FoxQuirk 🦊 @quirk@computerfairi.es

Terry keeps rolling out the bangers. Finally, he's found his medium.

https://downpour.games/~terry/a-proper-cup-of-tea

A couple things to think about here:

This appears to be a malicious maintainer - not a compromised account. Meaning the person themselves, coded this in an pushed it out.

So:
1) Did they try and backdoor any other code?
2) Are they part of a greater campaign or is anyone else helping them.

This is a massive breach of trust.

That said! Huge kudos to Andres Freund, Florian Weimer, and others in finding this.

A lot of eyes are on this now. CISA is involved. Major distros are involved, etc. Many eyes and such.

#infosec #linux #foss #hacking #cve20243094 #cve

xz-utils was backdoored by its upstream. Tracked as CVE-2024-3094 and thoroughly documented by vuln discoverer Andres Freund on oss-security@: https://www.openwall.com/lists/oss-security/2024/03/29/4

Distributed tarballs of xz has been backdoored.

https://www.openwall.com/lists/oss-security/2024/03/29/4

#xz #security #linux

Anyway the entire ops/dev world just dodged (we think/hope we dodged, anyway but are not 100% sure) the biggest supply chain attack in history that would have screwed absolutely, literally, everyone.

This needs a giant f**king industry-wide post-mortem once we're sure we're not all doomed.

So this is now the shape of how technology companies introduce new things. A big stage. A huge screen. Prancing and preening about the new thing they have to show you

But the problem is: we KNOW

We KNOW how it works now. There's nothing surprising about what's going on. What was once shocking and exciting—the miniaturization and high usability of advanced consumer electronics—is both familiar and expected.

Yet we're stuck in the old, tedious pattern. Going through the motions.

"A world without trans people has never existed and never will"
Poster spotted in Olympia, WA

this is genuinely heartwarming

a 10x programmer is a programmer who has ten evil exes

me, learning about about the atomic age: man it's so goofy they tried to use radioactivity for everything.

15 YEARS LATER

every tech company i've ever interacted with: We've added AI to our product!

type of girl who tries to cause exactly the right international economic upsets as to ensure all currencies' exchange rates are perfect decimal orders of magnitude. no more 1.2 or 1.5 or 3. only 1, 10, 100, or 1000

People who are over the age of 30 and play video games on Xbox or PlayStation, when was the last time you played games on your games console, and if you can, please elaborate which console and when?

I’m trying to see how many of said folks are actively playing these consoles. I fully expect younger generations to play on said devices, but I do wonder how the over 30s get along with time management, cost of games, cost of living etc how they are managing…

#games #videogames #gaming