Leo

Your laptop was stolen. It’s running Windows 11, fully up-to-date, device encryption (BitLocker) and Secure Boot enabled. Your data is safe, right? Think again! This software-only attack grabs your encryption key : #teaser" target="_blank" rel="nofollow noopener">neodyme.io/en/blog/bitloc… credits @Neodyme

the real CTF skill is Mergers & Acquisitions

@nlj @KassyDillon That's a very interesting study - but I'm not convinced that the conclusion is right. They're missing that wind speeds also significantly influence indoor air exchange rates due to differential pressure.

Why are people still wearing masks outside? I really don’t understand.

@lpoinsig @ClickHouseDB @grafana The "ladders" are client ports increasing by 1, the wide bands of noise across the full range are port scans.

@leolukde @ClickHouseDB @grafana Very cool! Is the video showing a port-scan?

Network traffic histograms in github.com/monogon-dev/Ne… will soon get ~100x faster by rendering them server-side in @ClickHouseDB! No more spontaneous browser combustion :-) Thanks to Fionera for the contribution (and for @grafana 's new native CH plugin: grafana.com/grafana/plugin…)

@tylerhannan @ClickHouseDB @grafana NetMeta would not be possible without ClickHouse! It's hard to understate how much of a game changer it is for flow analytics. A single-node NetMeta instance easily outperforms whole clusters of proprietary tooling

@leolukde @ClickHouseDB @grafana Super cool. Love to hear more about your @ClickHouseDB experience. Let us know how we can make it even more awesome.

@CarryWorm @terorie_dev Certainly diminishing returns at that point, if the Rust distribution is compromised nothing will save you

@leolukde @terorie_dev I agree it's probably a good idea to compile the validator yourself, but rust stdlib seems slightly overkill. If that's compromised, your compiler is compromised as well

@CarryWorm @terorie_dev It's shades of trust - a single project's release binaries are easier to compromise than a major Linux distro'a core packages, and the compromise is less likely to be detected in time. Just because I have to begrudgingly trust some binaries doesn't mean I trust a GitHub release

@terorie_dev Difficult to draw a line though. Do you have to compile Linux yourself? What about libc? Or literally anything else on the system? What about the compiler? Not trusting precompiled binaries seems impractical at best

@cue_lang @carmatrocity @rogpeppe @mvdan_ @ddm_tweets Congrats :)

Announcement 🔈: the CUE project would like to officially welcome @carmatrocity, @rogpeppe, @mvdan_, and @ddm_tweets. Thread 👇

@kalteasche @taktv6 @BarbarossaTM @DreselChristian @LTE_Max If you want a good out-of-the-box solution for monitoring flows, you might want to take a look at: github.com/monogon-dev/Ne…

@fluepke Noobs. T-Mobile hat das leider schon seit Jahren "besser" gelöst mit mehreren APN ;)

@ccostes3 @terorie_dev @BlockdaemonHQ Nonce accounts (and this bug) have been around for a long time, there's nothing to roll back. Disabling the feature and fixing the bug is the best option.

@terorie_dev @BlockdaemonHQ Don't understand why the response here (and seemingly the SOP) is an emergency commit vs rolling back. Seems to go against best practices.

@krisnova @thockin We're building exactly that at github.com/monogon-dev/mo… :) Minimal pure-Go userland, boots straight into kubelet and/or the control plane.

@fluepke Da hat wohl jemand die RKI-Liste gelesen und den Testsieger gekauft =)

@Yelizda @threepwood1990 Falls das schon länger her war: der erste FSME-Impfstoff war ziemlich heftig, die zwei mittlerweile zugelassenen Impfstoffe sind deutlich ungefährlicher.

@threepwood1990 😳 Nein, das ist die einzige Impfung die ich nicht habe, weil (und ich weiß dass das eine blöde Begründung ist) ich mal jemanden mit einen anerkannten FSME-Impfschaden gepflegt habe. Das war eine tragische Geschichte…

@awlnx Free public wifi is another strong clue 🙃 And good mobile phone reception. I've had better LTE reception in bumfuck nowhere in Romania than right outside many large German cities...

How do you identify if you are not in germany anymore? Cashless is default. Everyone here uses their phone or watch to pay whatever … no wallets needed.

@hudsonjameson There was a ton of backlash + a healthy discussion, the Candy Machine was getting included in blocks just fine after the restart:

little community backlash besides some people saying "I disagree with that" in the Discord. While it is true validators can do what they want, I would expect a huge backlash. We will see. I think it sets a bad precedent for all blockchains, but I could be wrong. ♥️ to all

Some final thoughts: 1. Thanks to @Austin_Federa for responding to many comments in my thread in a polite way. You are handling a lot right now as a Solana Community Coordinator & I don't need to cause you more stress. Wish you the best as the situation resolves.

@Austin_Federa @hudsonjameson @toly @Vibes8760 @laine_sa_ Lol yes it's 7am here. What a night!

@leolukde @hudsonjameson @toly @Vibes8760 @laine_sa_ very unhealthy Leo and Austin tho 🧟

too involved - centralized not involved enough - don't care enough? can't win

@hudsonjameson @toly @Vibes8760 @laine_sa_ @Austin_Federa Nope, that was @laine_sa_ - @Austin_Federa had to ask for editing permissions ;) I reworded the iptables section to make it abundantly clear that it's an optional and temporary measure. Tons of discussion (and pushback) in various Discord channels - very healthy discussion...

@toly @Vibes8760 @leolukde @laine_sa_ @Austin_Federa It was @leolukde compiling the comments for the document I've been told.

Trying to keep track of what GitHub PR review comments were addressed in a pushed commit, which ones you only typed a reply for but still need to push, and which ones are still pending is a complete mess. How teams do code review without Gerrit is honestly unclear to me.