Leah Rowe, the creator of Libreboot, stole my work.
IHeartBadCode @ IHeartBadCode @kbin.social Posts 2Comments 750Joined 2 yr. ago
IHeartBadCode @ IHeartBadCode @kbin.social
Posts
2
Comments
750
Joined
2 yr. ago
Wild days ahead where we're trading Wendy's delivery futures on Robinhood.
Self-immolation. To set oneself ablaze, usually in protest.
It absolutely could. Heck, RPMs and DEBs pulled from random sites can do the exact same thing as well. Even source code can hide something if not checked. There's even a very famous hack presented by Ken Thompson in 1984 that really speaks to the underlying thing, "what is trust?"
And that's really what this gets into. The means of delivery change as the years go by, but the underlying principal of trust is the thing that stays the same. In general, Canonical does review somewhat apps published to snapcraft. However, that review does not mean you are protected and this is very clearly indicated within the TOS.
14.1 Your use of the Snap Store is at your sole risk
So yeah, don't load up software you, yourself, cannot review. But also at the same time, there's a whole thing of trust here that's going to need to be reviewed. Not, "Oh you can never trust Canonical ever again!" But a pretty straightforward systematic review of that trust:
- How did this happen?
- Where was this missed in the review?
- How can we prevent this particular thing that allowed this to happen in the future?
- How do we indicate this to the users?
- How do we empower them to verify that such has been done by Canonical?
No one should take this as "this is why you shouldn't trust Ubuntu!" Because as you and others have said, this could happen to anyone. This should be taken as a call for Canonical to review how they put things on snapcraft and what they can do to ensure users have all the tools so that they can ensure "at least for this specific issue" doesn't happen again. We cannot prevent every attack, but we can do our best to prevent repeating the same attack.
It's all about building trust. And yeah, Flathub and AppImageHub can, and should, take a lesson from this to preemptively prevent this kind of thing from happening there. I know there's a propensity to wag the finger in the distro wars, tribalism runs deep, but anything like this should be looked as an opportunity to review that very important aspect of "trust" by all. It's one of the reasons open source is very important, so that we can all openly learn from each other.
You know I heard a saying once. The wheels of Justice are slow but grind exceedingly fine. Yeah, it takes a hot minute to get through everything, but when the arguments run out and the verdicts are handed out, boy are they crushing.
NOTE: This is to add some context to the whole Special Counsel argument.
28 CFR 600 is what covers all the ins and outs of a Special Counsel appointment. Note the CFR there? That stands for Code of Federal Regulations. Regulations are created by the various Executive offices, but you might ask yourself, how can the Executive create something without Congress being involved, and this gets into the fine details of how the US Government works.
As you know LAW requires that Congress pass a bill in both chambers and then send it to the President for a signature or a veto. And if vetoed then Congress can override it with a ⅔ vote. LAWs usually don't get into a lot of detail, they'll usually do something along the lines of:
The United States Department of Defense shall build unto Congress an army worthy of Mordor and it shall not exceed the cost of $14 bazillion. Additionally, the following units are required to be purchased (insert a lengthy list of things Lockheed-Martin sent to Congress)
And that's about it. Now the exact method for "who's going to the local fighter jet store to pick up a few F-15s, who's building the antitank missles, where is this all being delivered to, etc" All of that falls into whoever was named, in this case it's the DoD. So now the DoD will begin issuing RULES and REGULATIONS on how to get that LAW done. How that happens is way longer than I want to talk for, but it's complex.
Okay. So we've covered CFR. There is also USC which stands for United States Code. This is those LAWs "codified". A law comes out of Congress as Public Law (or private law, but we're not going to cover that). This is usually listed as Pub. L (Congress number)-(Number of law that has successfully been enacted). We are currently on the 118th Congress, thus the first law passed by this Congress would be called Pub. L 118-1 (note this does not apply to public law prior to 1901) All public, private, and everything else that comes from Congress gets put into a giant collection of books called the United States Statutes at Large (Stat), this is everything that has ever come from Congress. It is in the format of (volume) Stat. (numbered item), so the 5th thing in volume 23 is 23 Stat. 5 All of this eventually get codified so if one Pub. L cancels another prior Pub. L or amends it or whatever, the sum of all of those changes are in a final form in USC. Which that format is (title) USC (subsection). A title is a BROAD (and boy do I mean that word) subject matter. So like Title 16 is "CONSERVATION" and that is like National Park, endangered species, and just a smattering of all kinds of other things that remotely relate to that subject. Title 26 is all about taxes!! Subsection is a great way to drill down to a single thing in USC, but there's also Chapters, Subsections, and so forth. And each title uses it's own little scheme of subdivision, so boy oh boy is it fun to go through.
So quick recap, Congress passes various kinds of bills, the public law bills that get enacted are Pub. L, those are filed into Stat., and then any that cancel/update/amend/change previous ones are coalesced into USC. So you'd find all the historic tax brackets in Stat., you'd find the current tax brackets in USC. And all of those were established by Pub. L.
Okay, so I think that's everything background you need. Sorry if you already knew it.
So 28 CFR 600, since its a regulation, has to state whence it gets its authority. That's a requirement of all regulations. 28 CFR 600 cites the following:
- 5 USC 301
- 28 USC 509
- 28 USC 510
- 28 USC 515-519
5 USC 301 is a broad grant that basically says each department head may create regulations that they are granted power by law to do. It also bars, by default, the withholding of information from the public (but that's not material here).
28 USC 509 and 510 are things about what the Attorney General (AG) can do and says that the AG is officially cleared to cite Title 5 powers (see that whole 5 USC 301 thing).
28 USC 515 is the first time we hear about Special Counsel. 516 to 519 indicate who can summon up one and who a Special Counsel can talk to etc. So specifically, all the various paragraphs in 28 CFR 600 fall into 28 USC 515(a) for Trump.
The Attorney General …, or any attorney specially appointed by the Attorney General under law, may, when specifically directed by the Attorney General, conduct any kind of legal proceeding, civil or criminal, including grand jury proceedings and proceedings before committing magistrate judges, which United States attorneys are authorized by law to conduct…
Which Trump's legal team says the President cannot be one of those brought under this law. Because separation of powers.
So since 28 CFR 600 cites power from 28 USC 515, which cannot possibly have a President in there, 28 CFR 600 fails because 28 USC 515 fails. Or at least that's the theory.
This gets complicated because the media does indeed summarize it as just simple "Presidential immunity" but Trump's lawyers are approaching this legal theory from various angles all which have different underlying basis.
There are two cases to note here. A civil trail related to the January 6th attempted coup and a criminal case related to the same event. The US Court of Appeals for the DC Circuit denied cause for dismissal in that case based on the legal theory that Trump was immune from CIVIL prosecution on that mater for having been once the President. Trump was granted the ability to carry the three judge ruling to SCOTUS to which Trump's legal passed on moving on that appeal by allowing the time period to elapse.
The criminal case is being handled by Special Prosecutor Jack Smith, that is in the United States District Court for the District of Columbia and is being handled by Judge Tanya Chutkan. Trump's legal team has recently filed with the US Court of Appeals for the DC Circuit a request for dismissal based on the legal theory that Trump is immune from CRIMINAL prosecution on that matter for having been once the President. That is pending schedule upon the docket.
Okay with that background. This case is being heard in the United States District Court Southern District of Florida, this is related to criminal charges that Trump mishandled classified documents in violation of the Presidential Records Act. This story circles around Trump's legal team filing a request with the aforementioned court, a request for dismissal based on the legal theory that Trump is immune from questioning about the classification of records for having been once the President.
Interestingly, part of the cause for dismissal that was also filed in this filing were the following (and no, I shit you not):
- The law is vague and cannot be ruled upon, therefore the law should be ruled unconstitutional. (Basically vague laws = unconstitutional).
- The law targets Presidents to which, a law cannot regulate Presidents and thus should be ruled unconstitutional. (Presidents cannot be restricted by laws passed by Congress)
- Special Counsel appointments are not well founded in law and are therefore unconstitutional. ( I'll have a second comment on this if you really, really want to know the basis for this one.)
- The Presidential Records Act in it's entirety is unconstitutional. (Kitchen sink attempt.)
There were additional motions filed with the court but those were done via email and have not been released by the Court at this time.
Yeah, it's easy to be confused because there's a lot of this going around. But so far, SCOTUS hasn't actually ruled on the matter to put the nail into the proverbial coffin. But we don't hear about the Trump legal team basically starting every court case thus far with a motion to have the Judge recuse themselves because it is impossible for them to be fair. Why is it impossible for them to be fair? Changes from Judge to Judge, but the most recent one was because of an opinion the Judge had shared in her personal capacity that Trump's legal team felt was too Democrat-ish to render fair rulings. It was summarily dismissed.
So Trump's legal team uses a lot of various arguments with slight changes a lot in various venues. So that might be why you keep hearing them in the news.
The thing is online access can happen anywhere and because hardware is firmly in the hands of the user, the user controls the dissemination of the data. There's plenty of AI out there that can generate valid driver licenses with complete PDF417 barcodes related to the state in question.
There's no way Florida is going to commit the required funds it would take to police every single aspect. And social media sure as shit isn't going to bend over and have that policing thrown onto to them freely. At some point Florida will require telephone carriers and ISP to play ball to some degree and then POOF, you're now in Federal territory.
That's why all this state level law making is so bunk. It's not a problem that can be solved by just saying "Oh, well lt;16 yo cannot get on." Unless the State has some really deep pockets to invest in their own technology, Good Luck playing wack-a-mole.
Additionally, there's zero ways I would be scanning a driver's license into some random website. Not with how every other day they leak massive amounts of information. So a lot of these states start getting what pornhub and what not are doing, "Oh you're from Utah? Okay, well I guess you're paying for a VPN for your porn." And that's ultimately what happens. Everyone just starts using a VPN because the State wanted to pass some "token" law to look like they were doing something.
It's all people ignorant of how technology works attempting to legislate technology. They are never going to be successful in any of this, but I guess whatever plays well for your base.
QA for a 3PL. Apparently QA didn't prior to my arrival try things like entering words in zipcode entry boxes, typing 65537 letters into an address field, or holding the shift key when selecting which State to ship to.
I made a lot of, well not what I would call enemies but I wasn't exactly friends with any of the developers.
Well seeing how Chávez marched Venezuela into the oil crisis, side note to everyone: diversify, and Maduro basically said, "Fuck it! Let's go into the forest and mine the shit out of everything to save us from this economic crisis that totally wasn't our fault." That it has taken this long to get such a massive loss of life (human life, obviously the rain forest has just been taking one for the team here) is actually impressive.
Kind of a reason Venezuela is, until pushed down a spot by Cuba in 2023, the second leading nation (now third) of folks attempting to enter the United States illegally. But Maduro swears there's no such crisis and that political opponents are the reason there is/isn't (yes both at the same time) a crisis.
See kids, this is why you don't pardon someone who attempts a coup d'état, eventually they become President and run your country into the fucking ground so that his buddies can become mega wealthy. Then his lacky comes around after he dies, because he's a fucking old fart, and blames the opposite team for all the woes and attempts to indicate that anyone who disagrees with him are all in a conspiracy and should be locked up.
AI is like spicy autocomplete. People need to understand that AI is basically that Excel meme but with pictures.
Because Government officials are expected to operate at a higher standard. Submitting very clearly erroneous evidence is indicating that they are not operating at that higher standard.
Now does that mean the case altogether is bunk? No, of course not. But it allows defenders to sow mistrust in the presentation by the prosecutor. That’s the entire point. And that’s why it’s important for officials to do things “by the book”. When they start going off rails that technically allows defense to ask “what else did you mess up?”
Good lawyers go after every advantage they can offer their client. When prosecutors mess up, defense lawyers are allowed to file with the judge the question of “Hey they made a mistake, may I be allowed to inform the jury of this mistake?”
It’s up to the judge to allow that or not. But good lawyers file these kinds of motions. Now will it have major ramifications on the case as whole? Who knows? But the entire point is this, bringing a case to court needs to be airtight and things like this are reasons why. Same reason why folks like Matt Gaetz seems to continually avoid prosecution. If it’s not airtight small mistakes can completely derail getting a guilty verdict. You just need one juror out of twelve to be sympathetic on some sticking point, and mistrust of the government is a good sticking point for some people.
I get where you’re coming from, but shit, I’ve seen people walk free on more damming evidence simply because defense was able to sway on some particular mistrust.
Tax payer money is never “wasted”, it’s always kickbacks.
I assure everyone here, some of Abbott’s friends are making bank off this.
“They talked about being hungry. And they talked about the summer USDA program and, depending upon access, when they’d get a sack of food,” Pillen said at a press conference this week. “And from my seat, what I saw there, we have to do better in Nebraska.”
Alright, give him credit at least. He actually went outside the four walls of the Governor's Mansion to actually see some of the children. And when he saw that they were indeed very hungry and impoverished by no fault of their own, he understood that he was initially mistaken.
This is how isolated a lot of State political actors are though. They have no clue as to the actual suffering that goes on within their State and don't actively seek out further information. For this Governor to do such is actually commendable, because it rarely happens more often than I believe folks like to admit.
I mean still feel free to hurl stones for other things, but let's at least give him credit for going out and actually seeing what was really going on. AND admitting that he was wrong. That's not a common Governor attribute and absolutely a rare occurrence with Republicans to admit being wrong. We should do our best to encourage more of that elsewhere.
But still feel free to be critical to all the other bullshit this Governor continues to remain blind to.
Man it's going to blow your mind to know that petro companies are using oil money to buy up lithium and silicon mines as fast as they can.
The largest oil companies in the world are on track to becoming the largest suppliers of raw materials for solar panels and batteries. Oil companies have figured out that they can play both games at the same time. Sell as much oil and solar panel/lithium material and make hand over fist in cash.
I’m not going to read any responses.
This is likely the wisest part of any comment that's going to be on this thread. 🤞hopefully I'm wrong.
- Van Buren
That’s a lot higher than I’d put the guy who so “skillfully” handled the panic of 1837.
Franklin Pierce at 42
Pierce and Buchanan are always bottom tier. One laid groundwork for the Civil War and the other lit the match ensuring Lincoln would, if elected President, increase hostilities.
Pierce at 42 should in my mind be 44 if not 43. Trump coming in at 45 seems about right, maybe 44 if I’m being generous.
But Trump literally tried overthrowing the US government. There’s just no way history is going to be kind to him. There’s nothing that can be done, no one can go back and undo the past.
Dude’s lasting legacy is going to be defined by pretty much, “Oh yeah, he attempted to overthrow the US government. And he was so powerful and charismatic, he got nominated to run for President again to get a second swipe at overthrowing the Government.”
💁🏽♂️🦀 Is this a Rust developer?
Buddy that all reads as harassing. The IRC logs are especially a bad look for you, because you said:
And now that entire chat log is tied to it.
I'm not sure why you thought hounding someone and harping about it for nearly eight hours on IRC was a good idea. But now you've come to the Fediverse to find some absolution or something.
You can be frustrated, that's fine, but when that frustration turns into that long of a hanging on the bell that's evident in that chat log and then two hours later you came here with this, that is past frustration.
Leah also indicated:
And Leah has a point. You've shown no sign of taking a moment to collect yourself. I get you are upset. Sometimes the best way to handle upset is to just shut up for a day or two. And trust me, I struggle with doing that myself.
Like everything you've done in your frustration, I've been down that road. And I'm pretty sure in your head you are telling yourself, but the difference is that...... because that's exactly what I'd say to someone telling me this. That my situation is different somehow and that I must rectify this injustice immediately!
What you need to do is two things. One, learn from this so that in the future you can do... Two, chill out. I think you'll find in more professional environments sorry is okay, but I have learned from my mistakes and will do better is more preferred.
This whole thing could have been max three messages on IRC. "Why wasn't I credited? What was wrong with my submission? How do I improve going forward?" The end.
I think the biggest thing here for me is that in open projects, leads are fielding multiple people and working on their stuff. Every message you send is "Hey stop what you are doing and pay attention to me!" So you really want to be respectful of their time by really trying to be succinct on whatever is bugging you.
And you are on the contrib page.
And I think you're wondering how "testing" vs "developed" looks on your resume? But that chat log is now going to be front and center no matter what's said on the contrib page. It really doesn't matter if you got "developed" pasted on the contrib page.
All of this Mastodon interactions and IRC logs isn't a good look. It's not the end of the world. I think everyone has felt frustration like this before, like there's some magical set of words to say that'll fix everything. But you've got to let it go. You're just digging down with posts like this. And you don't have to let it go forever, just you've really added a lot of friction to have this go surface of the sun warm. You need to let it cool, come back refreshed, and maybe see if you can repair the relationship you have with the team.
But you've got to understand. Your post here paints one picture and your interactions with Leah on Mastodon and IRC are something else. And that difference between the is especially not good as it comes off as a lot of sour and bitterness on this "slight" that you perceived as such an injustice.
And hell's bells. If you sit on this for seventy-two hours and you still feel massively wronged, go fork you a project and call it FOSSITboot or whatever and show everyone your prowess. If you've got skills to pay the bills, then if you build it they will come.
Lots of love for you, but just take a moment from everything. I assure you, it'll do you wonders to decompress.