“When he reached the New World, Cortezh burned hish ships. Ash a reshult hish men were well motivated.” —Capt. Ramius, played by Sean Connery in The Hunt for Red October

Yay

Now what was I going to make …last Tuesday?

Mint is a good recommendation. I’ve used it for most of a decade because I just want my system to work.

Nobody is both that bored and that motivated. Unless paid.

deleted by creator

True. It is plausible. At the same time I have to think that if the human race hasn’t evolved to factor cooperation in tribes in most cases, we wouldn’t be here discussing this.

This is all I’ve run across on reverse engineering, so far but it is quite interesting.

https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b

Some of the trust comes from eyes on the project thanks to it being open source. This thing got discovered, after all. Not right away, sure, but before it spread everywhere. Same question of trust applies to commercial software too.

Ideally, PR reviews help with this but smaller projects esp with few contributors may not do much of that. I doubt anyone has spent time understanding the software supply chain (SSC) attack surface of their product but that seems like a good next step. Someone needs to write a tool that scans the SSC repos and flags certain measures like the # of maintainers.

PS: I have the worst allergies I’ve had in ages today and my brain is in a histamine fog so maybe I shouldn’t be trying to think about this stuff right now lol cough uuugh blows nose

As a lifetime resident of the arid Western United States, I am also gonna nope on outta that damp hell.

Yes.

Well maybe they aren’t experienced info security professionals :)

Idk what you’re into buddy

but I like it.

Inflation.

Work is stupid. We should be working 20 hours weeks and fucking around the rest of the time. Everyone would be so much happier.

Or maybe everyone with ADHD (and, this, 80 gagillion hobbies)

🧠 – haha get fukt

I get where you’re coming from but is he managing his risk or not?

Does he understand the risk? If yes, good. No? Bad.

Is he ignoring the risk? If yes, bad. No? Good.

Is he weighing the risks against the benefits he receives of using these apps and taking appropriate steps to mitigate those risks? If yes, then good. No? Bad.

Cyber security isn’t “lock everything down at all costs”. Otherwise I would insist you throw your phone in an incinerator along with all your computers, live in a bunker reinforced against nuclear attack with a small army to guard you, never leave it, never talk to anyone… Etc.

It is enabling one to achieve their goals with a tolerable amount of risk. That level of tolerable risk is different for everyone.

I am a big fan of Cherry myself. Seems to be food contact safe and I find it a joy to work with.

It really is. Could use some of that in my pixel garden. Hoping to get a good crop of pixel tomatoes this year.

Are you being an asshole about it? Oh wait I don’t need to look it up lol

Totally agree. Have been there and done that quite a few times too.