2026-10-19T11:43:47Z https://njump.me divVerent https://njump.me/npub1w99yvucwnzh3ju6adrjancd6p4puddmpk4ry3n6wwv2fyd4m05qqkvw4fd https://minio.libranet.de/misskey-de/msky/webpublic-697acf3e-c4b4-42c2-ba3a-d07650341733.png https://minio.libranet.de/misskey-de/msky/webpublic-697acf3e-c4b4-42c2-ba3a-d07650341733.png https://njump.me/nevent1qqstenadjuv0eeczkl9y239elff09kz7ytvu7g7gy09hneff5t7cdeszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqgleepg @juergen@chaos.social @mntmn@mastodon.social Unless the 300 is actually 300000/1001~ 299.7003 2026-10-28T11:18:54Z https://njump.me/nevent1qqsy0dlyenx20ulwd422l73cjpagazc7g5z52k4tzc5rgelmr8saduszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq0300jv @randahl@mastodon.social They absolutely do have a choice.<br/><br/>They can surrender and then likely not die.<br/><br/>They can also decide, if they die anyway, may as well turn around and shoot their commander... 2026-10-28T05:27:21Z https://njump.me/nevent1qqs9m9m42q3mzywn29dl5wgf6f052um5whw6t7pfe9kql5vk3c8hpsszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqqd8w63 @FeloniousPunk@beige.party Use a sharpie and label it &#34;Galaxy Note 7&#34;. 2026-10-28T04:11:06Z https://njump.me/nevent1qqsg0shq64wd4xthx8s2dv3gwewr3c8689tqjxf6u8ld328uu5gx25szypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq7ssmgd @heiseonline@social.heise.de Heißt das, ich darf meinen Handy-Hotspot nicht mehr &#34;dQw4w9WgXcQ&#34; nennen? 2026-10-27T07:33:55Z https://njump.me/nevent1qqsykuga84q8jps7uftzfrylkele2grk7jwsv50gwrhmeqy5a8weemqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sql5t85g @sarahlehmann@troet.cafe Und ich halte Kriegsverbrecher in Den Haag für notwendig.<br/><br/>Passiert aber auch nicht.<br/><br/>Wir alle haben unsere Träume... 2026-10-26T20:05:39Z https://njump.me/nevent1qqsvlq8ks39x56thvxph8ftrsd5hlayuj6hde49fttuhhqsz5kxwrjczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq7hxj57 Das hieß mal GeldKarte.. 2026-10-26T06:42:16Z https://njump.me/nevent1qqswmx6hd0gmwue7sa0xnycfd922fq2k4w06n72fu5r0ecmz30cjfuszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqd48hyz @BlumeEvolution@digitalcourage.social <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub193duld6vj08rxlkvrcuksgmvn4k77uq9w7r8xvdq4z2zyut355jsd9ykm5" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>st3fan</span> (<span class="italic">npub193d…ykm5</span>)</a></span> Ganz ehrlich, in so einer Situation ist es rational, sich zu bewaffnen. UND gleichzeitig Solarpunk zu bauen... denn was nützt dir dein Solar-Zeug, wenn der Großausfall kommt und du der einzige bist mit Strom und warmem Wasser - und die ganze Nachbarschaft weiß auch noch, dass du unbewaffnet bist?<br/><br/>Da wird dann doch sofort geplündert und umgebracht...<br/><br/>Die Nachbarn sollen zumindest denken, du seist bewaffnet, dann erzählen sie viel weniger weiter von deinen Solarerfolgen. 2026-10-26T04:59:26Z https://njump.me/nevent1qqsr6ec445fa379cs2a6zn67e3wt0ukh3dmgqk834un8jujgjcl0l2czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqxxhkk6 @lcamtuf@infosec.exchange How did you manage to find what was broken with multiplication? That must have been an insane debugging session, or a bad solder joint. 2026-10-26T04:42:49Z https://njump.me/nevent1qqsx498shxd7qc88f0ge07mcxk6z82v7gkuzruttp6tvt9q0x2t4ewgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqn5h8ru @dickenhobelix@chaos.social Heu-te... 2026-10-26T04:35:13Z https://njump.me/nevent1qqsde5epst0zaw9jedvk2uuyzyc3j2l4m9528v6u6aalafv8mwwc6hqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqsr5lgs If you ever wondered who is really running the #USA... #uspol<br/><br/>(and yes, this comes back full circle, as their English names refer to a famous US criminal, and well, look who they are now...)<br/><br/>Also, if you read this and legally can #vote in the US, do so. It may not change a lot, but can we get at least a slowdown of the destruction?<br/><br/> <img src="https://minio.libranet.de/misskey-de/msky/fe1302e6-10ed-489f-bdbe-fc1bb0dd6363.webp"> 2026-10-25T14:22:39Z https://njump.me/nevent1qqs0f9rlauejnnu79gy90tsyhdpgyvrh8quj0sfntkyt4yk8a500g7qzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqy2k8at @lcamtuf@infosec.exchange The worst part is that it&#39;s almost a good thing. Democratizing the political process by giving everyone the means to make a political meme that might go viral? That&#39;s a GOOD thing!<br/><br/>But that actually was kinda done before. There was tacit acceptance of MS Paint style crap which literally anyone can make. Now that AI is there, daring to post MS Paint stuff would be pointless.<br/><br/>I mean... just look at this awful non-AI creation... I even failed at picking at first who is who so I had to mirror it... but even apart from that, with that low quality no one&#39;s gonna laugh anymore, right?<br/><br/> <img src="https://minio.libranet.de/misskey-de/msky/e14cde95-5f45-41ae-a7f0-e6edfb0e92b9.webp"> 2026-10-25T14:00:06Z https://njump.me/nevent1qqsrwct7m6d803py5z6mgeec2rtuzc0yvl3kmkn328cdudf9q22ce2czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqdscsg6 Ja... da kommt aber noch ein anderer Effekt dazu.<br/><br/>Medien verstärken das Extreme.<br/><br/>Was ist also billiger - im eigenen Land viele Millionen von Leuten an Wasserversorger anschließen, die man erst bauen muss - oder einfach paar Bomben werfen, im Fernsehen als großen Sieg darstellen, und bei der Gelegenheit immer mal wieder Videos von &#34;frierenden Europäern&#34; zeigen (die akzentfreies Russisch sprechen, aber soweit denkt der Zuschauer nicht)?<br/><br/>Menge X an Wert zu zerstören ist nunmal schneller und einfacher als Menge X an Wert zu schaffen... 2026-10-25T06:16:29Z https://njump.me/nevent1qqsyav0vu67ckdrjq90mn36gjdztr32nujxah6wc3jswsuqzvt8d3vgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq5l4yue @alios@23.social &#34;and make the Mexicans pay for it&#34;<br/><br/>Ja, einfach die USA so schlimm machen, dass Mexiko aus Eigeninteresse die Mauer selbst baut... 2026-10-25T06:09:26Z https://njump.me/nevent1qqsg2c7uy4nxj7rpszepp6w5dj4mpk6ful3y73d4yzaagwr2ygxgn2qzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqrn7wlc @heiseonline@social.heise.de Bei dem Termin 2029 werden sie sich aber sicher auch...<br/><br/>verspäten. 2026-10-23T06:26:24Z https://njump.me/nevent1qqst23lxxm66spzsd6rdd6zsnj8f6zy7mg3099yzffzltn8lkuxnuvgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqt28ka8 @energisch_@troet.cafe @skykiss@sfba.social It is obvious, but does it matter? The majority of Americans voted for Putin. They wanted Putin. And got Putin.<br/><br/>Too bad it essentially ended NATO. 2026-10-23T05:22:05Z https://njump.me/nevent1qqs2tnlw7n5cz4mh3tst7nveptqfq76p0jhqpglggj2ztlke2j88cvczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq2ktd07 @joltrast@mastodon.social Probably just vibecoded... 2026-10-23T05:07:59Z https://njump.me/nevent1qqs9zqm59fpgdqglhuenk25j4v38fuep2tkdh2n8txgpzj2ycr5dmsszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq5jtwhp @streetbump@mastodon.social Sie müssen ja auf Kinder schießen, denn eingehende Shaheds treffen sie mit ihren tollen Patriots nicht.<br/><br/>Echte &#39;Murikaner lesen nämlich keine Bedienungsanleitung. Sowas tun nur die Schwächlinge aus der Ukraine. 2026-10-23T04:56:18Z https://njump.me/nevent1qqsr6t2506aq37kjfr5y4g35weckhgzm8dnprvusfvzcfh639sehn0szypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sql0zzu0 True, but in civil matters it is. An affected person would thus have to seek damages from the company that illegally executed the sanctions, not the employee who pushed the button for the company.<br/><br/>If said employee did it without being told to, though, the company can then in turn recover damages from them. 2026-10-22T18:24:18Z https://njump.me/nevent1qqs2e9ulqj7kdmpng547z3dctqhn9shu2av65fjchssfh2ep49yntdczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq46mx2k @EugeneMcParland@mastodon.ie @only_ohm@mas.to Not a crime here in Germany - companies and people generally are free to pick who they contract with. It however can be a civil matter leading to damages payments, and the EU blocking statute reaffirms and strengthens that. 2026-10-22T18:22:06Z https://njump.me/nevent1qqsw5ef0kekpr95gsmt6hp2geax08jfc3mhzt6p99x6633a28jhf69qzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqn6evre @joltrast@mastodon.social @newsguyusa@flipboard.social Fun fact, my iPad does it too occasionally since the last update to iPadOS 18.7.10 (yes, is an older device). I tap one app, its app icon gets darkened as usual - but then it opens another app from the same folder.<br/><br/>Is Apple beta&#39;ing the vote manipulation on my iPad? Nah, probably just a bug... 2026-10-22T18:16:14Z https://njump.me/nevent1qqsr5sccy5xzla6cy736hza5lxwklc38tzm2vjf6jj287g74sgu3mxqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqk4cjc9 @FranckRaisch@nrw.social Und die würden ihr Geld ja trotzdem noch weiter vermehren. Mehr als 2% Rendite schaffen sie locker.<br/><br/>Die Steuer ist also auch für die nicht wirklich schlimm. 2026-10-22T18:12:31Z https://njump.me/nevent1qqs8dx5k0vmcaeuyj0r5tgcfnlzxqmyynqxm7cv83dn04vmz487qmgqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqpwj4cu @newsthump@mastodon.online Missed chance to include ElePHPant...<br/><br/> <img src="https://minio.libranet.de/misskey-de/msky/8e1cf536-e239-480b-8548-a6069a14cd39.jpg"> 2026-10-22T11:48:43Z https://njump.me/nevent1qqspv9npkm3efjn7f32fng0mzvz55crmgzrs50pc5zt0y46nskpld2czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqv062je @leeloo@c.im @randahl@mastodon.social Another point is that in America, secrecy of the vote is not even a desired feature. US wants everyone to see what they voted. Thus the party affiliation in the voter registration. The vote itself is a charade, they could just as well just count the registrations...<br/><br/>except then they do not get to manipulate the outcome by putting lots of violent armed people at the polling places while also causing long lines... and voting on a work day that not everyone gets off is another factor of manipulation they do. 2026-10-22T03:28:30Z https://njump.me/nevent1qqs2edk439g2lzdxrsnf0m84zerxajmwpsysw5helu965v7nwxapqpgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqmsrkl8 @leeloo@c.im @randahl@mastodon.social Then read up on the topic from thise who designed the algorithms. The mathematics for it have been basically finished in the mid 90s.<br/><br/>Well, except that it now has to be rebuilt for PQC. I did find this: <a href="https://eprint.iacr.org/2026/1004">https://eprint.iacr.org/2026/1004</a> 2026-10-22T03:25:25Z https://njump.me/nevent1qqs98wgm6p7efayf0g7py22ylseh08zqyshal4006uwzfuqt2mrzhyqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqnkgl9k @leeloo@c.im @randahl@mastodon.social That is what one fixes by also having a paper trail and doing manual recount for statistical siignificance, like, 10%. Plus, people trust their phones with their bank account, so is it a big leap for them to trust a vote tracking app? Currently most people do not even observe the counting, so this is &#34;trust me bro&#34; as well...<br/><br/>Still ends up saving a lot of work.<br/><br/>But as said, it is all moot as the voting machine manufacturers do not even use the secure voting algorithms. It is pure theory, not because electronic secure voting is impossible, but because there is no market for secure voting as non-secure voting machines already sell. 2026-10-22T03:21:18Z https://njump.me/nevent1qqsr6c5l8tww70fm5934gxes5rsmsp2nlqywg965eg037hpncg22l9czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqd7zdrf @sophieschmieg@infosec.exchange I do seriously wonder how it could happen.<br/><br/>The private key is a random number from 0 to one less than the group order.<br/><br/>The most &#34;underhanded&#34; way I can think of is if they queried the bit length instead of the group order - but given at least in OpenSSL bit length and group order are different types, this confusion is hard to do. Maybe even called the bit length &#34;size&#34;...<br/><br/>Maybe they did it in Python or another bignum by default language? (And I am not implying bignum by default is bad, it is actually one of the few things in Python I like) 2026-10-21T18:23:00Z https://njump.me/nevent1qqs2j6t6h0l7lmz5e3mf4hcygx8n3a969c6h79353hmhwsrhseqn3tqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq77an55 @p_calleri@mastodon.social Sein echter Name ist nicht Wittkoff, sondern Withoutkopf. 2026-10-21T18:14:47Z https://njump.me/nevent1qqsyjl5ezp7rl2lygthshjp2kr708gj9l3fxs4cc8dsw3hrjseqqhaszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqk634mv @p_calleri@mastodon.social Er denkt wohl, wenn Islamismus Nicht-Moslems unterwerfen und umbringen ist, dann ist Humanismus Tiere unterwerfen und umbringen. Beim Mampfen eines BigMac dachte er dann, oh, ich habe gerade ein Tier umgebracht, bin also ein Humanist. 2026-10-21T18:14:11Z https://njump.me/nevent1qqs9ayuxfn3d88hcysfamcrdvchy4h7cp3suzx5aqr2p99kedp9v8zczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sql8dqad @leeloo@c.im @randahl@mastodon.social To be clear, the main issue is &#34;what if I do not trust my own device, or the verification software I downloaded&#34;.<br/><br/>With paper voting the issue is similar: &#34;what if I do not trust the poll workers&#34;.<br/><br/>For paper voting the solution is to become a poll worker or observer yourself. You won&#39;t be able to verify that your vote was counted right, but at least that many are.<br/><br/>For electronic voting, however, this same boils down to &#34;the spec is open, learn to code and write your own verifier implementation&#34;. Or at least &#34;use another implementation than the official one&#34;, although with that you are just replacing who to trust.<br/><br/>And the core issue is, some can do that, but far from everyone - whereas basically everyone can at least observe the counting and gain some confidence that way. 2026-10-21T14:41:08Z https://njump.me/nevent1qqszp4gllpdhrdwgqfm9ekpgnfakwzc8nn7pzpaxmq4qrzpr3sn7jfgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqlen0l8 @leeloo@c.im @randahl@mastodon.social I am not gonna describe the entire algorithms for this, but papers exist and it is based on standard cryptography we all already use. But a proof for every single vote that it was included in the total, without revealing its value (but with the check failing if the vote was counted for a different candidate), is a standard required feature in all those systems.<br/><br/>The one part I do not know whether it exists is a post-quantum variant. 2026-10-21T14:34:14Z https://njump.me/nevent1qqsffn9qxsxhwz27dflmsv37fecrjm5fm5rqk05v5f47d3yfr7rt8uqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqtejn8d @leeloo@c.im @randahl@mastodon.social Precisely. There are simple means for those as well, and have been implemented by the IACR.<br/><br/>One trick e.g. is that at vote time you set a PIN (can in a 2 candidate vote even be a coin flip), and your ballot proof requires that same PIN - and with another PIN you will basically get a random result.<br/><br/>You can&#39;t prove to anyone how you voted as you yourself can give them a wrong PIN that will succeed but tell them the candidate you want them to see.<br/><br/>This is so simple, this can even be done with a printed receipt and manual addition. 2026-10-21T14:06:22Z https://njump.me/nevent1qqspmylgyxa6jkueez7y3fp0ga8w0l6p0sgqrenq04ykge8j8vc7h3czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqwyg9nw @leeloo@c.im @randahl@mastodon.social That is not substance less though, and the recent famous incident about a digital vote failing actually shows that it does work:<br/><br/><a href="https://www.bbc.com/news/articles/c62vl05rz0ko">https://www.bbc.com/news/articles/c62vl05rz0ko</a><br/><br/>So it was a secret election, and given secrecy of the vote is one of the most important requirements of democracy, I would even say it succeeded.<br/><br/>But also was set up wrong, as usually one can make it so e.g. 4 out of 5 keys suffice. 2026-10-21T11:22:45Z https://njump.me/nevent1qqszg5jk887l4c77ft52v57zyuqpammfpfkh4sew05k0axn2sut67kszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqwfyla4 @leeloo@c.im @randahl@mastodon.social Are cryptography papers on the topic OK?<br/><br/>Because every single potential problem can be solved.<br/><br/>But AFAIK there are no finished products yet. Due to no interest, because no so secure voting can be sold for the same money... 2026-10-21T10:03:53Z https://njump.me/nevent1qqsxj5xlasznphdtlck2wwexyduhc33yjdlewza200n9wzy2ysunxdczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqmjxlj6 @pg1958@mastodon.sdf.org @randahl@mastodon.social Maybe. Just a bit too clever for typical russian disinfo.<br/><br/>Especially as it would be consistent with not or badly randomizing candidate lists for display + a crappy touchscreen.<br/><br/>I am not an American and not in the US - any chance someone can point me at an online demonstration of the real voting machine UI, or at least trustworthy videos? Especially if of the states named here. 2026-10-21T05:03:11Z https://njump.me/nevent1qqsgmwa4ykvyg3ymw09g6z0h85wj9ng0937sduk8l3ft5dw7w7hkcfgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqdkfpe5 @leeloo@c.im @randahl@mastodon.social There is a way to make digital voting secure.<br/><br/>But it is too expensive for them, and actually, the govt wants it to be broken. 2026-10-21T05:00:30Z https://njump.me/nevent1qqs97qhh5ekfhfqrpln832sp3cjwack7fe30ezgllxsnfdxrp6tsvrczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqr2sqjh @silver_buttercat@kolektiva.social @NewsHund@mastodon.social Using Ukrainian soldiers, just like Chechen soldiers have been used in Ukraine.<br/><br/>Ever noticed how Russia prefers sending its minority groups to the frontlines? It&#39;s not just genocide against Ukrainians - there&#39;s also internal genocide, &#34;ethnic cleansing&#34; going on. 2026-10-20T04:38:38Z https://njump.me/nevent1qqsfak3amzqmxgmknaq26s68jjcwanh0umr0qrveah6mtpw4dlre2yczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqhf208c @NewsHund@mastodon.social Also, it&#39;s not an &#34;incentive&#34; if he gets the gift first. 2026-10-20T04:37:12Z https://njump.me/nevent1qqst9rjraljec6s9lqpwmdmsu570r8zmylzyhl0kxc55xvf0mzq67rszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq8rdrhm Ganz ehrlich, ich weiß nicht einmal, ob bei einem Knochenbruch die Notaufnahme oder der ärztliche Notdienst zuständig ist.<br/><br/>Es ist erstmal nicht lebensbedrohlich, also der Notdienst, nicht die Notaufnahme. Aber... wenn der Notdienst nicht röntgen kann, brauche ich da gar nicht erst hinzufahren.<br/><br/>I.d.R. habe ich mich dann eben informiert, ob der zur Zeit zuständige Notdienst laut Website röntgt, und wenn nicht, zur Notaufnahme. So Sachen passieren nämlich nie zu normalen Zeiten....<br/><br/>Aber es wäre eben einfacher, wenn man einfach beides in einem Haus hätte und geschickt wird, wo man hin muss. 2026-10-20T04:36:12Z https://njump.me/nevent1qqsd7c3kn59fw7e2nx7vmrjc2gcmdz44hxu7xrkt977mvl84azz4ldgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7squshkmw Wenn es denn nur die armen weißen Männer wären.<br/><br/>Was passiert ist, dass die Überreichen die Medien kontrollieren, und dann wählen sogar die Schwarzen und die Mexikaner ihren Schlächter. Egal, welches Geschlecht. War in den USA super zu sehen... 2026-10-20T03:39:12Z https://njump.me/nevent1qqsg4dv7k37ewug3pa75pajjnz0y3ynnx2q3pv8yknwzgdlm5dfrvdgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqqax6xp @noelreports@mstdn.social It is just correct. Americans voted for Putin. They wanted Putin for president. They got what they voted for.<br/><br/>Too bad we are all suffering from those morons. 2026-10-19T07:19:31Z https://njump.me/nevent1qqsg4swarv5rarfsyfgv4ehgmluefhpyy8mtyz834ns4rz87z4k6dvgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqe57sl8 @bagder@mastodon.social I have hope for you :) I just am too pessimistic generally. Might be just me being German. 2026-10-19T07:16:08Z https://njump.me/nevent1qqs9a4xw8kr8j0xqe47ys4p2essxcjymp2axgqe6pkchfqgxduxw5cszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqnlnars @bagder@mastodon.social Right. I just doubt you&#39;ll actually save much work by the change. IMHO the severity triage is usually the hardest part, not the fix. 2026-10-19T06:35:35Z https://njump.me/nevent1qqsxf3p0s489fq2fzu56y5x4c6p4wf77ssvaveu4zjjs7z5x3744gqqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqvpckq5 @bagder@mastodon.social I think the main thing this needs is an agreement of what is HIGH. Some hypotheticals:<br/><br/>Buffer overrun write of arbitrary length caused by server? Sure, we all agree on that one. Sure HIGH.<br/><br/>curl -O takes path name from remote, including ../, allowing for path traversal? Sure, that&#39;s HIGH.<br/><br/>--no-clobber ignored when the output is a dangling symlink? I am starting to have doubts.<br/><br/>More than 16384 long URL from command line (NOT triggerable via redirect) causes overrun? I guess here people can already disagree a lot. I&#39;d vote for HIGH, iff it also happens via libcurl and not just in the commandline parser, MEDIUM otherwise.<br/><br/>Hostname is extracted wrong from the URL, leading to SSL certificates being accepted for the wrong host? Tricky... imagine <a href="https://evilhost.com@windowsupdate.microsoft.com/foo.cab">https://evilhost.com@windowsupdate.microsoft.com/foo.cab</a> allowing an evilhost.com cert, that could be bad. OTOH I can&#39;t imagine this ever being exploitable where the attacker can&#39;t just use <a href="https://evilhost.com/">https://evilhost.com/</a> directly and thus can just skip all the effort of DNS poisoning... thus MEDIUM? But one can also argue for HIGH here, given it&#39;d be a blatant RFC and intent violation and who knows what might happen that I just fail to think of.<br/><br/>So... I suppose part of this must be that curl maintainers should have a quick way to downgrade and publish, if they believe it&#39;s MEDIUM even if the report says HIGH. 2026-10-19T06:29:25Z https://njump.me/nevent1qqsq4ldu7su9fwshfhjzh238k7fgqevqfyn2wf587wtmfxgvrlz7esczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqrq3cp4 @geheimorga@chaos.social Rechte verwechseln Antisemitismus (also Feindlichkeit gegenüber religiösen, kulturellen oder ethnischen Juden) mit Kritik eines Staates.<br/><br/>Sieht man ja auch daran, wie Republikaner was gegen die so &#34;antisemitischen&#34; Moslems haben, aber all die alten Juden-Vorurteile rauskramen, wenn es um Selenskyj geht - der ist nämlich Jude, aber kein Israeli, also darf man ihn nach rechter Logik mit genau den alten Judenhass-Bildern anfeinden. 2026-10-19T06:17:26Z https://njump.me/nevent1qqs8krgzt86spz4mfrp24v7pd7jk5pexezd32s9whg49udrlnm22gfgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqtsujer @tom_verbeure@mastodon.social That&#39;d have been a nice feature for those DOS games. Just insert all the floppies. No more &#34;Insert Floppy 3 and press space&#34;... 2026-10-19T06:12:22Z https://njump.me/nevent1qqsthp2p5q5dfe25jl3zqf89z9up77garg7vxn0hepa0e3hw6datylszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq4x2ymg @txtx@mastodon.social Yeah, I&#39;d consider it unappealing too, just the very minimum to even talk about it.<br/><br/>What is really needed is an equivalent to the Nuremberg Processes. 2026-10-19T04:51:11Z https://njump.me/nevent1qqs02670gymxkqnxrfrmw6gkr9qvv5q350msyr8dv83nugzypnaz5pqzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqrew20u @txtx@mastodon.social The conditio sine qua non for even considering this would be russia leaving all Ukrainian territory. Including Crimea. And paying reparations.<br/><br/>Under that condition, one maybe could consider trade relations. 2026-10-18T15:16:53Z https://njump.me/nevent1qqs0h2jkgjw7utdxvllutk4r4wfraywr349pwhuln7c0z86z239q47czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq2dq4qr @quincy@chaos.social Yeah. AGENTS.md can be a nice place to tell agents to go away, or to at least not send any pull requests. But skills/ is definitely always pro-. 2026-10-18T14:25:35Z https://njump.me/nevent1qqs0g44wu8czc79z7v4rn2m6n7up2mx4d69l2v2772mrj4nct30556gzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq3wk55p @Suzimiya@mastodon.social @Soley_Lifa@mastodon.social Den Krieg nicht zu finanzieren, heißt aber #Energiewende. Das wollen sie auch nicht.<br/><br/>Nein, sie wollen aktiv die russische Seite finanzieren.<br/><br/>Welche Seite wollen sie eigentlich bei #USA gegen #Iran finanzieren? 2026-09-27T05:56:34Z https://njump.me/nevent1qqs8kjpxj7nmyl8ds5kdmx9z4m7j5l7ud3g37xpxxaspyhq5g8qm6eczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq4agcqn @missqarnstein@eldritch.cafe The extra weird way is how it&#39;s being framed.<br/><br/>So the big corps had their LLMs &#34;accidentally&#34; run wild and &#34;hack others&#34;. They then use this as a reason to ban private-run LLMs because &#34;OMG the tech is so dangerous&#34;.<br/><br/>So they cause the damage, AND want to be rewarded for it... 2026-09-25T07:19:47Z https://njump.me/nevent1qqsthjlgm2rtl6mu6gm5ghkxul66fehr6ufnptrwj85cayas0v2wl6czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqt9xvzg Worse, the fact that soon neither GCC nor Clang will be slop free can get us into a Reflections on Trusting Trust situation... 2026-09-25T04:11:35Z https://njump.me/nevent1qqsfr0ctcxw6mw6xqruasyh4nqncaetz6qkpdqhgj0utyhc6x0sdwygzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqvhr3dy @spacelizard@aus.social @swearyanthony@mastodon.social I read up on that - here in Germany electronic fallback is allowed too, but it must be fully independent from the main brake.<br/><br/>Sadly it might be allowed to connect both to the same internet... I sure hope it is not. 2026-09-21T14:29:31Z https://njump.me/nevent1qqs2qlvjrkxx769tvfgxcy7traev0tumhfz4pnh6exhmseyn7u472dczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqljr2py @spacelizard@aus.social @swearyanthony@mastodon.social My car (electric) has brake by wire with hydraulic fallback - for which the pedal has to be pushed in pretty far.<br/><br/>Isn&#39;t that kind of redundancy required by law? 2026-09-21T06:56:30Z https://njump.me/nevent1qqsy0jztadrg0yjfn2sn8ttfu7xuh8qnv6gg8vdsnkn9cxnv4lxqz2gzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7squvqf6d @swearyanthony@mastodon.social Also, the elephant in the room: nothing there is EV specific - modern ICE cars have the same features. Is that all the fossil lobby has to say for themselves?<br/><br/>(That he could not hack the brake probably has the reason that any sensible car manufacturer uses a hydraulic brake directly connected to the pedal (only with a brake booster but even that is engineered for fallback to direct) if all else fails - the electronics may be able to push the brake, but it can&#39;t pull the pedal up if your foot is on it; even the ABS is rather limited to prevent attacks like this or simple malfunctions from preventing braking) 2026-09-21T04:20:40Z https://njump.me/nevent1qqspqwxzd4waz99z2cktvx6rd33tgcgl0n4ms7tuxx3v6jelxpsy6wgzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqjeww36 @swearyanthony@mastodon.social It is long known that China puts surveillance into their products.<br/><br/>However, so do the US. For John Deere it is well known, but I would not trust any other US brand either. After all, the US too have no privacy laws, and a dictator.<br/><br/>The bigger problem is power. If China surveills me, there is little they can do to me. I am not dumb enough to use Siri, OK Google or whatever. So they can&#39;t get into my phone that way. Neither does my country host Chinese assassins waiting to strike (OTOH Russian ones seem to exist), and neither would it extradite me to China if the CCP asks nicely (OTOH to the US it could happen). China also can&#39;t get me fired or my bank account closed by putting me on &#34;sanctions lists&#34; - the US can.<br/><br/>As such, for me personally, I&#39;d rather have the Chinese surveillance than the US one. If it has to be any at all. 2026-09-21T04:12:50Z https://njump.me/nevent1qqsdll96a0cppqjh9jqlezpzz5empav3ytzralw6jyae9zqgxv2vlngzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqtzghce @carnage4life@mas.to And yet both have the same underlying issue: using AI to deflect blame.<br/><br/>&#34;It was not our fault, AI did that&#34;.<br/><br/>No.<br/><br/>You ran that AI. You set its bounds. It is your fault. 2026-09-21T03:42:14Z https://njump.me/nevent1qqsgt5q23mcgmefte5t2gsp437sk8d9tcr7k47pp3v4tham8sgmc2eszypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqkpggvy @FraumitFahrrad@ruhr.social Und meinetwegen auch alle Parteien auf verfassungsfeindliche Tendenzen prüfen und danach entsprechend behandeln. 2026-09-20T07:07:57Z https://njump.me/nevent1qqsylsaze6crd78almnhwezd7v6fc0uhgd230dq74t9vn2250xleuygzypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqq7hwfh @jd@ottawa.place Now we need a picture of a smoking barefoot pet saying &#34;oh no&#34;...<br/><br/> <img src="https://minio.libranet.de/misskey-de/msky/f72c7f27-236a-4d7a-b5c8-c865b1d429c0.jpg"> 2026-09-20T06:58:05Z https://njump.me/nevent1qqsrqyma70jzhkvsx9yyh6d6vj5t62kzaj974d2cu9w54ydmdu7se4szypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sq6xt7qf @kaibojens@gruene.social Wir brauchen mehr Pandemien. 2026-09-19T05:42:03Z https://njump.me/nevent1qqsvvhen0wtq5dgyxyr5h686mnsfe7dptz66jd03vmfgzjxa95kkf4czypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqwsr0qe @christianschwaegerl@mastodon.social Das ist sowieso verrückt. Ich kann mir doch meinen eigenen Tankrabatt machen. Abstandstempomat auf 100 und gut ist. 2026-09-19T05:40:42Z https://njump.me/nevent1qqs9tg5qlgf460eexcheg7ptgtyflvkqlky66njj4hffp3vru77ldlczypc553nnp6v27xtnt45wtk0phgx5834hvx65vjx0fee3fy3khd7sqquvg68 In reply to <a href='/nevent1qqsd3k67jsl7j0c4j0fw2x2ajs5n65ajf2074sev7kntllrc8pfqf9ss8h509'>nevent1q…h509</a><br/>_________________________<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1zvrsdhh5vfr579ryd4p7r2sf7pwd89nawhdw5zwkphw2xhdkxqrqy2u20w" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Mercurial þ̴̵̶̷̸̡̢̧̨̛̖̗̘̙̜̝̞̟̠̣̤̥̦̩̪̫̬̭̮̯̰̱̲̳̹̺̻̼͇͈͉͍͎̀́̂̃̄̅̆̇̈̉̊̋̌̍̎̏̐̑̒̓̔̽̾̿̀́͂̓̈́͆͊͋͌̕̚ͅ͏᷐᷎͓͔͕͖͙͚᷂᷊᷏͐͑͒͗͛ͣͤͥͦͧͨͩͪͫͬͭͮͯ᷀᷁᷃᷄᷅᷆᷇᷈᷉᷋᷌᷑᷒ᷓᷔᷕᷖᷗᷘᷙᷚᷛᷜᷝᷞᷟᷠᷡᷢᷣᷤᷥ͘͜͟͢͝͞͠͡᷍ꙮe/acc</span> (<span class="italic">npub1zvr…u20w</span>)</a></span> Challenge accepted.<br/><br/><a href="https://chatgpt.com/?q=[object+Object]">https://chatgpt.com/?q=[object+Object]</a> 2026-07-26T05:26:47Z