out high and low electrical pulses like you're in the Marconi room on the Titanic.

Questa voce è stata modificata (1 settimana fa)

in reply to HaraldvonBlauzahn

tehn00bi

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Isn’t one of the main concerns the licensing of Rust?

in reply to tehn00bi

Anafabula

in reply to tehn00bi • 1 settimana fa • •

No. The Rust code in the kernel is GPLv2 just like the rest of the kernel. The licence of the compiler has nothing to do with that, that's nonsense Rust haters make up.

You can argue against independent projects like the Rust coreutils not using a copyleft license, but that has nothing to do with Rust or the kernel. There are independent C projects without non-copyleft licenses too.

Questa voce è stata modificata (1 settimana fa)

like this

in reply to Anafabula

LeFantome

in reply to Anafabula • 1 settimana fa • •

Ah thank you. You likely guessed the reason for the question.

Many popular projects written in Rust, including the UUtils core utils rewrite, are MIT licensed as Rust is. There have been people that purposely confuse things by saying that “the Rust community” is undermining the GPL. I can see how that may lead somebody to believe that there is some kind of inherent licence problem with code written in Rust.

Code written in Rust can of course be licensed however you want from AGPL to fully proprietary.

I personally perceive a shift in license popularity towards more permissive licenses at least with the “younger generation”. The fact that so many Rust projects are permissively licensed is just a consequence of those kinds of licenses being more popular with the kinds of “modern” programmers that would choose Rust as a language to begin with. Those programmers would choose the same licenses even they used the GCC toolchain. But the “modern” languages they have to choose from are things like Rust, Swift, Zig, Go, or Gleam (all permissively licensed ). Python and TypeScript are also still trendy (also permissively licensed).

Looking at that list, it is pretty silly to focus on Rust’s license. Most of the popular programming languages released over the past 20 years are permissively licensed.

Questa voce è stata modificata (1 settimana fa)

in reply to LeFantome

Muehe

in reply to LeFantome • 1 settimana fa • •

Many popular projects written in Rust, including the UUtils core utils rewrite, are MIT licensed as Rust is. There have been people that purposely confuse things by saying that “the Rust community” is undermining the GPL.

How would that ever be a problem in any case? I mean I'm not that versed in licensing stuff, but MIT explicitly allows sublicensing, so if in doubt just slap a GPL-sticker on the MIT code and you are good, no?

in reply to tehn00bi

Auli

in reply to tehn00bi • 1 settimana fa • •

Huh, its a programing language. People can write the code and use whatever license they want.

in reply to tehn00bi

atzanteol

in reply to tehn00bi • 1 settimana fa • •

Rust is mit/apache licensed? What concerns are there?

in reply to atzanteol

Mactan

in reply to atzanteol • 1 settimana fa • •

rust the language is, but projects using it can be any other license, like GPL 2 or 3 or whatever cursed one that sudo has

in reply to Mactan

atzanteol

in reply to Mactan • 1 settimana fa • •

Yes, I know.

in reply to tehn00bi

LeFantome

in reply to tehn00bi • 1 settimana fa • •

I have never heard the licensing of Rust being raised as a concern for the Linux kernel.

As Charles Babbage would say, “I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question.”

The distro I use builds the entire Linux kernel with Clang which uses the same license as Rust. Linux is bound by the same modified GPL license regardless of what compiler I use to build it.

The compiler has no impact on the license applied to the code you build with that compiler. You can use closed source tools to build open source software and vice versa.

And, of course, the Rust license is totally open source as it is offered as both MIT and Apache. Apache 2.0 even provides patent guarantees which can matter for something like a compiler.

If you prefer to use GPL tools yourself, you may want to keep an eye on gccrs.

rust-gcc.github.io/

A legitimate concern about Rust may be that LLVM (Rust) supports a different list of hardware than GCC does. The gccrs project addresses that.

GCC Front-End For Rust | Alternative Rust Compiler for GCC

^{rust-gcc.github.io}

in reply to HaraldvonBlauzahn

onlinepersona

in reply to HaraldvonBlauzahn • 1 settimana fa • •

Phoronix commentors will be furious.

in reply to HaraldvonBlauzahn

selokichtli

in reply to HaraldvonBlauzahn • 1 settimana fa • •

This title really bait me.

like this

in reply to selokichtli

partofthevoice

in reply to selokichtli • 1 settimana fa • •

Yeah, thought that was going the other way for a second.

in reply to partofthevoice

eldavi

in reply to partofthevoice • 1 settimana fa • •

ditto and it made me sad; i was afraid that the maintainers had become too ossified to embrace change.

ALIS via Technology

1 settimana fa • •

ALIS
1 settimana fa • •

The ALIS Codex: Learn. Survive. Connect.

ALIS cuts the noise: the game turns experience into skill and brings it back to real life.,, Connections. Our goal is to create connections between people and support their interaction in the real world.,, Resources. You learn to use resources effectively: water, food (real caloric value), sleep, injuries; energy drains by activity.,, Mechanics. Realistic mechanics with practical value - sense beyond the screen.,, Knowledge. A variety of useful information reinforced through gameplay as skills.,, Learn. Survive. Connect - we’re in your next decision.

#technology

reshared this

ALIS via Technology

1 settimana fa • •

ALIS
1 settimana fa • •

Why We Make ALIS: The Enemy Within

We accept the challenge - to create a world harsh and real down to the last detail, without killing the soul of the game.,, We expose the abyss of war’s tragedy and, with clear-eyed honesty, the depth of human grief, loneliness, distance.,, Our mission is to make ALIS a tool for growth that helps you better understand yourself, those around you, and life itself.,, May the project bring meaningful experiences and real connection.

#technology

reshared this

in reply to ALIS

muzzle

in reply to ALIS • 1 settimana fa (Ricevuto 4 giorni fa) • •

" Alis? Who the fuck is Alis?"

Smokie, probably

Questa voce è stata modificata (1 settimana fa)

return2ozma via politics

1 settimana fa • •

return2ozma
1 settimana fa • •

Eileen Higgins wins Miami mayoral runoff, breaking 30-year Democratic drought

Higgins defeated former city manager Emilio Gonzalez with 59% of the vote, pledging to tackle housing affordability, climate resilience, and restore trust at City Hall.

^{Doug Myers (CBS Miami)}

#politics

like this

Skavau via Television

1 settimana fa • •

Skavau
1 settimana fa • •

[Pluribus Spoilers] A distressing thought about Koumba and the hive...

The hive exist, or desire to please the survivors. However they want. Koumba has used this more than anyone else to his own advantage to live the life of a decadent, hedonistic and shallow playboy - roleplaying as James Bond and surrounding himself and having sex with women. Now, to me - this is very much - at the minimum - taking advantage of them. The women he's having sexual relations with are not who they were, and it is unlikely - even if the hive came to him and suggested it (as I suspect they did) - that the women before the joining would be remotely interested in doing this. They are not them. Who they were has been lobotomised, malformed and disappeared into the hive - segmented up into billions of bodies.

I've seen some people (not here, but elsewhere) suggest that this behaviour is okay because the hive is consenting. The women he's picking show enthusiastic and active consent. This to me is disgraceful, not just in the context of that - but also what could be the case if Koumba had different, darker interests.

Now the show will not address this (and rightfully so) - but it still seems true to me regardless of that. If Koumba was a pedophile, they would provide him with children he requested - and the children would provide active consent. Just like the women he picks now, they wouldn't be who they were. There is no concept of childhood or child innocence anymore. The hive literally can't say no unless it contradicts their survival or asks them to hurt others.

So to anyone who thinks the hive is a good thing (and some people actually do), or that Koumba is doing no wrong with what he's doing. This should be a point to consider.

Questa voce è stata modificata (1 settimana fa)

in reply to Skavau

adhocfungus

in reply to Skavau • 1 settimana fa • •

In theory they aren't individuals anymore, they are appendages. So there would be no issue with consent the same way you decide consent for your hand or mouth. In a sense your mouth consents because it is part of the you making that decision.

Except... If there were any chance your hand could separate from you and become an individual in the future it'd be immoral to use it for sex now. And Carol is already very confident that it's possible to reverse the Joining. But even if she wasn't it was always a possibility. So having sex with any of them is incredibly wrong, which should be obvious to anybody on a gut level.

return2ozma via politics

1 settimana fa • •

return2ozma
1 settimana fa • •

Project 2025 architects lay out 2026 policy vision

https://www.axios.com/2025/12/09/trump-china-project-2026-2025-policy-heritage-foundation-abortion

#politics

copymyjalopy likes this.

iturnedintoanewt via Linux

1 settimana fa • •

iturnedintoanewt
1 settimana fa • •

Konsole now prompts for passwords and other questions in pop-ups??

I mean, who thought of this as a good idea? I find it rather distracting. I'm trying to SSH into a computer and blam...a massive pop-up blocks me from reading what was before or anything else...just the pop-up in front, blocking text. It has the hidden password text field thing, but this one is to type yes/no to whether accept the server's cert. Y hit enter after typing yes...and blam, another pop-up, this one is for the actual password.

How can I disable these pop-up prompts? I want to be prompted as text, on the konsole main screen, as it always was. I haven't changed anything, because well, this is a brand new install. It started happening on a different computer and found it equally irritating.

Any idea how can I disable this? Thanks so much!

#linux

in reply to iturnedintoanewt

Ramin Honary

in reply to iturnedintoanewt • 1 settimana fa • •

It could be that a recent software update to Konsole or the environment variables which configure it, has it now using the ssh-askpass utility to prompt you for passwords. You can configure it to always prompt over the TTY of the parent process that executed the ssh-askpass command.

in reply to Ramin Honary

iturnedintoanewt

in reply to Ramin Honary • 1 settimana fa • •

Thanks. This is the first time I hear about this program, but it looks like it's indeed the one taking over the pw credentials. I tried unsetting the variables, and hopefully it will stop bugging after a reboot.

in reply to iturnedintoanewt

Eager Eagle

in reply to iturnedintoanewt • 1 settimana fa • •

check you SSH_ASKPASS and SSH_ASKPASS_REQUIRE variables

man.openbsd.org/ssh-add.1#ENVI…

ssh-add(1) - OpenBSD manual pages

^{man.openbsd.org}

BrikoX via Linux.zip

1 settimana fa • •

BrikoX
1 settimana fa • •

Linux Foundation aims to become the Switzerland of AI agents

An attempt to provide vendor-neutral oversight as the agent train barrels on

Linux Foundation aims to become the Switzerland of AI agents

: An attempt to provide vendor-neutral oversight as the agent train barrels on

^{Thomas Claburn (The Register)}

#linux

BrikoX via Rivian

1 settimana fa • •

BrikoX
1 settimana fa • •

Rivian is building its own AI assistant

The EV maker will likely share more details on its upcoming AI & Autonomy Day scheduled for December 11.

Rivian is building its own AI assistant | TechCrunch

The EV maker will likely share more details on its upcoming AI & Autonomy Day scheduled for December 11.

^{Kirsten Korosec (TechCrunch)}

#rivian

BrikoX via Entertainment

1 settimana fa • •

BrikoX
1 settimana fa • •

Wake Up Dead Man digs deep for a darker, more powerful Knives Out

Benoit Blanc shows his range.

Wake Up Dead Man digs deep for a darker, more powerful Knives Out

Wake Up Dead Man, the latest in the Knives Out murder mystery series, starts streaming on Netflix on December 12th.

^{Andrew Webster (The Verge)}

#entertainment

Basic Glitch via Technology

1 settimana fa • •

Basic Glitch
1 settimana fa • •

AI Surveillance Startup Caught Using Sweatshop Workers to Monitor US Residents

Bombshell new reporting from 404 Media found that Flock, which has its cameras in thousands of US communities, has been outsourcing its AI to gig workers located in the Philippines.

After accessing a cache of exposed data, 404 found documents related to annotating Flock footage, a process sometimes called “AI training.” Workers were tasked with jobs include categorizing vehicles by color, make, and model, transcribing license plates, and labeling various audio clips from car wrecks.

In US towns and cities, Flock cameras maintained by local businesses and municipal agencies form centralized surveillance networks for local police. They constantly scan for car license plates, as well as pedestrians, who are categorized based on their clothing, and possibly by factors like gender and race.

In a growing number of cases, local police are using Flock to help Immigration and Customs Enforcement (ICE) agents surveil minority communities.

It isn’t clear where all the Flock annotation footage came from, but screenshots included in the documents for data annotators showed license plates from New York, Florida, New Jersey, Michigan, and California.

Flock joins the ranks of other fast-moving AI companies that have resorted to low-paid international labor to bring their product to market. Amazon’s cashier-free “just walk out” stores, for example, were really just gig workers watching American shoppers from India. The AI startup Engineer.ai, which purported to make developing code for apps “as easy as ordering a pizza,” was found out to be selling passing human-written code as AI generated.

The difference with those examples is that those services were voluntary — powered by the exploitation of workers in the global south, yes, but with a choice to opt out on the front-end. That isn’t the case with Flock, as you don’t have to consent to end up in the panopticon. In other words, for a growing number of Americans, a for-profit company is deciding who gets watched, and who does the watching — a system built on exploitation at either end.

AI Surveillance Startup Caught Using Sweatshop Workers to Monitor US Residents

The powerful surveillance startup Flock was caught using workers in the Philippines to collate data on US residents.

^{Joe Wilkins (Futurism)}

#technology

like this

reshared this

in reply to Basic Glitch

myfunnyaccountname

in reply to Basic Glitch • 1 settimana fa (Ricevuto 4 giorni fa) • •

Noticing a trend. You had Amazon use sweatshop workers for their shopping by camera thing. You had that AI company that was just like 400 people in a sweatshop typing away. Now this.

in reply to myfunnyaccountname

Basic Glitch

in reply to myfunnyaccountname • 1 settimana fa (Ricevuto 4 giorni fa) • •

I mean, there is actual "AI" tech that exists, and isn't just people working in sweatshops, like this:
deeplabcut.github.io/DeepLabCu…

It's just kind of difficult to get consistency between trials, and reliability seems to boil down to completely eliminating variability. So kind of useless outside of a lab setting (as is).

I tend to feel like it's more trouble than it's worth and too unreliable (as is) to usually bother with it, but I know people who are just fellow lab rats (not broligarchs) and are super devoted to getting AI to work for their projects. Like most sectors in this country, even science is being forced to embrace AI. Regardless of if it actually makes sense for your line of work or not, the expectation is get it working or face the chopping block, and there are definitely people who are trying their hardest to really get this shit off the ground (because the alternative is be prepared to be out of a job for being obsolete).

This is also why it's kind of surprising to learn that even "AI" that's simply comparing license plates from one camera to the next, is actually just due to human slave labor.

So, do any of the broligarchs receiving these huge contracts actually believe that eventually they'll get AI to work once enough data and money is dumped into it and the little people at the bottom figure out all the kinks for them?

Or is it just that everybody at the top acknowledges this is a dead end, but once you're in the secret club at the top of the food chain, and you're making ridiculous amounts of money, your incentive is just to keep your mouth shut, keep making money, and fuck the consequences because once society collapses you'll get to be kings of your own little monarchs anyway?

If it is the second, and nobody at the top really believes AI is going anywhere, then what are all the giant, energy sucking data centers that are being built across the country actually for?

Welcome! 👋 — DeepLabCut

^{deeplabcut.github.io}

in reply to Basic Glitch

Diurnambule

in reply to Basic Glitch • 1 settimana fa (Ricevuto 4 giorni fa) • •

You thing too big. IA is already used and work well in tool like n8n. Where you use it to write 3-5 lines of code to fill a function box.
Still have to think to coordinates actions but the coding is mostly done by IA.

Questa voce è stata modificata (1 settimana fa)

in reply to Diurnambule

Basic Glitch

in reply to Diurnambule • 1 settimana fa (Ricevuto 4 giorni fa) • •

But if the broligarchs don't actually expect to ever get any of this "AI" shit actually working, then what is the end game?

Obviously the majority of people are only in it to make quick money, but what about the psychos at the very top who are directing policy and building these giant nuclear powered "AI" data centers?

If Thiel/Musk/Zuckerberg don't actually have the expectation that "AI" will eventually work itself out, then it won't matter how money the rich (but not broligarch rich) Wall Street bros and bankers dumped into the "AI" boom.

It won't be like the .com boom and the Internet, because it doesn't actually exist. If the economy completely collapses, and dollar becomes worthless currency, the "money" the average rich asshole hoards away after investing in the 2025 "AI" boom, will have about as much value as monopoly money.

Meanwhile the fucking Bond villain billionaires like Thiel (who have been dreaming of this exact scenario for over 20 years) hold all resources (including a recently purchased uranium mine).

So, "hypothetically," if that was Thiel's endgame, and the "AI" jig is up, then they no longer have to pretend they're trying to develop artificial intelligence or AGI. But they do already hold control of most resources, have mass surveillance capabilities, and each broligarch owns one or more of these giant supercomputers/data centers that have been built in cities all over the ~~U.S.~~ world and soon in outer space.

In this totally fictional scenario, once the dollar collapses (likely followed by all of society collapsing along with it), what do the broligarchs actually use their giant nuclear powered "AI" data centers for?

AI or no AI, they're currently being built all over the country, so what is their actual purpose?

Questa voce è stata modificata (1 settimana fa)

in reply to Basic Glitch

zebidiah

in reply to Basic Glitch • 1 settimana fa (Ricevuto 4 giorni fa) • •

AI = actually Indians

Jack_Burton via Linux

1 settimana fa • •

Jack_Burton
1 settimana fa • •

Had an issue with an update and had no networl access after reboot. How many kernals can be available in grub?

Still pretty new to Linux, I'm on Ubuntu Studio 24.04 LTS and had some issues with updates through the updater with errors and so I did sudo apt update/upgrade instead. Something went wrong and had errors, and after a reboot I had no internet access, Ethernet or WiFi, and no options to connect to anything. Running sudo lshw -c network showed unclaimed networks.

In case anyone has a similar issue, I fixed it by:
1. Reboot, spam shift to get into grub
2. Advanced options
3. Recovery mode for the lower number kernel
4. Enable networking
5. Fix broken packages

My question is about number 3. There were 4 kernel options, 2 normal with a recovery for each (I can't remember the specifics but one had 37 and the other 36). I selected recovery 36 as it was the older kernel. Is that amount of options (2 for each kernel) normal or can I create more? Like 37, 36, 35, 34, etc.

I was in panic mode since this PC is for work, and thought it might be nice to have more older kernel options if possible. I've also learned my lesson and am currently running Timeshift.

#linux

in reply to Jack_Burton

HelloRoot

in reply to Jack_Burton • 1 settimana fa • •

If the partition where your OS stores boot images at is large enough, you can have practically infinitely many kernels in grub.

Some distros store those in a boot partition. Some store it in the root partition subdir. I don't know about ubuntu tbh.

I once had a 2gb boot partition and I needed to add a graphics stack to the boot image so I could use a touchscreen keyboard during boot to enter a LUKS password. That made a single kernel image over 1gb, so I could only have one...

Questa voce è stata modificata (1 settimana fa)

in reply to HelloRoot

Jack_Burton

in reply to HelloRoot • 1 settimana fa • •

Interesting thanks. I'll look into it more.

in reply to Jack_Burton

rhythmisaprancer

in reply to Jack_Burton • 1 settimana fa • •

It's been a long time since I used Ubuntu, but at the time I did I recall running into issues keeping too many old kernels. They were stored in a fixed space folder (or maybe partition?) that was like 100MB and sometimes wouldn't clear out automatically, so I remember this. May not be relevant now, but if it is, space in the storage folder is the limiting factor so you would need to change that. If it IS a partition, then you would need to deal with all that is involved with that.

edited to add that my current OS only stores three or four as well. I have never really dived into it.

Questa voce è stata modificata (1 settimana fa)

in reply to rhythmisaprancer

Jack_Burton

in reply to rhythmisaprancer • 1 settimana fa • •

Huh, I certainly don't want to cause more issues haha. I've got timeshift setup now so hopefully if it or similar happens again and I can't get it running the kernel way I can just use that. Thanks.

yazomie via Linux

1 settimana fa • •

yazomie
1 settimana fa • •

The Quest for Reasonably Secure Operating Systems

TL;DR - About switching from Linux Mint to Qubes OS from among various other options that try to provide security out-of-the-box (also discussed: OpenBSD, SculptOS, Ghaf, GrapheneOS)

The Quest for Reasonably Secure Operating Systems

I never worried on Windows about security as much as I should have, it just so happens I've been lucky to have never been hit with ransomware. By the time...

^{yazomie > tech}

#linux

Questa voce è stata modificata (1 settimana fa)

like this

in reply to yazomie

Lonewolfmcquade

in reply to yazomie • 1 settimana fa • •

I find it odd that the author didn't mention secureblue at all. I wonder why they didn't consider that option?

in reply to Lonewolfmcquade

yazomie

in reply to Lonewolfmcquade • 1 settimana fa • •

I actually forgot to mention it, but I was going to say anyway that sandboxing I deem less ideal than paravirtualization

in reply to yazomie

Lonewolfmcquade

in reply to yazomie • 1 settimana fa • •

I don't know anything about that but it sounds interesting. If you have any sources for further reading about sandboxing vs paravirtualization, I'd like to read up on it

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

What I want out of a secure Linux (or BSD) system is full (top-to-bottom) sandboxing of all components to enforce least privilege. I am want to learn how to make my own distro (most likely for personal use) which uses strong SELinux policies, in conjunction with syd-3 sandboxing, which seems like the most robust and feature rich, unprivileged sandbox in both the Linux/BSD worlds (also it's totally in safe Rust from what i can tell).

Another thing that I would love to make is a drop-in replacement for Flatpak that is backwards compatible but uses syd-3 instead. It has much better exploit protections than Bubblewrap, and is actually an OOTB secure sandbox. I dont know much about the internals of Flatpak, or how to use xdg-desktop-portal, but I am going to start more simple with a Bubblejail alternative. One major advantage of syd is that you can modify an already running sandbox, so theoretical you could show a popup that says something like "App1 is requesting microphone access.", where you could toggle on without needing to restart the app.

Need to get better at coding tho lol

in reply to N.E.P.T.R

iopq

in reply to N.E.P.T.R • 1 settimana fa • •

You can try to just make a hardened NixOS config. The only requirement is systemd to use NixOS options. Other components you can freely interchange.

in reply to iopq

sudoer777

in reply to iopq • 1 settimana fa • •

I'm not very good at securing Linux, but from what I've seen, NixOS leaves a lot to be desired. It doesn't officially support SELinux and requires a lot of work to make it function properly. It supports other mandatory access control programs, which I'm not really sure how they compare. The store being world readable is another problem. The most obvious issue with that is if you're doing business work with two clients on the same computer where infrastructure needs to remain confidential, where one client's programs can read the store and see information about the other clients, even on separate user accounts.

Questa voce è stata modificata (1 settimana fa)

in reply to sudoer777

iopq

in reply to sudoer777 • 1 settimana fa • •

I think the preferred approach is AppArmor because SELinux is not supported on immutable distros. I'm not a security expert either, but I would not share environments between two clients at all, I would put them in separate VMs

in reply to iopq

aaravchen

in reply to iopq • 1 settimana fa • •

SELinux is used on all the Fedora Immutable distros, and the OpenSUSE Immutable distro.
It's actually much easier to do SELinux in Immutable distros in a lot of ways than non-immutable. Especially the bootc-style ones where even more of the system is defined and prebuilt before deployment.

AppArmor is OK, but the whole issue is that you have to know what to throw into it. That's also its benefit, you can focus in the high risk things and ignore the low risk things. It keeps expanding profiles more and more though, and ironically the ultimate destination is everything being under MAC.

in reply to aaravchen

iopq

in reply to aaravchen • 1 settimana fa • •

Well, that's because it's a first party solution. From NixOS point of view SELinux is mutating the store which is forbidden

in reply to N.E.P.T.R

yazomie

in reply to N.E.P.T.R • 1 settimana fa • •

I'm all for a better Flatpak, but I'm on the fence with full-on usage of Rust, I'd wait for there to be a second Rust compiler. Otherwise, sandboxing might be enough for some users, but not exactly for me.

in reply to yazomie

moonpiedumplings

in reply to yazomie • 1 settimana fa • •

Syd3, and gvisor, a similar project in go aren't really sandboxes but instead user mode emulation of the linux kernel. I consider them more secure than virtual machines because code that programs run is not directly executed on your cpu.

Although syd3 doesn't seem to emulate every syscall, only some, I know rhat gvisor does emulate every syscall.

If you compare CVE's for gvisor and CVE's for xen/kvm, you'll see that they are worlds apart.

Xen has 25 pages: app.opencve.io/cve/?vendor=xen

Gvisor has 1: app.opencve.io/cve/?q=gvisor

Now, gvisor is a much newer product, but it is still a full 7 years old compared to xen's 22 years of history. For something that is a third of the age, it has 1/25th of the cve's.

There is a very real argument to be made that the hardened openbsd kernel, when combined with openbsd's sandboxing, is more secure than xen, which you brought up.

Xen CVEs and Security Vulnerabilities - OpenCVE

Explore the latest vulnerabilities and security issues of Xen in the CVE database

^{app.opencve.io}

Questa voce è stata modificata (1 settimana fa)

in reply to moonpiedumplings

yazomie

in reply to moonpiedumplings • 1 settimana fa (Ricevuto 6 giorni fa) • •

I could use gvisor inside distrobox inside an appVM in Qubes, couldn't I?

Many CVE's for Xen were discovered and patched by the Qubes folks, so that's a good thing...

As for OpenBSD, I thought I mentioned in the blog post that I'm intending to use it as sys-net VM inside Qubes if not as HVM alongside my Linux appVMs, for when I need Linux. The best of both worlds, so to say.

in reply to yazomie

moonpiedumplings

in reply to yazomie • 6 giorni fa • •

to answer your first question, kind of. Gvisor (by google btw) uses the linux kernels sandboxing to sandbox the gvisor process itself.

Distrobox also uses the linux kernels sandboxing, which is how linux based containers work.

Due to issues with the attack surface of the linux's kernels sandboxing components, the ability to create sandboxing or containers inside sandboxes or containers is usually restricted.

What this means is that to use gvisor inside docker/podman (distrobox) you must either loosen the (kinda nonexistent) distrobox sandbox, or you must disable gvisors sandboxing that it applies to itself. You lose the benefit, and you would be better off just using gvisor alone.

It's complicated, but basically the linux's kernels containers/sandboxing features can't really be "stacked".

Linux | Madaidan's Insecurities

^{madaidans-insecurities.github.io}

in reply to moonpiedumplings

yazomie

in reply to moonpiedumplings • 6 giorni fa • •

Oh, good to know... In other words, sandboxing is not the best practice on Linux... So I'm better off with Qubes than with Secureblue

in reply to yazomie

moonpiedumplings

in reply to yazomie • 6 giorni fa • •

sandboxing is not the best practice on Linux… So I’m better off with Qubes than with Secureblue

No, no, no.

It's no that sandboxing is the best practice, it's just that attempting to "stack" linux sandboxes is mostly ineffective. If I run kvm inside xen, I get more security. If I run a linux container inside a linux container, I only get the benefit of one layer. But linux sandboxes are good practice.

I do agree that secureblue sucks, but I don't understand your focus on Qubes. To elaborate on my criticisms let me explain, with a reply to this comment:

Many CVE’s for Xen were discovered and patched by the Qubes folks, so that’s a good thing…

If really, really care about security, it's not enough to "find and patch CVE's". The architecture of the software must be organized in such a way that certain classes of vulnerabilities are impossible — so no CVE's exist in the first place. Having a lack of separation between different privilege levels turns a normal bug into a critical security issue.

Xen having so many CVE's shows that is has some clear architectural flaws, and that despite technically being a "microkernel", the isolation between the components is not enough to prevent privilege isolation flaws.

Gvisor having very few CVE's over it's lifespan shows it has a better architecture. Same for OpenBSD — despite having a "monolithic" kernel, I would trust openbsd more in many cases (will elaborate later).

Now, let's talk about threat model. Personally, I don't really understand your fears in this thread. You visited a site, got literally jumpscared (not even phised), and are now looking at qubes? No actual exploit was done.

You need to understand that the sandboxing that browsers use is one of the most advanced in existence currently. Browser escapes are mostly impossible... mostly.

In addition, you need to know that excluding openbsd, gvisor, and a few other projects almost all other projects will have a regular outpouring of CVE's at varying rates, depending on how well they are architectured.

Xen is one of those projects. Linux is one of those projects. Your browser is one of those projects. Although I consider Linux a tier below in security, I consider Xen and browsers to exist at a similar tier of security.

What I'm trying to say, is that any organization/entity that is keeping a browser sandbox escape, will most definitely have a Linux privilege escalation vulnerability, and will probably also have a Xen escape and escalation vulnerability.

The qube with the browser might get compromised, but dom0 would stay safely offline, that’s my ideal, not the utopic notion of never possibly getting attacked and hacked.

This is just false. Anybody who is able to do the very difficult task of compromising you through the browser will probably also be able to punch through Xen.

not the utopic notion of never possibly getting attacked and hacked.

This is true actually. Browser exploits are worth millions or even tens of millions of dollars. And they can only really be used a few times before someone catches them and reports them so that they are patched.

Why would someone spend tens of millions of dollars to compromise you? Do you have information worth millions of dollars on your computer? It's not a "utopic notion", it's being realistic.

If you want maximum browser security, ~~disable javascript~~ use chromium on openbsd. Chromium has slightly stronger sandboxing than firefox, although chromium mostly outputs CVE's at the same rate as firefox. Where it really shines, is when combined with Openbsd's sandboxing (or grapheneos' for phones).

Sure, you can run Xen under that setup. But there will be no benefit, you already have a stronger layer in front of Xen.

TLDR: Your entire security setup is only actually as strong as your strongest layer/shield. Adding more layers doesn't really offer a benefit. But trying to add stronger layers is a waste of your time because you aren't a target.

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

I am excited to see Chimera Linux mature because iy seems like a distro which prioritizes a simple but modern software stack.

Features of Chimera that I like include:
- Not run by fascists
- Not SystemD (dinit)
- Not GNU coreutils (BSD utils)
- Not glibc (musl)
- Not jemalloc (mimalloc)
- Proper build system, not just Bash scripts in a trenchcoat

What I would like:
- MAC (SELinux)
- Switch to Fish over Bash (because it is a much lighter codebase)
- Switch from mimalloc to hardened_malloc (or mimalloc built with secure flag). Sadly hardened_malloc is only x64 or aarch64
- Hardened sysctl kernel policy

Chimera Linux

^{Chimera Linux}

in reply to N.E.P.T.R

Kajika

in reply to N.E.P.T.R • 1 settimana fa • •

What are the pros/cons of GNU coreutils vs BSD utils?

EDIT : from their website : Desktop environment -> GNOME. What a choice, not for me.

Questa voce è stata modificata (1 settimana fa)

in reply to Kajika

yazomie

in reply to Kajika • 1 settimana fa • •

GNOME is just the default, there's also KDE and no-GUI options if I'm not mistaken

in reply to Kajika

LeFantome

in reply to Kajika • 1 settimana fa • •

First, I use either Niri or KDE Plasma on Chimera Linux. Both are just an “apk add” away. You do not have to use GNOME. There is even a KDE live image so you do not even have to run GNOME once to install if you do not want.

I really like the BSD utils and have come to prefer them. Well written. Sleek. Well documented. The man pages are a walk through UNIX history. They feel “right” to me.

That said, the BSD userland is frequently a pain when interacting with the rest of the Linux universe. You cannot even build a stock kernel.org kernel without running into compatibility problems. The first time I built the COSMIC desktop on Chimera, I had to edit a dozen files to make them “BSD” compatible.

Sed, find, tar, xargs, and grep have all caused me problems. And you need bash obviously. But bash is no big deal because it has a different name.

The key GNU utils are available in the Chimera repos. But you get files named gfind, gtar, gxargs, gsed, etc. so scripts will not find them.

You often have to either add the ‘g’ to the beginning of utilities in scripts or edit the arguments to work with the BSD versions.

I mean, most things are compatible and I bet most of the command-line switches you actually use will work with the BSD utils. But I would be lying if I did not say third-party scripts are a hassle.

If I could do Chimera all over again, I would make it bsdtar and bsdsed (or bsed maybe) for the BSD versions.

Maybe the regular names could be symlinks with sed pointing to bsdsed by default but you could point it to gsed instead of you want. The system Chimera scripts and tools could use the longer names (eg. bsdsed) instead of the symlinks. The GNU tools could be absent by default like they are now. That would be the best of both worlds. The base system would have the advantages of the BSD tools (like easier builds as outlined on the Chimera site), the system could be GNU free if you want, and you could have a system that actually works out of the box more often with third-party scripts.

It pains me to say this. I would prefer not to use the GNU stuff but the GNU tools are the de facto standard on Linux and many, many things assume them. No wonder UUtils aims for 100% compatibility.

Anyway, even with what I say above, Chimera is my favourite distro. The dev can be a little prickly, but they do nice work.

Questa voce è stata modificata (1 settimana fa)

in reply to LeFantome

Oinks

in reply to LeFantome • 1 settimana fa • •

The GNU utils vs BSD utils issue should be easy to work around with a bit of symlinking and PATH modification:

> type find
find is /bin/find

> type gfind
gfind is /usr/local/bin/gfind

> sudo mkdir -p /usr/local/opt/gnuutils/bin/
> sudo ln -s /usr/local/bin/gfind /usr/local/opt/gnuutils/bin/find

> PATH="/usr/local/opt/gnuutils/bin:$PATH" type find
find is /usr/local/opt/gnuutils/bin/find

or in script form:

\#!/bin/sh
# install as /usr/local/bin/gnu-run
# invoke as gnu-run some-gnu-specific-script script-args
export PATH="/usr/local/opt/gnuutils/bin:$PATH"
exec "$@"

/usr/local/opt/... is probably not the best place to put this but you get the idea, you can make it work with POSIX tools. I don't know that much about Chimera Linux but I'd be very surprised if nobody has thought of doing this systematically, e.g. as part of a distributable package.

Questa voce è stata modificata (1 settimana fa)

in reply to Oinks

LeFantome

in reply to Oinks • 1 settimana fa • •

Thank you for the suggestion. I am ashamed to confess that a temporary PATH variable had not occurred to me.

I first ran into these issues creating package templates. Chimera has a beautiful package build system where packages get built in containers and source code gets downloaded into the container and and built against a clean environment. As you point out, creating a package that creates the symlinks as a dependency (along with the GNU utils) could be a viable approach here. Maybe even just in /usr/local. The GNU utils get installed to /usr/bin in Chimera and the container gets recycled for every new package. The distro would never accept such hacky packages but I can use them myself.

For just generally working in the distro at the command-line, your temporary path idea could work well.

Thanks again. I appreciate it!

in reply to N.E.P.T.R

yazomie

in reply to N.E.P.T.R • 1 settimana fa • •

Chimera is a nice alternative to Alpine, have you thought of sending this feedback to Chimera's dev?

in reply to yazomie

N.E.P.T.R

in reply to yazomie • 1 settimana fa • •

I thought about it (and I might still) but the project is still in beta and implementing sysctl and MAC would slow everything down development-wise. Switching to Fish would be easy and cool though.

Questa voce è stata modificata (1 settimana fa)

in reply to N.E.P.T.R

LeFantome

in reply to N.E.P.T.R • 1 settimana fa • •

Chimera Linux is great. APK and cports are so good I cannot imagine going back to anything else.

Bash is not the default shell though. Chimera uses the Almquist Shell from FreeBSD. Other Linux distros have “dash” which is basically an Almquist variant.

Almquist is lighter than fish and fish is not POSIX compatible.

Bash is available in the Chimera Linux repos of course and is required for many common scripts.

“Not run by fascists”. Sometimes I wonder.

in reply to yazomie

Jay🚩

in reply to yazomie • 1 settimana fa • •

ironclad-os.org/

Ironclad

Ironclad is a free software formally verified kernel written in SPARK/Ada

^{ironclad-os.org}

in reply to Jay🚩

yazomie

in reply to Jay🚩 • 1 settimana fa • •

Thanks, Ironclad and Gloire look interesting for a RISC-V system, gonna try out at some point alongside CheriBSD

in reply to yazomie

marcie (she/her)

in reply to yazomie • 1 settimana fa • •

I think Secureblue + GrapheneOS are the most reasonable choices imo. Qubes is highly hardware intensive for what it does, it will frustrate most people.

in reply to marcie (she/her)

peskypry

in reply to marcie (she/her) • 1 settimana fa • •

Not only is it resource‑intensive, but Qubes also lacks Secure Boot and Wayland support. Secure Boot is critical to ensure the OS has not been tampered with, and Wayland is required to isolate individual apps running within a single VM from capturing input intended for other apps. For an average user, I would recommend SecureBlue rather than Qubes.

in reply to peskypry

yazomie

in reply to peskypry • 1 settimana fa • •

AppVMs are isolated in Qubes even without the help of Wayland

in reply to peskypry

dXq9dwg4zt

in reply to peskypry • 1 settimana fa • •

Qubes OS has an Anti-Evil Maid option that is far, far better than signed boot.

in reply to marcie (she/her)

yazomie

in reply to marcie (she/her) • 1 settimana fa • •

It works decently with just 8 GB RAM, and I'm going to upgrade the RAM.

Secureblue is based on sandboxing rather than paravirtualization, and I'm not sure that's secure enough for me.

in reply to yazomie

marcie (she/her)

in reply to yazomie • 1 settimana fa • •

I do agree it's likely more secure, but the tradeoff for common use cases (gaming, development) is steep. I could see using it solely for browsing and messaging people

You can also just slot secure blue into a qube I believe

Questa voce è stata modificata (1 settimana fa)

in reply to yazomie

non_burglar

in reply to yazomie • 1 settimana fa • •

I don't understand... Your motivation for a secure operating system was from an incident where you were nearly social engineered? How will a "more secure" os help you with that?

in reply to non_burglar

yazomie

in reply to non_burglar • 1 settimana fa • •

How is using disposable VMs in Qubes not going to help?

in reply to yazomie

non_burglar

in reply to yazomie • 1 settimana fa • •

You aren't going to like this:

Because if you got yourself pwned by a malicious link in discord, your account highjacked, etc., then having discord in a vm, container, chroot, jail, or whatever won't help you on the server-side api abuse that got you pwned. In this case, you yourself should have been more vigilant.

From your article, and with respect, I think its nice you're thinking more about security, but you're mixing up quite a few concepts, and you should probably make smaller moves toward security that you actually understand, instead of going all-in on qubes with only a vague concept of the difference between sandboxing and paravirtualization.

in reply to non_burglar

mub

in reply to non_burglar • 1 settimana fa • •

Slightly harsh but that is the truth of it. Improving the walls and doors will help, but if the guard on the door can be convinced to admit an uninvited guest then the physical security will have much harder time protecting your data. The weakest part of any security system is the people.

in reply to mub

non_burglar

in reply to mub • 1 settimana fa • •

Yep.

I was hoping not to sound too harsh, I'll have to work on that.

in reply to non_burglar

youmaynotknow

in reply to non_burglar • 1 settimana fa • •

As long as it's factual harsh is even welcome.

in reply to mub

KubeRoot

in reply to mub • 1 settimana fa • •

The weakest part of any security system is the people.

Well, maybe not any, but most ;D

in reply to yazomie

mybuttnolie

in reply to yazomie • 1 settimana fa • •

i have this well guarded city with big walls and tough gates. oh hey look someone is gifting me a big wooden horse, send them in!
edit: thought i was funny but it sounds mean now. but i know how you feel, i got pwned once like 10y ago and they sent spam from my skype...

Questa voce è stata modificata (1 settimana fa)

in reply to non_burglar

sudoer777

in reply to non_burglar • 1 settimana fa • •

More secure OSes limit what social engineering attacks can take place and what damage they can do.

in reply to sudoer777

non_burglar

in reply to sudoer777 • 1 settimana fa • •

OK, I'll bite... How exactly?

in reply to non_burglar

MouldyCat

in reply to non_burglar • 1 settimana fa • •

often social eng attacks rely on a vulnerability as well e.g. getting your mark to open an Excel file that exploits a vulnerability in MS Office.

in reply to MouldyCat

non_burglar

in reply to MouldyCat • 1 settimana fa • •

Sure, but if the compromise stays within its own app, like for a browser, sandboxing won't help.

The bulk, and I mean like 95% of the compromises I see are normal employees clicking on things that "look legit".

Excel is now wrapped in a browser. Discord, almost all work apps are all wrapped in a browser. So you can be completely locked down between apps like grapheneos, but if you are choosing to open links, no amount of sandboxing is going to save you.

This is why we deploy knowbe4 and proofpoint, cause people are a liabilities, even to themselves.

Questa voce è stata modificata (1 settimana fa)

in reply to non_burglar

FoundFootFootage78

in reply to non_burglar • 1 settimana fa • •

Clicking on things that look legit is a critical part of interaction with computers. Programs should not be installed unintentionally, so first and foremost Office Macros should not be enabled by default (and eventually Microsoft did disable them).

Recently I think the main avenue for malware is to send a PDF with a fake popup for an update, that links to a phishing site and prompts you to download an exe with malware. That kind of thing is a harder issue to solve, but at the very least an OS should probably not let that program update your BIOS.

in reply to non_burglar

sudoer777

in reply to non_burglar • 1 settimana fa • •

One example is on GrapheneOS, programs can't touch system files due to no root access, and they also can't access data files for other programs.

Questa voce è stata modificata (1 settimana fa)

in reply to sudoer777

non_burglar

in reply to sudoer777 • 1 settimana fa • •

Sure, but op chose to follow a link. You can be sandboxed to high heaven and still get pwned if you make choices like that. Discord is particularly rife with this.

in reply to non_burglar

sudoer777

in reply to non_burglar • 1 settimana fa • •

Yes, but I never said you won't get pwned. I said that it would limit how it could be done and what damage it could do.

For instance, if you click a link and download something shitty, it can't just steal your auth tokens on GrapheneOS because all of that is isolated to only the program that uses them. Meanwhile on Windows/Linux there are tons of Python scripts that do that. It would take extra steps on GrapheneOS for someone to use social engineering to hack someone's Discord/Bank/etc account, which could be enough to prevent it for some people.

Questa voce è stata modificata (1 settimana fa)

in reply to yazomie

fruitycoder

in reply to yazomie • 1 settimana fa • •

Another step up is the confidential computing project. Requires hardware that supports it though, which sucks, but takes the virtual hardware concept and adds multi key memory encryption on top.

Remember though security without a threat model is just paranoia, so what level of hoops and investment you need really depends on what your threats actually look like.

I personally love containers and Macsec. It limits most of my concerns. I want to mess with confidential containers next, which is to say lightweight VMs in containers with memory encryption set, but thats all future to me. The irony is that I then I have to figure out attestation better for those machines since from the host they are black boxes.

in reply to yazomie

FoundFootFootage78

in reply to yazomie • 1 settimana fa • •

What did clicking on the cloudflare button actually do? As far as I know just clicking on a link shouldn't give you malware.

birdwing via Privacy

1 settimana fa • •

birdwing
1 settimana fa • •

iOS 26 doesn't offer privacy settings at all for "Home" app

It appears that even if you don't have the app installed, it is in Settings > Apps. But there's no option at all, to customise its privacy settings.

Downloading the app also doesn't let you customise its privacy settings. In fact, the app then disappears altogether from the privacy settings! It doesn't even appear anymore in the "Hidden Apps". Removing it again however, shows the app popping up again in the settings.

What's more, it's deliberately erroneously labelled as "Start Screen" when you don't have downloaded it.

Ridiculous. One more reason to go to a Fairphone or something like it.

However, you can edit it... but very cumbersomely, only by going to Settings > Siri > App Access ... and then suddenly, you see the app!

This seems like it's straight up illegal.

#privacy

Questa voce è stata modificata (1 settimana fa)

in reply to birdwing

Irdial

in reply to birdwing • 1 settimana fa • •

If by “privacy settings” you mean controlling what system permissions the Home app has, you’re out of luck. It’s a semi-default app and may be more deeply embedded into iOS than is apparent.

If you’re trying to control what other apps have access to HomeKit data, you can find that in Privacy & Security.

in reply to birdwing

lionracers

in reply to birdwing • 1 settimana fa • •

I guess I’m confused. I can control what apps and services have access to the home data.

ɔiƚoxɘup via Technology

1 settimana fa • •

ɔiƚoxɘup
1 settimana fa • •

Man Charged for Wiping Phone Before CBP Could Search It

So I guess the solution to this is to backup your phone to someplace safe, wipe it, and then restore it when you get to your destination... WTF!

#technology

adhocfungus likes this.

don't like this

Blastboom Strice via Technology

1 settimana fa • •

Blastboom Strice
1 settimana fa • •

[2024-10-27] OpenZFS new deduplication mechanism and why you still may not want to use it

OpenZFS deduplication is good now and you shouldn't use it

OpenZFS 2.3.0 will be released any day now, and it includes the new “Fast Dedup” feature. My team at Klara spent many months in 2023 and 2024 working on it, and we reckon it’s pretty good, a huge step up from the old dedup as well as being a solid ba…

^{despair labs}

#technology

pelespirit via Politics

1 settimana fa • •

pelespirit
1 settimana fa • •

Florida governor designates Muslim rights group as terrorist organization

Florida Governor Ron DeSantis signed an executive order designating one of the country’s most prominent Muslim civil rights groups, the Council on American-Islamic Relations, as a “foreign terrorist organization,” becoming the second high-profile Republican governor to do so in recent weeks.

CAIR's Florida chapter announced a lawsuit challenging the order at a Tuesday press conference in Tampa, where Hiba Rahim, the chapter's interim executive director, called the order "defamatory and unconstitutional."

The U.S. government has not designated CAIR or the Muslim Brotherhood as foreign terrorist organizations, but President Donald Trump last month began the process of doing so for certain Muslim Brotherhood chapters, such as those in Lebanon, Egypt and Jordan.

The Florida order instructs agencies to take action to prevent CAIR from receiving any state contracts, employment or funding.

CAIR was founded in 1994 and has chapters in nearly two dozen U.S. states.

https://www.reuters.com/world/us/florida-governor-designates-muslim-rights-group-terrorist-organization-2025-12-09/

#politics

ekZepp via memes

1 settimana fa • •

ekZepp
1 settimana fa • •

Shocking

Source - imgur.com/gallery/just-waterin…

#memes

essell likes this.

in reply to ekZepp

Damage

in reply to ekZepp • 1 settimana fa • •

dude over there watering his sidewalk

pelespirit via Politics

1 settimana fa • •

pelespirit
1 settimana fa • •

Army begins to reshape its acquisition enterprise along portfolio lines

“We will leverage taxpayer dollars in a more accountable, flexible and deliberate manner to maximize their value across capability portfolios,” Defense Secretary Pete Hegseth said during an address at the National War College. “We will shift funding within portfolios’ authorized boundaries swiftly and decisively to maximize mission outcomes. If one program is faltering, funding will be shifted within the portfolio to accelerate or scale a higher priority. If a new or more promising technology emerges, we will seize the opportunity and not be held back by artificial constraints and funding boundaries that take months or even years to overcome.”

In that address, Hegseth credited the military services with laying the groundwork for some of the reforms he wants to make department-wide. And the Army started its implementation work last month, naming six new “portfolio acquisition executives.” Each of those PAEs will oversee different “capability areas” with programs managed by what had, up until now, been called program executive offices (PEOs), and will now be called capability program executives (CPEs).

Army begins to reshape its acquisition enterprise along portfolio lines

Former program executive offices are starting to realign their organizations under the new "capability portfolio executive" construct.

^{Jared Serbu (Federal News Network)}

#politics

ActivityPub - Collegamento all'originale

Octt via Blogs

1 settimana fa • •

Octt
1 settimana fa • •

(ADC) “Smartphone, dopamina e dipendenza: il mio ESPERIMENTO di 7 Giorni”

Caspiterina, De Concimi ha cacciato fuori questo esperimentino pazzo 2 settimane fa e io me l’ero perso… l’ho scoperto solo stasera per caso: 1 settimana senza lo smarfonino (o smarfonone, nel suo caso) per capire se è possibile vivere senza. Non tanto in senso di pratica universale del mondo, perché purtroppo al giorno d’oggi l’avere […]

octospacc.altervista.org/2025/…

minioctt

2025-12-09 22:27:17

(ADC) “Smartphone, dopamina e dipendenza: il mio ESPERIMENTO di 7 Giorni”

youtube.com/watch?v=yKM4mMAxtE…
Caspiterina, De Concimi ha cacciato fuori questo esperimentino pazzo 2 settimane fa e io me l’ero perso… l’ho scoperto solo stasera per caso: 1 settimana senza lo smarfonino (o smarfonone, nel suo caso) per capire se è possibile vivere senza. Non tanto in senso di pratica universale del mondo, perché purtroppo al giorno d’oggi l’avere ed usare costantemente uno smartphone è qualcosa di praticamente forzato dall’esterno, sia dalla società che per certi versi dagli Stati, e con ogni anno che passa la possibilità di poter rimanere senza in tal misura si fa sempre più sottile, quindi non è questo il punto del video… Il suo discorso è più che altro sull’abitudine, la dipendenza, e queste minchiatine qui. 😳
È un caso spassoso che, come la sua sfida sia stata di 1 settimana, così io stasera — dopo aver trovato appunto per caso questo video, che credo abbia qualche spuntino di riflessione, e quindi mi è venuta la voglia di postare — stia scrivendo qui dopo 1 settimana intera che non tocco il fritto misto… E beh, di un caso si tratta, perché io non ho affatto mandato a fanculo il telefono, ma semplicemente sono evidentemente a corto di olio, quindi è difficile friggere. (In altre parole, l’anedonia mi distrugge, e quindi col piffero che esce qualcosa da scrivere qui, di lungo e sensato… ma, anche oggi pomeriggio ho applicato il mio fix vietato, e dunque stasera ho la voglia di fare le cose, che wow… però non divaghiamo.) 🙏
Lui avrebbe voluto fare proprio una settimana senza Internet, ma non è riuscito a giustificare il prendersi una settimana di ferie (che sarebbe la conseguenza logica di una tale scelta per lui, visto che il suo lavoro non è raccogliere i pomodori), quindi ha ripiegato sul semplicemente mettere via lo smartphone pieghevole fantastico moderno che ha, e ritornare ai tempi antichi del suo vecchio cellulare Nokia, mettendo la SIM in quello e non usando più lo smartphone per niente; se non per i codici della banca (e zio merdone, le banche e le loro app!) e per registrare pezzi di vlog. 👌
Cosa ne può mai venire allora fuori da questa cosa? Boh; per lui, che può fare a meno di avere certe app molto distraenti sul cellulare (incluse alcune che, nonostante ciò, avrebbero un giustificabile scopo lavorativo, come YouTube Studio; quindi non parliamo solo di minchiatine), decidendo quindi di levarle da lì, allocandole solo al PC e a tempi della giornata più controllati, avendo così un potenziamento dell’attenzione e sprecando dunque meno tempo durante tutti i giorni e quindi nella vita… e, per chi guarda, invece, veramente boh; nel senso, dipende. 🍇
Io, in realtà, grandi problemi con il telefonone in questo senso non sento di averne… ma non tanto perché ne ho in realtà di ben più gravi in altri sensi—ehm, volevo dire, non solo perché non è la prima volta che sento queste cose; quanto più per il fatto che innanzitutto il mio uso dello smarfonone è abbastanza diverso dalla media delle persone della mia generazione (che, le statistiche lo dicono, è comunque quella più fissata), e poi perché tante misure riparative o preventive dell’abuso dello smartphone sono per me normalità da tempo… per una semplice questione di miei gusti e tendenze, in realtà, lol. 😊
Alla fine del video, Alessandrone suggerisce alcune cose effettivamente utili, che per me infatti non sono nuove. Piattaforme social che non aggiungono praticamente nulla alla mia vita non le uso (ma in realtà, curiosamente, come ho già detto, se le iniziassi ad usare non riuscirei ad acquisire l’abitudine; mi scoccerei naturalmente e smetterei senza farci caso)… Il telefono certamente non è il mio unico robo di battaglia, e anzi, a casa non ho davvero tanto la voglia di usarlo quando posso fare qualcosa ugualmente o meglio dal PC (come scrivere)… E beh, a me le notifiche danno proprio fastidio dentro (ma questa sarà altrettanto la potenza del mio autismo), quindi le uniche che permetto al telefono di ricevere in qualsiasi momento sono chiamate ed SMS, nient’altro (mentre, sul tablet, praticamente zero). 😈
In realtà, però, devo ammettere che dei problemi di abitudini zombi li ho pure io, a riguardo… e quindi sì, assolutamente evito di tenere collegamenti rapidi a cose che apro di continuo senza motivo, altrimenti è la fine, ma mi trovo a dover ogni tanto cambiare anche la disposizione del drawer delle app o altre cose di questo tipo, perché sennò non basta… Ma, questo non è tanto un problema di dopamina, visto che mi accorgo che per me pure il fottuto Alt+Tab sul PC è compulsivo; proprio nel mentre di scrivere questo post, l’ho premuto non so quante volte… e l’unica finestra che ho portato in foreground è stata la mia cartella Download rimasta aperta da poco fa, non una app con meccanismo da slot machine. (E no, impostare la scala di grigi non mi aiuta con ciò.) 🥴
Boh, complessivamente l’esperimento è gnam, e… io non lo farei, perché ehh… francamente, a me, lo smartphone, quando serve serve. Se voglio annotare qualcosa devo farlo, e idem se voglio cercare sul web delle robe, o se ho da scattare delle foto e persino modificarle al volo, nonché attuare rapidi momenti di sysadmin e programmazione in giro, visto che un tablet sarebbe troppo grosso e dunque non potrei portarlo ovunque… Però, allo stesso tempo, non è assolutamente la fine del mondo se in un certo momento non posso aprire Pinterest o Telegram per guardare (e pigniare…) i miei memini; basta che ho un manga da leggere, o una console per giocare, e riesco tranquillamente a non morire. (…E sì, sto implicando che se non ho la possibilità di scrivere quando voglio è improbabile io possa sopravvivere; ma insomma, se esplodessero gli smartphone domani userei il 3DS, e se esplodesse tutta l’elettronica del pianeta userei la carta.) 👍
#adc #dipendenza #dopamina #esperimento #smartphone

- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.
^{www.youtube.com}

Xiko do Couto via Política

1 settimana fa • •

Xiko do Couto
1 settimana fa • •

Glauber Braga é expulso do plenário após ocupação da Mesa Diretora

cross-posted from: lemmy.eco.br/post/18953458

Glauber Braga é expulso do plenário após ocupação da Mesa Diretora

Congressista foi levado por policiais legislativos para fora do plenário após protesto contra possível cassação.

^{Congresso em Foco}

#Politica

misskoula via Delta Chat

1 settimana fa • •

misskoula
1 settimana fa • •

Obscure Music Cafe

Delta Chat music group

Message privately on Delta Chat

Tap the invite link to start

^i.delta.chat

Questa voce è stata modificata (1 settimana fa)

jack [he/him, comrade/them] via politics

1 settimana fa • •

jack [he/him, comrade/them]
1 settimana fa • •

Can DSA Hold Mamdani Accountable? Its Co-Chairs Respond

- YouTube

Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.

^{www.youtube.com}

#politics

Deceptichum via AusPol

1 settimana fa • •

Deceptichum
1 settimana fa • •

Segal Secrets: docs reveal Antisemitism Envoy's big pay day - Michael West

Jillian Segal, Australia’s controversial Antisemitism Envoy and Israel lobbyist procured an extra $12.9m funding from PM Anthony Albanese

Jillian Segal, Australia's controversial Antisemitism Envoy and Israel lobbyist procured an extra $12.9m funding from PM Anthony Albanese

Segal Secrets: docs reveal Antisemitism Envoy's big pay day - Michael West

^{Stephanie Tran (Michael West)}

suoko via Biciclette elettriche

1 settimana fa • •

suoko
1 settimana fa • •

Ebike vietate nella metro di Brescia, la motivazione è assurda

https://www.bikeitalia.it/2025/12/05/ebike-vietate-nella-metro-di-brescia-ma-la-motivazione-e-assurda/

#ebikes

Feddit Un'istanza italiana Lemmy reshared this.

thelastaxolotl [he/him] via politics

1 settimana fa • •

thelastaxolotl [he/him]
1 settimana fa • •

Official Propaganda for Caribbean Military Buildup Includes “Crusader Cross”

cross-posted from: news.abolish.capital/post/1260…

An official U.S. military social media account on Monday shared a photo collage that included a symbol long affiliated with extremist groups — and Secretary of Defense Pete Hegseth.
In a post on X trumpeting the deployment of troops to the Caribbean, U.S. Southern Command, or SOUTHCOM, shared an image that prominently displayed a so-called Jerusalem cross on the helmet of a masked commando.
The Jerusalem cross, also dubbed the “Crusader cross” for its roots in Medieval Christians’ holy wars in the Middle East, is not inherently a symbol of extremism. It has, however, become popular on the right to symbolize the march of Christian civilization, with anti-Muslim roots that made it into something of a logo for the U.S. war on terror.
Tattoos of the cross, a squared-off symbol with a pattern of repeating crosses, have appeared on the bodies of people ranging from mercenaries hired by the Gaza Humanitarian Foundation to Hegseth himself.
Now, the symbol has reared its head again to advertise President Donald Trump’s military buildup against Venezuela — an overwhelmingly Catholic country — and boat strikes in the Caribbean.

U.S. military forces are deployed to the #SOUTHCOM area of responsibility in support of #OpSouthernSpear, @DeptofWar-directed operations, and @POTUS' priorities to disrupt illicit drug trafficking and protect the homeland. pic.twitter.com/vLvg9fQ5Lx
— U.S. Southern Command (@Southcom) December 8, 2025
“As with all things Trump, it’s a continuation, with some escalation, and then a transformation into spectacle,” said Yale University historian Greg Grandin, whose work focuses on U.S. empire in Latin America.
The social media post came amid rising controversy over a series of strikes on boats allegedly carrying drugs off the coast of Venezuela, dubbed Operation Southern Spear.
[
Read Our Complete Coverage
License to Kill
---------------](theintercept.com/series/licens…)
Hegseth is alleged to have ordered a so-called “double-tap” strike, a follow-up attack against a debilitated boat that killed survivors clinging to the wreckage for around 45 minutes. The U.S. has carried out 22 strikes since the campaign began in September, killing a total of 87 people.
The Pentagon’s press office declined to comment on the use of the Jerusalem cross, referring questions to SOUTHCOM. But in a reply to the X post on Monday, Hegseth’s deputy press secretary Joel Valdez signaled his approval with emojis of a salute and the American flag. In a statement to the Intercept, SOUTHCOM spokesperson Steven McLoud denied that the post implied any religious or far-right message.
“The graphic you’re referring to was an illustration of service members in a ready posture during Operation SOUTHERN SPEAR,” McLoud told The Intercept. “There is no other communication intent for this image.”
The original image of the masked service member appears to have come from an album published online by the Pentagon that depicts a training exercise by Marines aboard the USS Iwo Jima in the Caribbean Sea in October. The photo depicting the cross, however, was removed from the album after commentators on social media pointed out its origins.
Amanda Saunders, a spokesperson for the Defense Visual Information Distribution Service, the Pentagon-run photo agency, said she was unable to comment directly but forwarded the request to the Marine unit involved in the exercise.
“Content on DVIDS is published and archived directly by the registered units,” she said, “so we don’t have control over what is posted or removed, nor are we able to comment on those decisions.”

Hegseth and the Cross

The Jerusalem cross’s popularity on the right has surged in part thanks to featuring in various media, including the 2005 Ridley Scott film “Kingdom of Heaven” and video games, according to Matthew Gabriele, a professor of medieval studies at Virginia Tech and a scholar of Crusader iconography.
“It supports the rhetoric of ‘defense of homeland.’”
“It supports the rhetoric of ‘defense of homeland,’” Gabriele told The Intercept, “because the crusaders, in the right’s understanding, were waging a defensive war against enemies trying to invade Christian lands.”
The symbol’s position of prominence in official military communications is just the latest example of a trollish extremism by the Trump administration’s press teams, which have made a point of reveling in the cruelty wrought on its perceived enemies at home and abroad, or “owning the libs.”
[

Related
Team Leader at Gaza Aid Distribution Sites Belongs to Anti-“Jihad” Motorcycle Club, Has Crusader Tattoos](theintercept.com/2025/08/06/ga…)

Monday’s post may also be intended as Hegseth putting his thumb in the eye of the Pentagon’s old guard. Hegseth’s embrace of the symbol — in the form of a gawdy chest tattoo — once stymied, however temporarily, his ambitions in the military.
Folling the January 6 insurrection, according to Hegseth and reporting by the Washington Post, Hegseth was ordered to stand down rather than deploy with his National Guard unit ahead of the 2021 inauguration of Joe Biden. The decision to treat Hegseth as a possible “insider threat” came after a someone flagged a photo of a shirtless Hegseth to military brass, according to the Washington Post.
“I joined the Army in 2001 because I wanted to serve my country. Extremists attacked us on 9/11, and we went to war,” Hegseth wrote “The War on Warriors,” his 2024 memoir. “Twenty years later, I was deemed an ‘extremist’ by that very same Army.”
Hegseth was hardly chastened by the episode and has since gotten more tattoos with more overt anti-Muslim resonance, including the Arabic word word for “infidel,” which appeared on his bicep sometime in the past several years. It’s accompanied by another bicep tattoo of the Latin words “Deus vult,” or “God wills it,” yet another slogan associated with the Crusades and repurposed by extremist groups.
The use of the image to advertise aggressive posturing in a majority-Christian region like Latin America may seem odd at first glance. In the context of renewed U.S. focus on Latin America, however, it’s a potent symbol of the move of military action from the Middle East to the Western Hemisphere.
“They’re globalizing the Monroe Doctrine.”
The post comes on the heels of the release of the Trump’s National Security Strategy, a 33-page document outlining the administration’s foreign-policy priorities that explicitly compared Trump’s stance to the Monroe Doctrine, the turn-of-the-century policy of U.S. dominance in Latin America in opposition to colonialism by other foreign powers. Grandin, the Yale historian, described the document as a “vision of global dominance” based on a model of great-powers competition that can lead to immense instability.
“They’re globalizing the Monroe Doctrine,” Grandin said. “I’m no fan of the hypocrisy and arrogance of the old liberal international order, but there’s something to be said for starting from a first principle of shared interests, which does keep great conflict at bay to some degree.”
The post Official Propaganda for Caribbean Military Buildup Includes “Crusader Cross” appeared first on The Intercept.
From The Intercept via This RSS Feed.

Pete Hegseth’s Arabic tattoo stirs controversy: ‘clear symbol of Islamophobia’

Critics say US defense secretary’s tattoo of the word kafir, meaning ‘infidel’ or ‘non-believer’ could offend Muslims

^{Marina Dunbar (The Guardian)}

#politics

ethnss via Privacy

1 settimana fa • •

ethnss
1 settimana fa • •

Is it possible to host a lemmy instance over I2P?

#privacy

in reply to ethnss

anon5621

in reply to ethnss • 1 settimana fa • •

I think yes possible ,but I don't think it will able fedrate with other instances..

in reply to anon5621

ethnss

in reply to anon5621 • 1 settimana fa • •

Do you know why?

Would it be able to federate with other instances that use I2P?

in reply to ethnss

sobchak

in reply to ethnss • 1 settimana fa • •

It may be possible to federate with other i2p instances, if not, I'm guessing it would require fairly simple code changes to lemmy to be able to point to other .i2p addresses.

To federate with clearnet, I think an instance would need to kind of act like a bridge that uses both clearnet and i2p; so it wouldn't be "hidden." I see there is also an exit node network (ran by StormyCloud) on i2p now, but that may be too slow for federation.

Edit: I imagine most clearnet instances would not want to federate with a darknet instance due to the higher probability of illegal content being posted.

Questa voce è stata modificata (1 settimana fa)

in reply to ethnss

Pearl

in reply to ethnss • 1 settimana fa • •

Federation would be pretty bad.

Would be a lot easier to build a JavaScript free reddit

in reply to Pearl

sobchak

in reply to Pearl • 1 settimana fa • •

Already exists (Ramble). It's just pretty dead.

in reply to sobchak

mmmac

in reply to sobchak • 1 settimana fa • •

Redlib is alive and well

in reply to mmmac

comfy

in reply to mmmac • 1 settimana fa • •

Redlib is an alternate frontend to reddit.com.

I can't find "Ramble" so I'm guessing they might mean Raddle, which is a reddit-like website of its own, similar to Lemmy (without federation)

in reply to Pearl

gtr

in reply to Pearl • 1 settimana fa • •

Sounds nice! Can we have a JS-free Reddit please? 😇

in reply to ethnss

maj

in reply to ethnss • 1 settimana fa • •

Not sure. But sounds like there would be something similar on nostr.

Yuritopiaposadism [none/use name] via technology

1 settimana fa • •

Yuritopiaposadism [none/use name]
1 settimana fa • •

Tesla Optimus falls in Miami demo, hand movements sparks remote operation debate

Tesla Optimus's fall in Miami demo sparks remote operation debate

While falls are not unusual in robotics development, a specific hand motion has raised questions about the current level of autonomy in Tesla’s system.

^{Jijo Malayil (Interesting Engineering)}

#technology

silence7 via politics

1 settimana fa • •

silence7
1 settimana fa • •

‘I Was Paid’: Bongino’s Confession About His January 6 Claims | The deputy director of the FBI admitted to lying during his days as a pundit.

‘I Was Paid’: Bongino’s Confession About His January 6 Claims

The deputy director of the FBI admitted to lying during his days as a pundit.

^{David A. Graham (The Atlantic)}

#politics

like this

PhilipTheBucket via Political Videos

1 settimana fa • •

PhilipTheBucket
1 settimana fa • •

Unequivocal War Crimes

- YouTube

Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.

^{www.youtube.com}

GertrudGoethe via Technology

1 settimana fa • •

GertrudGoethe
1 settimana fa • •

America Has Become a Digital Narco-State - Paul Krugman

America Has Become a Digital Narco-State

Social media giants have bought our government, and are trying to bully Europe

^{Paul Krugman}

#technology

like this

reshared this

in reply to GertrudGoethe

technocrit

in reply to GertrudGoethe • 1 settimana fa (Ricevuto 4 giorni fa) • •

Krugman is a worthless hack. Sensational headline with implicit endorsement of prohibition is a prime example.

Edit about the "nobel": Everybody who's talking about this "nobel prize". There is no nobel prize in econ. It's a phony award made up by bankers. That's how pathetic the pseudo-science of economics is. They need to make up their own fake awards for relevancy. So please don't tout the phony awards of this pseudo-scientists. I could make up an award for flat earthers but that wouldn't legitimize flat earthism.

(And even if there were a nobel for econ... Who cares about awards if the underlying "science" is still trash?)

There is no such thing as a Nobel Prize for Economics

Perception matters

^{Paul Larkin (An Inevitable Adjustment)}

Questa voce è stata modificata (1 settimana fa)

in reply to technocrit

willington

in reply to technocrit • 1 settimana fa (Ricevuto 4 giorni fa) • •

Here's one of the best traders talking about the same issue:

invidious.nerdvpn.de/watch?v=b…

It's eloquent and funny at the same time.

I included a timestamp to jump (almost) directly to the most relevant bit (also 33m, but 31m sets up a better context for an extra 2min of time compared to going directly to the 33m mark). But the whole video is worth watching.

Yes, Krugman is a hack.

Questa voce è stata modificata (1 settimana fa)

Rimu via Anti-social media

1 settimana fa • •

Rimu
1 settimana fa • •

The Plan is to Make the Internet Worse. Forever. | Aaron Bastani Meets Cory Doctorow

- YouTube

Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.

^{www.youtube.com}

⇧

chobeat via Technology

chobeat 1 settimana fa • •

chobeat via technology

chobeat 1 settimana fa • •

chobeat via Technology

chobeat 1 settimana fa • •

chobeat via Technology

chobeat 1 settimana fa • •

chobeat via Technology

chobeat 1 settimana fa • •

King via Technology

King 1 settimana fa • •

King via Technology

King 1 settimana fa • •

dohpaz42 via Today I Learned

dohpaz42 1 settimana fa • •

HaraldvonBlauzahn via Linux

HaraldvonBlauzahn 1 settimana fa • •

ALIS via Technology

ALIS 1 settimana fa • •

ALIS via Technology

ALIS 1 settimana fa • •

return2ozma via politics

return2ozma 1 settimana fa • •

Skavau via Television

Skavau 1 settimana fa • •

return2ozma via politics

return2ozma 1 settimana fa • •

iturnedintoanewt via Linux

iturnedintoanewt 1 settimana fa • •

BrikoX via Linux.zip

BrikoX 1 settimana fa • •

BrikoX via Rivian

BrikoX 1 settimana fa • •

BrikoX via Entertainment

BrikoX 1 settimana fa • •

Basic Glitch via Technology

Basic Glitch 1 settimana fa • •

chobeat
1 settimana fa • •

chobeat
1 settimana fa • •

chobeat
1 settimana fa • •

chobeat
1 settimana fa • •

chobeat
1 settimana fa • •

King
1 settimana fa • •

King
1 settimana fa • •

dohpaz42
1 settimana fa • •

HaraldvonBlauzahn
1 settimana fa • •

ALIS
1 settimana fa • •

ALIS
1 settimana fa • •

return2ozma
1 settimana fa • •

Skavau
1 settimana fa • •

return2ozma
1 settimana fa • •

iturnedintoanewt
1 settimana fa • •

BrikoX
1 settimana fa • •

BrikoX
1 settimana fa • •

BrikoX
1 settimana fa • •

Basic Glitch
1 settimana fa • •