BacteriaMage

@Avamander @someguys2nd @_taku_nya @FFmpeg Very true at least in part. But, the point is that saying "users should know" without following through is just cope. Pressuring big corps might be the right move. For an open source project, everyone is welcome to contribute. If you aren't willing to wait, make an PR.

@BacteriaMage @someguys2nd @_taku_nya @FFmpeg The only way you even have a vague sense of what the bad actors know about are the few disclosures good actors make.

One of the big challenges is the security "research" community treats volunteer projects like vendors and gives them deadlines for release and sends no patches.

@Avamander @someguys2nd @_taku_nya @FFmpeg I don't know about you, but I don't want to be using software that has open vulnerabilities that every bad actor on Earth knows about. I generally assume all software has unknown and 'secret' vulnerabilities though.

@BacteriaMage @someguys2nd @_taku_nya @FFmpeg The only motive is that users deserve to know of these things. Especially if the vendor can't deal with it. It draws a clear line that no disclosure is not an option.

@someguys2nd @Avamander @_taku_nya @FFmpeg I'll concede the point but I'm unmoved by this argument. The fact that security researchers have decided that it's okay to disclose unpatched vulnerabilities just speaks to their motives. It still objectively puts users at risk.

@BacteriaMage @Avamander @_taku_nya @FFmpeg publishing an exploit after giving sufficient notice is absolutely responsible disclosure and is common practice. I think open source projects deserve some grace, but if they’re critical software then it’s critical to patch quickly. googleprojectzero.blogspot.com/2020/01/policy…

@Avamander @_taku_nya @FFmpeg That statement seems at odds with the concern you expressed in your first reply. Publishing an exploit you know hasn't been patched--for any reason--is not responsible disclosure and doesn't protect users.

@BacteriaMage @_taku_nya @FFmpeg Then don't meet it. Easy.

@Avamander @_taku_nya @FFmpeg I didn't say that it did. Inundating folks who probably have 9 to 5 jobs and are doing it for the love of the game and demanding you meet their time line isn't going to work. Spray-firing vulnerabilities and expecting devs just to keep up isn't protecting users either.

@BacteriaMage @_taku_nya @FFmpeg This puts the users' needs ahead of maintainers'. Hiding a vulnerability does not protect users.

@_taku_nya @FFmpeg It's that the researches wanting to make the flaw public for basically the streetcred. If they do and there is no patch it potentially puts end users at risk. This puts the researcher's needs ahead of everyone else's. Maybe okay with big for profits but not volunteer projects.

@FFmpeg like I asked before, who's in the position to pressure the volunteers? I mean if I were a contributor I simply wouldn't care about some arbitrary deadline set by some third party.

@anklebited @placingsigns Minecraft worlds are flat and, for most purposes, infinite. But, the world generation algorithm in older versions had a bug where it went haywire extremely far from the starting point. This is normally reached by just teleporting but this guy traversed the distance in game.

@placingsigns My knowledge on Minecraft is as shallow as a puddle; what is this? I assume the world border? I always thought Minecraft was like... A globe.

i cant fucking believe it, 14 years, he actually did it

@MisterAddons @Timmiluvs Scientists study the unknown and generate new knowledge. Engineers apply existing knowledge to practical ends. What sounds more like most folks with CS degrees do?

@MisterAddons @Timmiluvs When I studied CS early in the 2000s, I took a SE class as an elective. At the time at least, SE was a graduate level degree. I considered studying it but then I found work. Regardless, I've always considered myself more an engineer than a "scientist".

@atonofglaciers End of an era.

Exactly one month from today, please join us for the last ever NES Spectrum Marathon, where we will play NES games for 50+ hours on Twitch to raise money for the Organization for Autism Research! See you there!

Trying my hand at 3D Printing and CAD. I think my first project came out pretty good. It's an alternative mount for the ATX power board for the GL.iNet Comet KVM. printables.com/model/1380529-…

END: A New Game for the NES kickstarter.com/projects/lsd/e…, via Kickstarter

@atonofglaciers Yeah, but not a whole lot there. I've been thinking according migrating if I can ever find the time to start doing cool projects again. bacteriamage.neocities.org

I know I'm like 12 years late to the party, but is anyone rocking a neocities website?

@MarkRuddStaffs @Ladieswhotrek Yes, but also Q, Borg, and Riker were all in PIC as well.

@Ladieswhotrek Has to be Barclay Borg were in TNG, VOY, ENT and introduction to DS9 Q was in TNG, DS9 and VOY Riker in TNG, and cameos in episodes of VOY and ENT

Who did not appear in at least three Star Trek TV series?

@atonofglaciers I really loved the level of polish on the original game-jam version.

First time programming the same game in two different languages at the same time. Gonna have to do some sprite overlay on the dialog portraits on the NES version haha. #nesdev #godot #BttP2

30 years ago today, Final Fantasy 6 was released in North America for the SNES as Final Fantasy 3! 🎂🥳🎉 It was the last 2D Final Fantasy before Squaresoft jumped into 3D. They perfected the art of sprite-based storytelling. Do you think FF6 is one of the best RPGs ever made?

@bbbradsmith That's cool. I always wondered what the number was as a kid. It didn't make sense to me since it never seemed to count to anything in particular.

TFW your Mario Paint drawing is too complicated for the save robot to compress. youtube.com/watch?v=4VTzH6…

@StoneAgeGamer Anyone else remember the commercials with Santa and the Elves? I loved those.

What's your favorite thing about Sonic & Knuckles for Sega Genesis?

@atonofglaciers I spent an hour last night trying to complete what I hope to God is the last one. No joke. 😛

When you want to be mad at the game so bad but you made the game. Might need to tweak the final hack difficulty for Steam. :) (Also, global leaderboards, y'all).