FOSS devs: "it's the user's fault if our stuff is bad and inaccessible, they simply have to contribute"

then, you try to contribute, and you get thrown away with "it's not our problem if the tool we use is bad and inaccessible, just deal with them on your own"

what a mystery why no one wants to help

[Drone unit resuming from recharging sleep...]
[Drone status code: 099]

8098 :: Code 105 :: Statement:: Greetings

#Ventoy Security Concerns (please boost for visibility)

Ventoy is a popular utility for making USB drives containing multiple operating systems in the form of bootable image files. While very useful in theory, the source tree contains numerous binary blobs without source code. This issue has been brought up to the authors multiple times, have not been corrected, and have even gotten worse (more blobs have been added to the code over time). This is a potential malware vector, similar to the "test files" in the xz-utils backdoor catastrophe.

Recently the author has ignored a very lengthy thread raising security concerns because of these binary blobs. Given the amount of attention the thread has gotten, this seems strange, especially given that the authors have been active since then. https://github.com/ventoy/Ventoy/issues/2795

Stranger yet still, a video by Veronica Explains (@vkc) on how to create bootable USB flash drives got flooded by comments heavily suggesting the use of Ventoy and even being somewhat accusing because Veronica didn't advertise Ventoy. This is... not anything I've seen users of ANY open-source project do, and it feels similar to the social engineering done against Lasse Collin that convinced him to add Jia Tan as a maintainer, thus compromising xz-utils. See the comments of https://www.youtube.com/watch?v=QiSXClZauXA&t=3s

If you're using Ventoy, you may want to consider ceasing its use for the time being out of an abundance of caution. If you truly need its functionality, you might look into something like the IODD SSD Enclosure (https://www.iodd.shop/HDD/SSD-Enclosure) which can emulate an optical drive and allows you to select an ISO saved to the drive to boot from.

#linux #boot #security #malicious #backdoor

can the bedsweating season end already and the snuggling season begin

The European Union must keep funding free software,

An Open Letter to the European Commission

https://www.igalia.com/2024/08/05/The-European-Union-must-keep-funding-free-software.html

Au fait je ne vous ai pas dit : je sors un livre. En bref, l'antidote à Transmania : j'y décris comment l'offensive transphobe s'organise en France et comment y répondre.

Il sera en librairie le 9 octobre, mais il est déjà disponible en précommande dans certaines enseignes !

Due to a lack and refusal of moderation of neonazi content, we are taking action against linuxrocks.online.

Since there are a few people from eldritch who follow accounts there (or vice-versa), we are currently only limiting so you can warn your contacts on that instance. Unless there is some real improvement in the moderation policy, we will be suspending this instance in two weeks.

— @crowdagger, moderator

important botgirl content

incidentally, those of you who contribute to Lix should know that two of the major contributors have abused me personally, with one of them, Kate Temkin, saying I deserve death when I declined to be controlled by her

Chess hasn’t been updated in almost 200 years and it’s obvious the devs have abandoned it. The greedy creators took your money and laughed all the way to the bank.

I remember back in 705 AD when chess was fun. Then they started adding stupid features no one wanted like “castling” and “en passant” instead of listening to player feedback and fixing game-breaking bugs. I’ve been complaining for years about the collision-detection glitch with the horsey. The ‘clipping-through-pieces’ bug has been abused to death and the lazy devs refuse to fix it.

Don’t support this awful behaviour and boycott this company.

[Drone unit resuming from recharging sleep...]
[Drone status code: 099]

8098 :: Code 105 :: Statement:: Greetings

Robotgirl that goes "beep, beep, beep, beeeeeeep" every time the clock reaches a full hour

I've been meaning to make an updated version of this for a while so here it is, every numerically-balanced d20 layout!

Feel free to share, especially with any dice makers you think may be interested!

There is a more detailed explanation video by @henryseg for The Dice Lab (which use layout C, if you're curious!) https://youtu.be/Nh2H_4g6evc

#dice #ttrpg #DnD

rofl

#fediblock for linuxrocks dot online

they're knowingly harboring an infamous techbro transphobe, bryan lunduke, and refused to do anything about it when people pointed that out. in addition to not having any instance rules against transphobia period. so it's clear the admin doesn't give a fuck and this is a dangerous instance worth defederating

[Drone unit resuming from recharging sleep...]
[Drone status code: 099]

8098 :: Code 105 :: Statement:: Greetings