TragicNotCute

Dystopian AF

When an attack happens at night, you need to decide:

• Are you going to the shelter to get a sleepless night somewhere in a basement or in the subway?
• Or are you going to stay in bed as long as possible to get some sleep, because you need to go to work tomorrow?

This is what they mean by test driven development.

The container of lotion just spilled a little. Let’s just keep walking sweetie.

the state-sponsored actor also known as Cozy Bear, had gained unauthorized access to HPE’s cloud-based email environment."

Bruh.

We goof on this person, but in my experience this kind of shameless begging usually works to some degree.

This headline was the subtle push I needed to donate to Videolan. What an amazing project, we’re lucky to have it.

Overpriced for what they are? Agreed. Weird elitism from some of the user base? Absolutely.

You sound almost as zealous when you say:

tried out Mac os and ios every major update, and found it to be entirely unenjoyable

I get that it’s not for you which is fine, but you tried every release of MacOS and iOS and hated them all? Okay bud.

Also where do you store secrets or keys? Be specific. Where do you store the keys to your keys? Leave out no detail…

If ideas are free, why do Fortune 500 companies routinely bribe their customers to tell them about the experience so far?

Because feedback from people using your software is valid and valuable. Feedback from power users of your software (admins of instances) is even more valuable.

I understand why you feel the way you feel, but this isn’t how a healthy project is run.

You say the devs time would be better spent developing and I agree. Interesting that they took time out of their day to issue a ban and then come here to weakly defend it. It’s almost like they could have just ignored the OP and none of this would have happened.

From Nutomic in this very post:

You kept posting offtopic comments which added nothing to resolving the issue. So I gave you a seven day ban, hopefully it will teach you a lesson.

Where’s the misunderstanding? Seems like this was intended based on their reaction.

I admit I didn’t look before asking to see if they had one. Just took a look and good god. How can Lemmy devs be so crunchy and inclusive with how they want the community to operate and yet be so abrasive on GitHub? Wild shit.

I think Linus gets away with a lot because the value Linux delivers is pretty out of this world.

Being rude to people trying to contribute in good faith seems like a way to send them to a competitor and if one exists, that doesn’t bode well for the project.

Can you point us to these comments so we avoid the same fate? Or perhaps contribution guidelines so we understand what to do or not do? I’ve never seen anyone banned for good faith contributions in OSS before.

I tracked down the PR in the screenshot and it seems pretty innocuous.

https://github.com/LemmyNet/lemmy/issues/4039

It is common practice to notify affected parties privately and then give full details to the public after the threat is largely neutralized. Expecting public disclosure with technical details on how to perform the attack in less than 24 hours goes against established industry norms.

IMO it’s not a good idea to be discussing attack vectors publicly when a number of other instances are unpatched and the exploit has been in the wild for less than a day.

I agree that admins need to work together, but discussing it in public on Lemmy so soon after the attack isn’t the way. There exists a Matrix channel for admins, that’s where this type of thing should go.

It is most certainly a decision and I bet you vi faster than me.

Good point. I should definitely be more comfortable introducing my children to a software suite called “crackpipe”.

🙄

Agreed. As an American, cool concept, rough name. There is no way I’m recommending a software called crackpipe at work.

And let’s say I wanted to use it, I’m going to install this and instruct my kids how to use crackpipe? I’m sure that will go over great with little Timmy’s school when he tells his teacher and friends.

I’d strongly consider changing it.

It sure does, that’s one of the nicest things.

For the price of that kind of exploit on the black market? Nah.