cypherpunks

joined 3 years ago
MODERATOR OF
[–] cypherpunks@lemmy.ml 3 points 6 hours ago (1 children)

Good question.

I see that the file served from https://packages.mozilla.org/apt/repo-signing-key.gpg is the same as the file at https://packages.cloud.google.com/apt/doc/apt-key.gpg

Apparently Mozilla outsources the operation of the Firefox APT repo to the Google Cloud "Artifact Registry" service 😦

 

cross-posted from: https://lemmy.ml/post/26304038

from the OpenSSH 9.9p2 release announcement:


This release fixes two security bugs.

Security
========

* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH.
 

from the OpenSSH 9.9p2 release announcement:


This release fixes two security bugs.

Security
========

* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH.
[–] cypherpunks@lemmy.ml 6 points 23 hours ago

A lot of people commenting on this seem to have gaps in their knowledge of what happened

We're in a Linus-email-🍿-thread, so that kind of goes without saying doesn't it? 😂

[–] cypherpunks@lemmy.ml 8 points 1 day ago* (last edited 23 hours ago) (4 children)

What does glazer mean in this context? (English is my fourth language)

English is my first language and I also wondered. The definition in the other reply to you was only added to wiktionary last year. According to know your meme, it became popular on TikTok in 2023 and allegedly originated on discord in November 2021.

(wiktionary also has another definition which I've also never heard of before which has been there since 2007 with no quotations or other evidence of actual use...)

[–] cypherpunks@lemmy.ml 7 points 3 days ago

I tried giving them some other species

👍

[–] cypherpunks@lemmy.ml 2 points 4 days ago (1 children)

would you recommend that book for learning regular expressions as a non CS guy?

Absolutely, it's an excellent book which I highly recommend.

The latest edition (3rd) is almost 20 years old, but I don't think regex has actually changed substantially since then so it should still be very useful. (I read the 2nd edition cover-to-cover and enjoyed it enough that I bought the 3rd when it was released 😀)

If you're going to buy a physical copy from amazon you should use the author's link here to give him slightly more money for it. But if you just want a PDF I see one is available here.

[–] cypherpunks@lemmy.ml 2 points 5 days ago

short answer: because nobody flagged that other one. (it is deleted now too.)

re: riseup, is it even possible to use their VPN without an invite code? (i don't think it is?)

in any case, riseup says clearly that their purpose is "to provide digital self-determination for social movements" - it is not intended for torrenting, even if it might work for it.

feel free to PM me if you want to discuss this further; i am deleting this post too. (at the time of deletion it has 8 upvotes and 33 downvotes, btw.)

[–] cypherpunks@lemmy.ml 4 points 5 days ago* (last edited 5 days ago)

This headline and article are focused on antidepressants, but the line which mentions them in the executive order which this reporting is based on is actually broader.

It also seems to attribute the authorship of the executive order to Kennedy, linking to it while saying that he "issued a statement", despite it not actually mentioning his name and it being phrased in the first person from the president (beginning with "By the authority vested in me as President" as is usual for an executive order).

The article says (emphasis mine):

The government, he said, would “assess the prevalence of and threat posed by the prescription of selective serotonin reuptake inhibitors, antipsychotics, [and] mood stabilizers.”

While the executive order says:

(iii) assess the prevalence of and threat posed by the prescription of selective serotonin reuptake inhibitors, antipsychotics, mood stabilizers, stimulants, and weight-loss drugs;

[–] cypherpunks@lemmy.ml 3 points 5 days ago* (last edited 5 days ago)
[–] cypherpunks@lemmy.ml 27 points 5 days ago* (last edited 5 days ago)

Great article, BTW

I disagree, the headline is clickbaity and implies that there is some ongoing conflict. The fact that the Fedora flatpak package maintainer pushed an update marking it EOL, with "The Fedora Flatpak build of obs-studio may have limited functionality compared to other sources. Please do not report bugs to the OBS Studio project about this build." in the end-of-life metadata field the day before this article was written is not mentioned until the second-to-last sentence of it. (And the OBS maintainer has since said "For the moment, the EOL notice is sufficient enough to distance ourselves from the package that a full rebrand is not necessary at this time, as we would rather you focus efforts on the long-term goal and understand what that is.")

The article also doesn't answer lots of questions such as:

  • Why is the official OBS flatpak using an EOL'd runtime?
  • Why did Fedora bother to maintain both their own flatpak and an RPM package of OBS?
  • What (and why) are the problems (or missing functionality) in the Fedora Flatpak, anyway? (there is some discussion of that here... but it's still not clear to me)
  • What is the expected user experience going to be for users who have the Fedora flatpak installed, now that it is marked EOL? Will it be obvious to them that they can/should use the flathub version, or will the EOL'd package in the Fedora flatpak repo continue to "outweigh" it?

Note again that OBS's official flathub flatpak is also marked EOL currently, due to depending on an EOL runtime. Also, from the discussion here it is clear that simply removing the package (as the OBS dev actually requested) instead of marking it EOL (as they did) would leave current users continuing to use it and unwittingly missing all future updates. (I think that may also be the outcome of marking it EOL too? it seems like flatpak maybe needs to get some way to signal to users that they should uninstall an EOL package at update time, and/or inform them of a different package which replaces one they have installed.)

TLDR: this is all a mess, but, contrary to what the article might lead people to believe, the OBS devs and Fedora devs appear to be working together in good faith to do the best thing for their users. The legal threat (which was just in an issue comment, not sent formally by lawyers) was only made because Fedora was initially non-responsive, but they became responsive prior to this article being written.

[–] cypherpunks@lemmy.ml 5 points 1 week ago* (last edited 1 week ago) (1 children)

Yeah, see, that’s cheating. Finland was effectively occupied territory at the time.

I think it is clear that the meaning of "invaded X" here is "invaded some place which today is part of X".

As an amateur history nerd, it just makes me wish I could click on it and find the details of said invasions

Again, you can find the whole book on LibGen :)

Here is the section about Finland, which actually covers more than just the war of 1807-1812We saw action in Finnish waters in our war against Russia of 1807–12, one of those wars set amid the chaos of Napoleonic Europe, in which we were temporarily at war with people who at other times were instead fighting the French alongside us.

There were assorted naval actions. For instance, on 25 July 1809, Princess Caroline, Minotaur, Cerberus and Prometheus, not in this case the cast of some mythological movie, but a British naval squadron, fought a battle with four Russian gunboats and a brig near Hamina. After nineteen Britons and twenty-eight Russians were killed, the Russian boats were captured by the princess and her mythological friends.

The Russians, not surprisingly, moved fairly fast to end the war when Napoleon invaded them in 1812.

With the arrival of the Crimean War in the 1850s, we were invading Finnish waters again. We spent quite a lot of time bombarding Russian fortifications from the sea, but in the most dramatic of the incidents we landed and took hundreds of Finnish prisoners (Finnish prisoners from the Russian army, since the Russians controlled the area at the time). This was the Battle of Bomarsund, or rather two Battles of Bomarsund. The first battle was more of a bombardment of the Russian fortress at Bomarsund and notable because Charles Davis Lucas threw a live shell off the ship, performing the earliest act of bravery to be rewarded with a Victoria Cross.

The Second Battle of Bomarsund was a more dramatic affair. On 13 August 1854, a British fleet landed thousands of French troops and then shelled the fortress until it surrendered. After the surrender, British and French forces made the fortress unusable. About 300 mainly Finnish grenadiers, with Russian officers, were taken to Britain and held prisoner in Lewes, where you can now see the so-called Russian Memorial commemorating twenty-eight Finnish soldiers who died here. The story of their incarceration also makes an interesting aside, with the officers going out riding and shooting, and the soldiers becoming a tourist attraction for some Brits, while other Brits complained that the prisoners were being too well treated.

Then, bizarrely when you consider that we had been fighting Russians in what is now Finland, about the only time we have attacked Finland, we attacked it in what was then Finland but is now Russia. Confusing eh? On 30 July 1941, to show Churchill’s sudden enthusiasm for Stalin, once the German invasion of Russia had brought him into the war on our side, we managed to get two aircraft carriers into Arctic waters north of Finland and tried to bomb Kirkenes in Norway and Petsamo in Finland (now in Russia). It was a bit of a disaster all round for us, with many Fleet Air Arm planes shot down and not much damage done to the ports.

We could redo this map with “Countries the British have invaded since WW2 ended”

I don't have that map handy but,

here are the countries which had the British monarch as their 'sovereign', post-1952wikipedia's world map titled "The realms, territories, and protectorates of Elizabeth II from 1952 to 2022"

caption showing color code for the four categories in the previous map: Realms as of her death, Former realms, Territories and dependencies as of her death, and Former territories, dependencies and protectorates

(via)

Though I also worry that in the modern era, with imperialism suddenly in vogue again, that this is priming people for whataboutism

fyi the the pejorative "whataboutism" was actually coined by an apologist for British imperialism 😂

[–] cypherpunks@lemmy.ml 9 points 1 week ago

https://phosh.mobi/faq/#theres-no-prominent-download-link-how-do-i-install-phosh phosh is part of several different distributions, which each support different devices

 

cross-posted from: https://feddit.uk/post/17059476

Pride in Britain’s history has fallen sharply over the past decade as the country has become less nationalistic and jingoistic and more reflective about its place in the modern world, according to a leading barometer of the British public mood.

Although Brexit and immigration have created flashpoints around national identity in recent years, the wider picture shows a more inclusive and self-critical sense of Britishness emerging and a decline in my-country-right-or-wrong views.

While levels of pride in Britain’s achievements in sport and the arts have remained high over the last 10 years, the overall impression is of “a country that is quite proud of itself but maybe no more than that”, the British social attitudes survey found.

There was a striking 22-point fall in the proportion of people saying they were proud of Britain’s history, from 86% to 64%, and a 13-point drop in those who said they would rather be a citizen of Britain than any other country, from 62% to 49%.

“Despite Brexit and the debate about immigration, Britain has become less exclusive in its attitude towards Britishness, less likely to feel a sense of superiority as compared with the rest of the world, and somewhat more critical about its politics and its past,” the survey report concludes. “It is perhaps a picture of a country that to some degree at least becomes more reflective about itself and about its relationship with the rest of the world.”

view more: next ›