i’d argue against just saying "An adversary with write access to files on your machine has better things to do than tamper with your Go cache — by rational choice, they’ll steal your secret keys instead." because that’s only true if I have access to both. If I only have access to the cache, I might use that capability to get a chain into the next level going etc.
I’m not saying that "a poisoned Go cache" should necessarily be part of everyone’s threat model, but I’d also not just dismiss it by saying "well, it requires disk access". Either might be wrong, depending on your situation.
Didn't mean to dismiss it. I think it's worth reasoning about! e.g. the CI example — in a build cache shared between ephemeral instances, cache poisoning can smuggle malicious behavior from untrusted environments to trusted ones. You're right.
Didn’t necessarily think you were saying that, but everyone’s looking for an easy excuse with security problems, so best we can do is hit them with the ol' “it depends" :)
This is really fun, and I don’t even like Golf in real life!
The physics feel a bit wonky, but maybe I just don’t get the interface completely yet. Sometimes the balls trajectory curved in a way that I didn’t understand.
As a data point: I can honestly say I’ve never heard of Gamergate before this comment, and I am a 31-year-old white male. I did read a book on Watergate when I was in my teens, though.
GamerGate is well worth understanding. While some of the details are unique to the situation, it’s provided a template for right-wing radicalisation that’s been employed multiple times since. There’s also an entertaining “where are they now” aspect where some people have been almost forgotten and some are in the White House. KotakoInAction is still going and has (inevitably) morphed into a bunch of people complaining about the Lūgenpresse.
Let’s just say that I think it’s an important event and understanding how a guy harassing his ex-girlfriend became a formative moment in alt-right history is fascinating, but I really don’t want to get drawn into arguments with anyone who’s still drinking that particular kool-aid.
I thought the series made by some journalist was very interesting, I don't remember her name, and I don't remember so much of gamergate. But I'm definitely not a core part of either group there..
On the contrary. I provide a ton of value, for free, in the form of:
Identifying the actual roots of the problems people post passionately about, and clearly explaining the underlying mechanisms that lead not just to this problem but many others they might not realize are related
Researching for years the best ways to fix it, going out of my way to have substantive discussions with some of the top problem solvers across multiple fields, and publish the videos up publicly
Spending over a decade on actually writing the open source software, hiring people, creating jobs, without asking anything from any of you
And making it freely available as open source, with documentation, all without taking on VC funding or any of the actual profit-taking and extracting rents that goes on here with “software a service”
In literally every way I can, I try to contribute value without taking in return.
So you could not be more wrong, and if you’d click the links you’d see that. But you’d rather not even look, because in your capitalist mind, sharing the result of decades of work and over $1 million spent on free open source platforms for the world is “self-promotion”. You’d rather see another startup extract rents for a simple product built around tiny feature, funded by venture capitalists who want to have an exit by selling shares to the public, who will demand more rent extraction and wait for even further enshittification of platforms and society. It’s pretty amusing to me.
I currently enjoy staying relatively almost completely unknown, and seeing the reaction people have to the most straightforward application of the above solutions to their own problems. Because I think that even on HN, many people are acting very irrationally and groupthink dominates, and while millions of people actually use my software, 99.99% have no idea who I am, and I get to see how human groups react to form instead of substance. This is btw why we often can’t have nice things, at least not unless the solutions, like bitter medicines, are presented wrapped in candy for organizations. We are a generation of children living on an ecological credit card, one of the most spoiled in history, but think we know better than everyone else. So I kind of enjoy seeing the irrationality as a form of entertainment although on a global ecological scale, it’s sadly quite scary.
I recommend visiting the Ecomuseo in Palermo [1] if you ever have the chance. They examine, among other things, the lasting impact of the subpar building of now mostly crumbling structures by the Mafia that still litter the cities of Sicily.
Yes, the mafia built housing, but it’s not the kind of social housing we might hope for—it’s mostly slum-like. Of course, the city of Palermo is also EXTREMELY densely populated—I read something like the fourth-most densely populated city in Europe in a magazine once, but can’t source that now, so take it with a grain of salt.
Nota bene: I’m not Italian myself; my wife’s family has their roots in Sicily.
Unpopular? One of Italy's most popular historians likes to joke that, back in ancient Rome, any budding politician would have taken a post in Syria or Lybia over one in Gaul or (shudders) Britannia any day of the week. And every time, the audience just laughs and nods. The Mediterranean was a highway, not a frontier.
> but it’s not the kind of social housing we might hope for—it’s mostly slum-like.
It may be not what we hope for, but isn't it pretty much the same as what happens when the government builds it? I mean, the "projects" aren't exactly the shining example of what "we might hope for" either. It looks like this way of solving the problem is bound to fail whoever tries it - be it the well-intentioned government or the mafia.
