Notices by Ondřej Surý (ondrej@mastodon.rfc1925.org)

@bagder I have a similar issue reported against BIND 9: https://gitlab.isc.org/isc-projects/bind9/-/issues/5280

It is a real issue, but the reporter exaggerated it and it feels like generated by AI, but I can’t really put a finger on it, so I can be mistaken. Somehow I don’t think humans use phrases like this one: “Here's the enhanced technical description”

@bagder Internally, we use "Review" label in GitLab.

Meanwhile, the X41 audit shows the series of bugs that mostly shows that the Hickory DNS has bugs from the same ballpark as any other current DNS implementation out there.

Also it is a fine example of what I've been telling people for years. If you ever think about writing a new DNS server from scratch, think twice and then run away. It's a complex beast and most of the bugs are state engine and logic issues and not those pesky memory safety nonsense. https://infosec.exchange/@x41sec/114138160940221825

Really?

@bortzmeyer The second article is very well written (it says: we don’t know yet), the first one not so much (it says: meh, don’t worry).

@fesshole If “being in love” was a requirement for the marriage, we would be all single and lonely. Actually, the most stable marriages are those made of our rational decisions. (This is actually backed by research and not by any bitterness.)

So, can you trust him? Can you talk to him? Do you feel safe with him? These kind of questions you should be asking and not whether your hormones are running wild…

@gueuledatmosphere @kravietz Or perhaps, as open source maintainers, we don’t have to play this game? If you depend on the open source project to make a profit, you should support it. The whole “find a reason” to pay for support in a way that creates more work for the maintainer, is not really helpful. The money should come as support not as SoW…

@lcamtuf > My job thoroughly satisfies my creative and technical needs, such that I do not pursue much programming or high-skill crafting outside of work.

“They fired me. I have nothing left in my life now…” — Anonymous

@ryanc Wow, that’s a superpower. Each paper has a different often incomplete or broken pseudo code. So, yes, I would consider that a superpower.

@cmdrSprocket @briankrebs @nixCraft Here’s a helpful guide ;)

Oriflame - MLM
Herbalife - MLM
Bitcoin - pyramid scheme
Avon - MLM
NFT - pyramid scheme
web3 - pyramid scheme

@b0rk Pair it with `git commit --fixup=amend:<ref>` if you want to change the commit message in a previous commit.

My WIP branches are usually full of normal and amend fixup commits as I improve on things, henceforth autosquash is a lifesaver for me!

@b0rk Interesting! I’ve never used `git switch` nor `git restore`, but I use `git autosquash` (alias to `git rebase -i --autosquash`) and `git pushf` (alias to `git push --force-with-lease`) almost every day. I also find `git checkout -` very helpful.

And `git yolo` = `!git commit -m \"$(curl -s https://whatthecommit.com/index.txt)\"` for when “WIP” is not enough as commit message ;).

@bagder Maybe it was a nice comment and they meant that you should not worry because people are allowed to make mistakes! :-D

@hypolite PHP packages don’t require systemd. It’s your choice and consequences to use distribution that also also removed the libraries for non-technical reasons. Please leave me out of it.

@aral Why not user@my.domain?