Nick @internic@social.cleverlibre.org

yes, i'm proud of this. #computeing

This quote by Carl Sagan hangs in my office. #science

TIL there is an ISO standard for security vulnerability disclosure. First version was made final in 2014, latest version in 2018. Despite actually working in this area for 20+ years, I only now hear of this, yet can't actually see it due to crazy ISO document rules {sigh}
https://www.iso.org/standard/72311.html

One-click remote code exploit in CD cue files affects most GNOME-based Linux distros

Yet another tiny, crucial piece of volunteer software begets a big problem.

https://arstechnica.com/information-technology/2023/10/one-click-remote-code-exploit-in-cd-cue-files-affects-most-gnome-based-linux-distros/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

@arstechnica The thing that struck me about this exploit is that libcue was run "in a sandbox". However, the discoverer of the exploit escaped the sandbox by pure chance - see https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/
Given that, I'd be *very* suspicious of the integrity of that sandbox.

(I'd also argue that Gnome shouldn't default to automatically opening any file that lands in ~/Downloads)

Next week I will start a new lecture series 'Being creative in physics', which is a kind of experiment. Basically, in an interactive format I want to help students understand how you tackle the unknown, where no one tells you what are even the right questions or which physical effects may be important. I will try to have them tackle various scenarios working in teams, like figuring out some mystery equations of motion etc. Read about it: https://pad.gwdg.de/s/ZpJd1xMoQ

Any ideas/suggestions?

It’s National Coming Out Day! Two things to know. First, there is no “right” time to come out, and to do so should be your PERSONAL choice, not someone else’s decision. Second, it’s never too late! I came out in 2005, after living more than six decades largely in the closet. And I’ve never been happier.

Ich bin nicht blind und trotzdem sind Bildbeschreibungen in sozialen Medien total hilfreich für mich.

Ich verstehe oft den Witz nicht oder sehe das eine Detail nicht sofort, was das Bild besonders macht. Die #Bildbeschreibung gibt mir da den Kontext, den mir das Bild allein nicht gibt.

#Barrierefreiheit reduziert auch Barrieren für andere.

#neurodivergent

Oh, apparently yesterday was #PortfolioDay and I missed it! I am Victoria and I am doing #SciArt, mainly focusing on astronomy & astrophysics (#astrodon) and on #academia
& research commentary.

You can fine more of my doodles here: https://www.sternwarte.uni-erlangen.de/~grinberg/#doodles

And an introduction to my process & an encouragement for other researchers to do art here: https://mastodon.social/@vicgrinberg/111115356974247400

#VicisArt

@veronica Here's a tip that you didn't ask for... 😅

If you Forward ➡️ scam and phishing emails to the following addresses, then you're kinda helping to avoid others from getting scammed:

scam@netcraft.com
phish@phishtank.com
phish@office365.microsoft.com

✉️

#Phishing #Email #Scam #Spam #WebTips #Tip #Internet

#Unity is firing^W^H accepting the retirement of its CEO. But I think it’s too late. No one in their right mind will trust Unity after the stunt they tried to pull this year.

“Unity Announces Leadership Transition”

https://investors.unity.com/news/news-details/2023/Unity-Announces-Leadership-Transition/default.aspx

In the newsletter, for funsies, I dashed down a quick enshittified version of the Gartner Hype Cycle:

Here you go, Cory :) @pluralistic

https://newsletter.danhon.com/archive/s16e11-substacks-thin-end-of-the-quora-wedge/

Claudia Goldin wins Nobel economics prize for work on gender gap

Wonderful!

I would love to learn more about Claudia Goldin’s contributions than I can glean from the press. Anyone in the know and could point to a great high-level paper of hers I might read? While I’d love to read the 1990 book, that’s more than I have bandwidth for right now.

https://www.reuters.com/world/claudia-goldin-wins-2023-nobel-economics-prize-2023-10-09/

Utter nonsense. DNA studies find a close genetic clustering of ME Jews, Palestinians, Bedouin and Druze. Nobody participating in this modern conflict, with its roots in the 2nd half of the 19th century and 1st half of the 20th, knows or cares about what their ancient ancestors were fighting over.

As noted in my bio, I post long threads from this account and there are many ways to get my essays if my Mastodon style doesn't suit - RSS, newsletter, Medium, Tumblr, a blog, etc. I recommend unfollowing me here and subscribing to one of those if you prefer. Links at pluralistic.net.

https://pluralistic.net/2022/07/17/so-youve-decided-to-unfollow-me/

Reminder about Mastodon "private" messages. Aside from not being end-end-encrypted (and so visible to instance administrators), they CC anyone @-mentioned ANYWHERE in the body of the message (not just those listed at the start).

They are now called "private mentions" rather than "private messages", but if you don't fully understand the semantics, this behavior may be unexpected and/or cause unpleasant side effects.

https://www.washingtonpost.com/technology/2023/10/06/23andme-hacked-data/

Enhance your calm: "Demolition Man" turns 30. Sci-fi action comedy is an under-appreciated gem of '90s action movies, precisely because it unapologetically leans into the massive explosions and campy humor with wild abandon. https://arstechnica.com/culture/2023/10/enhance-your-calm-demolition-man-turns-30/

When I was a little boy, the Japanese military attacked Pearl Harbor. It was a surprise attack, and thousands of U.S. servicemembers perished. As a nation, we were stunned. And we vowed to strike back. Revenge was understandably on everyone’s mind, including many Americans of Japanese descent who opposed the emperor and were peaceful and law-abiding U.S. citizens and residents. /1

Right now @TrueSciPhi counts twice as many Physicists (with more than 100 followers) on #Mastodon than an #BlueSky.
Both are quite small numbers (~120 vs ~60), but they will hopefully grow.