"What we will not accept is for the ACA premiums to skyrocket on the American people," said Rep. Alexandria Ocasio-Cortez. "And what we will not accept is allowing the teetering of this system to collapse."
Ciao a tutti, sto provando a passare in modo definitivo a Linux. al momento utilizzo un mac book pro (fine 2008) con Lubuntu e sono molto, molto soddisfatto. Sto' cercando un alternativa non troppo complessa a Camera Raw, ho provato (e sto' continuando a provare) DarkTable ma ... è veramente macchinoso ... consigli ?
non so se mi leggerai, comunque io per le foto ho provato CameraRaw e RawTherapee, e uso quest'ultimo dal 2020, da quando ho preso la macchina bellina che ho ora, e mi ci trovo benissimo, meglio che con CameraRaw. L'unico punto un po' dolente è che il setup iniziale per la tua macchina può essere un po' complicato (il più delle volte è automatico, ma a volte, come nel mio caso, no), però comunque se segui le istruzioni sul wiki non lo è, rawpedia.rawtherapee.com/; e che comunque devi impararlo (ma gli strumenti sono un po' gli stessi su tutti i programmi di "sviluppo" RAW, solo che in RawTherapee mi sembrano organizzati meglio che in CameraRaw); e che ha una visuale di anteprima sempre un po' sgranata rispetto a come potrebbe essere (mi pare ci stiano lavorando, a migliorarla; comunque dopo un po' ci fai l'occhio).
On his Reddit, Platner didn’t identify himself by name, but he shared biographical details, including his military service, age, occupation and residence in Maine. While the account dated back to 2009, many of his most incendiary comments reviewed by CNN were posted around 2021.
A senior Hamas official on Thursday accused Israel of flouting the ceasefire by having killed at least 24 people in shootings since Friday, and said a list of such violations was handed over to mediators, Reuters reports.
He said:
The occupying state is working day and night to undermine the agreement through its violations on the ground.
The Israeli military did not immediately respond to the Hamas accusations. It has previously said some Palestinians have ignored warnings not to approach Israeli ceasefire positions and troops “opened fire to remove the threat”.
...the recovered data included user SMS and voice call contents, user internet traffic, and cellular network signaling protocols... the team was able to collect unencrypted satellite data “from sea vessels owned by the US military,” along with traffic from multiple organizations within the Mexican government and military, including personnel records, narcotics activity, and military asset tracking...
I come for amusing memes. All I see is American politics. Isn't there some other place for political memes to keep this shit separate? Or maybe some tagging system to help with using a keyword blocker?
Mods haven't added much to the sidebar rules. Any opinion from the mods or community?
President Donald Trump has said Indian Prime Minister Narendra Modi has agreed to stop buying Russian oil, as the US seeks to put economic pressure on the Kremlin as part of efforts to end the war in Ukraine.
Trump told reporters he had received assurances from Modi that India would halt its purchases "within a short period of time", which he called "a big stop".
The US president has sought to leverage India's purchases of Russian oil in his trade war, but Delhi has so far resisted.
I’m guessing India either doesn’t actually stop, or starts buying a very similar quantity of oil from Kazakhstan that definitely isn’t Russian, no, don’t think too hard about it.
I don't think the government will risk significant increases in fuel prices on the eve of the Bihar elections. On the other hand, it is quite possible that they agree to stop buying Russian oil from Russia as a compromise - it could be bounced off a third country so we can technically agree to the US demands.
I’ve been thinking about discovering underappreciated Lemmy instances. GitHub’s awesome-lemmy-instances used to serve a similar purpose, but it hasn’t been updated in a long time, and I haven’t found anything else like it.
I got the idea from this post about finding decentralized communities in the Fediverse. I’m thinking of a Lemmy bot that tracks Lemmy instances, calculates the average number of active users and standard deviation, and identifies instances with activity below the average plus two standard deviations. It would then rank these underutilized instances by performance metrics like uptime and response time, and periodically update a curated list on Lemmy to guide users toward instances that could use more participation.
I'd love feedback on how you would go about doing something like this. And specifically how to rank by performance.
If someone wants a regional instance they usually figure it out by themselves, also the Piefed instance chooser can help and has a latency indicator: piefed.social/post/1337079
You don't need to calculate the average number of active users. If you do, it will be wasted resources and you probably will miss a few dozen.
Simply request the instance's NodeInfo.
NodeInfo 2.1 (which Lemmy does implement) and I think 2.0 as well require implementors to provide correct user usage statistics. So you have total users and average active users per month/half year calculated on request.
This also means you can provide this service for other platforms that support NodeInfo.
Making a GET request to /.well-known/nodeinfo will give you the links to the instance's NodeInfo documents.
In fact, you can recursively begin from some random known instance, get a list of other instances it is federated with, get their NodeInfo and repeat the process. NodeInfo also provides the name of the software (check schema).
Choose which sections in the Tab Button popup are visible from the Display Options menu.
You may find some sections in the Tab Button popup irrelevant to your workflow. If that’s the case, hide them and enjoy using a Tab Button that fits your needs perfectly.
To hide sections you don’t use.
Open the pop-up menu.
Open the Display Options menu by clicking on the 3-dot menu button in the top right corner.
Click on the section names on the menu to toggle their visibility off or on.
Read what the released palestinian prisoners say: torture, hunger rapes, no medical treatment, psychological torture. Overcrowded cells. Inhuman people, who have neither empathy nor compassion, can't treat their prisoners with respect.
Wow....I wonder which of these two sides our country's allied with
Also I'm sure Israelis will use this as a wake up call to stop terrorizing people who have all the reason in the world to be brutal to them but are treating them better than the people who terrorized their grandparents for zero reason
Can anyone tell me whether modifiers/diffusers 're-polarise' light? For example, if i put a polarising filter on a speedlite but then fire it through a softbox, will the light still be polarised outside of the softbox?
It's sobering walking down a street 30 minutes from where you live – even in a crowd of 2000, majority women – to cries of 'shame on you' and 'ped~~~~les' from families stood in their drives with their kids. It's not that the marchers didn't have our shar
Like many who marched against the Iraq war (an estimated 36 million across 3,000 protests) only to see the popular turnout ignored by government followed by a devastating, illegal war, I’ve come to question the value of marches. 500,000 marching about Gaza in London each month doesn’t get a photo in the press, but an arrested 83-year old Priest holding a Palestine Action sign – or a Plasticine Action sign – does.
But Epping was something different.
If me – 6ft white guy – felt nervous amidst a crowd of 2,000 anti-fascist marchers, with police everywhere – I was struck by how on earth the asylum seekers in the Bell Hotel must feel, amidst theviolence erupting outside their accommodation. And how must Epping’s BAME and migrant residents feel walking about? Unlike other marches I’ve been on, this was about strength in numbers. It was a way of saying to the rest of Epping ‘you’re not alone’ – and judging by the many waves and cheers from windows and doorsteps (some half-hiding for fear), that was welcomed.
By some. But not by others – it’s sobering walking down a street 30 minutes from where you live – even in a crowd of 2000, majority women – to cries of ‘shame on you’ and ‘pedophiles’ from families stood in their drives with their kids.
But it’s not that the marchers didn’t have our share of inflammatory chants – from ‘Nazi scum’ and ‘kill yourself like Adolph Hitler’, this social media-friendly tendency to paint the other side in the extreme worst place struck me as lose-lose for everyone, other than the companies who depend on polarised content to feed to audiences around the world safe at home, screen-stroking. On this level it’s not a community crisis it’s a content strategy – it’s the social media equivalent of premium content – violence on British streets, with something for both sides. It’s not tribes, its not a community story, it’s two different dramas with two different audiences, who each can look at it and say how the other side are a sign of how Britain is doomed.
Campaign groups need to get better at communicate to both two audiences
A danger of these ‘filter bubbles’ is not knowing how to communicate to the other bubble; the strongest messages can be heard by both groups and the majority will agree with it. That’s why ‘save our kids’ works and ‘migrants out’ doesn’t. Organisers Stand up Against Racism have to be better at communications. Take this reasonably balanced report from the BBC of the march –
Carmen Edwards, from the anti-migrant protest, said: “It was all happy, people were dancing, we were singing. There weren’t no far-right.” Sharon Smith, who had travelled from nearby Harlow, said she wanted to attend the protest to “protect my grandkids”. She said: “A lot of people showed up; it was good humoured and [there was] music. Everyone wants the same, [which is to] save our children.” However, Lewis Nielsen, officer at Stand up to Racism, said: “We think it is a quite dangerous situation in Epping. “They are potentially heading towards the same kind of violence we saw in August last year, so we think it is important that anti-racists and anti-fascists come out and mobilise against them. “People are right to be angry about the cost-of-living crisis, the NHS, the housing crisis. None of that was caused by the refugees in that hotel.”
Stand up to Racism sound like a politician who’s dodged a question from a journalist. The anti-migrant crowd in Epping aren’t talking about the NHS or housing, they’re talking about ‘protect our kids’. That has to be the first sentence in any response:
“We absolutely agree every community should feel safe, and nothing is more important than keeping all of our children safe. Unfortunately some of the refugees staying at the hostel have been attacked and beaten up while just going to the shops – and we’re here to say they must feel safe too.”
That’s the headline statement. And then they can pivot to the hard truths:
Nigel Farage has tried to split this community over a sexual assault of a teenager, but champions pro-rape figures like Andrew Tate. Some of the loudest voices weaponising the concerns of this community pay no interest when those accused are white. Tommy Robinson planned to come here today – he co-founded the EDL with Richard Price who was convicted for creating and possessing child pornography; Tommy defended him for long after that. The EDL – which he founded – had 20 members charged with child exploitation offences. This has continued for years – dozens of people close to him charged with child sexual abuse material, his spokesman in 2019 convicted for domestic abuse, and what’s key is he NEVER condemned these white supporters when the crimes came to light.”
Of course this isn’t a new story – a horrible attack on a teenager, weaponised by Britain’s newest Nazi group Homeland through a Facebook Group ‘Epping Says No’ (who openly boast of their orchestration), instrumentalised by a click hungry right wing press, conflict-hungry social media platforms and shameless politicians – to divide a community into ‘racists’ vs ‘threats to children’; or at the extremes ‘Nazi scum’ and ‘Pedophiles’.
Is this something new?
Is there anything meaningful to take from all this? From Tulsa to Ballymena – sexual assault is the ignition on an initial furious community backlash against the minority group where the accused comes from; and other forces then mobilise to defend them. In Ballymena 107 police officers were injured; in Tulsa in 1921 35 blocks were burned down and 39 of the local black community were killed. In Epping’s march on Sunday night thankfully no-one was hurt, a week before tho a dozen were – and Nigel Farage spent the week in between complaining that the police had let more get injured.
Reading the press in the aftermath, listening to the chants on the day, looking at the range of people who opposed our march through Epping I think there is. I think what’s new in all this, that’s different to Tulsa or previous such fights was how many of the men lining the streets was how many of them were filming. Unlike the race battles of the 80s and 90s that we thought we’d left behind, this is also about content production and distribution. It’s both social-capital generating content for the creator, and money-making, attention-grabbing content for the platforms.
This is a relatively new thing. And so a relatively routine far-right weaponised concern for the safety of women and kids and a similarly common concern for the safety of refugees and minorities – is prevented from finding that natural common ground of ‘safety and care for all’ on social media, because this is social media’s version of a football match – choose your side and attack the other. A resolution would be bad for business.
Where once community leaders – from the local church to pub, cabbies and newspaper – would do the work of trying to repair fractured communities, the business model here is the opposite. The attention model is built on conflict, not the calming down and compromises which community peace and restoration is built on. At its worst unregulated extreme, we can picture a full cycle where social media companies –who don’t invest in content production– benefit so much from these conflicts that their algorithms continually reinforce the conditions for conflict, encouraging each ‘side’ to behave in ways that are most triggering to the other, all as a path to generate high-value content.
I began to write a screenplay a few years back about a developer who discovers the algorithm he’d written to grow a newspaper’s engagement and clicks was triggering geopolitical conflicts to meet its objectives of ‘more news’. It was a fun/scary Black Mirror-esque idea, but increasingly it feels like a logical conclusion of the business model of the attention economy, when coupled with the lack of transparency or regulation over the algorithms that decide who sees what.
Un uomo trovato morto nella sua villa. Una scena che sembra una rapina finita male. Ma qualcosa non torna.
Il vicequestore Tiburzi lo capisce subito: la vittima, rivela il medico legale, prima di essere uccisa è stata drogata con un insolito cocktail di medicinali. Perché? Se doveva essere uccisa perché complicarsi la vita drogandolo e in modo così raffinato? E la rapina come si inserisce nel delitto?
La vittima è un noto commercialista. Ricco, affermato, ma anche pieno di nemici. Una moglie elegante e distante. Un figliastro pieno d’odio. Un passato costruito su segreti e compromessi.
Mentre la città soffoca nel caldo estivo, le indagini fanno emergere le contraddizioni. Una relazione ambigua. Una vita doppia. Un piano studiato nei dettagli. O forse solo una tragica coincidenza?
“Una vita di inganni” è un giallo raffinato e avvolgente, dove ogni personaggio ha qualcosa da nascondere. E dove la verità si nasconde dietro le maschere quotidiane.
Un’indagine che scava a fondo nei legami familiari, nelle ambizioni, nei rimpianti. Perché, a volte, il movente non è solo l’odio o l’avidità. È anche l’amore tradito.
Come tutto ha inizio
Tutto ha inizio in una villa. Una rapina finita male, un uomo trovato morto. Eppure, come spesso accade, ciò che appare agli occhi non sempre corrisponde alla realtà.
Il vicequestore Tiburzi si troverà coinvolto in un’indagine tanto complessa quanto affascinante. Perché un noto commercialista è stato ucciso? Cosa lega davvero la rapina all’omicidio? Sono solo alcune delle domande a cui dovrà cercare una risposta.
In un intreccio carico di suspense, Maurizio Mos, con la sua penna calibrata e uno stile limpido, ci trascina nel cuore di un romanzo in cui nulla è come sembra in questo thriller. Un giallo elegante, raffinato, dove ogni personaggio ha qualcosa da nascondere e dietro ogni angolo si celano maschere e finzioni.
Le maschere: Pirandello e il doppio volto dei personaggi
Uno degli aspetti più apprezzabili del romanzo è il modo in cui Mos affronta – con delicatezza e raffinatezza – il tema della maschera, concetto caro alla tradizione letteraria italiana e in particolare a Pirandello.
“Uno, nessuno e centomila”
Così scriveva il grande autore siciliano, e così appaiono anche i personaggi del libro di Mos: dietro le loro quotidianità si celano inganni, sotterfugi, avidità, gelosie, amori traditi e sogni spezzati, che danno vita a un sottile gioco di parole e azioni. Il vicequestore Tiburzi si muove in questo scenario con l’abilità di un danzatore, un ballerino che riesce a destreggiarsi su fili sottili intrecciati con le trame nascoste della vita di tutti i giorni. “Una vita di inganni” è un giallo raffinato e avvolgente, dove ogni personaggio ha qualcosa da nascondere. E dove la verità si nasconde dietro le maschere quotidiane. Anche nella presentazione ufficiale si sottolinea la centralità del tema delle maschere, simbolo di finzioni, segreti e apparenze. Ma, si sa, le maschere prima o poi cadono, frantumandosi davanti allo specchio della verità.Tiburzi riuscirà a smascherare ciò che si cela dietro le apparenze? A sciogliere i nodi del dubbio e della finzione? Questo lo scoprirete solo leggendo il thriller di Maurizio Mos.
Un pensiero sulla scrittura
Non è il primo libro che leggo di Maurizio Mos e, come le volte precedenti, posso dirmi soddisfatta. Ho particolarmente apprezzato la scelta del formato: caratteri grandi e chiari, ideali anche per chi ha difficoltà nella lettura. Una soluzione che rende il testo più fruibile e migliora la scorrevolezza generale.
Questa volta, però, ho percepito qualcosa in più. La scrittura di Mos sta maturando, diventando sempre più sicura e incisiva, capace di coinvolgere il lettore pagina dopo pagina.
Estratto dal romanzo
“… Erano alla fine della settimana, le indagini non avevano fatto un passo in avanti… Intanto già ai telegiornali e sui giornali erano comparsi i primi resoconti vagamente critici sulle indagini. C’era da temere un insuccesso.”
Questo estratto mi ha colpita particolarmente. Spesso diamo per scontato che ciò che non si risolve subito sia destinato a fallire. Ma la verità è che occorre dare tempo alle azioni perché maturino. E questo è proprio ciò che Mos riesce a fare con il suo thriller: costruire con pazienza una tensione crescente, fino al disvelamento finale.
Chi è Maurizio Mos
Maurizio Mos nasce a La Spezia il 16 novembre 1951. È in pensione dal 2013, dopo aver lavorato per anni in diversi enti pubblici. Ha una figlia trentenne, laureata in Filosofia.
Amante della campagna, vive in solitudine nella casa di famiglia, dove si dedica a lunghe passeggiate. È anche un grande appassionato di auto d’epoca (soprattutto quelle dei suoi vent’anni, seppur platonicamente, come lui stesso racconta) e di letteratura gialla: la sua collezione supera i 200 titoli.
This might be the most Israeli video I have ever seen
Context:
Popular Israeli TikToker and trainer Hen Ben Moha (hen_bar_ami, 189k followers) posted a video of her trainees exercising to the sound of the new unofficial Israeli anthem "May Their Village Burn". They sing along excitedly. Hen adds "AMEN!"
It's crazy that we are having a discussion in a forum where racism and misogyny is unacceptable, yet here we are clumping all these women into a single category of being dumb crazy bitches.
Meanwhile, the government those women live under is completely incapable of seeing the irony of committing genocide against their neighbor, while they themselves exist as a response to their own genocide by Europeans.
You are a hypocrite, the women in this video are hypocrites, none of this shit makes sense to me.
Amazon's new delivery station in Elkhart, Indiana, looks nothing like the concrete and steel boxes that dot America's logistics landscape. The 171,000-square-fo
That’s one of the key findings of a major audience survey undertaken by the BBC as part of preparations to renew its operating agreement, known as the Royal Charter.
The ‘Our Future, Our BBC’ questionnaire was completed by 872,701 viewers, with only 43% of respondents stating that the BBC is “effective” in being independent from the government.
A further 38% said the BBC was “ineffective” on this measure, while 19% said they “don’t know” if the BBC is sufficiently free from state control.
WASHINGTON (AP) — President Donald Trump confirmed Wednesday that he has authorized the CIA to conduct covert operations inside Venezuela and said he was weighing carrying out land operations on the country.
The acknowledgement of covert action in Venezuela by the U.S. spy agency comes after the U.S. military in recent weeks has carried out a series of deadly strikes against alleged drug-smuggling boats in the Caribbean. U.S. forces have destroyed at least five boats since early September, killing 27 people, and four of those vessels originated from Venezuela.
Asked during an event in the Oval Office on Wednesday why he had authorized the CIA to take action in Venezuela, Trump affirmed he had made the move.
“I authorized for two reasons, really,” Trump replied. “No. 1, they have emptied their prisons into the United States of America,” he said. “And the other thing, the drugs, we have a lot of drugs coming in from Venezuela, and a lot of the Venezuelan drugs come in through the sea.”
Lol imagine being deep undercover in a foreign country doing god knows what and you walk into a bar to gather information, sit down, order a drink, and the tv switches to Trump saying “yeah we have agents in Venezuela right now, preparing to do some big things, the bigliest.” Then the music stops and everyone turns and looks right at you.
While the CIA has no problems farking with countries all over the world, we usually only find out about those operations long after they are are over. In other words, the CIA has never had a moron for a boss, who puts their lives in danger by telling the whole world what they're up to.
Either Trump really is that stupid or he just made that up because he thinks it's a cool flex.
He really is that stupid, but he is also such a narcissist that he can’t stand the idea of not getting credit for something that he has done, in public or private.
Yeah I think this is it. Which makes sense because those two traits often come hand in hand. The incessant need to brag about something that only a stupid person would brag about.
Don't be surprised if the answer is "both". He's a stupid man obsessed with the optics of looking strong and successful. Boasting about this while completely oblivious to the obvious consequences fits right in his M.O.
i wonder if it really matters that the public knows about it or not and instances like this convince me of it:
the american congress admitted publicly that the ukranian forces; like the azov brigade; were nazis hellbent on fostering enmity with russians and that arming them would lead to conflict with russia, but the people of the western world still refuse to believe it.
the original tankies accused the united states of fostering the hungarian uprising in the 1950's and the JFK releases by trump proved that they were right; yet tankie is still meant to be a pejorative term to make fun of this assertion.
people are going to believe and defend whatever propaganda that has been spoon fed to them and facts be damned is the mantra of both red and blue maga's.
Critical support to JDPON Don for putting his own abominable ghouls in harm’s way. Inshallah these dogs are hunted down and shot by Venezuelan comrades in short order.
Trump (more likely Miller) is trying to start a war with Venezuela to seize their oil. By randomly killing fisherman and getting Americans in Venezuela killed as "spies" it lets him have his "Remember the Maine" moment.
I think Miller really just hates anyone not white. For Stevie, it's all about killing brown people. I imagine the other ghouls in the administration do want Venezuela's oil.
Not only that. Trump wants a war to call it his war. Like every US president needs one, the industrial military complex demands one. On top of that he's a baboon who likes to brag about being the alphest male in the world.
WASHINGTON (AP) — President Donald Trump confirmed Wednesday that he has authorized the CIA to conduct covert operations inside Venezuela and said he was weighing carrying out land operations on the country.
The acknowledgement of covert action in Venezuela by the U.S. spy agency comes after the U.S. military in recent weeks has carried out a series of deadly strikes against alleged drug-smuggling boats in the Caribbean. U.S. forces have destroyed at least five boats since early September, killing 27 people, and four of those vessels originated from Venezuela.
Asked during an event in the Oval Office on Wednesday why he had authorized the CIA to take action in Venezuela, Trump affirmed he had made the move.
“I authorized for two reasons, really,” Trump replied. “No. 1, they have emptied their prisons into the United States of America,” he said. “And the other thing, the drugs, we have a lot of drugs coming in from Venezuela, and a lot of the Venezuelan drugs come in through the sea.”
One of the perks of being a network engineer is that since almost all Network troubleshooting utilities (nmap, tshark, hell even tracroute) require root I get sudo on everything. Now sure they could restrict my sudo privileges to specific applications, but at that point, they don't really trust anyone so they have already lost.
Anyway, if you can't trust your employees with sudo, they shouldn't be using the command-line at all.
Two people have been killed in Israeli attacks on Palestinians despite the ongoing ceasefire, the Nasser Medical Complex told our colleagues on the ground.
One person was killed after a bomb was dropped by an Israeli quadcopter drone this morning in the Bani Suhaila area of Khan Younis.
The other died due to his wounds after being shot two days earlier near Gaza City’s College of Science and Technology.
As we reported earlier, two people were wounded, one of them seriously, as a result of drone fire in the Bani Suhaila area this morning.
Eclypsium researchers have discovered UEFI shells, authorized via Secure Boot, on Framework laptops. The UEFI shells contain capabilities that allow attackers to bypass Secure Boot on roughly 200,000 affected Framework laptops and desktops.
Its not a backdoor, because secure boot was never about safety to begin with. Its just a piece of security theater, whose primary use is more control for microsoft. "Secure" boot only boots software signed with a microsoft key, thats the "security". Microsoft also allows linux distributions to be signed, but nothing is technically stopping them from just refusing, for " security reasons", and on some systems secure boot cant be turned off. So it being bustable is a good thing. There are other ways to protect devices from physical access, but generally, if attackers have physical access to your computer, then its compromised, secure boot or not. Framework just didnt want to play along.
So don’t use it? How much or how little actual security secure boot provides is a topic that has been discussed to oblivion. I brought it up to make a point of how badly people are overreacting about the severity of this latest framework news.
I still have no idea what secure-boot really does and this was me turning the metaphorical secure-boot dial while checking the crowd to see whether they start gasping in horror.
they sponsored Omarchy and Hyprland. one a glorified dotfiles arch "distro" built by DHH who is pretty much a fascist and Hyprland a buggy neon mess of a WM built by a transphobic fascist.
So yeah, they're not having a good time right now.
because they're built by individuals who are those things. that's the controversy. that's it.
the whole thing is people are upset that Framework sponsored those things because they don't like paying Framework for their machines who in turn then give money to people they feel are facists.
To me they give to a project that have individual that hold controversial opinion rather than to a controversial individual but I can understand the logic.
But tbh I would rather be pissed that a company would finnanve other while they sell their stuff for a premium price
In a way its understandable: It looks flashy, "hackery" and is a complete departure from the Windows or Mac GUI which avoids an "uncanny valley" of usability. Also it is pretty easy to install (i would argue, even more easy than many mainstream distributions), couple that with the positive PR that it got by some Youtube people and you have a road to success for this distro.
This is heavily sensationalized. UEFI "secure boot" has never been "secure" if you (the end user) trust vendor or Microsoft signatures. Alongside that, this ""backdoor"" (diagnostic/troubleshooting tool) requires physical access, at which point there are plenty of other things you can do with the same result.
Yes, the impact is theoretically high, but it's the same for all the other vulnerable EFI applications MS and vendors sign willy-nilly. In order to get a properly locked-down secure boot, you need to trust only yourself.
When you trust Microsoft's secure boot keys, all it takes is one signed EFI application with an exploit to make your machine vulnerable to this type of attack.
Another important part is persistence, especially for UEFI malware. The only reason it's so easy is because Windows built-in "factory reset" is so terrible. Fresh installing from a USB drive can easily avoid that.
I think... we all think the bag was a nice idea. But - not pointin' any fingers - they coulda been done better. So, how 'bout, no bags this time - but next time, we do the bags right, and then we go full regalia.
Depends entirely on the device. On most desktops, you should be able to. On a lot of laptops, this may leave them in an unbootable state (due to GPU option ROMs).
Check for your specific hardware before removing factory default secure boot keys.
Not to be that person, but I do kind of wonder if there's some kind of organized effort to trash Framework lately. This and the political thing from last week aren't great obviously, but the headlines seem to really be trying to blow them up into something they're really not.
I use Manjaro Linux with the Cinnamon desktop and sometimes run into system-level issues, but I have no idea how to properly debug them. It doesn’t feel as straightforward as debugging a normal program. What’s the best way or resource to learn system debugging on Linux?
There are guides available. Search for 'Linux kernel debugging' or 'Linux module debugging', depending on which you are more interested in. And, of course, learn about the relevant parts of the kernel.
Just as a general rule, I would start checking log files. You can start by searching /var/log for files that have been modified in the last few mins with something like "sudo find /var/log -mmin -10 -ls 2>/dev/null". That will get you all log files in /var/log changed within the last 10 mins. Then you can tail those or grep them looking for clues. I have done searches of the entire file system looking for log files that were recently modified to find clues. It might also help to send the output to a file so you can view that and scroll up and down rather than just trying to read the output of the find, tail or grep commands. Put a "1>/{path}/filenameyouwanttouse.out" at the end of the command or you can pipe it to the tee command and it will show on the screen and write to the file you specify.
Sysadmin here, this is my usual flow for various distros
as /u/FigMcLargeHuge mentions, recent logfiles in /var/log. Notably /var/log/messages (EL) and syslog (Debian) but anything that's recent.
journalctl - More and more things are moving to binary logging. If you know the process, then journalctl -u processname restricts to just that. also add a -f for tailing it for ongoing logs.
dmesg -T - especially at system level, this captures any hardware/low level logs. (-T reports actual times, not just seconds since boot)
Once you have some logs that you think are related, but don't know WTF they actually mean, you have two options. The first is to google likely strings. This is... ineffective much of the time - accidental misinformation and outdated advice is increasingly common. The answer might be there, but it takes time and can be frustrating to weed out the cruft.
The better way, (IMO, and people downvote me for saying this) is to use AI. Get a few lines of logs with the errors, check them for confidential information, and simply paste the suspect lines into chatgpt, gemini, claude, co-pilot, whatever. No need for context, it'll figure that out. The LLM will, 4 times out of 5, identify the problem very quickly.
Now, once it's identified that, it will offer to fix it for you. This is where you've got to be on your toes as LLMs are really really quick to give bad advice at this level. But that first triage is nearly always worth doing and helps shape your own mind as to what's going on. AI is still useful for fixing it, but do understand what it's telling you to do.
We did experiment with local models. They were okay, if a little slow with the resources we allocated for testing. Ultimately though, we paid for copilot. I'm still a little sceptical that it won't leak data, despite the assurances, so I do clean anything sensitive before pasting.
As for best models - generally gpt4 or 5 is my go-to, but the others have their uses. I tend to stick with one until it annoys me, then move on. Claude's pretty good for code help, imo, but there's not really a huge difference between them.
I do not use models in general online, but my needs are also much smaller. Max I use my local model for ollama is translations. I am always interested in seeing more focused models so we can use on lower end hardware
I have resorted to the AI step also, if Stract.com doesn't give me a good link, because if I paste a minidlna crash log Google responds with: - Mini Cooper on sale - Buy your DAC device here - want to sign up to streaming music - network and NAS comparisons
Useless.
At least AI said: based on your error it appears a file in your database has metdata tags it cannot parse properly. Sure enough the tagger I used had applied a tag to a wmv file and Minidlna couldn't deal with tag1 area vs tag 2 areas used in other file formats.
use AI. Get a few lines of logs with the errors, check them for confidential information, and simply paste the suspect lines into chatgpt, gemini, claude, co-pilot, whatever
concur. I used to put smaller snippets of the logs into Google search to hopefully bring up pages from fellow sufferers of the same malaise; that usually worked, but AI is doing it better - now.
If there's one thing AI is good at is trawling though a hell scape of random data from across time and space. And outputting... Something reasonably close.
Least close enough to actually put you in the right path 9 times out of 10. Even if the ai is wrong, it's still vastly more time effective then going to stack overflow for this was solved with no solution present.
Hell I had a issue trying to find documentation for a old game I was modding from 10 years ago that maybe sold 1000 copies the wiki was dead the devs site was dead and the way back machine didn't have the pages I needed.
Some fucking how chat gpt knew the game, was able to identify it correctly from a script I gave it then spat out the exact correct context and documentation I needed.
It was flabbergasting. Cause at the same time it told me the game came out in 1995 when it came out in 2015... It got basic ass info wrong but the technical details right.
Generally, it depends on the issue. The first thing I'd check is journalctl, and if there are any errors, I usually look up "[pasted error] [distro name]" and go from there. if I'm unable to find errors, then my next bet is to look up "[description of issue] [distro name]". Unless I am directly familiar with the component that is having an issue, I try to see if I can find a solution online first. Of course, I never recommend running commands you read online that you don't understand, so take it as a learning experience and pull up some man pages to see what everything is doing. By doing that, you can even begin to learn how to debug and fix these issues by yourself. Even just finding issues other people have and proving it isn't your issue helps narrow it down.
What I will never under any circumstances recommend is using an LLM. Please, just use a normal search engine (I prefer DDG), and find forum posts from real people. Those people are generally capable of understanding what they're saying, so they won't give completely made up information based on generation of the most likely next word from the data an LLM model was trained on. Besides, chances are that the LLMs are trained on the data you would find by searching anyway, so why not go straight to the source?
I do find myself having to troubleshoot issues entirely on my own sometimes, but usually those are of my own doing, and I can likely figure out what I did wrong (I host my own server and tinker with it quite often). Of course, since switching to atomic distros on my desktop, I haven't had any system issues to troubleshoot with it in years. Running Manjaro is practically a guarantee that you'll have system issues, though. I've never had a worse experience with my system than when I ran it, and I'm not alone in that.
Otherwise, if you find yourself unable to find an easy solution, backups are a wonderful thing. My server recently had part of its boot corrupted, and it was just a case of recovering from a backup to restore it. Remember, with backups: 2 is 1 and 1 is none. Data can (and will) get corrupted eventually.
journalctl and log files are very valuable. If it's specific to an application running said application in a terminal with verbose also gives can potentially provide you with a clear indication of what's going wrong.
I'm dyslexic so I get syntax errors all the damn time and thankfully using NixOS it likes to remind me on rebuild how much of an idiot I am.
Worse comes to worse you can always plug the error into an LLM like Claude or Chatgpt. But take that with a grain of salt. It'll give you a good base to start from for debugging but never trust something like Claude that will constantly tell you "it's a known issue" when it isn't.
All this being said I've had the best experience for help via whatever application/distro/whatever IRC channels on Libera chat.
There's an entire step between trying to figure it out yourself and resorting to an LLM which is probably likely to tell you to shove cheese into the USB ports. Regular web searching. Forum and social media posts. The distro's wiki itself or other such resources. You know, the stuff the AI originally sucked up, mashed together, mixed around, and spat back out.
right that's why I said worse comes to worse and to take it with a grain of salt. For very simple issues it's fine, beyond that it's a coin toss. It's a fine rubber duck. Like if I missed something obvious but I'm just not seeing it then it might point that out for me. Like for example I recently reinstalled my OS and I couldn't get wireguad to work so as a last ditch effort I plugged it into Claude and it told me that I had forgotten to replace a privatekey on one of the peers. I had just completely missed it.
Guix channel for packages that can't be included upstream. Please do NOT promote or refer to this repository on any official Guix communication channels.
The UN relief chief on Wednesday urged Israel and Hamas to honour their agreement to return deceased hostages and allow aid at scale into Gaza, warning that it should not be used as “a bargaining chip” amid reports of new civilian killings and extraj…
Russian pro-war sources have published a video of a drone strike on a UN convoy in Ukraine. The footage surfaced on the morning of Oct. 15 via the Telegram channel “From Mariupol to the Carpathians,” which is associated with Russian UAV operators in the Kherson sector. The Ukrainian side had reported a truck attack on Oct. 14, and the UN stated that the incident could be considered a war crime.
[...]
The truck targeted by the drone bears the inscription WFP — the abbreviation for the World Food Programme. On top of the trucks, the UN abbreviation is also visible, marking them as United Nations vehicles.
[...]
The strike on the convoy was reported on Oct. 14 by Oleksandr Prokudin, the head of Ukraine’s Kherson Regional Military Administration. One of the four trucks burned out completely, and another sustained serious damage. There were no reported casualties.
The UN Humanitarian Coordinator in Ukraine, Matthias Schmale, called the deliberate attack on humanitarian workers and facilities a severe violation of international humanitarian law. He emphasized that it could be considered a war crime.
leave it to businessmen to be shocked and appaled that a country you've been delegating most of your industrial production needs to for a few decades is now better at producing than their own companies
were they supposed to just work for you for fraction of a cost forever and don't learn anything?
i swear they think all people except themselves are NPCs
Jones
in reply to _paolor_ • • •RawPedia
rawpedia.rawtherapee.com