• 15 Posts
  • 41 Comments
Joined 1 year ago
cake
Cake day: August 10th, 2023

help-circle
  • That story is focused on #CloudSTRIKE but the bigger more remarkable demon here is #CloudFLARE.

    This story demonstrates Cloudflare acting as a proxy bully of their own customer, on behalf of CloudStrike by pushing a frivilous #DMCA take-down demand. CF took the spineless route as it sees CloudStrike as having more muscle than their customer. After CF joins the Goliath side of the David vs. Goliath battle, CF ignores Senk’s responses and keeps proxying threats.

    Senk bounced from Cloudflare and went to a provider who has his back. #ArsTechnica publishes Cloudflare’s conduct. As embarrassment hits Cloudflare and David (Senk) starts winning against Goliath (CloudStrike), CF changes their tune. Suddenly they are on Senk’s side, saying “come back, we’ll protect you – we promise we didn’t get your messages”. LOL. Senk should do a parody site for Cloudflare too.

    Senk’s mistake: leaving CF. He should have waited until CF actually booted him. Then that would have more thoroughly exposed CF’s shitty actions. Senk gave CF an easy out.

    Interesting to note how a human on the side of civil rights who advocates decentralisation was treated with hostility by Cloudflare. Yet CF is fine with sheltering actual criminals.



  • The 1st ½ of your comment sounds accurate. But…

    And also in Foss there are highly opinionated software where the devs completely ignore users, ban them from GitHub when they post issues,

    Right, but to be clear non-free s/w is worse - you can’t even reach the devs, generally, and there is no public bug tracker. FOSS is an improvement in this regard because at least there is a reasonable nuclear option (forking). The nuclear option for non-free software is writing it yourself from scratch.


  • That all sounds accurate enough to me… but thought I should comment on this:

    However - in larger enterprises there’s so much more, you get the whole SDL maturity thing going - money is invested into raising the quality of the whole development lifecycle and you get things like code reviews, architects, product planning, external security testing etc. Things that cost time, money and resources.

    It should be mentioned that many see testing as a cost, but in fact testing is a cost savings. In most situations, you only spend some money on testing in order to dodge a bigger cost: customers getting burnt in a costly way that backfires on the supplier. Apart from safety-critical products, this is the only business justification to test. Yet when budgets get tightened, one of the first cuts many companies make is testing – which is foolish assuming they are doing testing right (in a way that saves money by catching bugs early).

    Since the common/general case with FOSS projects is there is no income that’s attached to a quality expectation (thus testing generates no cost savings) - the users are part of the QA process as free labor, in effect :)



  • The new advisory, issued Monday by the FCC’s Privacy and Data Protection Task Force, says SIM swap fraud is increasing.

    As a Tor user I’m increasingly more excluded. that “new advisory” link blocks Tor users and the IA Wayback Machine has stopped allowing Tor users to request saves. The FCC should be embarrassed that they are a comms authority and yet they have not figured out how to serve content to Tor users.

    On the topic-- I was wondering if the SIM swap increase they are talking about is specifically in the US or worldwide. In countries that mandate SIM registration, criminals are stealing people’s phones simply to get a functional phone to use for crime, not to do any cyber attack on the theft victim. I could see SIM swapping being equally attractive.

    And yes, the irony is that SIM registration is claimed to fight crime but in fact in creates more victims and crimes.








  • Yeah this article caught me by surprise. Natural gas is naturally odorless so that probably works against awareness.

    I tend to be lazy about turning on the loud fans which downgrades the ambiance. But I need to change something because grease cakes up on everything near the oven and on the cabinets. My range hood is also the ventless style, which must be totally useless against the benzine byproduct.

    I will certainly put more thought into kitchen design in the future. The gas appliances should probably be in the corner of the room so there are fewer directions to control, and the hood should probably be big, industrial, and vented outside. It’s a shame because I might prefer the gas stove to be in an island layout or at least centrally located.




  • Many coils pulse full heat to simulate different heat levels. Gas gives you very precise control over exact heat levels and it is instantly responsive to change.

    You’ve got the precision factor backwards. Gas is a clear loser on that.

    When you have knob levels 0—9, if you set the knob to 3 on electric you get exactly ½ the heat energy that you get from level 6. It’s perfectly linear. This is not true in the slightest with gas. A gas flame is non-linear as you go from 0 to 9. All you can do is eye-ball the flame and guess. Even when you have a flame size in mind, it’s not reproduceable because you’re still eye-balling it every time. You can’t trust the levels on a gas knob either because they’re so non-linear that you can get a big flame difference in certain points along the scale.

    Gas also has less precision of control because of the reduced range at both ends. The lowest possible gas setting is still too hot for some tasks. So the best you can do is manually mimic the pulsing of electric by turning the burner off and reigniting periodically. The highest temp on gas is also less than the highest temp electric can achieve.

    The only “precision” task that gas wins at is at the zero (off) level, and speed, AFAICT, which is related to precision. Both of those factors can be discarded for the most part when comparing induction because it adjusts temp demand fast enough.



  • Can anyone just pick up and move to the US? Or the EU?

    Are you not distinguishing wealthy developed countries from developing countries? This may sound anecdotal but I believe I’ve detected a pattern of people from privileged countries having the copious red carpets you mention, such as EU administrations & border police not hassling Americans who overstay their visa. Even within Europe eastern block Europeans face more red tape than westerners. Some passports yield many red carpets & some none.

    You don’t think you’d be considered a migrant if you wanted to move to Cuba, with all the restrictions that would entail?

    It’s not what you think. The restrictions in that movement actually come from the US. Cuba welcomes Americans to the point that they will even hold back on stamping a US passport on request. Considering Cuba actually has an emigration crisis (with an “e”), it’d be ironic for immigration into Cuba to be difficult.




  • The problem with their job is not being defined as protecting the network while at the same time ensuring availability to legit users. When the naïve sys admin excludes legit users, there’s no push back. No one protesting. Most people are incompetent and it’s normal for sys admins to be reckless in their blocking. The problem lack of counter actions. EFF’s silence & inaction is deafening. EFF & Tor Project are extremely close, yet EFF makes no mention of Cloudflare when CF should be at the center of EFF’s criticism. Tor Project pulled back on Cloudflare criticism after Jacob Appelbaum left. TP has deleted many of their anti-cloudflare essays & resources. CF is the most absolute nemesis to TP yet TP has neutered themselves.




  • Small groups are indeed easy to marginalize. Cloudflare is doing most of the work in keeping the Tor population small. I’m not convinced this fully answers the question. Are you saying the Tor community is so small that it does not include activists? Why does EFF & Tor Project itself neglect to stand up against oppressors?

    I must say I don’t accept the trope of saying Tor users need “support”. This phrasing implies misunderstanding. When a website is deployed it automatically supports all TCP/IP connections including those coming from Tor exit nodes. Blocking Tor is a purposeful act following from a conscious decision to exclude a demographic which requires an effort proactively configure the site to deny service. This assumes we’re talking about conventional self-hosted 403 and 462 errors, contrary Cloudflare or Siteground which flip things around so naïve users running with defaults unwittingly block Tor & must take an action to correct the permissions.