Posts by pndc@social.treehouse.systems
(DIR) Post #B498aO4HV5NsjOQR28 by pndc@social.treehouse.systems
1 likes, 0 repeats
@jmtd You say "old", I say "mature". Since SpamAssassin still works just fine for me, I've seen no need to look elsewhere. If there even is a worthwhile elsewhere to look at.
(DIR) Post #B4HSn6jAprg33yZhYG by pndc@social.treehouse.systems
0 likes, 0 repeats
@mametsuko This is the de facto Fediverse plushie: https://www.ikea.com/nl/en/p/blahaj-soft-toy-shark-30373588/
(DIR) Post #B4NiDW6vkSslZsUtt2 by pndc@social.treehouse.systems
0 likes, 1 repeats
I'm a software developer and sysadmin who could really use being #fedihired.What I'd really like to do is Rust, but once you ignore the dubious crypto and AI stuff, there seems to be nothing out there. Prove me wrong with a counterexample!I've spent decades fixing Enterprise mudballs mostly written in #Perl. If you've got a crufty legacy system that everybody else is too scared to touch, I'm your man. I love fixing stuff like that.I've also done commercial #Scala, #Python, #C/#C++, and although I don't usually admit it on my CV but these are now Trying Times when everything is on the table, even #PHP (the longest six months of my life).Perl naturally leads into Unix system administration and infrastructure. I've built and maintained mail clusters, VoIP systems, network monitoring, DNS management platforms, that sort of thing. If it's non-sexy but something which needs to be done, I'm there.Available immediately, for contract or permie, onsite in Amsterdam/Randstad or remote to anywhere.Drop me a private mention or mail peter@mooli.net if you have or know of something.
(DIR) Post #B5abhWaGQVn8uPZeYi by pndc@social.treehouse.systems
0 likes, 0 repeats
@revk @neil HDMI includes Ethernet ("HEC") at which point you're basically attacking a Linux or Android box running an ancient version which hasn't been particularly hardened.
(DIR) Post #B5p3fd24ztYdG8uLg0 by pndc@social.treehouse.systems
0 likes, 0 repeats
It's been all downhill since the Underwood Model One.#copyfail
(DIR) Post #B5p3fdO3gB8eMJBtw0 by pndc@social.treehouse.systems
1 likes, 3 repeats
Although I also note that #copyfail requires a specific exploitable kernel module to be loaded, and it's not loaded by default (or on-demand) on at least my Debian boxes. So the claim that "the same 732-byte Python script roots every Linux distribution shipped since 2017" does turn out to be the usual factually-incorrect overhyped exaggeration we get from infosec people every time they want to scare people to drum up more business.
(DIR) Post #B5p3fhbfzUPNRhapiS by pndc@social.treehouse.systems
0 likes, 0 repeats
I have now read the technical description of this exploitable kernel bug. The root cause, as you've probably already guessed, is that something was handed a copy-on-write buffer, only did a partial copy, failed to update the pointer, and ultimately mutated the source buffer, because most of Linux is implemented in dangerously-unsafe C (not like there's any other kind of C) and neither the compiler nor the documentation flagged up that such mutation of a buffer it didn't own was verboten.It's a cheap shot and a cliche to say as much, but is the exact class of errors which Rust was designed to solve. No need for resource-intensive AI-powered scanners or expensive consultants. It's detected statically at compile time.(Yes, I know about unsafe, I don't need to hear the whataboutery from C bros.)
(DIR) Post #B69tQJD3UuMADJFxhI by pndc@social.treehouse.systems
0 likes, 0 repeats
@mametsuko Is er ooit een tweede keer?
(DIR) Post #B7WvaYmNIJyOEzp0Ea by pndc@social.treehouse.systems
0 likes, 0 repeats
@mametsuko It claims 19 for me which is a touch short of the mark.
(DIR) Post #B802I2mdHYXwruWXRI by pndc@social.treehouse.systems
1 likes, 0 repeats
We know that the original Perl developers are getting to the age where they're starting to lose their faculties and be susceptible to all sorts of nonsense, but this hard-on that some of them have for AI slop is just embarrassing at this point.For example, Randal Schwartz has just slopped out a video and announced it to Reddit with the title "The AI Revolution is Validating 40 Years of Perl Philosophy". Yeah, I suppose that if Perl's philosophy was to spew out acres of unmaintainable line noise full of security problems, AI has knocked it out of the park.
(DIR) Post #B8DsR6fBWX0RPGj2yu by pndc@social.treehouse.systems
0 likes, 0 repeats
@mametsuko My daily driver is called "dosa"! (All my laptops are named after Indian flatbreads.)
(DIR) Post #BAbj2iWt3ANtYWElqS by pndc@social.treehouse.systems
0 likes, 0 repeats
@ariadne I feel there are not enough fellow bun enthusiasts.