Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)P
Posts
14
Comments
82
Joined
5 days ago

  • This is pretty good, but you gotta make it a little more subtle. Open with something perfectly reasonable and then sort of work up to the bait.

  • Yeah. I feel like in a few years when literally nothing works or is maintainable, people are going to have a resurgent realization of the importance of reliability in software design, that just throwing bodies and lines of code at the problem builds up a shaky structure that just isn't workable anymore once it grows beyond a certain size.

    We used to know that, and somehow we forgot.

  • This has been happening to dozens of people. Yes, even white people from white countries. Don't fucking come to the US right now. We're not even really safe inside with our genuine US passports and all, definitely don't go out of your way to subject yourself to it if you're literally the currently active entry in the little Martin Niemöller to-do list.

  • Yeah. I have no idea what the answer is, just describing the nature of the issue. I come from the days when you would maybe import like one library to do something special like .png reading or something, and you basically did all the rest yourself. The way programming gets done today is wild to me.

  • I sort of have a suspicion that there is some mathematical proof that, as soon as it becomes quick and easy to import an arbitrary number of dependencies into your project along with their dependencies, the size of the average project's dependencies starts to follow an exponential growth curve increasing every year, without limit.

    I notice that this stuff didn't happen with package managers + autoconf/automake. It was only once it became super-trivial to do from the programmer side, that the growth curve started. I've literally had trivial projects pull in thousands of dependencies recursively, because it's easier to do that than to take literally one hour implementing a little modified-file watcher function or something.

  • Yes, how dare they invade a sovereign nation and have their state TV call for exterminating every single one of its population, and threaten people with nuclear weapons, because those countries committed the sin of maybe joining a defense alliance which would make it more difficult for them to do those things without getting their nose bloodied for it. Or, wait, that was fine. You were talking about the other guys? Yeah, those guys. I get it.

    Russia had no choice, at the end of the day. It's from the "I didn't mean to break her arm but she said she was gonna call the cops on me and you know I can't have that shit" school of enlightened statecraft.

  • You may be right, but I don't think he's even as organized as that. I think he's just wandering around playing big boy and pooping on himself, as he usually does.

  • Yeah, exactly. If you read the Snowden leaks to learn the details of what some of their actual capabilities are (smuggling flawed keys into the DH exchange for most major web browsers for example), it makes this stuff look like kids in their basements fucking around.

  • I feel like they're pretty ahead of you. I doubt that anyone in Ukraine or EU is taking Trump's opinion on the "peace deal" or the war all that seriously. They can't just openly ignore him, just because the US is still providing a ton of weapons, but I would be very surprised if they're taking him seriously.

  • Reddit: Trust us we're GENIUSES bro, most popular web site in the world, we're so smart I swear

    Also Reddit: Hey can we have more money, we lost it all again. This new plan's gonna work tho

  • Oooh... I get it. Yeah, there are people all over their media who are playing up the cynicism and making it sound cool. That's absolutely a big problem too. And yes, it makes them more cynical about everything (both the people who buy into it, and the people who don't, which is an impressive achievement.)

  • I cannot overstate how wonderful this is. Thank you.

  • That's not really what I'm talking about. Being trusting of "the establishment" certainly helps make Fox News's job easier, but I'm talking about people who had health insurance, good unions, qualified doctors, all that stuff, for all of their adult lives. It just leads you to generally be of this kind of boomer "firm eye contact and a handshake will get you far" mindset in life.

    It's not fascist to like the system you're embedded within because it gave you a fair deal.

  • I feel like this is kind of the amateur-hour stuff. It's certainly dangerous, but in comparison to a lot of state-actor activities (or even committed-amateur activities), this kind of supply-chain attack is pretty blatant and easy to spot. Which doesn't mean it's easy to spot -- I just mean would be trivial to volunteer and contribute some minimal fixes and enhancements to some open source project, and then at one point smuggle in a zero-day that will basically never be detected unless someone detects the intrusion itself and then works backwards from there with a ton of time to spend on it.

    If you've ever looked at the obfuscated C contest it should be obvious that this kind of thing can be made completely invisible if you know what you're doing. Some of the interactions and language features that lead to problems are basically impossible for a casual viewer to see, even if they're paying attention, and the attack surface is massive and the amount of attention that goes into checking it for weird subtle vulnerabilities is minuscule.

  • I'm sure smartphones don't help, but there is also an additional factor that I've observed: The social contract has changed radically. A lot of people from older generations have the idea that if they show up and do a good job at work, go to the doctor and obey what they say, read the newspaper and take it seriously, all these kind of "doing what you're supposed to" elements of life, that they'll be well-served and well taken care of. For young people, that is not at all the case. And, because they're not stupid, they've noticed (how could they not?), and it makes them cynical and nihilistic about the whole concept of "doing what you're supposed to" as a general life principle.

  • At some point, someone is going to decide to teach the Chinese navy what the Russians have been learning about the safety and utility of big naval vessels in the new drone-centric meta.

  • Same as anything really

  • They actually observed the natives setting those controlled burns, and decided to themselves, "Yeah they're wild savages, they clearly don't give a fuck about anything or know what they're doing, here's me with syphilis and muskets and I think it's time to share civilization with them, they'll thank me later." All that magic prairie ecosystem (which is basically gone now) was a carefully constructed environment maintained over generations to make hunting big game cheap and easy. But no, let's have railroads and lead paint instead.