2026-04-10T22:09:10Z https://yabu.me David Chisnall (*Now with 50% more sarcasm!*) https://yabu.me/npub13gcwraghdcw9xzkg3tky24feu0lzkhtlt57wpdn58y4m4tyr9qdsxdk50d https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/867/038/214/333/074/original/948015da7238758d.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/867/038/214/333/074/original/948015da7238758d.jpg https://yabu.me/nevent1qqsrjwlz5lwevlznyzjwjgsy98q8nxjvx0n4kr36yrspyt34cakzphszyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pkplh82g In reply to <a href='/nevent1qqsxnq94c0wg6jae5mtga5k075w98qmvvp68cr46qkv525yts04he8slqt5x4'>nevent1q…t5x4</a><br/>_________________________<br/><br/>Around ten years ago, one of the FreeBSD developers had an SSH key compromised. This key gave access to the machine with our subversion server on it. And, due to how svn worked, every user had write access to the directory containing the repo.<br/><br/>Subversion does not have any way of doing integrity checks, so the recovery process involved (via a script) checking out each revision in turn, then doing the same with a git mirror, and validating that they were the same. <br/><br/>Audit logs showed that the attacker had logged in, tried running a few Linux commands, got error messages, and logged out. We were *incredibly* fortunate that they didn’t do anything more serious. 2025-09-09T07:44:25Z https://yabu.me/nevent1qqsveqde6vcdkfyh0y0dvnv2w44rq2a6d6sravsamus0t77tg8k8lgczyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pkfuczpq MSRC: Memory safety bugs are the root cause of around 70% of security vulnerabilities.<br/><br/>Normal people: We should deploy things that mitigate those and reduce the percentage by fixing the bugs.<br/><br/>MS senior leadership: Let’s put a thing that introduces entirely new categories of vulnerability into every product and make developers use coding tools that introduce vulnerabilities that experienced developers never would! Then the 30% will get bigger! 2025-08-25T07:41:41Z https://yabu.me/nevent1qqsqp08jy8h40t58sm3ym3sp2axxvzatx7w32pvkz0ead7elq0xwq4czyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pkysgp65 In reply to <a href='/nevent1qqsgv4kp0tssljkkq3t6mcwvgs2g0dtzzlkh4y3mlu7hnn4t7lctahgkn4me0'>nevent1q…4me0</a><br/>_________________________<br/><br/>Simple solution: A 10% exit tax on any wealth over $100M. If you give up residency, you are instantly taxed a total of 10% of your wealth. If you think you&#39;ll enjoy the next ten years more out of the country, pay the next ten years of wealth tax up front and bugger off.<br/><br/>More complex solution: There needs to be a lot more international cooperation on taxing the morbidly wealthy. This needs to include agreed minima on wealth taxes across all of the places people are likely to want to live, but also sanctions on people who choose to hide from them. For example, people domiciled in countries that are not signatories to extreme-wealth treaties may not:&lt;li&gt;Be passengers in private jets that overfly or land in areas that are. Fine is €1M for the first offence and doubles each time. Fines that are not paid for more than 30 days result in prison time.&lt;/li&gt;&lt;li&gt;Own a controlling interest in any news or advertising company that operates in a signatory country. Such ownership results in a block for the company.&lt;/li&gt;&lt;li&gt;Donate to any political party or candidate.&lt;/li&gt;&lt;li&gt;Own property worth a total of more than the median house price in any signatory country.&lt;/li&gt;<br/><br/>If all of the EU countries agreed to that list of conditions, I wonder if US billionaires would start pressuring the US government to sign. I doubt they&#39;d like that set of restrictions on their activities. 2025-08-20T09:11:13Z https://yabu.me/nevent1qqsxa4yxtevmfuslygtp8x3uvagvf73h4xeuvdc3ja2u96wdjju4adgzyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pkpd9hnr In reply to <a href='/nevent1qqsrq2l0fyluh0lpl7yw5ez9sgv60pjsw9mytlyyta9qh2h6tqfc6rsr4tej8'>nevent1q…tej8</a><br/>_________________________<br/><br/>It looks as if this is the actual error:&lt;code&gt;CMake Error: The source directory &#34;/usr/ports/x11-themes/plasma6-aurorae/work/aurorae-6.4.2&#34; does not exist.&lt;br&gt;Specify --help for usage, or press the help button on the CMake GUI.&lt;br&gt;&lt;/code&gt;<br/><br/>The line below appears to have worked:&lt;code&gt;/bin/mkdir -p /usr/ports/x11-themes/plasma6-aurorae/work/.build&lt;br&gt;&lt;/code&gt;<br/><br/>So I guess the port thinks it&#39;s building in the work/.build directory, but is then running CMake to target work/aurorae-6.4.2, which doesn&#39;t exist?<br/><br/>Is this in Poudriere, or are you trying to build on a host system (the latter is almost certain to fail for many reasons)? 2025-07-10T15:45:39Z https://yabu.me/nevent1qqsfgy5euq3lu76r977d5h0nn230qrwp26n8e3m3mesgnqqxgnwwrggzyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pk6ru387 In reply to <a href='/nevent1qqst23ddyg9p37jyxtflnmu6sjxqx24cpvq6ytyfy9a65tjqhxfduhqyfltll'>nevent1q…ltll</a><br/>_________________________<br/><br/>They can even increase, as long as house-price inflation is lower than wage inflation. Keeping house-price growth at 1-2% and wage growth at 2-3% for a while would slowly fix the problem. 2025-07-02T14:40:00Z https://yabu.me/nevent1qqsx2ktfnwster5ppx3uqsw8shf74d77npfg7vxkyhy2mh78dcrtpdqzyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pk0njncu In reply to <a href='/nevent1qqsvdzsuxzgq7h90hhm20nrlkz5hzfelzt7tps8msk9hjwmpugeqh7cheae6u'>nevent1q…ae6u</a><br/>_________________________<br/><br/>But when they leave, you need to do a few other things:&lt;li&gt;Start properly taxing assets they have in the country.&lt;/li&gt;&lt;li&gt;Bring back limits on media ownership (no newspapers or TV stations can be majority owned by foreign nationals, for example).&lt;/li&gt;&lt;li&gt;Ban any direct or indirect contributions to political parties by them.&lt;/li&gt;<br/><br/>You want to leave? Leave.<br/><br/>Oh, and ideally do what the USA does and have a big exit tax. Have a reasonably high threshold, maybe £2M, but you pay 50% tax on all assets above that line when you leave. 2025-06-22T09:53:51Z https://yabu.me/nevent1qqsvfe9342qkkyfgccww9w5vvxv3mljty6nhesk7tz9f0pdhxjtk0cgzyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pklt4rdz In reply to <a href='/nevent1qqsqc0rjsdx2pqfpww6qutpjphqznaxgccx4jrdr7f3lwf04q9q8fds4d85ka'>nevent1q…85ka</a><br/>_________________________<br/><br/>I don&#39;t understand how the Royal Society doesn&#39;t realise how much damage it did to their reputation to admit him in the first place.<br/><br/>Even before all of the fascist stuff, he was not a scientist, not a researcher. His contributions to science and engineering were that he was a rich person who funded some work. <br/><br/>Making him a FRS made it very clear that it&#39;s not an institution for scientists, it&#39;s an institution for plutocrats.<br/><br/>It used to be that being a FRS was something to aspire to an a scientific career. Now it&#39;s an easy decline if offered, because who would want to be associated with an institution like that? 2025-04-28T09:22:44Z https://yabu.me/nevent1qqsxsz2aj0mqpg5zm2vhmdqzvtnk8ed6u97acdjdzrs6pajuuss7akgzyz9rpc04zahpc5c2ez9wc324883lu26a0awnec9kwsujhw4vsv5pkl94nj7 In reply to <a href='/nevent1qqspqqnvq75krj07ahqf0v0tlu33z9q89swndt76meljkv373zs5vgcyhz55v'>nevent1q…z55v</a><br/>_________________________<br/><br/>Is this all true if you separate out F-Droid as a program and F-Droid as the default repository? My impression of the F-Droid default repository is pretty much aligned with your post, but it&#39;s also easy to add other repositories. I&#39;d expect something like WireGuard or Firefox to be able to provide their own F-Droid repository quite easily. Are there also flaws in the client app that make this a bad idea? 2025-01-27T17:54:43Z