• 10 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle





  • Bluetooth has one of the largest network stacks. It’s bigger than Wifi. This means some parts of the stack probably aren’t tested and may have bugs or vulnerabilities. It has duplicate functionality in it. This opens up the possibility that flaws in how different parts interact could lead to vulnerabilities or exploits.

    A number of years ago some security researchers did an analysis of the Windows and Linux stacks. They found multiple exploitable vulnerabilities in both stacks. They called their attack blue borne, but it was really a series of attacks that could be used depending on which OS you wanted to target. Some what ironically, Linux was more vulnerable because the Linux kernel implemented more of the protocol than Windows.


  • There’s talk on the Linux kernel mailing list. The same person made recent contributions there.

    Andrew (and anyone else), please do not take this code right now.

    Until the backdooring of upstream xz[1] is fully understood, we should not accept any code from Jia Tan, Lasse Collin, or any other folks associated with tukaani.org. It appears the domain, or at least credentials associated with Jia Tan, have been used to create an obfuscated ssh server backdoor via the xz upstream releases since at least 5.6.0. Without extensive analysis, we should not take any associated code. It may be worth doing some retrospective analysis of past contributions as well…







  • A complete and utter mental break down which culminated with me bursting into tears in my supervisor’s office. He’s a cool guy though, so that was just very awkward for him.

    Overall, not an approach I would recommend, but it did put things into perspective for me. I did seek professional help after that, but I had already broken through a lot of the tough stuff. Also, it took 2-1/2 months to see a psychiatrist.

    As for anxiety overall, it never really goes away. You can learn to recognize it and develop habits to break that feedback loop. Sometimes I have to say to myself, “It’s time to stop this,” then mean it and actually deal with what’s put me in a higher state of anxiety.








  • I honestly see this being a continued expectation to be a bigger issue. Two communities with the same name on different servers could be very different spaces. Giving users the ability to group them together homogenizes them in a way that is likely bad for the ecosystem overall.

    I see the issue, but I still see the tradeoff as being worth it. Right now, if I want to browse technology commies I have to click into each one I’m subbed to. This means I’m going to go the to biggest one first, then second biggest, and so forth. This pretty much favors the big commies over the small ones because this is just annoying to the end user. Grouping gives those smaller ones a better chance of appearing in someone’s feed thus spreading out activity over a larger part of the lemmy fediverse.



  • We have a very large christian population, and they all don’t behave in a monolithic manner. For surveys it makes sense to ask which denomination or type of christian they are. Some will response Catholic, Baptist, Protestant. Some will respond christian, sometimes non-denominational christian. It improves the survey results. For example, you might find differences between Catholics and Baptists that wouldn’t show up if you grouped them all together under a christian category.