News for hackers. Stuff that matters.

marioflach

Re:Unauthenticated Remote Code Execution in Erlang/OTP SSH on Thursday April 17, 2025 @05:39PM (#43722520)
I wrote a GitHub „clone“ a while ago. Implementing Git’s wire and transfer protocol directly in Elixir.

https://git-scm.com/docs/protocol-v2

https://git-scm.com/book/ms/v2/Git-on-the-Server-The-Protoco...

Adding support for Git over SSH was very easy using Erlang built-in SSH libs.

https://github.com/redrabbit/git.limo

https://github.com/redrabbit/git.limo/blob/master/apps/gitgu...

Re:Estonia, allies to trigger NATO Article 4 on Thursday February 24, 2022 @05:06AM (#30452970)
> Just look at Austria, very rich but obviously Russian run EU country.

This is just nonsense. Austrian government is not by any means run "by the Russians". Russia has been trying to enlarge it's sphere of influence in the west for a while now (which is nothing exceptional geopolitically speaking) and has few retired politicians working in the Russian private sector (Schröder [DE], Schüssel [AT], Fillion [FR], etc.). But to say that Austria and others are "obviously run by the Kremlin" is a blatant lie.

Greets from Austria

Re:A Book about Qt5 on Monday March 04, 2019 @03:58AM (#19299799)
Qt is licensed under the LGPL. Same goes for PySide.
Re:Twitter’s multi-million dollar US election pitch to RT on Sunday October 29, 2017 @02:38PM (#15580614)
I've been using Twitter exclusively for IT and tech over the last two years. Never been following anything political there.

Today, for the first time, a political ad from @diraalwatan (official account for Saudi ministry of defence) promoting war in Yemen sneaked into my feed:

https://twitter.com/diraalwatan/status/924548374711463936

I do and did tolerate the way Twitter takes actions in political ways lately, blocking accounts they consider to be fake news, state propaganda, etc. although I find it somehow controversive and very subjective. But having ads promoting war in Yemen just shocked me badly!

How it this ad even entering my feed?

Re:Brew commands send data to Google Analytics on Friday November 25, 2016 @05:17AM (#13035627)
> we need to start asking ourselves as a community whether we think treating open-source maintainers like this is more or less likely to encourage more people to work on the open-source software you rely on to do your job.

Exactly this. The homebrew team has done an amazing job for the past 7 years, all free and volunteer work. People threatening with suing the maintainer are poison for the open-source community. But hey, haters gonna hate.

If I understand correctly, the data is anonymized before it is sent to Google [1]. How may people worrying about privacy download from Github using a proxy/vpn solution to hide their IP?

I've listened to the Changelog podcast about Homebrew and first learned about Google Analytics there. I think people do not realize how big homebrew is (in form of usage and traffic). At this scale, the maintainer opted for collecting data anonymously in order to find bottlenecks and improving the entire software stack. You can disable that feature in the same way you would disable cookies in your web browser.

[1]: https://github.com/Homebrew/brew/blob/master/docs/Analytics....