• 0 Posts
  • 16 Comments
Joined 5 days ago
cake
Cake day: August 10th, 2025

help-circle



  • Beastie Boys had one of the first and biggest of the anti-Iraq-War songs, I can’t think offhand of one that was more “mainstream” at the time and still explicit and specific about it.

    Well I’ll be sleeping on your speeches 'til I start to snore
    Cause I won’t carry guns for an oil war
    As-Salamu alaikum, wa alaikum as-salam
    Peace to the Middle East peace to Islam

    And so on. It might not have been the best (IMO that is “Empire” by Dar Williams, with haunting sadness, historical scope, and irony), but it was big.






  • I won’t say 100%, but they’re generally pretty good. Big ones I can think of:

    • They’re going to apply every attack against Kamala Harris that they did against Biden
    • Trump is going to be infinitely worse for the Palestinians even than Biden was

    The first is a little bit qualified I guess. I was somewhat against replacing Biden for that reason (definitely before the debate), which was absolutely a mistake. But I think in retrospect, the way that they were able to blame Kamala Harris for Gaza and inflation and make it work was pretty spot-on to what I predicted.

    The second one, people were furiously telling me how wrong I was, how impossible it would be for anyone to be worse than Biden, and in early days saying that Trump had achieved a cease-fire and it was just proof of how easy it would have been if only Biden had put some slight effort to it.





  • I sort of have a suspicion that there is some mathematical proof that, as soon as it becomes quick and easy to import an arbitrary number of dependencies into your project along with their dependencies, the size of the average project’s dependencies starts to follow an exponential growth curve increasing every year, without limit.

    I notice that this stuff didn’t happen with package managers + autoconf/automake. It was only once it became super-trivial to do from the programmer side, that the growth curve started. I’ve literally had trivial projects pull in thousands of dependencies recursively, because it’s easier to do that than to take literally one hour implementing a little modified-file watcher function or something.



  • I feel like this is kind of the amateur-hour stuff. It’s certainly dangerous, but in comparison to a lot of state-actor activities (or even committed-amateur activities), this kind of supply-chain attack is pretty blatant and easy to spot. Which doesn’t mean it’s easy to spot – I just mean would be trivial to volunteer and contribute some minimal fixes and enhancements to some open source project, and then at one point smuggle in a zero-day that will basically never be detected unless someone detects the intrusion itself and then works backwards from there with a ton of time to spend on it.

    If you’ve ever looked at the obfuscated C contest it should be obvious that this kind of thing can be made completely invisible if you know what you’re doing. Some of the interactions and language features that lead to problems are basically impossible for a casual viewer to see, even if they’re paying attention, and the attack surface is massive and the amount of attention that goes into checking it for weird subtle vulnerabilities is minuscule.


  • What I used to do when I lived in an area with a decent number of homeless people, was offer to get them some food, if I had the time for it. I’d walk somewhere with them, say what do you want I’ll grab it for you, and come out and hand it to them. It was honestly a little bit awkward to do it without feeling like a ponce, making conversation with the person or whatnot feeling condescending, but whatever.

    I would say the majority would discount the suggestion. I didn’t feel the slightest bit bad saying no you can’t have any money then. A minority would be really into the idea and clearly fucking light up at the idea of having their hands on a sandwich. Those dudes I felt like it was important that they get their sandwich.

    I also knew a guy who used to be homeless, volunteered with homeless services and substance abuse programs and etc, spent a ton of time on it. He never gave money on the street. He got very bitter about the subject, he just said that it doesn’t help them. Make of that what you will, I don’t really know the ins and outs, but that’s what he said.