Care to summarise?

https://m.youtube.com/watch?v=_MwMLPmMccs

I’m halfway through this, I assume that its what you mean? Nothing there so far invalidates what I said. 25% bad reports means 75% good reports.

Edit: I finished it, and nothing he says invalidates what I wrote.

Its important to remember that the vulnerabilities always existed, we just know about them now. We have no idea how many of them were being quietly exploited before now.

There is no point being mad at AI for the avalanche of CVEs, if anything we should be mad ourselves for not prioritising security review of the code. Many of these issues probably could have been found before AI if we as an industry were willing to spend the resources doing the audits. But we werent willing, and now we have to pay for our sins.

Ive run gitea and gitlab, they are both trivial to run. (Both probably have AI code, but in my experience gitlab has been rock solid).

Search for docker compose instructions, they are generally the quickest and easiest way to get going:

https://docs.gitlab.com/install/docker/installation/#install-gitlab-by-using-docker-compose

https://forgejo.org/docs/v15.0/admin/installation/docker/#docker

The upside of docker is that if the do push a bad version, its trivial to downgrade and use the previous version, just update the compose file and restart.

But, If you really want to get on with game dev, just push to github/gitlab/codeberg. Theyll get you started way faster and you can worry about your own self hosted thing later when it matters more to you. Its easy to transfer between them later.

Exactly!

That doesnt change anything about my original point. They are conflicting missions, whether you add certain or not.

And no matter what you call it, backdooring ghidra defeats the point of both, it means no one will use it, which allows malware to run rampant. (Ghidra was released during the height of the cryptolocker craze, it allowed reversing those crypto lockers to be done by anyone, effectively neutering many of them).

And when it gets caught its immediately attributable to the malware division, which they dont want either.

There is zero point backdooring ghidra. Now XZ? *sshole? Thats the level of sophisticated backdoor I would expect from the NSA.

o7 what a hero.

Only true if they can abuse the backdoor, if its tied to NSA infrastructure (which a competent backdoor would be), they couldn’t use it. There is also precedence, the Germans didnt hesitate to publicise that Angela Merkel’s phone was hacked, they could have used the malware to feed false information instead. Stuxnet was exposed to embarrass the US/Israel.

Cyber security companies would also have no qualms about publicising it. Finding a NSA backdoor would put them on the map, and they have no use for a backdoor.

Even if we take your definitions, they are still conflicting.

Attacking humans means developing malware.

Defending capital means protecting that capital from others malware.

If either of them do their job too well, the other will be failed. That is by definition conflicting.

Go to any cyber security conference. Check out the CTF teams, Ghidra is used everywhere.

Can you prove that there is a backdoor? Remember that it is freely available, and if China, Russia, NK or any other nation state could find a backdoor, they would be shouting it from the rooftops to shame the US.

I dont doubt that the NSA could have seeded a backdoor in an open source project, but I very much doubt they would sign their name to it…

I dont know what you mean by that. Do you mean that the NSA would leave a bug in accidentally? Or intentionally?

Accidentally is definitely plausible, they are only human after all.

Intentionally would be incredibly stupid. The offensive side of the NSA spends billions developing malware that can’t be easily found and attributed to them. Inserting one of those malwares into a piece of software they have publically claimed ownership off completely defeats the point. If they wanted to backdoor an open source software, why wouldn’t they do it anonymously…

Ghidra is used by the best and brightest malware inspectors. If it was backdoored, it would have been discovered almost immediately.

The NSA has two conflicting missions, one is to hack everyone, and the other is to protect American networks and interests. Ghidra is from the later, its goal was to make malware analysis cheap and accessible so that more people can investigate and defeat malware.

Dunno, pretty sure there are multiple top positions?

Kama Sutra.

You know what, if meta employees are jerking off to stolen porn, thats probably better for humanity than if they were doing their actual jobs. Jerk away you degenerates!

Rtx3050? Should be supported for a little while, and seems to be around $300AUD. Probably still overkill for a NAS though.

Coating would work, but it needs to be permanent, because you can’t easily recoat it. Glass can be recoated on the other side. Dunno how anodising and etching would work, do you get the same color when you etch, or do you get raw aluminium?

I suppose if you scanned the plates in a flatbed scanner that might be even contrast, I was thinking of using a phone camera, and assumed it would be near impossible to get an even lighting across the QR code.

Etching aluminium might not photograph with enough contrast to pull out the QR code.

Laser etching glass might be worth a look. You can increase the contrast fairly dramatically with black paint, which can be cleaned and reapplied without damaging the glass.

Is it 1-2kB uncompressed? Because compression will help, the smaller you get the data the larger you can make the QR pixels. You can also split it into 20x100B chunks, and then as long as you number the slides you can rebuild later.

Also, ecc-h only gets you 30% recovery, duplicate or triplicate slides could increase that even further.

Yes, but:

Safety: for small stuff, really no safety concerns, and with the amount of recalls, not really any better.

Warrenty: when the price is half or less, easier to just buy 2.

So for larger more expensive items, local makes sense somewhat, but for small crap, better to just get from aliexpress.

Which is really annoying, because individually shipping every little trinket is crazy wasteful.

Annoyingly, in Aus, if you try to shop locally, youll find the stuff in Kmart et al. is all imported crap from aliexpress anyway. So you basically are paying a huge markup for the same garbage.

https://www.kmart.com.au/product/450ml-oil-spray-and-pour-bottle-43513765/

https://a.aliexpress.com/_mPwySZt

These are at least somewhat closely priced now, but the Kmart sprayer was double that price a few months back when I needed one. And its not just Kmart, every shop is the same, its all poor quality crap. So why not get the poor quality crap direct from the source at half the price, even with shipping. Its pretty fucked up.

The point of de-minimus (at least in Aus) is to ease the load on customs, so they don’t have to waste time and effort processing tax a few cents worth of tax on thousands of packages.

Getting rid of it will probably make the less reputable sellers (eBay) go back to marking everything as a gift.