Notices by GNU/r000t (r000t@ligma.pro), page 3

Not allowed to enjoy anything.

Not allowed to work.

Not allowed to ask for help.

Not allowed to complain.

Everything is fine.

Hurricane Milton now has higher twist rates and improved shielding, officially making it a cat 5e hurricane.

Understood. You should have no problem with the drinking and voting age being raised to 27, then.

BRB, gonna get kicked out of Microcenter for playing Stairway

@RedTechEngineer Researcher says yes, software author says no. Software author appears to be interested in stifling discussion.

https://github.com/OpenPrinting/cups-browsed/issues/36

As a reminder, when I went to disclose a 0day in Mastodon, Gargron just called me poor.

Truly, a man of the people.

@cjd
I just want to see them basically abolish the 1st Amendment and see how that goes for them the next time the republicans have all three branches.

"But that wasn't supposed to be used against *me*!"

That super-wazoo Linux 0day dropped.

https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I

Author claims an attacker can send a specially-crafted UDP packet to port 631, or send mDNS traffic on a LAN, to get RCE.

**THERE DOES NOT APPEAR TO BE A FIX**, meaning that, at least on the distributions I have checked, **UPDATING YOUR PACKAGES WILL NOT PATCH THIS VULNERABILITY.**

You should remove CUPS if you do not print from a given host, or at least ensure your firewall is only as permissive as it needs to be to enable the services you mean to host.

I remember when AT&T was posting ads about 99% reliability, depicting a family losing their shit because the Internet's been out for 6 hours.

99% reliability is a little over 7 hours of downtime a month.

@djsumdog
Yup. So it's either

- A nothingburger
- CIA/NSA said "lmao how about you don't disclose our backdoor"
- A ploy to get followers

This may or may not be a fix for these vulnerabilities, but if you look close, one of the systems affected is the IPv4 stack.

If you recall, Windows had a vulnerability in the IPv6 stack and everyone's kneejerk reaction was to disable IPv6 forever and ever.

I wonder how many people will have the same reaction to a bug in the IPv4 stack....

https://ubuntu.com/security/notices/USN-7028-1

TL;DR: Alleged unauthenticated RCE on "all GNU/Linux systems (plus others)"

Now would be a great time to:

- Get all your systems on orchestration
- Shut down all non-critical endpoints
- Prepare yourself to speedrun patches, potentially requiring a reboot, across your entire infrastructure
- Stock up on popcorn

https://x.com/evilsocket/status/1838169889330135132

@p
Another fun thing about using Python for any kind of ML/AI application is, let's say you have three different projects.

All three will be installing 10GB of tensorflow or tamingtransformers or pytorch or whatever, a few more GB of kernels for your GPU, and so on.

Each.

No opportunity to share unless you just so happen to be using a deduplicating filesystem. Even then, you'll still be downloading them again.
@i @NEETzsche @lanodan

@p
When I started using Python in 2008, your app ran everywhere Python did. Period. Any Linux distro, every weird niche OS, OS X, even Windows after installing a single msi.

It also meant that your app could be very small and easy to distribute.

Now, every fucking Python application, no matter how small, basically has to install an entire "distribution" of Python, kept entirely separate from the rest of the system, if for no other reason than there's massive breaking changes every version, they've committed themselves to a new version every two years (I believe), and so you can only use the system Python if you're willing to use a very, *very* narrow window of systems and release versions.

This is the direct result of no longer being able to tell people "No, fuck off" in online spaces without getting targeted and harassed on social media, oddly enough by the people who claim to be against harassment.
@NEETzsche @lanodan

@shibao
>account protected

nothingburger

d o n ' t
a s k
q u e s t i o n s

j u s t
c o n s u m e
p r o d u c t

@cjd
Nah. The real answer is that they don't have any guiding moral principles.

So they'll fight for free speech when they're the underdogs and they actually *need* the protections there of. As soon as they're the dominant culture, it's no longer necessary, and so it must be gotten rid of.

This, by the way, is why it's absolutely hilarious to watch people, in the same breath, claim to be oppressed, but then treat the term "free speech" like a slur. If you're in a position to dispose of free speech and expression, you are by definition not oppressed.

@djsumdog
I'd also remind everyone that Google is starting to prune unused accounts starting December.

So imagine internet culture from the 2000s, that doesn't violate any ToS, but just gets erased because the account hasn't been used in two years.
@hazlin

The generation that thinks check fraud is a "free money glitch" and needs their parents to accompany them to job interviews is here to tell you that you're wrong about everything.

Rare redditor W