KAMSPioneer

What was the timeline for the release of WannaCry following the exposure of ETERNALBLUE and DOUBLEPULSAR...?

I accept that one would expect substantially shorter timelines in the age of AI, but given that WannaCry is suspected of being state-funded and even then: 1) it took a month to appear and 2) ETERNALBLUE and DOUBLEPULSAR were essentially already finished, weaponized malware off the shelf.

All of this to say that just because you don't see mass exploitation right this second doesn't mean there isn't a wormable exploit that needs patching. WannaCry didn't exist until it did, and suddenly everyone who failed to patch beforehand looked foolish.

Just to add here that this guy doesn't have a "standard" Spanish accent. He was from Andalucía (I don't remember where exactly), a region rather known for its accent being difficult for even native speakers to understand.

Anyway after I moved to Andalucía I now can understand the story he tells, but I have to pay close attention!

What GP likely means is that a Protonmail user can exchange encrypted emails with a non-Protonmail user without doing anything except importing the non-Protonmail user's keys once.

This could allow a single technical user with an elaborate PGP key and email setup to convince his or her social circle (or at least email circle) to switch to Protonmail and follow a set of (comparatively) simple steps to get Proton to recognize the key to their non-Proton address.

Thereby having PGP-encrypted conversations with users who don't know how PGP works, but followed their friends' instructions to use a slightly different webmail interface. Meanwhile the technical user can use a smartcard, a self-hosted email server, or other madness that a normal user would never tolerate.

This list seems...odd. For instance, the list decries the permissive AI policy of the Linux kernel, of Fedora, of Bazzite/Bluefin/etc...and then includes Secureblue as an alternative...?

Secureblue is a neat project, but as you say, this would make more sense as a generic discovery list. If you want to avoid projects with a permissive AI policy, you should probably take into account that Secureblue is based on bluebuild (from the Bazzite team), Fedora, Linux, etc etc etc.

Ah, you're right! Somehow I "autocorrected" that when reading TFA, now it makes more sense.

Best I can tell the article only decries the deprecation of x86-64-v2 in RHEL, and says that for that reason Alma is not a viable solution...

Buuuut here is the fix: http://mirror.grid.uchicago.edu/pub/linux/alma/10.2/isos/x86... There's you Alma installer with support for the processors they use, and you can even install EPEL packages built for x86-64-v2 on Alma as well!

So...I agree with the user above, what stops what I must imagine would be a simpler switch from RHEL to Alma instead of Debian?

Okay, but Alma rebuilds with x86-64-v2 as a separate ISO, and they even build EPEL packages with support for it: https://almalinux.org/blog/2025-06-26-epel-v2-now-covers-alm...

So the original commenter's questions stands IMO: why is Alma not considered a solution?

Regarding internet infrastructure, the fiber optic network seems to be quite robust these days. There are still places where it isn't available, but compared to e.g. the US it's another world entirely. Even small cities typically offer 1 or sometimes 10 Gbps hookups in many areas.

Regarding bureaucracy I'm afraid that there has been no such progress. Extremely frustrating that even when I do everything right, I get told to come back another day for my trámite because they just...haven't done it! Sorry!

Also American, and I'm interested why you praise the education system. I have a child who will be entering the Andalusian system at some point and although it seems better than my Oklahoman system, that is, uh...damning with faint praise.

Some of my non-Spanish European colleagues also have commented that the education system is kind of "good not great" especially compared with other Western/Central European countries. However, I understand the Spanish system to be somewhat federated; perhaps the difference between Extremadura and Andalusia would explain the difference in opinion.

Wait, really? I'm a native Midwestern/Great Plains American English speaker (I remember reading the Harry Potter books as a kid and wondering why all the -er words were spelled wrong) and I say "PRY-mer." I have never heard anyone say "PRIM-mer" in my life.

Am...am I being punk'd...?

> weird systemd stuff

I mean, if you have zero experience with systemd, then yes. By contrast, if you've ever worked with any systemd unit files at all, then all the "systemd stuff" will be very familiar.

Which, if you're doing sysadmin type things on almost (e.g. not Alpine) any mainstream Linux distro in 2026, you should expect to encounter systemd unit files in your day-to-day.

I'm not qualified to comment too heavily on Netflix's infra, but I'm fairly sure that they don't _exclusively_ use AWS. There are things they run there, sure, but I understand that their actual content distribution is run on their own metal, and on FreeBSD. AWS hosts other stuff (auth, recommendation algos, etc).

Aha, thanks! So I think that raises the question of whether e.g. RHEL is affected. Technically it could be argued that they don't add any additional restrictions, but I wonder if Colorado will see it that way.

But the text says "or," not "and." So by my interpretation if you process user data but are available via "free, public" repo, you're not covered. I presume "free" is defined elsewhere in the text, and that it approximates "open-source."

I mean, where I work we offer machines to external users where they have shell access to be able to do their science, but I don't want them to have root access. Other institutes we work with (like supercomputer networks, etc) give us/users non-root access.

When things like CVE-2026-31431 or the bug that this thread is about affect our systems it causes a big headache. Yeah, we firewall off what we _can_ by having different machines doing critical things versus the ones where science users have code execution, but we don't have the resources to give every user their own machine.

I work in IT and have found that the issue impacts my work but not my ability to stream sports from sites of questionable legality. Of course, I don't pirate La Liga matches but that's primarily because I don't give a shit about soccer.

But the point is that the measure does more to block legitimate use than illegitimate (in my experience). And next they want to go after VPNs. Wonderful.

Which, to be fair, is easy to do because they used a triple-negative.

Rephrased, they meant to say "there is no reason to remove support for quantum-vulnerable algorithms in the near future."

IMO that's much less likely to be accidentally misinterpreted.

> AV2 is the next-generation video coding specification from the Alliance for Open Media (AOMedia). Building on the foundation of AV1, AV2 is engineered to provide superior compression efficiency, enabling high-quality video delivery at significantly lower bitrates. It is optimized for the evolving demands of streaming, broadcasting, and real-time video conferencing.

> AV2 provides enhanced support for AR/VR applications, split-screen delivery of multiple programs, improved handling of screen content, and an ability to operate over a wider visual quality range.

They encrypt your data insofar as your email, files, etc. but that doesn't mean they don't have information potentially useful to the authorities. See the recent headline where they revealed a user's payment information allowing them to be identified.

Uhh I don't think that financial incentives are a valid reason to believe something is healthier or safer than an alternative. Unless I have missed some sarcasm.

True, and I don't know for sure either way. But in either case Twitter will notice it and post about it , I suppose. Honestly freedom.gov is almost the least annoying thing to be swept up in this, for my part.

At 11.30 CET it resolved for me on DIGI ES, but as a sibling comment pointed out, there's no soccer game on at the moment, so that's probably why.

As for why it's blocked, isn't this website planned to be related to censorship evasion? By purporting to help Spanish ISP users circumvent the blocks on CF sites imposed by their government, this site would run afoul of the megalomaniacs that instituted the blocks.

Spanish ISPs comply because Spanish judges issue legal injunctions that obligate them to institute these blocks. Sure, Movistar/Telefónica would do it anyway (I understand that they're the rightsholder in this case), but other ISPs are forced to do this by the courts.

I'm a US immigrant here and since I couldn't give a shit about soccer it is extremely annoying to be blocked from websites for something I am barely aware of. The ultimate irony is that none of this bears fruit because I am capable of streaming these games with no VPN by just avoiding CF sites if I had any desire at all. The blocks are invasive and yet ineffective.

I was hit with that on a remote box in another country! Should have researched the upgrade more before I did it, but it is a personal thing and not work.

However, my IPMI motherboard and FreeBSD's integrated ZFS boot environments might be considered cheating...

Tuna-Fish said that instead of backing up the keys from your devices, you should create a specific backup key that is only ever used in case you lose access to all your devices.

This is indeed best practice because it allows you to alert based on key: if you receive a login on a machine with your backup key, but you haven't lost your devices, then you know your backup was compromised. If you take backups of your regular key then it would be much more difficult to notice a problem.

> literally everyone

Perhaps figuratively? I manage several servers where the majority of (LDAP) accounts have no special privileges at all. They get their data in the directories and can launch processes as their user, that's...pretty much it.

Though the upstream comment is gone and I am perhaps missing some important context here.

> > As an example: a an African American janitor in our kids' school voted republican in 2024 for the first time in his life, because the park in his Brooklyn neighborhood has become a shanty town and he can't work out there.

> Okay, first off, I am just very confused by this sentence. How is the "shanty town" preventing him from working? Does he work from his home in Brooklyn? Is the school located in the park? Does he want to work in the park but is force to work at the school? I know this isn't the most important part, but I haven't been able to parse the story.

So just to clarify, GP said he was being prevented from _working out_, i.e. exercising.

Well if we're including islands then Hawai'i is pretty far away...

I'm a different commenter but yeah, solutions exist. For example systemd-cryptenroll let's you use a FIDO token (or TPM or PKCS#11 smartcard) to unlock your encrypted disk and it's very easy to set up. Quite literally a single command.

Windows Hello serves the same purpose for Windows, though I'm sure there are caveats/differences.