rany_

11 ms·

121.
by rany_ 3y ago
So what do you suggest?
122.
by rany_ 3y ago
Yeah, because they need to spell out what they're trying to have you infer.
123.
by rany_ 3y ago
Actually, the Chinese government holding my data is probably better than my own government holding and using it to incriminate me. I'm pretty sure China doesn't share the data they're collecting with their adversaries or even
124.
by rany_ 3y ago
Read between the lines, they're trying to blame their AI for the civilian casualties.
125.
by rany_ 3y ago
Killing these civilians is one way to ensure that these people will be reliable Hamas supporters for years to come. Absolutely crooked that Israel is treating Hamas as though it was a legitimate representative of the Palestinian people and
126.
by rany_ 3y ago
Really? I guess they're just "following orders" from the AI then. What a shameful response, if Russia did this or if the roles were reversed you'd be appalled.
127.
by rany_ 3y ago
It was just that it hooks to `RSA_public_decrypt` which threw me off, I didn't really understand this backdoor much. I only have one Debian sid machine which was vulnerable and accessible via a public IPv4 ssh, I'm not sure if I s
128.
by rany_ 3y ago
Thanks for the reply, I was just curious because `RSA_public_decrypt` threw me off.
129.
by rany_ 3y ago
If my server doesn't have any RSA public keys in its authorized_keys, only ed25519 keys; does this backdoor just not work?
130.
by rany_ 3y ago
They don't want people creating accounts with credit cards that have very low limits. This is very reasonable and actually means that it will be cheaper for you because other (legit) clients don't have to subsidize criminals that
131.
by rany_ 3y ago
They're just saying anything to bump up their value.
132.
by rany_ 3y ago
That JiaT75 account is also suspended, if you check https://github.com/Larhzu?tab=following you'll see that they're suspended as well. It's pretty weird that it's that hard to find out whether a user is
133.
by rany_ 3y ago
Also git actually stores the timezone information. You could see it is consistently China time (GMT+8). P.S. could be Taiwanese as China and Taiwan share the same timezone. Below are links to the git mailbox files where you could see the ti
134.
by rany_ 3y ago
I don't think that's what they meant. The idea is to find information about their personal life, not OSS contributions. Something that proves they're a real person.
135.
by rany_ 3y ago
Searching for my real name on Google doesn't return anything either, I don't think this means anything.
136.
by rany_ 3y ago
It's not ironic, this change is really sinister IMO. They want you to waste more time after you've submitted the security report and maximize the amount of back and forth. Basically the hope is that they'd be able to pester y
137.
by rany_ 3y ago
It's actually not an advantage. The reason why the exploit wasn't included is because the attacker specifically decided to only inject x86_64 Debian and RHEL to reduce the chances of this getting detected.
138.
by rany_ 3y ago
I think the reason is pretty obvious. They want you to waste more time after you've submitted the security report and maximize the amount of back and forth. Basically the hope is that they'd be able to pester you with requests for
139.
by rany_ 3y ago
Except this change was made in 2023, it is just scary how good this threat actor was.
140.
by rany_ 3y ago
I think the bigger issue is that you'll basically be at the mercy of the courts on how far you need to go with it. The scope isn't well defined IMO and it really couldn't be. Do I need to open source components that I don&#x2
141.
by rany_ 3y ago
Do you really think this is a good faith offer? It is just extortion, at least the AGPLv3 applies to the AGPLv3 software you're using ONLY.
142.
by rany_ 3y ago
You could replace the battery for under 100 USD, you can't do the same for the flash storage.
143.
by rany_ 3y ago
SSPL is not really comparable IMO. Check my comment here https://news.ycombinator.com/item?id=39862916 : > SSPL includes most of the AGPLv3 ... but modifies its provisions for software that is conveyed over a network—req
144.
by rany_ 3y ago
From Wikipedia: > SSPL includes most of the AGPLv3 ... but modifies its provisions for software that is conveyed over a network—requiring that anyone who offers the functionality of SSPL-licensed software to third-parties as a service mu
145.
by rany_ 3y ago
> SSPL (Server Side Public License) is a license introduced in 2008 Actually introduced in 2018, not 2008.
146.
by rany_ 3y ago
Isn't this just the AGPL but more hardcore?
147.
by rany_ 3y ago
Most of the hype is for their paid model, I also didn't have a good experience with their free offering.
148.
by rany_ 3y ago
The only penalty is using up your flash's write cycles; but of course, this works to Apple's favor because it means you'll need to replace this thing sooner when the flash dies. Best part? You can't easily replace the fl
149.
by rany_ 3y ago
Well, if implemented properly I think it's OK. Back in the Internet Explorer days, Microsoft used to block adult sites on device based on the RTA header adult sites added themselves. I think if adult sites were required to use the RTA
150.
by rany_ 3y ago
I mostly get some science videos and old comedy sketches. It will just recommend content you're into, same as any other social media network.

More ›