Life is Tetris @tetrislife@qoto.org

@mcc I will keep pushing for “cooperative technology” and I will die on this hill

The downside of our project approach was that we often got experts being very dismissive on re-using email and #OpenPGP ... and there still is some opposition which often subsides when actually trying #deltachat and #chatmail, looking at security audits and our strong usable security focus.

There may also be surprising upsides. The UK "Online Safety Bill" which attacks end-to-end encryption integrity seems to not apply for ... e-mail. Because everyone knows, e-mail is unencrypted, right? :)

If you've got any experience at all, you know the following about programming:

- a lot of documentation is incomplete (and much of THAT is outdated)
- many answers to questions (think Stack Overflow) are incomplete + outdated, but also incorrect and insecure
- many "answers" are for a question that is not really what was asked
- a lot of existing code out there is incorrect and insecure

So… maybe don't think that AI which learned from these bad references can actually replace not-bad coders.

I fixed the keyadc_event (volume keys) which means between keyadc_event and devi2c I should be able to emulate a 3 button mouse.

My vacation is almost over so I'm running out of time to dedicate to this, but there are 2 big blockers that I can't figure out.
1. The usb port isn't charging. It charges in Linux, but refuses to charge when plugged in under #9front.
2. The usb isn't working in general. The root endpoints are there and ehci does.. stuff.. on initialization but it never raises any interrupts and never does anything after the init.

I think these are beyond my skill level. I don't even know where to start. Nothing I've done or looked into has helped.

#9phone #plan9

If you run a #Drone CI server, set DRONE_REGISTRATION_CLOSED=true (and manually create users only when you really really trust someone).

The CPU on my CI/CD server suddenly spiked to 100% today.

A closer look found some users who had registered on git.platypush.tech and on the CI/CD server and created a repo with a .drone.yml, a .gitlab-ci.yml and some scripts with base64-encoded commands.

The repo also contains a deepCC.ipynb Jupyter notebook that downloads some training data from S3 and uses Tensorflow to train a model, and then uses the deepCC binary to do something with that model.

The repository also has a configure script with base64-encoded commands that seem to configure a miner (the wallet ID is R9WpFbvkb6dep6bfLdbpcyz3LpMeikUL6W and the coin is VRSC, if anyone is interested in investigating further).

The deepCC binary is itself quite big (~50 MB), and a look at the setup script reveals that it’s actually a .tar.gz archive with a larger binary inside.

A quick run of strings on the binary confirms that it’s actually a miner - it connects to eu1-etc.ethermine.org and it also has a bunch of CUDA bindings to run on GPUs.

I still don’t get what’s the point of the Jupyter notebook that trains a model and passes it to this miner, but if you feared the day of the arrival of the zombie Docker containers that exhaust system resources by mining cryptocrap AND training AI models, well, I’m afraid to inform you that that day has come.

If you are a #Gitea / #Forgejo admin, take a look at the users and repos created in the past couple of weeks. Check in particular if any recently registered users have created a repo named deepcc-v.

The most likely authors are users named farzanfarid16 and zurizoey0.

A quick search confirms that both these users are registered on #Gitea too and have already created the incriminated repo:

https://gitea.com/farzanfarid16/deepcc-v
https://gitea.com/zurizoey0/deepcc-v

And if you are a Drone CI or #Gitlab admin, check if any of these users have also started CI/CD pipelines connected to that repo.

For now, disabling the execution of CI/CD pipelines unless a user has been explicitly authorized is the best idea that comes to my mind.

Work thoughts: Is it better to stay a few minutes longer in the evening, tidying things up, finishing things, so that you can feel satisfied with a thing that’s done; or is it better to leave a little thing unfinished so that you know exactly where to start in the morning without the urge to post on fedi? 🤨

In business it's very easy to make money if what you say happens. Now that's what exactly happens in programming, computers do what you say precisely. That's why info tech ppl make a lot of money. Simple!

#Technology #Programming #Computers #Business #Economics

@andrewrk I enjoyed this blog post that’s very related to these three points.

It’s been a few days but iirc my only major point of disagreement with the post I’m linking is in the last paragraph where he says nobody will try this in real life—I think it’s inevitable that someone will try this in real life, and that it will change the world for the better.

https://www.astralcodexten.com/p/why-i-am-not-a-conflict-theorist

it is impressive how some people can make servers and general sysadmin work absolutely unappealing through layers upon layers upon layers of weird, bespoke “must-have” modern solutions while old shit just keeps on working

#Severance doesn't need a brain chip. When you get a new phone, someone like you mined the cobalt & built your device in a sweatshop. Someone like you made your clothes, picked your quinoa, grew your coffee while stuck in a life they cant escape, died so you can have fun and live longer. Your innies work in places you never see, making possible the life they'll never have.​​​​​​​​​​​​​​​​ The trick of modern convenience isn't the technology, it's making the human cost invisible.​​​​​​​​​​​​​​​​

@alcinnz your work, thinking about things from first principles, thinking about what aspects of the things we use truly matter, is valuable whether or not some gargantuan quasi-free browser from a corporation makes a misstep

Honestly, I think massive FLOSSish organisations are part of what we need, but long term we need to architect away from massive anything

It's a ridiculous aspect of the modern world that 16GB of storage is possible to hoover up by accident.

Social media is a competition for who can misunderstand what you wrote the most.

To make this competition easier and allow for more participation, set an arbitrary character limit to your writing, like 500.