Skip to main content



The CrowdStrike BSOD fiasco is extraordinary in its scale and scope; on Monday's Oxide and Friends, @ahl and I will be joined by security researcher and @LutaSecurity CEO @k8em0 to help us sort through the many layers of this mess. Join us, 5p Pacific!

discord.gg/QrcKGTTPrF?event=12…




Maras. Google AI. Originál a úprava (v obráceném pořadí, samozřejmě).
This entry was edited (2 months ago)


Matthias sharing good news of gtk and HDR development at #guadec2024

reshared this



What's going on with the computers, for those who don't care about computers generally:

A security company (Crowdstrike) pushed out a bad update that broke a huge number of Windows computers and will probably require a lot of painful work to fix. This has resulted in, among other things, airlines grounding flights, hospitals locked out of their systems, and Starbucks in-store ordering being broken.



Hey fellow #Linux users, despite the #CrowdStrike problem only affecting #Windows, this is not a windows problem.

This is an "automatic update that got forced onto everyone with insufficient testing while also having way too many permissions" problem.

If you think big corps wouldn't run something similar on Linux, I have a an NFT of a bridge to sell you.

This entry was edited (2 months ago)

reshared this

in reply to xbezdick

@xbezdick @ljrk @ainmosni that was a Fedora silverbluenissir. And I’ll stop here I will not be nice.


How to add a Google Gemini shortcut to your iPhone homescreen 9to5google.com/2024/07/19/goog…


I posted this a few years ago on Twitter, but perhaps today is an opportune time to post again here:

Any sufficiently advanced "endpoint protection" software is indistinguishable from malware.

(Adding: Has the potential to cause global outages.)



Alternative (computer) input devices?

Does anyone have any suggestions as to what a friend of mine could replace his #keyboard and #mouse with, please?

He's got quite bad neuropathy in both hands (fuck #chemo) and it's quite difficult for him to use either his keyboard or his mouse now.

Tagging for #disability but I don't know if that's appropriate. If you can think of anything more appropriate please let me know.

Please, please boost!



And Track 2 talks on the livestream here: youtube.com/live/vMf3cOtcPtI?f…
#GUADEC2024


Canyon uvedl na trh nový Aeroad. Zajímavý vylepšený kokpit. Cena už tolik ne, Canyon už nepatří mezi výhodné nákupy, navíc prodává jen on-line a prakticky nemá lokální servisy. Aeroad je při stejné sadě (např. SRAM Force AXS) dražší než SuperSix (pravda, má powermeter a jako obutí Pirelli P Zero, ale zase nemá v ceně držák computeru).
canyon.com/cs-cz/silni%C4%8Dni…


GUADEC Day 1 will be back from the break soon. Catch Track 1 talks in 20 mins on the livestream here: youtube.com/live/jS7NzYqxH3o?f…
#GUADEC 2024


A #crowdstrike update can travel halfway around the world while an APT is putting on its shoes


Does anyone have a well sourced ballpark estimate for how many computers are affected by this CrowdStrike issue?
in reply to Chris 🌱 :verified_purple:

Also how much electronic trash this produces. I bet thousands of devices aren't economically fixable...


My favorite part of CrowdStrike’s “statement” about the damage they’ve caused is that there is still a free trial signup thing at the bottom of the blog post. I’ve rarely seen a company so bad at reading the room. Never change, CrowdStrike, never change! crowdstrike.com/blog/statement…


#AndroidAppRain at apt.izzysoft.de/fdroid today with 9 updated and 1 added apps:

* QuizFlow: create, and study word lists with interactive flashcards and modes

Enjoy your #free #Android #apps with the #IzzyOnDroid repo :awesome:



Hoy estamos de aniversario en esta casa. Hace 3 años nos mudamos con @kastwey a Irlanda. La mejor decisión de mi vida, tanto en lo personal como en lo familiar.💚☘️
in reply to modulux

@modulux @quetzatl Juan ya lo sabe que a mí me gusta el clima irlandés, por raro que aún pueda sonar.
in reply to Núria🦔🌵

Si por mi fuera, me gustaría vivir en Singapur. 27 grados todo el año.


Weird Al Yankovic just released a new music video!

youtu.be/y0ZoX4dBvwk



Megabridges, Synapse cleaning, and a retreat. That and much more happened This Week In Matrix!

matrix.org/blog/2024/07/19/thi…



Make no mistake, if an outage similar to Crowdstrike would have been caused by OpenSource, there would be calls across the entire industry and at the government level to ban OpenSource from critical systems. But since it was caused by billion-dollar publicly-traded companies, nothing to see here, move-on.

#CrowdStrike #Linux #OpenSource #Outage #Microsoft

in reply to cslinuxboy

well the Heartbleed bug probably did have folks call for that. It would be ridiculous though given how much open source is used in proprietary tools.


You may know Allyant (which I pronounce “alley ant”) is the combined form of CommonLook, TBase, and Accessible360.

You may also now Allyable (which I pronounce “snake oil”) is an #overlay vendor.

Apparently Allyable (overlay) was spamming folks on the #DisabilityIN conference app. This resulted in folks regularly visiting the Allyant (combined company) booth thinking it was Allyable (overlay).

#accessibilty #a11y
There are lessons here.



Illegal drug found in Diamond Shruumz candies linked to severe illnesses

New testing finds psilocin, related to psilocybin, in gummies purchased in 2023.

arstechnica.com/science/2024/0…



now seems like the perfect time to share my opinion that link shorteners are a bad idea. worse than nothing. just use a real url; you aren't paying by the character and no one's gonna go into their browser and type in a meaningless string of gibberish no matter how short you make it. all they accomplish is obfuscation and completely unnecessary failure modes. glad goo.gl is getting killed off tbh maybe it'll get people to stop doing this shit
in reply to sjolsen.cdda.wav

I'm rather surprised that people still use their services. and trust them. They must either have a rather short memory (Google Reader, anyone? Writely, Google Code?) – or be caught in the eternal loop with the "benefit of doubt"…

killedbygoogle.com/




Let's cut the bullshit and spell out a few things. The IT security industry is about as trustworthy as the food supplement and vitamin industry, but somehow they escaped the same reputation. Their products are overwhelmingly based on flawed ideas, and the quality of their software is exceptionally bad. And while not everyone will agree with the harshness of my words, I'll say this: Essentially everyone in IT security who knows anything in principle knows this.

reshared this

in reply to hanno

Their products are flawed not just because they're badly implemented - which they are - but because they are based on a stupid idea. The idea that you improve your IT security by adding more complexity. Doing the opposite is the right approach. But you can't sell that as a product. (You can still sell it, but it's not something you just plug into your network and get security magically.)
in reply to hanno

Honestly, if we could get that one basic message out, that if their IT security is based on more complexity, not less, that they're doing it wrong, maybe we could start putting crap companies like crowdstrike or citrix out of business.


Thank you, Carrie, for letting people know about the BT Speak on your Carrie on Accessibility YouTube channel.
youtube.com/shorts/1kkRhG1N6a8…




All these smug Linux users really missed the point of how close y'all were to something much worse than this with the whole xz thing.

Your licence choice isn't going to save you from fundamentally dysfunctional approaches to tech.



UPDATE

:solidarity: 102% in DE! citizens-initiative.europa.eu/…

🇪🇺 Es gibt eine EU-Petition für eine europ. Vermögenssteuer, initiiert u.a. von Marlene Engelhorn und Thomas Piketty.

💸 Die Steuer wollen sehr viele Menschen, deswegen kann die Petition erfolgreich sein.

🔢 Österreich 20%, da fehlen noch 10.000.

👏 Belgien: 66%, Dänemark 88%

(Frankreich: 200% 😮 )

In vielen Staaten fehlt noch viel.

✍️ Schickt sie in alle Länder - und zeichnet mit!

tax-the-rich.eu/

#TaxTheRich

This entry was edited (2 months ago)
in reply to Anne Roth

Hinweis: Es ist nicht etwa eine ordinäre Petition. Es ist eine förmliche "Europäische Bürgerinitiative" - ein Instrument, das in der EU eigens vorgesehen ist, um die EU-Kommission zu Vorlage und Einbringen eines entsprechenden Gesetzentwurfs zu zwingen. - Ich habe das natürlich schon unterschrieben!


"das Bundesverkehrsministerium plant eine massive Verschärfung der Regelungen für Fahrradanhänger. Demnach dürfen Fahrradanhänger zukünftig maximal 50 kg Gesamtmasse aufweisen, ansonsten brauchen sie ein eigenes Auflaufbremssystem. Zur Einschätzung: Bei einem Eigengewicht von 15 kg blieben nur 35 kg an Zuladung übrig, was man locker mit zwei älteren Kindern überschreiten würde. Von größeren Hunden, Gartentransporte usw. wollen wir gar nicht erst anfangen."

cargobikeforum.de/forum/index.…

in reply to Katja Diehl

Ich habe mal ein wenig gegoogelt. 50 kg wären 10 kg mehr als bisher für Fahrradanhänger ohne Bremsen empfohlen sind. Auch wäre das mehr, als die meisten Hersteller für ihre Fahrräder und e-Bike (40 oder 45 kg) ungebremst empfehlen.
in reply to Katja Diehl

Unabhängig vom Gewicht gibt es eine Max.Geschw. von 25 km/h, die gerade mit Kindern wegen Stößen nicht überschritten werden sollte.

survivalmesserguide.de/wie-sch…

Darüber hinaus empfiehlt der ADFC schon maximal 45 kg Zugladung.

adfc.de/artikel/lastenanhaenge…

Auch das zulässige Gesamtgewicht eines Fahrrades (oftmals um die 120 kg) setzt da Grenzen.

Dass ausgerechnet das Verkehrsministerium eine Begrenzung zur Sicherheit fordert und nicht etwa sichere Wege ist allerdings fragwürdig.



I set aria-live on a span so I can have NVDA tell me when something happens. Even when the message is the same, though, NVDA speaks it. I'm using aria-live="polite". Is there a way to set it so I only hear the announcement if the text in the span has changed?
in reply to Marco Zehe

@Marco Atomic didn't, but updating the text only if the new message is different from what's already there did.


New Debian Developers and Maintainers (May and June 2024) bits.debian.org/2024/07/new-de…



in reply to Pavel Kout

@pavelkout Ta trasa měla 94 km, tak jsem ještě ten zbytek dorazil :-) Jen jsem zase blbec zapnul cyklistika uvnitř, naštestí jsem tam zapnul i trasu do navigace :-)


Starting now: on the #curl changelog page where it lists all changes ever done to all #curl releases ever done, it now also conveniently links to the "known vulnerabilities" for each released version.

curl.se/changes.html

#curl


Welcome martinevsky as #curl commit author 1287: github.com/curl/curl/pull/1423…
#curl



Well, I think we know the subject for Monday's Oxide and Friends! Any thoughts on who @ahl and I should ask to have on as a guest?
in reply to Matt Campbell

Someone who did a much better job of writing a plausible tech thriller was Daniel Suarez with his novel Daemon. (The sequel brings in some less plausible sci-fi elements IMO.) He didn't predict the CrowdStrike disaster, but he did try to warn about the dangers of the Windows monoculture in the 2000s. In recent years, I thought that novel was too dated. But now, maybe not. I'm sure he'd be happy to come on and say "I told you so."
in reply to Matt Campbell

If you can only read one chapter from Daemon to see what I mean about the author warning about the Windows monoculture, check out the chapter titled "The Red Queen Hypothesis". I think that's chapter 31.