Notices by Rysiekúr Memesson (rysiek@mastodon.social), page 3

So, here's a couple of decisions made by algorithms already used by YouTube for a very similar purpose.

You tell me if this makes sense.

1. NASA's Official Mars Landing Video Got Taken Off YouTube Over Bogus Copyright Claims
https://gizmodo.com/5932089/nasas-official-rover-landing-video-got-taken-off-youtube-over-bogus-copyright-claims

"The Curiosity Rover may have landed safely on the surface of Mars, but like all good things, it's not invulnerable to completely bogus takedown requests.

(...)[T]he video was rendered unavailable due to a copyright claim by Scripps Local News."

@dashie

FLOSS community:
> hey let's put all our eggs in this one GitHub basket
> what could possibly go wrong
> GitHub is so convenient

Microsoft:

@Laurelai indeed.

What I also love about it is it shows a very interesting thing: Germany 44% renewable, but only 56% low-carbon. France is only 25% renewable, but *97%* low-carbon.

And the difference is that France uses way more nuclear power.

One of my gripes with Greenpeace is their dogmatic stance on nuclear power.

On drones, #Google, #Evil, #reCaptcha, and the #AGPL:
https://joeyh.name/blog/entry/prove_you_are_not_an_Evil_corporate_person/

#GoodRead #FreeSoftware #DontBeEvil

Hey #Fediverse #Tech #InfoSec somebody mentioned here Maciej Cegłowski and the term he coined for people and companies hiding behind the complexity of artificial intelligence and machine algorithms.

Hiding as in pretending it's not the people's/company's fault that an AI algo did something bad/stupid, it's the AI's fault. Shifting the blame.

It was a neat phrase, two words, can't remember it for the life of me.

Halp?

@Gargron @angristan

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

;)

@xrevan86 I used to run 2 XMPP servers. Tried setting up audio communication, and MUC, and send files, and it was always a major pain in the arse, and barely worked if worked at all.

XMPP is not a solution in any way, shape, or form, until they fix the "random XEPs implemented by random clients/servers" bullshit.

As to Wire, if I had to make this decision today, Wire would probably be it. But I am not going to move hundreds of people to Wire right now; Signal is good enough.

What the actual fuck:
https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now

"A group of European security researchers have released a warning about a set of vulnerabilities affecting users of PGP and S/MIME. EFF has been in communication with the research team, and can confirm that these vulnerabilities pose an immediate risk to those using these tools for email communication, including the potential exposure of the contents of past messages."

#InfoSec

Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635

tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62.

Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth."

#InfoSec

I do not want to live on this planet anymore:
https://arstechnica.com/information-technology/2018/05/drive-by-rowhammer-attack-uses-gpu-to-compromise-an-android-phone/

"[T]he exploit is the first to show that GPUs can flip individual bits stored in dynamic random-access memory. (...) It's also the first Rowhammer attack that uses standard JavaScript to compromise a smartphone, meaning it can be executed when users do nothing more than visit a malicious website. Another key innovation: on average, GLitch takes less than two minutes to compromise a device"

#infosec

Be careful not to fall into the web of Arachno-capitalism!

Wait, what. Windows 10 sends info on USB devices plugged in directly to Microsoft?

And it does that using pure HTTP?
https://pastebin.com/ttYp5rLg

You gotta be kidding me.

#InfoSec

@jordila @conoro Twitter used to have RSS/Atom for each user. They killed it some years ago.

Mastodon has it, of course: https://mastodon.social/users/rysiek.atom

Google disables Domain Fronting:
https://www.theverge.com/2018/4/18/17253784/google-domain-fronting-discontinued-signal-tor-vpn

I was always on the fence about DF: 1. no browser support (but does help Tor or apps like Signal), and most importantly 2. reliance on big players like Google or Cloudflare.

Turns out my gut feeling about 2. was right. Centralizing the Internet is not a solution.

@clacke indeed.

However, while criticizing Congress for their lack of tech-savviness is justified, it should not obscure the fact that Facebook and other tech giants are *exploiting it maliciously*.

Should Congress get up to speed with tech? Yes.

Is this the main issue here? Absolutely not, and we need to put the spotlight back on Mr Zuckerberg.

@conoro funny how any website run on any popular platform (WordPress, Drupal, *shudders* Joomla) has RSS/Atom built in.

I'd say RSS is doing fine.

This is important: https://savecodeshare.eu/

"Current EU Copyright Review threatens Free and Open Source Software.
Take action now to preserve the ability to collaboratively build software online!"

#FLOSS
#EU
#Copyfraud
#Copyright

@crowd42 "Among those killed was Yaser Murtaja, a 30-year old Palestinian photographer, who was shot in the stomach by an Israeli sniper despite wearing a jacket emblazoned with 'PRESS' to identify him as a journalist."

https://en.wikipedia.org/wiki/2018_Gaza_border_protests#6_April

Ffs.

TIL #KeePassXC has browser integration:
https://keepassxc.org/docs/keepassxc-browser-migration/

10/10 will use again

#InfoSec

Currently at different #Fediverse #Mastodon admins' locations, while they're dealing with the additional load related to #DeleteFacebook: