Category Archives: News

Shared items and notes from my feeds and browsing. Subscribe as feed.

UK porn blacklist is dead after government abandons age verification

Source: Ars Technica

Article note: Well, at least they abandoned the impossible and invasive plan after being confronted with it being impossible and invasive, rather than just forging ahead and trying to alter reality by legislative fiat.
Nicky Morgan, UK Secretary of State for Digital, Culture, Media, and Sport.

Enlarge / Nicky Morgan, UK Secretary of State for Digital, Culture, Media, and Sport. (credit: Leon Neal/Getty Images)

The United Kingdom is abandoning plans to try to force pornography websites to age-verify UK Internet users. Digital Secretary Nicky Morgan announced the shift in a Wednesday statement.

Morgan claimed that "the government's commitment to protecting children online is unwavering." However, she said, the government will now accomplish that goal "through our proposed online harms regulatory regime." She didn't elaborate on what those regulations would look like.

The age verification requirement was part of the Digital Economy Act that the UK parliament passed in 2017. It was supposed to go into effect last year but was delayed multiple times. Most recently, the government announced in April that the new requirement would go into effect on July 15.

Read 5 remaining paragraphs | Comments

Posted in News | Leave a comment

Ploopy: An Open-Source Trackball

Source: Hacker News

Article note: Neat! I like trackballs, especially to break up my flavors of hand strain, but MX570s are a little unreliable (mostly cheap switches; replaceable), I have had no end of driver problems with the Elecom I got to try as an alternative, Saiteks are stupid expensive, and Microsoft killed their line, so its been hard to find nice ones. Especially ones that fit well which matters a _lot_ for comfort.
Comments
Posted in News | Leave a comment

Potential bypass of Runas user restrictions in sudo

Source: Hacker News

Article note: It requires a rather atypical configuration, but... damn, that's a big edge condition oops. Basically, in some versions of sudo, if configured with an (ALL, !root) case, trying to run something as an invalid but representable UID (-1, 4294967295) will have the underlying syscalls reject _after_ the tests, and it will then run the command as... the sudo binary's SUID 0.
Comments
Posted in News | Leave a comment

Faculty:Student Ratio

Source: xkcd.com

Article note: Metric gaming! Its eating society!
They managed to briefly hit the top of the rankings when they rejected everyone except one applicant, published 5 billion research papers that just said "Hi," and hired one of their graduates for $50 trillion/year (then fired them after 10 microseconds.)
Posted in News | Leave a comment

Planting tiny spy chips in hardware can cost as little as $200

Source: Ars Technica

Article note: The ongoing game of there being no evidence for that high profile Bloomberg implant article, but it being obviously not-that-hard for such a thing to happen makes for interesting theorizing and reading. I expect we'll eventually find an example in the wild, but probably not where they claimed.
Planting tiny spy chips in hardware can cost as little as $200

Enlarge (credit: Carl Drougge)

More than a year has passed since Bloomberg Businessweek grabbed the lapels of the cybersecurity world with a bombshell claim: that Supermicro motherboards in servers used by major tech firms, including Apple and Amazon, had been stealthily implanted with a chip the size of a rice grain that allowed Chinese hackers to spy deep into those networks. Apple, Amazon, and Supermicro all vehemently denied the report. The National Security Agency dismissed it as a false alarm. The Defcon hacker conference awarded it two Pwnie Awards, for "most overhyped bug" and "most epic fail." And no follow-up reporting has yet affirmed its central premise.

But even as the facts of that story remain unconfirmed, the security community has warned that the possibility of the supply chain attacks it describes is all too real. The NSA, after all, has been doing something like it for years, according to the leaks of whistle-blower Edward Snowden. Now researchers have gone further, showing just how easily and cheaply a tiny, tough-to-detect spy chip could be planted in a company's hardware supply chain. And one of them has demonstrated that it doesn't even require a state-sponsored spy agency to pull it off—just a motivated hardware hacker with the right access and as little as $200 worth of equipment.

Read 14 remaining paragraphs | Comments

Posted in News | Leave a comment

A Code Glitch May Have Caused Errors in More Than a Hundred Published Studies

Source: Hacker News

Article note: Given the incentive structure, this seems... entirely normal.
Comments
Posted in News | Leave a comment

uBlock Origin Update Rejected from the Chrome Web Store

Source: Hacker News

Article note: aaand this is why I already bailed back to Firefox.
Comments
Posted in News | Leave a comment

What to Do When You Get Sherlocked by Apple

Source: Hacker News

Article note: Apple's habit of integrating reference implementations of good 3rd party features is kind of a good thing for users. Their habit of courting then erasing the places they steal the features from is bad for everyone. Also, as one HN commenter points out, until recently that kind of thing would have been cheap Shareware or FOSS hacked up by someone and maintained by a few weeks of community time, rather than a subscription rent seeking operation.
Comments
Posted in News | Leave a comment

there is no such thing as punching up or punching down

Source: the ANOVA

Article note: This. Claiming "Punching up/down" is such an act of decontextualized, reductionist self justification it isn't a claim we should ever credit. Asshole-for-cause is sometimes fine and necessary, but if you're gonna do it, own it.

A much beloved opinion of the woke set is the idea that punching up is good, and punching down is bad. This is the new rule for comedy, and like all rules of contemporary liberalism, it is treated as though it is universally straightforward and easy to follow. This is, of course, nonsense.

Take my own context, a college campus. If a student mocks their instructor, are they punching up or punching down? The easy answer is yes; the instructor is in the position of authority. But in fact this is, in many institutional contexts, entirely wrong. Most American college classes are taught by adjuncts or grad students. Neither has institutional power. Neither has job security. Neither works for more than poverty wages. In the liberal arts colleges that are the epicenter of wokeness in particular you will find that in fact the average undergrad has vastly more power than the average adjunct. It’s not even close. One group, after all, is seen by the institution as the customer.

Which is not to say that I would call an adjunct making fun of a student as “punching up.” In truth there is no simplistic way to perfectly map the complex and shifting power dynamics between student and teacher, and this is true in far more scenarios too. If the man who was preemptively fired from SNL was in the position of superior power compared to his critics, how did he come to be fired? Doesn’t the fact that his critics got what they wanted, and he did not, suggest in fact that he was the one who lacked power? I don’t know. I do know that power is an immensely multivariate and complicated thing, and mapping it onto a binary is a habit of the incurious and the privileged.

“Punching up” and “punching down,” like so many other things in our political culture, is just a radical oversimplification to suit the priors of the chattering class, another attempt to make the complexity of life palatable for oversize children.

Posted in News | Leave a comment

Why Enterprise Software Sucks

Source: Hacker News

Article note: Mmyep. When the customer (payer) isn't the user, things get designed to appeal to the customer, and the users usually get shafted.
Comments
Posted in News | Leave a comment