Notices by Andy Smith (pre-Grinch mode) (grifferz@social.bitfolk.com)

@russss
Hah, great slide… position of VW EVs with owner email that ends in "gov.uk"

Volkswagen left telemetry from 800,000 electric vehicles on an open S3 bucket. In 466k cases — including the entire fleet of the Hamburg police — it was possible to reconstruct the detailed movements of every vehicle and connect that with the identity of the owner.

Update: See replies. Not an open S3 bucket but AWS key dumped out of JVM.

https://www.carscoops.com/2024/12/vw-group-data-breach-exposed-location-info-for-800000-evs/

This is not theoretical: e.g. Debian's 32-bit x86 baseline is i686-without-SSE2 but this will include the problematic instructions so to fix this would require the baseline for the whole operating system to change or else to special-case rust to target i586.

Arguably this because Debian is not enabling SSE2 on i686 but that is just to allow more hardware to work.

https://lists.debian.org/msgid-search/d8b5003f-8543-47b3-84a5-ade34c831655@app.fastmail.com

#Debian

Leading to this proposal last week to require SSE2 instructions for 32-bit x86 Rust.

If that passes, Debian would not be able to package Rust on 32-bit x86, though the next stable release of Debian won't have a 32-bit kernel so arguably it would be no loss to say "all Rust is 64-bit on x86 from now."

https://github.com/rust-lang/compiler-team/issues/808

#rustlang #debian

TIL that LLVM (and thus Rust) is not safe on 32-bit x86 due to some weirdness with floating point that does not even require floating point arithmetic to trigger, just the use of any floating point at all.

Clearly dividing God's integers into fractional parts was a heresy.

https://github.com/rust-lang/rust/issues/114479#issuecomment-2072052116

#rustlang

My experience as a "Tor-friendly" hoster is that:

▶️ Very few people are prepared to deal with the amount of abusive traffic that will come out of their exit node, and consequently the burden of answering the abuse reports that this will generate.

▶️ Even relay node operators are often surprised by how much traffic it will chew up.

Having said that, I'm sure the comparatively low data transfer limits at @bitfolk (2TB/mo) do dissuade people from bothering.

#Tor

The beatings will continue until you all stop telling people you don't agree with me

"Automattic CEO Matt Mullenweg made another buyout offer this week, and threatened employees who speak to the press with termination."

https://www.404media.co/automattic-buyout-offer-wordpress-matt-mullenweg/

#Wordpress

dmarc.org allegedly stops using email as a contact method because it's all spam.

https://www.mail-archive.com/mailop@mailop.org/msg23232.html

YES THANKS PROGRESS I HAVE TO NOW SET AN ENVIRONMENT VARIABLE TO NOT HAVE IP ADDRESSES IN UNREADABLE DARK BLUE GET OFF MY LAWN WHERE IS DEVUAN.

#Linux

This looks like a big deal for anyone running Windows.

Unauthenticated remote code execution through crafted IPv6.

Happy Patch Tuesday.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063

Debian developers look to consolidate several ifupdown implementations into one team-maintained package, but will it be "ifupdown", "ifupdown-ng" or "ifupdown2"?

Much as it pains me to say, I think it may be time to make systemd-networkd the default on Debian.

https://lists.debian.org/msgid-search/20240707135644.q227pfu4lg3dsqg7@House.clients.dxld.at

#Debian

Sometimes I'll just be going about my day and then I stop and think: if when we're coding we pronounce "char" like "kah" because it's short for "character", why don't we pronounce "enum" like "enoom" because it's short for "enumeration"?

Imagine spending countless hours proving it is possible to complete Factorio in a 12x9 world only to find out afterwards that since the Spidertron was added it is actually possible to do it in 11x9

(Spidertrons can stand on top of other buildings and have a large carrying capacity, so you can use them like chests to hold all the items you need to launch the rocket while still having the ability to place buildings on all tiles.)

Amusing execution though. 😀

https://www.youtube.com/watch?v=Lj17aGFp3lM

#Factorio

The mayor of Vadsø, Norway wants 26 hour days.

"When asked how the 26-hour day would actually work, the mayor replied “We haven't thought a lot about that.”"

https://mm.icann.org/pipermail/tz/2024-April/058869.html

Can't believe that rsync has a Discord. RSYNC.

(I hate Discord)

It seems a bit excessive that my single user Mastodon instance has ~60G of media even though I run all the various purge commands to keep only 7 days.

"tootctl media usage":
Attachments: 38.5 GB (1.12 GB local)
Custom emoji: 1.16 GB (0 Bytes local)
Preview cards: 725 MB
Avatars: 9.47 GB (73.9 KB local)
Headers: 6.37 GB (191 KB local)
Backups: 0 Bytes
Imports: 0 Bytes
Settings: 0 Bytes

Last time I brought this up on a UK-based technical mailing list, an entrepreneur—themself from a historically persecuted ethnic group—told me that, "no one cares".
Well, I can't make anyone care but if you are in the position to advise on or choose a domain name you should maybe at least know some of the history behind .IO before buying one. Read this article from @cariad
https://www.beep.blog/io/

Microsoft updated the SPF record for hotmail.com in the last 24 hours but forgot to keep their IPv6 addresses in it, so as a result places all over the world are rejecting emails sent from Hotmail as forgeries.

EDIT: Removed my comment about not rejecting for SPF failure. Microsoft are requesting rejection of their own email here (-all).

https://www.reddit.com/r/sysadmin/comments/15u28tw/microsoft_seems_to_have_broken_spf_for_hotmailcom/
#IPv6 #Hotmail #Microsoft #SPF

So does Trisquel contain CPU microcode yet or is it still terribly insecure on every modern Intel and AMD CPU and useless on lots of other common hardware that doesn't Respect Your Freedom?
https://hostux.social/@fsf/110811178897730555

#YouTube u wot m8

What is more premium about "1080p Premium" then? And is this an option that the creator has chosen (and presumably gets a kickback from)?

I see other videos at 1080p, 1440p and 2160p that do not need a Premium account.

I am not buying a Premium account. If this is a creator choice then do know that I will Patreon you at £1/mo sort of levels before I will ever sign up to YT Premium.