tal

joined 1 year ago
[–] tal 36 points 3 weeks ago* (last edited 3 weeks ago) (3 children)

I mean, this kind of stuff was going to happen.

The more-important and more-widely-used open source software is, the more appealing supply-chain attacks against it are.

The world where it doesn't happen is one where open source doesn't become successful.

I expect that we'll find ways to mitigate stuff like this. Run a lot more software in isolation, have automated checking stuff, make more use of developer reputation, have automated code analysis, have better ways to monitor system changes, have some kind of "trust metric" on packages.

Go back to the 1990s, and most everything I sent online was unencrypted. In 2024, most traffic I send is encrypted. I imagine that changes can be made here too.

[–] tal 18 points 3 weeks ago (3 children)

Not really a language-specific problem. Like, there are numerous languages that have distribution mechanisms for libraries that might potentially be malicious.

Only way I can think that the language might be a factor would be if a language were designed to only run in a restricted mode.

[–] tal 8 points 3 weeks ago* (last edited 3 weeks ago)

watches video

What the heck is that gigantic thing attached below the barrel of that rifle?

kagis

Hmm. Apparently about a decade ago, North Korea was showing off a helical magazine. Dunno if the video footage DW is using is current, though, so no idea if it's still in use.

The North Korean military uses a 100- to 150- round helical magazine in the Type 88 assault rifle.

https://armamentresearch.com/north-korean-helical-ak-magazines/

Damn, that must be heavy as hell, moves a bunch of the weight on the rifle way forward.

looks further

It sounds like they aren't using them in this deployment, though, that Russia has provided arms:

https://newsukraine.rbc.ua/news/first-north-korean-troops-come-under-fire-1730706704.html

According to Defense Intelligence data, Russia has equipped the North Korean military with:

  • AK-12 assault rifles

https://en.wikipedia.org/wiki/AK-12

[–] tal 10 points 3 weeks ago

The secretive weapons were found to be electronic massagers modified with a flammable magnesium-based substance, according to a report by the Wall Street Journal.

One source said these incendiary devices do not get caught by traditional security controls

Well, I guess prepare for air security to care more about vibrators than in the past.

[–] tal 1 points 3 weeks ago* (last edited 3 weeks ago)

Well, someone's gotta pay for all the bandwidth somehow.

considers

Honestly, maybe that'd be a way for instances to provide some kind of "premium" service. Like, provide larger upload limits for people who donate. I assume that the instance admins don't have any ideological objections to larger images, just don't want to personally pay out-of-pocket for huge bandwidth and storage bills.

goes looking

I believe that this is the backend used by Lemmy, pict-rs:

https://github.com/distruss/pictrs

https://join-lemmy.org/docs/administration/from_scratch.html

Lemmy supports image hosting using pict-rs. We need to install a couple of dependencies for this.

It looks like it only has one global size setting, so probably can't do that today.

Could also host one's images on an off-site image hosting thing, but then you don't benefit from integration with the uploading UI. I guess another option would be for Lemmy to provide some sort of integration with an off-site image-hosting service, so that a user could optionally use all the Lemmy features seamlessly, but just have your client or browser make use of your off-site account.

[–] tal 59 points 3 weeks ago (4 children)

As he was arrested, the DOJ alleged he was at the rear of a vehicle with the drone powered up and the explosive device was armed and located next to the drone.

In September 2024, Philippi drove with undercover employees of the FBI to an electric substation previously researched and targeted by him and Philippi conducted reconnaissance of the substation. The DOJ alleges that while driving, he ordered a plastic explosive composition known as C-4 and other explosives from the undercover.

He later allegedly purchased black powder to be used in pipe bombs, which Philippi intended to use during the attack. The DOJ said he contacted another confidential human source, “If you want to do the most damage as an accelerationist, attack high economic, high tax, political zones in every major metropolis.”

Philippi also allegedly discussed operational security, including the need for disguises, the use of leather gloves, wearing shoes that are too big, the need to burn their clothes after the attack and not bringing smartphones on the night of the attack.

Then, on Nov. 2, 2024, he participated in a Nordic ritual, which included reciting a Nordic prayer and discussing the Norse god Odin. Philippi allegedly told the undercover that “this is where the New Age begins” and that it was “time to do something big” that would be remembered “in the annals of history.”

I imagine that it's kinda an unpleasant moment when you abruptly discover that all your fellow white supremacists who have been working with you towards this glorious moment of blowing stuff up are actually FBI agents.

[–] tal 3 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

Also, I tried to upload pictures but kept getting an error.

If lemm.ee supports image uploads -- which they don't have to -- they may have size restrictions; my understanding is that the size restriction can be customized on a per-instance basis.

EDIT: They say in their sidebar:

https://lemm.ee/

  • Image uploads are enabled 4 weeks after account creation
  • Image upload limit is 500kb per image

Your account was created in 2023, so it's not the 4 week limit, but you're probably exceeding their (relatively low, as Lemmy instances go) image size limit.

Be kind of interesting to expose that data and let lemmy.fediverse.observer display limits per-instance.

EDIT2: I think that the largest image I've uploaded on lemmy.today is this high-resolution scan, which is 8 MB.

[–] tal 4 points 3 weeks ago

No, but it goes both ways. They have missiles aimed at us. We have missiles aimed at them. They probably aren't gonna be better off if they use theirs. As long as we structure stuff such that escalation from them is disadvantageous to them, and as long as they're acting rationally, they're incentivized to not act, whether in smaller things like bombing airliners or larger things like the missiles.

[–] tal 5 points 3 weeks ago (1 children)

Sure, but that was accidental. If they could have avoided that shootdown, they would have, and while I have no doubt that a lot of countries were annoyed by them not paying compensation, they were also aware that Russia wasn't intentionally trying to shoot down an airliner.

If Russia, say, adopted a policy of sending fighters into Poland and firing missiles at any airliners they find in Polish airspace, that's going to garner a more-unpleasant response.

[–] tal 4 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

The timeframe is pretty short.

That might be doable down the line if there were serious aims at long-run cooperation, but I've also read some articles making a case that due to divergent interest, Russia and NK probably won't stick tightly together post-war.

Guess we'll see.

[–] tal 8 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

I'm guessing that they're gonna either try to have NK forces operate together, or gonna put them in roles that involve minimal interaction with other forces.

I expect that it's some degree of problem, no matter what.

One element that's kinda important in US military theory is the idea of the OODA loop.

https://en.wikipedia.org/wiki/OODA_loop

The OODA loop (observe, orient, decide, act) is a decision-making model developed by United States Air Force Colonel John Boyd. He applied the concept to the combat operations process, often at the operational level during military campaigns. It is often applied to understand commercial operations and learning processes. The approach explains how agility can overcome raw power in dealing with human opponents.

https://www.google.com/search?q=%2Booda+site%3Amil

The basic idea is that the smaller that loop is, the more-quickly you can react to your opponent while they're still trying to react to your prior actions, the greater the advantage. In some cases -- think the Battle of France, where at a high level France had slow response time -- it can lead to staggering differences in outcome.

Language barriers exacerbate that sort of thing.

In US military history, I remember that that was blamed for a lot of problems surrounding the Battle of the Java Sea, a serious Allied naval loss.

https://en.wikipedia.org/wiki/Battle_of_the_Java_Sea

The Allies had a scratch force of American, British, Dutch, and Australian ships.

Unfortunately, these didn't use common cryptographic mechanisms to encode communications, and the operational command was with the Dutch, who at the time didn't work in English.

As a result, you had stuff like American reconaissance planes who would encode and transmit encoded data in English to a ship, which would decode the information, which would -- assuming no extra relays were involved, which would involve more decoding and encoding -- hand off the information in plaintext to a translator who knew English and Dutch, who would relay the Dutch to the person in command, who would make a decision on response, which would hand that back off to a translator, who would translate that to English, and encode and send the orders to, say, a British ship, who would decode those and relay to the ship commander, who would order people to then do something.

One of the things NATO did was establish common communication hardware and standardize on a subset of English for operational stuff to cut into the length of that loop.

[–] tal 2 points 3 weeks ago

I don't have anything to add to the rest of the comment, but I really enjoyed Noita.

 

Archaeologists from the University of Tokyo might have finally discovered the death site of the Roman Empire's founder Gaius Julius Caesar Augustus (born Gaius Octavius). 

The possible traces of the Villa of Augustus were found during excavations at Somma Vesuviana - a place where Augustus was said to have died in the year 14 AD. 

 

A strain of bird flu known as H5N1 or highly pathogenic avian influenza has made a worrying leap to cattle herds across the US over the past month. This development has sparked "enormous concern" among health experts, including the World Health Organization's (WHO) chief scientist, who warned of the virus' "extremely high" mortality rate in humans.

 

A U.S.-supplied air-to-ground munition transformed into a ground-based strike weapon has been performing very poorly in Ukraine due to jamming and other factors, according to a senior Pentagon official. Though the weapon system in question has not yet been confirmed, there are strong indications that it could be the Ground Launched Small Diameter Bomb (GLSDB).

 

Mike Johnson released the bill texts amid calls by two far-right representatives to remove him from the speakership

view more: ‹ prev next ›