drspod

joined 2 years ago
[–] drspod@lemmy.ml 6 points 26 minutes ago

the lawsuit accuses Keighin of streaming leaked Switch games, including this month’s Mario & Luigi: Brothership, ahead of release using emulation software as many as 50 times in the last two years. Nintendo is seeking $150,000 in damages for each instance of alleged copyright infringement.

Hilarious that the screenshot Kotaku use in the article is his social media post with his recommendations of what sites to download the games from.

[–] drspod@lemmy.ml 3 points 3 hours ago

Informative and interesting article, thanks for sharing.

Quite a few of these POSIX improvements were new to me, even though it turns out that they already exist in the GNU versions of the tools.

[–] drspod@lemmy.ml 1 points 4 hours ago

The ad at the end doesn't help either.

[–] drspod@lemmy.ml 4 points 23 hours ago (1 children)

You don’t even have to do anything and there are thousands of people out there trying to protect you from getting more fucked[…]

Don’t go around telling them they don’t have to “do anything” plz 😅

You removed the emphasis on "You" from my quote which changes the meaning. I specifically meant that you, the person that I am replying to, don't need to do anything, and there are people who will do something on your behalf.

Nothing that you've said changes my critique of your critique btw. You said:

he lives in absolute La La land

No, actually he presented a well thought out analysis of the way that the relationship between business and customer/user in our current system, along with the relationship between business and legislator, both entrenches monopolies and causes a pathological dependency whereby customers cannot exercise their right to freely choose with whom they do business, and so their rights are severely diminished.

the idea that these webs of laws or these models of “how things should work” mean anything tho the people with power are complete nonsense.

The main point of my reply was that you are arguing against a straw-man here since the intended audience of the article is not "the people with power."

like, buddy, your country just went full Nazi. You’ve been living in a total fantasy. You’re not going to rethink the concept of fixers, get a grip.

A non-sequitur and then a baseless dismissal of the argument that suggests that you either didn't read it, or didn't understand it.

[–] drspod@lemmy.ml 6 points 1 day ago (3 children)

Did you think this blog post was aimed at the people with power, to petition them to change the laws?

It's aimed at us, the people getting fucked over, to point out what (among the many other things) we should be fighting for. Commentary like this is important to align the goals of the organizations, charities and lobby groups that defend YOUR civil rights by filing amicus briefs, publishing articles, encouraging activism and drives to get citizens to write to their representatives on the important matters that affect their rights. You don't even have to do anything and there are thousands of people out there trying to protect you from getting more fucked by Big Tech and capitalism, on a volunteer basis.

It sounds to me like you've just given up hope that any progress can be made on this front, given the new status quo.

Never give up. Just because civil rights defenders will be on the defensive for a few years does not mean that discussions of what is worth defending no longer have value.

[–] drspod@lemmy.ml 5 points 2 days ago

Flexing my GIMP skills that I use about once every 7 years

[–] drspod@lemmy.ml 5 points 6 days ago

I will get a custom paint job on my car depicting a person driving while on their phone with no seatbelt on.

[–] drspod@lemmy.ml 47 points 6 days ago (8 children)

If you distribute Linux crackers then you need to provide not just the list of ingredients but also the recipe used to make them.

[–] drspod@lemmy.ml 54 points 1 week ago (7 children)

Idgaf about rabies

Now that's a take I wasn't expecting to see.

[–] drspod@lemmy.ml 24 points 1 week ago (1 children)

The past tense of the verb "to lead" is "led."

"Lead" is a heavy metal.

[–] drspod@lemmy.ml 7 points 1 week ago

It's one of the most anticipated translations because it's a beautiful looking game that is just impenetrable if you don't speak Japanese. The best we had before was a translation script that you could read along with a walkthrough guide, but that's not the way most people like to play a game.

It's not surprising that if you start a project for a game like this and then go no-contact for a decade, people will start to look to see if they can pick up where you left off. There's this unwritten rule in the fan-translation community that you don't start working on a game that someone else has already started working on, but what is the time limit on that?

It seems like everyone in this situation could have done a better job of communicating in the first place, and then could have been more gracious to eachother after the fact.

 

Threat actors are utilizing an attack called "Revival Hijack," where they register new PyPi projects using the names of previously deleted packages to conduct supply chain attacks.

The technique "could be used to hijack 22K existing PyPI packages and subsequently lead to hundreds of thousands of malicious package downloads," the researchers say.

If you ever install python software or libraries using pip install then you need to be aware of this. Since PyPI is allowing re-use of project names when a project is deleted, any python project that isn't being actively maintained could potentially have fallen victim to this issue, if it happened to depend on a package that was later deleted by its author.

This means installing legacy python code is no longer safe. You will need to check every single dependency manually to verify that it is safe.

Hopefully, actively maintained projects will notice if this happens to them, but it still isn't guaranteed. This makes me feel very uneasy installing software from PyPI, and it's not the first time this repository has been used for distributing malicious packages.

It feels completely insane to me that a software repository would allow re-use of names of deleted projects - there is so much that can go wrong with this, and very little reason to justify allowing it.

 

A reported Free Download Manager supply chain attack redirected Linux users to a malicious Debian package repository that installed information-stealing malware.

The malware used in this campaign establishes a reverse shell to a C2 server and installs a Bash stealer that collects user data and account credentials.

Kaspersky discovered the potential supply chain compromise case while investigating suspicious domains, finding that the campaign has been underway for over three years.

view more: next ›