Notices by Luna R (lunarood@mastodon.gamedev.place)

@ivy @hipsterelectron @gwenthekween Yes! This is one of my primary criticisms of the currently available license options!

They simply do *not* do what they *appear* to do in plain English (and often what they appear to do differs wildly from person to person).

Licenses fundamentally *cannot* be useful to people, if they're can't be understood by people.

@hipsterelectron @gwenthekween Certainly! It highlights the FSF's cognitive dissonance, as copyright assignment *weakens* — or entirely eliminates, depending on how you frame it — the copyleft guarantees (for contributors, not for the organisation, of course).

And regarding corporate misuse... this ties in with the SSPL thing. It's framed as "anti-corporate" by... corporations (MongoDB, Elastic, Redis). It's no coincidence that they're all VC funded. The SSPL is *designed* for venture capital!

@gwenthekween @hipsterelectron Yeah, copyright assignment in FOSS is just layers of bad.

And then there are the likes of Elasticsearch, who — on top of all the usual bad — additionally mislead people with "we are not asking you to assign copyright to us"... just an irrevocable unlimited unconditional license.

It's extremely disingenuous when the reason they do this in the first place is that several jurisdictions simply don't allow copyright assignment. A license is just legally easier.

@ryanc @bo0tzz Do you mean stuff like zkSENSE or Cloudflare CAP?

The former explicitly leaves data authenticity outside the threat model, making it pretty much entirely useless, as you pointed out (it's not even a secret... the paper says as much).

The latter seems to rely on hardware authentication.

Though I didn't look into the details much, because tbh I'm not particularly interested in these approaches, as they are either entirely useless or tied to specific trusted OEMs.

@hipsterelectron My understanding is that these terms originated with enbies, and expanded later. But in my mind the broader meaning is prevalent now (which the poll seems to agree with).

To me, these terms seem useful in discussing things — certain experiences, types of HRT, etc. — that may be relevant to a broad number of people transitioning in a certain general "direction", regardless of their specific identity, without using shitty cross-gender language (AGAB, FtM/MtF... *blegh*).

@dalias @notclacke @hipsterelectron Haha, looks like you are all thoroughly horrified! Mission accomplished! 😇

As for those two questions about the paths... my assumption is that, on Windows (without cmd.exe), the answer is "yes" in both cases. Though I can't verify this... it's been years since I had to deal with a Windows box.

@dalias @notclacke @hipsterelectron Now, tying this all back to d@nny's original issue... taking all the variations in behaviour into account... I think we can all confidently say that the full, definitive, exhaustive answer is: 🤷♀️

@timberwraith Yeah, the irony of the whole "men's issues" thing, is that they're overwhelmingly caused *by* patriarchy and misogyny.

They just don't want to reason a single layer deeper, which would reveal that the thing they are upholding in supposed furtherance of their interests, is in fact *the very thing* that is causing the issues *they* are complaining about.

@notclacke @dalias @hipsterelectron Not quite. What I was referencing, which Cassandrich expanded upon, is the particular way in which this DOS behaviour was "ported" to Windows.

It's handled in the process environment, rather than at the OS level. Technically they are actual environment variables, so my "pseudo" was kinda misleading, but they use a mangled naming scheme to avoid collisions with other vars.

The link I posted in another reply goes into more detail (some of it in the comments).

@dalias @notclacke @hipsterelectron Windows drives are the source of so much inconsistency! They really should've gotten rid of this nonsense. DOS compatibility is already all over the place anyway.

Besides the whole "absolute" path with additional state nonsense, there's also the whole thing with inconsistent working directory handling, where they inject messed up pseudo env vars to keep behaviour "compatible" with DOS. That's a fun one to look into, for anyone wanting to be *more* horrified.

@foone Wait a second... How did you get your hands on the very thing I'm working on right now?

Leave my entropy alone! It's there for a reason, ok!? 😤

Ok, this is quite funny...

I stumbled upon this LD_PRELOAD "privilege escalation" article 🤨

The article starts by editing /etc/sudoers... but it's ok... it's only for lab setup...

The "lab setup":
`Defaults env_keep += LD_PRELOAD` 🤭

https://www.hackingarticles.in/linux-privilege-escalation-using-ld_preload/

Where are all the reverse engineers, compiler devs, and OS devs at!? There must be some people interested in this stuff around these parts...

(Please don't recommend hashtags. It's an intentional omission, to avoid the "hacker bros".)

You know, sometimes I think the programmer bros don't actually like programming...

They're all like "Noooo!!! [...] is not a programming language!" and "[...] sucks!" and "You're not a real programmer unless you [...]!!!".

Meanwhile I'm like...
*writing C* Awesome!
*writing Python* Love it!
*writing ASM* Heck yeah!
*writing Rust* Excellent!
*writing CSS* This rules!
*writing x86 hex* Very cool!
*writing HTML* Da bomb!
*writing GLSL* Let's go!

They're all good and bad for something. Chill out.

@ryanc @soatok @gsuberland @f4grx If Soatok were to change his mind on the set [1], I'd be utterly disappointed, considering that the poll framing fundamentally requires restricting the space to integers, as I alluded to [2].

Under the given conditions, a sudden change to reals, or another larger set, would effectively invalidate the entire prior search.

I maintain that mathematical rigour is paramount in such consequential endeavours!

[1] https://furry.engineer/@soatok/113794042080702966
[2] https://mastodon.gamedev.place/@lunarood/113789357645694281

@soatok @ryanc @gsuberland @f4grx I am very glad you are maintaining the scientific rigour of your research!

Of course, I would have preferred if you had preregistered your methodology prior to commencing data gathering, but I don't think this omission completely invalidates the validity and significance of this research 😁

(Ok, I'm done with the bit. I just had to get it out of my system 😅)

@OddDev @ryanc Because it has an extremely constrained password space.

Assuming the exact scheme in the example: "N+m=#", where all numbers are <100, and the computation is valid... The size of the password space is 100(100+1)/2 = 5050. That's absolutely negligible (even a four digit numeric pin is better).

"But someone's password scheme is not known" you say? It's all about scale. If a scheme is popular, you add it to your cracking database, and you'll be sure to crack several passwords!

@ollien @OddDev @ryanc Congrats! You just upgraded your password space to the equivalent of a six digit pin!

On the other hand, you just made remembering your password very difficult for yourself!

There's a certain poetic beauty in using a password that will be easier to crack than to remember yourself 😌

@ryanc those are awesome!

The combination of the shapes and the background texture gave me "Set of 2 Shaped Objects" vibes 😊