bonifartius 𒂼𒄄 @bonifartius@qoto.org

get your gaben underwear everyone

It worked!

Don’t talk to me or my son ever again.png

Somehow we've built personal interactive computers that, in 2021, in daily use, regularly get into states where they take upwards of a minute to react to keystrokes and mouse clicks, and we've convinced ourselves that this situation is either perfectly normal or entirely the user's fault.

@bonifartius I’ve been called an “anti-vaxxer” for expressing distrust in the experimental mRNA injections and instead essentially begging for access to a traditional vaccine à la the Sinovac COVID-19 vaccine—which, as you stated, is refused to Westerners due to geopolitical reasons.

I should be allowed to make informed medical decisions about my own body, and I am actively requesting access to safe, well-understood, traditional vaccines vs. being thrust into a clinical study for experimental drugs with unknown long-term health effects manufactured by corporations with abysmal track records who have been given legal immunity in the event of negative outcomes. That shouldn’t make me “anti vax” or “anti science”; I shouldn’t be oppressed or ostracized for making that decision.

@jrballesteros05 exactly, man! this is what I always try to tell people. if you want to get something done, it needs planning and thinking, not stand-up shows and daily meetings, but simply thinking and analysis. and doing this before writing a code or making some mechanics and electronics.
sometimes I think the world went crazy, because all good working traditions and experience shifted to something stipid, ineffective and absolutely senseless.

#Sailtrix - #matrix client for #SailfishOS supporting end-to-end encryption among many other features. Currently in beta....

Need to try this out https://openrepos.net/content/hengyedev/sailtrix

@mangeurdenuage

Full size: https://archive.org/details/unix-magic-poster-gary-overcare-1

systemd was a fucking mistake

CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd

https://blog.qualys.com/vulnerabilities-threat-research/2021/07/20/cve-2021-33910-denial-of-service-stack-exhaustion-in-systemd-pid-1

"My code works, I don’t know why"

submitted by besiberani

Incredibly exciting to get official confirmation that Germany's health service (@gematik1@twitter.com) has standardised on Matrix for secure decentralised communications, targeting all 150,000 healthcare organisations in Germany(!!!) 🤯 Read all about it at https://matrix.org/blog/2021/07/21/germanys-national-healthcare-system-adopts-matrix 💉🇩🇪🚀

image.png

https://seedmatters.org/growing-resilient-seed-in-hells-half-acre/

"In order to create the most resilient seeds, organic farmer and seed breeder Frank Morton first tried to kill as many heads of lettuce as possible. From 2002 to 2004, Morton grew forty varieties of lettuce in the worst conditions: He planted them too close together, misted them continually, didn’t weed, and introduced diseases like downy mildew. In this unhappy garden patch, quickly nicknamed Hell’s Half Acre, close to ninety-five percent of the plants never made it to harvest. Morton’s friend, public plant breeder Dr. John Navazio, was one of the few who understood Morton’s strategy: It’s not how much you keep that matters, Navazio likes to say, it’s how much you throw away."

Is it just me, or is the Asus GT-AX11000 intimidating?

This is one of those things that come to life and feed on your brain when the robots take over, isn't it?

I continue

Regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)
https://github.com/doyensec/regexploit

Examples

```
(ven)$ regexploit
Welcome to Regexploit. Enter your regexes:
(?:A{6}x|a{6}X)
No ReDoS found.
^(?:A{6}x|a{6}X)$
No ReDoS found.
v\w*_\w*_\w*$
Pattern: v\w*_\w*_\w*$
---
Redos(starriness=3, prefix_sequence=SEQ{ [v] }, redos_sequence=SEQ{ [WORD]{0+} [5f:_] [WORD]{0+} [5f:_] [WORD]{0+} $[WORD] }, repeated_character=[5f:_], killer=[^WORD])
Worst-case complexity: 3 ⭐⭐⭐ (cubic)
Repeated character: [5f:_]
Final character to cause backtracking: [^WORD]
Example: 'v' + '_' * 3456 + '!'

```
Also
Parses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS.

$ regexploit-py my-project/
$ regexploit-py "my-project/**/*.py" --glob

And JSON / YAML too
$ regexploit-json *.json
$ regexploit-yaml *.yaml

#commandline #regex

You have to assume that everywhere you go is compromised... because it is. In some ways, getting jabbed or relying on an app to tell you if you are compromised makes you more likely to take risks or to get careless.