This is a great article from @Di4nasoftwaremaxims.com/blog/not-a-…, and I strongly agree with his point: open source / free software project developers, contributors, and maintainers are not "suppliers".
The "software supply chain" metaphor puts demands in the wrong place, and responsibility in the wrong direction.
Yet, it's a very powerful way to help companies understand their reliance on the labor of others.
What different metaphor or picture would be as strong, but with reverse polarity?
For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years.
Is it going too far to describe all of us who depend on free software as parasites? I think I saw someone else use this word while linking to that article.
Předčasně obdržený dárek 🎁 k blížícím se narozeninám od mé milované ženy ❤️! Po elektrokole koukám už pár let, ale sám bych si ho asi nekoupil. Tak to moje nejúžasnější manželka udělala za mě a eBike mi koupila 🙏🥰! Dnes jsem ho byl poprvé vyzkoušet a opravdu to byla dobrá volba 💪🤩!!! Jak každý obvykle říká…proč jsem já si ho nepořídil dřív 🤷🏻♂️🤦🏻??? Takže ještě jednou děkuji moc @centrum_rustu_decin 🤗!!! . #kellysbikes #tygonr90 #ebike #mountainbike #newbike #birthdaypresent
@LeonianUniverse @rooktallon It's more or less the same as using it on windows. Some shortcuts are different, like using command instead of control, but that's about it.
@ToniBarth yup, the synths. If I understand this right, it quantizes individual frequencies to a scale, or in this case, midi data. Kind of like a multiband autotune. And if you crank it up past 100 percent it adds additional resonances.
Three years ago, #FDroid had a similar kind of attempt as the #xz #backdoor. A new contributor submitted a merge request to improve the search, which was oft requested but the maintainers hadn't found time to work on. There was also pressure from other random accounts to merge it. In the end, it became clear that it added a #SQLinjection #vuln. In this case, we managed to catch it before it was merged. Since similar tactics were used, I think its relevant now
The search results are pretty unusable currently. So I've changed it to show apps in this order: App name matches keyword, summary matches keyword, description matches keyword. Also,...
Big thank you to @dogphilosopher for an update to flatpaks on Bluefin. Now flatpaks can be preinstalled from the ISO rather than having to download them on first boot in order to provide the intended experience. That means @thunderbird on the dock by default!
Awesome step forward for us to be able to bring you intended apps by default without straying from @flathub
Hey ya’ll, thanks to @dogphilosopher 's heroic last minute efforts fighting with R2 we’ve got new Bluefin ISOs up! We now ship the Flatpaks on the ISO itself, allowing for a full offline installation.
Tento dokumentární film je absolutně skutečný, my bychom vám nikdy nelhali! To jen Patrik vám jenom lže!Mokument tohohle typu jsem původně chtěl natočit na n...
Nový multitool jako odměnu k nápoji a kapslím najdete na https://www.alchemistr.cz Patrikův nový pořad o konspiračních teoriích @Spiknuti Odkaz na Martino...
Privacy can be powerful. The Librem 14 is the first ultra-portable laptop for the security-conscious- designed chip-by-chip, line-by-line, to respect your rights to privacy, security, and freedom.
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy, freedom, and security
Do you know about KNOME already? It was the nice Aprils fools we did a few years ago with #GNOME and #KDE. While we lost the original domain, I still host a version of it on my server.
(Added in 14.4, currently only sends telemetry. Check is roughly: “yes if system process OR IMP isn’t in shared cache OR method in allowlist OR process name in allowlist”. Method allowlist is mostly UIKit, name list is currently empty save for “objcSwizzleTest”)
This is pretty dumb to be honest, since this is all in your process you can just patch the method lists yourself (there are plenty of PAC oracles or you can just include your own) and flush the caches. I guess some genius thought they could stop swizzling with this ¯\_(ツ)_/¯
It is of course your duty as an iOS developer to make sure this telemetry triggers as much as possible by swizzling all the things. Who knows, maybe they’ll even walk it back
The official video for “Never Gonna Give You Up” by Rick Astley. The new album 'Are We There Yet?' is out now: Download here: https://RickAstley.lnk.to/AreWe...
@Canoa Tuta for Win10 used to work. However, snce its last update, it glitches between "Error message: can't remove app pass wrapper without salt" and not being able to establish, or maintain, an internet connection. I've done everything suggested by various sites, and even gone so far as to do a "clean install" of Windows.
@Canoa Yes, possibly Win10 related. There may also be some "niche" setting, or my system settings could be an "edge case" that's caused the glitch. Unless I can work it out, I'll just have to look elsewhere for a suitable EESP... ...or buy a new Win11 PC. At least then I'd have a TPM onboard.
Download the most advanced FREE DJ software available, featuring iTunes integration, MIDI controller support, internet broadcasting, and integrated music library.
@nund We plan to make our entire suite of products available only for Linux, which is the highest-performance and most stable operating system available. macOS and Windows versions will be gradually phased out, and our representatives will be confiscating noncompliant hardware.
V Česku se rychle šíří nový typ podvodu.Jirkův IG: https://www.instagram.com/jiriburysek/Discord: https://discord.com/invite/MvkjrhmVCbPokud chcete kanál pod...
Hi, yes, were still here! Today in the Kitchen at Cake HQ: Core: Fixes to prevent loss of config in certain scenarios. Mastodon: Improved timeline filtering, now respects load previous settings. New user block/unblock confirmations. Conversations from boosted posts show original content. Enhanced post viewing with username expansions, OCR for images, and new sounds for polls and image posts. Plus, introduce link previews with Alt L/Control Windows L. Telegram: Enhanced message details including file sizes and voice note durations. Library updated for better reply message support. Radio: New feature to view metadata in text dialog. Full change log: tweesecake.app/changes
The Team Kodi PPA has long been a staple for Ubuntu (and similar) users wishing to use more recent, and less adulterated, versions of Kodi. It is with sadness that the team has come to a decision…
So let me get this straight. The claimed-to-be-preregistered-but-wasn't preregistration study that everyone is talking about was initiated by a guy who couldn't get shit to replicate and then concluded that it was time to test the hypothesis that sophons were fucking with human scientists to halt our progress?
All this talk about #xzorcist over the weekend, I want to also point out that it's important to remember that the "software supply chain" largely does *not* exist in regards to open source, because most people have no real relationship other than parasitic consumption with the project.
For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years.
![Screenshot of IDA Pro decompilation of dyld_shared_cache_arm64e, showing objc4 loaded and displaying method_exchangeImplementations. The line with _objc_method_replacement_allowed is highlighted and focused.
void __cdecl method_exchangeImplementations(Method m1, Method m2)
{
// [snip]
if ( m1 && m2 )
{
if ( !os_variant_allows_internal_security_policies("com.apple.obj-c") && !_objc_method_replacement_allowed(m1, m2) )
_objc_fatal("Method replacement is not allowed");
// [snip]](https://fedi.ml/photo/preview/640/534052 "Screenshot of IDA Pro decompilation of dyld_shared_cache_arm64e, showing objc4 loaded and displaying method_exchangeImplementations. The line with _objc_method_replacement_allowed is highlighted and focused.
void __cdecl method_exchangeImplementations(Method m1, Method m2)
{
// [snip]
if ( m1 && m2 )
{
if ( !os_variant_allows_internal_security_policies(\"com.apple.obj-c\") && !_objc_method_replacement_allowed(m1, m2) )
_objc_fatal(\"Method replacement is not allowed\");
// [snip]")
📱
SuspiciousDuck
in reply to infoek.cz • • •