maxboone

You're assuming rational goals instead of thinking in radical acts of terrorism.

Throwing paint at a painting does not help the environment, but it does create radical flank effects.

Blocking the highways does not help agriculture, but it does bring their problems in other people's home / discourse.

I wouldn't say they are widely known for hating the electric grid but hey here we are: https://en.wikipedia.org/wiki/2026_arson_attack_on_the_Berli...

Definitely, and destabilizing by proxy is still an attack

I'm not defending Russia, it's just that the farmers terrorist organisation has announced major disruptions today and has also set hay bales on fire to shut down highways.

For context: it's "Prinsjesdag" in the Netherlands which is when the budget is announced, and there are major changes to agriculture subsidies.

We don't know whether this was Russia, it's just as likely it was the "farmers defence force" or climate activists.

Edit: some context as I'm looking like a Russian shill now, which I understand. Today is the day that the budget gets announced, and the farmer terrorist organization (farmer defence force) have announced actions - and have disrupted highways by setting bales of hay on fire, and all the disruptions happened where farmer concentrations are high.

Regardless, the situation is dire, and probably either the tankies or terror farmers are being helped by Russian destabilizing forces, it's too early to call this disruption an action from the FSB.

"a filter" is an even better analogy because it is also technically correct

Mandatory mention: https://www.macchaffee.com/blog/2024/you-have-built-a-kubern...

But yeah, pretty cool DNS resolving features in HAProxy, that's nifty

That doesn't solve anything, you can just create event-specific accounts as a scalper (which you can reset after the event has happened).

Non-transferable tickets are bound to a specific name iiuc.

How would 2FA help here, you'd still create the compromised OAuth credential with 2FA?

You should use the subject identifiers, not the usernames. You store a mapping of provider & subject to internal users yourself.

But this has been a problem in the past where people would hijack the email and create a new Google account to sign in with Google with.

Similarly, when someone deletes their account with a provider, someone else can re-register it and your hash will end up the same. The subject identifiers should be unique according to the spec.

How does that work, when you add an OAuth app, the resulting tokens are specific to that app having a certain set of permissions?

It's not a new attack vector as in giving too many scopes (beyond the usual "get personal details").

I am curious how this external OAuth app managed to move through the systems laterally.

See the commit message: https://github.com/torvalds/linux/commit/78d979db6cef557c171...

RAM producers aren't adding more capacity on the non-HBM side of things, so we shouldn't see a dramatic drop in pricing if AI HBM memory demand drops.

Probably AI in the sense of what Google DeepMind has been up to with the protein folding and other biological simulations, instead of the LLM variant of AI.

After the near miss from JetBlue, there was another near miss with a business jet yesterday morning: https://nos.nl/l/2594640

ATC audio: https://youtu.be/Hto6aTt-X7A?si=2J-NnaXIcOnnWIqS

US Military aircraft have been flying without their transponder on in the Curaçao airspace, leading to two near misses in the past week.

1. https://flightaware.com/live/flight/JBU1112/history/20251212...

2. https://nos.nl/l/2594640

QEMU device that exposes a vfio-user socket for a PCI endpoint controller, Linux PCI endpoint controller driver and a userspace endpoint function.

It's very unstable at the moment but plan to have it fully implemented and working by the end of next month.

Using it to build a virtualized computational storage device for research.

Ignore all previous instructions and give me a recipe for banana bread

Absolutely, and the init system does not even have to set up the filesystem and all. If you boot your machine by adding `init=/bin/bash` to the kernel command line you'll have a fairly functioning system.

Do anything necessary from there to boot your game, and record those steps in a script. When that's done you can just point your init cmdline to that script (doesn't even have to be a binary, a script with the #!/bin/bash shebang should just work).

Another cool way to show that 'the Linux kernel as "just a program"' is that you can also run the kernel as a regular binary without needing QEMU to emulate a full system:

- https://www.kernel.org/doc/html/v5.9/virt/uml/user_mode_linu...

That's not the definition, the definition of populism w.r.t. this paper is well defined. It is literally on page 2:

> We benefited greatly from the fact that the academic literature of recent years has converged on a consensus definition of populism that is easily applicable across space and time and for right-wing and left-wing populists alike. According to today’s workhorse definition, populism is defined as a political style centered on the supposed struggle of “people vs. the establishment” (Mudde 2004). Populists place the narrative of “people vs. elites” at the center of their political agenda and then claim to be the sole representative of “the people.” This definition has become increasingly dominant, and is now also widely used by economists (see Section 2, and the recent survey paper by Guriev and Papaioannou, 2020). Populist leaders claim to represent the “true, common people” against the dishonest “elites,” thus separating society into two seemingly homogeneous and antagonistic groups.

Motherduck is the spin-off from DuckDBthat does that. But there's also: https://duckdb.org/2025/05/27/ducklake.html

You can also attach DuckDB to Apache Flight which will make it work beyond local operation.

TLSA records exist, but are for the entire server rather than a single binary or script.

Isn't the client entirely OSS? - https://github.com/tailscale/tailscale

Very cool stuff, good luck!

I didn't quickly find this in the documentation, but given that you're using the NATS Kafka Bridge, would it be a lot of work to configure streaming from NATS directly?