Si Mad Max se déroulait en Auvergne #memecredi

[Drone unit resuming from recharging sleep...]
[Drone status code: 099]

8098 :: Code 105 :: Statement:: Greetings

doll that has three modes

FOSS devs: "it's the user's fault if our stuff is bad and inaccessible, they simply have to contribute"

then, you try to contribute, and you get thrown away with "it's not our problem if the tool we use is bad and inaccessible, just deal with them on your own"

what a mystery why no one wants to help

[Drone unit resuming from recharging sleep...]
[Drone status code: 099]

8098 :: Code 105 :: Statement:: Greetings

#Ventoy Security Concerns (please boost for visibility)

Ventoy is a popular utility for making USB drives containing multiple operating systems in the form of bootable image files. While very useful in theory, the source tree contains numerous binary blobs without source code. This issue has been brought up to the authors multiple times, have not been corrected, and have even gotten worse (more blobs have been added to the code over time). This is a potential malware vector, similar to the "test files" in the xz-utils backdoor catastrophe.

Recently the author has ignored a very lengthy thread raising security concerns because of these binary blobs. Given the amount of attention the thread has gotten, this seems strange, especially given that the authors have been active since then. https://github.com/ventoy/Ventoy/issues/2795

Stranger yet still, a video by Veronica Explains (@vkc) on how to create bootable USB flash drives got flooded by comments heavily suggesting the use of Ventoy and even being somewhat accusing because Veronica didn't advertise Ventoy. This is... not anything I've seen users of ANY open-source project do, and it feels similar to the social engineering done against Lasse Collin that convinced him to add Jia Tan as a maintainer, thus compromising xz-utils. See the comments of https://www.youtube.com/watch?v=QiSXClZauXA&t=3s

If you're using Ventoy, you may want to consider ceasing its use for the time being out of an abundance of caution. If you truly need its functionality, you might look into something like the IODD SSD Enclosure (https://www.iodd.shop/HDD/SSD-Enclosure) which can emulate an optical drive and allows you to select an ISO saved to the drive to boot from.

#linux #boot #security #malicious #backdoor

can the bedsweating season end already and the snuggling season begin

The European Union must keep funding free software,

An Open Letter to the European Commission

https://www.igalia.com/2024/08/05/The-European-Union-must-keep-funding-free-software.html

Au fait je ne vous ai pas dit : je sors un livre. En bref, l'antidote à Transmania : j'y décris comment l'offensive transphobe s'organise en France et comment y répondre.

Il sera en librairie le 9 octobre, mais il est déjà disponible en précommande dans certaines enseignes !

Due to a lack and refusal of moderation of neonazi content, we are taking action against linuxrocks.online.

Since there are a few people from eldritch who follow accounts there (or vice-versa), we are currently only limiting so you can warn your contacts on that instance. Unless there is some real improvement in the moderation policy, we will be suspending this instance in two weeks.

— @crowdagger, moderator

important botgirl content