#InfoSec FYI: There's a massive #typosquatting campaign targeting PyPI. Someone's clearly reached the automation section of "Black Hat Python" 🙄
This is the same actor as highlighted by Phylum yesterday - currently they're pushing a cryptostealer everywhere they can, but who knows what's next.
Recently, they've started typosquatting the following packages (& showing example typosquat):
* xlsxwriter (ex. xlsxwwriter)
* urllib3 (rllib3)
* simplejson (simplejsn)
* requests-toolbelt (requests-toollbelt)
* discord-webhook (disocrd-webhook)
* discord-py (discod-py)
* websocket-client (weebsocket-client)
* openpyxl (oepnpyxl)
* pillow (pilloow)
* click (clickk)
* pysocks (ysocks)
* psutil (psuil)
* gitpython (gitpythn)
* pycodestyle (pycodestye)
* prompt-toolkit (prompt-toolkiit)
* beautifulsoup (baeutifulsoup)
Reports headed out to PyPI soon.
If your company uses your own PyPI mirror, I'd recommend disallowing new packages released within the past ~week (as a general precaution, tbh).
While refactoring my personal #KnowledgeGraph I asked #ChatGPT what's the relation between #ObjectOrientedProgramming and #FunctionalProgramming.
I was expecting something in the line of opposition and alternative. But it replied "complementary".
Clever!
WTH?!
That's your opinion, she has been very clear that she has nothing against people with this or that condition.
Cactus Comments - Federated Web Comments
Cactus Comments is a federated comment system for the web, based on the Matrix protocol.
The great big Matrix 2.0 main-stage talk from #FOSDEM2023 is now available online! Come see how we're making Matrix go voom 🏎️ with the world first demo of iOS Element X beta; the Waterfall SFU for Element Call; P2P Matrix & scriptable Third Room in WebXR! https://www.youtube.com/watch?v=eUPJ9zFV5IE
I am glad that some of the finer points of protective reciprocal licensing (aka "#copyleft") are still recognized and discussed, even outside the software context.
IMO, the main goal of copyleft is to ensure that the same freedoms given to you are passed on to others, with no additional restrictions.
#FreeSoftware #OpenSource #FOSS #DnD #OGL
https://twitter.com/rsdancey/status/1622488085719285764
I wrote some code to estimate the gender ratio of speakers at #FOSDEM. My code looks at the personal pronouns used in the speaker biographies and if that fails it uses the gender-guesser Python library to guess the gender from the name.
There were 786 speakers, these are my results:
male: 656
female: 82
unknown: 48
If we ignore the unknowns then 12.5% of speakers are female.
You say oligarchy, I say plutocracy?
US and the world being buggered by the 1 percent fits.
> The Obsidian devs are aware of all of your points in favor of a copyleft license, but that hasn’t convinced them to make the choice you’d prefer.
> That’s up to them, just as it’s up to you whether or not to use their software.
Then they shouldn't claim their decisions are in the best interest of users, like their new CEO just did, while Logseq's not despite it being FOSS.
Logseq can even accept investments by third parties, because the users rights are secured by a FOSS license.
> There are a lot of reasons an indie dev wouldn’t want to go open source, too. Maybe they don’t want someone to use their own app to compete against them by forking the code they spent thousands of hours developing.
This is exactly why I'm arguing in favor of Copyleft licenses like GPL all the time: they are the original Free Software ones that are meant to protect developers from others taking advantage of their work without contributing back.
The permissive licenses came later together with an effort by corporations to rebrand Free Software as "Open Source" and enable their predatory practices.
Maybe it's not me that needs to "accept" things but people that needs more informations?
If the project is still valid with a community of users some development can be supported and even if you are alone without programming skills you can still pay a developer to fix bugs or implement features that are important to you.
I remember Kdenlive video editor was almost dead for years, then suddenly someone started to contribute again, it grew a lot and now it's one of the best FOSS video editors.
About Obsidian's Markdown, yeah you can stick to standard syntax but it seems to me Obsidian enthusiasts are too much confident that "it's just plain text" but then they found out themselves tied to 20+ plugins for their UI/UX, not because of how data is stored.
Same it's true with Logseq that introduces its own special syntax, but at least it's FOSS.
It provides the answer without using terms like "GPL" and "Copyleft"... OK I guess they used synonyms that I am not aware of or some figure of speech, or maybe you are back with the argument that for you FOSS = development in the open = GitHub etc.
I give up, cheers.
So no? You don't know the difference?
The issue has been raised on a forum thread you linked and no one from Obsidian team addressed it nor did so elsewhere to my knowledge.
So I guess now you will re-read our conversation and do some research on how Copyleft can protect a software project and eventually provide a proper reply to those users?
The fact that you are replying with "open source" makes me belive even more that you don't understand the difference between Free Software/Copyleft and the rebrand by corporations named Open Source™/their permissive licenses.
Am I right?
@gizmo @EpiphanicSynchronicity @kepano
Well Twitter diaspora brought here a lot of people that it seems need to understand things the hard way, sadly: we spent years saying how much bad social network silos are and now that we are proven right, the newcomers insist with their convenience-driven attitude, in this case supporting closed source PKM and even claiming to be user-centric.
#Mathematics #Macroeconomics #Engineering #ComputerScience #Programming
#Ecology #Environment #Democracy #Freedom #Equity #Liberal #Socialism #PostKeynesian
#Inkscape ·
#Gimp ·
#Blender ·
#VLC
#WordPress ·
#Mastodon ·
#PeerTube:
searchable