https://snac.lx.oliva.nom.br/lxo/p/1794162955.597409 - I'm fascinated by the universe where if Omelas produced free software, the FSF would believe it was a moral imperative to merge it

Ended up ebaying a Kramer VP-773, which is ridiculous overkill but apparently has about the best comb filter in the business

Turning up to an event and seeing a shipping container labeled "Furrytel" is a pretty strong indication it's going to be a good event

RE: https://digipres.club/@alexandra/117576651383899283

llm user: uh just b/c llms cause harms elsewhere, that does not entail they will cause harm in our project

also llm user: I have adopted a moral framework wherein I am compelled to profit from slavery

I would simply not publish an admission that I'd told the police something that contradicts what I would later tell the court

(I have some laserdiscs suffering from laser rot, the quality of the output signal is pretty terrible)

I bought one of these composite to HDMI converters a while back (https://www.amazon.com/dp/B0CPDWL14T) and it does a poor job of managing to keep sync with poor quality inputs and I get frequent video dropouts. I don't care about latency as long as it maintains AV sync so I'm not in Retrotink territory, but I do want video to keep showing up. Input is a Sony LDP-150. Being able to zoom letterboxed 4:3 out to 16:9 without destroying the aspect ratio would be a bonus.

Why are your containers running sshd you know never mind

Shodan still shows a shitload of these devices directly connected to the public internet, so attackers can hit them without needing to bounce through anything else first. Some of them are connected to cellular networks, so there's no level of local network security policy that'll save them. A whole bunch of poor decisions bringing us to this place.

Not really surprising at all, given the state of the embedded market, but turns out that the Danfoss freezer control systems that got hacked are Linux based. You can build insecure infrastructure on top of any OS of your choosing. The entire industry needs a reckoning.

https://www.voting.works/ produces open source electronic voting solutions that are carefully designed to be as transparent as possible, but any electronic device has enough complexity in it that there will be people asking questions. And if the past month has taught us anything, it's that being open source doesn't mean that something is magically free of security vulnerabilities (no shade on Votingworks, I think their designs are as secure as possible with current tech),

There's a whole bunch of ways in which electronic voting machines raise concerns over domestic or foreign interference, and also there's a *lot* of safeguards that make it difficult in the first place or which allow identification after the fact. Experts in the field consistently assert that (a) we should be doing better, and (b) that there's zero evidence that there has every been any interference at that level

And downloaded some code that then restructured a whole bunch of their Homebrew installation and nothing running on the client noticed this?

Wait the Binance developer whose laptop was the entry point interviewed with another company (that turned out to be fake) *with their work laptop*?

If the default posture of UEFI systems that trust the Windows CA is to be vulnerable, why enable it by default? What's it actually buying you?

https://arstechnica.com/security/2026/11/uefi-bootkit-infected-fully-patched-windows-machines-is-microsoft-to-blame/ calls to mind something I wrote back in 2022: https://mjg59.dreamwidth.org/60248.html . Systems are vulnerable to UEFI secure boot bypasses because Microsoft refuses to revoke their old bootloaders by default, because that would break a bunch of existing install and recovery media. On the 3rd party side, we've aggressively revoked old bootloaders and just taken the hit. In terms of underlying trustworthiness, the idea that the Windows CA is better than the 3rd party one seems ridiculous.

It just seems fundamentally bizarre to simultaneously claim that you're a journalist and then also not remove or correct content you seem to be admitting is based on an incorrect conclusion

Somewhat surprised to read Roy Schestowitz appearing to admit that it wasn't me who conducted the abuse campaign against him and his wife, but it's good progress. Maybe now he'd like to take down all the remaining pages that make the false accusations so we can both just get on with our lives?

it took a while, but the bash script i wrote to find the most popular article category on wikipedia by curling every single article has finally finished. no i don't know what a "database dump" is. i can now reveal that the most popular category by far is 429 Too Many Requests

This seems pretty clearly the right interpretation, since otherwise an order that you stop publishing a webpage would let you start publishing it via any other means instead (FTP, IPFS, a series of postcards delivered via the Royal Mail, etc)