RT @renminwansui5@twitter.com
重庆
突发事件!两万工人上街游行示威!
市民投稿:
重庆大渡口中元汇吉药厂不经员工协商,直接裁员一万多人。
将近两万工人上街抗议,目前厂内产品已经机器被砸,相关的负责人也被打进了icu。
🐦🔗: https://twitter.com/renminwansui5/status/1611622092948049920
Only 175k view?
----
Hilarious PingPong - Mozart Group
by Encore Un Tour
https://www.youtube.com/watch?v=hLMFfChw2Fs
The Guardian 报道,沙特阿拉伯于 2020 年 9 月逮捕了两名维基百科管理员志愿者。两位分别被判决 32 年和 8 年徒刑。
Wikimedia 于 2022 年 12 月 6 日全域封禁了 16 位用户,包括阿拉伯语维基百科 26 名管理员中的 7 名 [1]。基金会称,自 2022 年一月的调查显示这些用户的编辑存在利益冲突;这些用户和外部团体关系紧密,并且通过他们的编辑美化这些团体。Democracy for the Arab World Now (Dawn) 和 Smex 两家组织评论称,Wikimedia 指的「外部团体」其实也是沙特阿拉伯政府。
- www.theguardian.com/~
- meta.wikimedia.org/~
seealso: HackerNews:34267223
1. https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/2023-01-01/News_and_notes
#SaudiArabia #Wikimedia
Telegram 原文
“权力导致腐败;专有程序的开发人员容易受到诱惑而设计这种程序来欺骗其用户。(当软件被设计成会伤害用户时,我们称之为 恶意软件。)当然,开发者一般不是出自恶意,他们只是想牺牲用户好让他们赚更多。但这不代表着他们的所作所为就因此没那么肮脏,或是变得正当。”
https://www.gnu.org/proprietary/proprietary.zh-cn.html
----
完美解释了某些开发者的作恶动机。(例如一些 npm package 投毒攻击的始作俑者)
chalk 和 chokidar 均为 npm 上著名包。
GitHub 项目 AFFiNE 近日从一个 PR 发现项目开发者曾误引入一个名为 chalk-next 的恶意包(与此 PR 似乎无关),此 chalk-next 包包含尝试收集/检查系统环境变量及删除文件的投毒代码 [1]。有 Twitter 用户分析后提到 [2],疑似同一位作者还发布了包含类似行为,名为 chokidar-next 的包 [4]。
从 chokidar-next 包作者 [5] 其它包元信息指向的 GitHub 用户来看,这两个包的目的似乎是检测 vue-admin-beautiful 付费版本盗版用户并删除其代码 [6]。
目前 chalk-next 和 chokidar-next 均被标记为 "Security holding package" [7][8]。
1. https://github.com/toeverything/AFFiNE/pull/668
2. https://twitter.com/yihong0618/status/1610919470410928133
3. https://www.npmjs.com/org/chu1204505056
4. [web.archive.org/~](https://web.archive.org/web/*/https://registry.npmjs.org/chokidar-next/-/chokidar-next-4.0.14.tgz)
5. web.archive.org/~
6. https://github.com/chuzhixin/chalk-next
7. https://www.npmjs.com/package/chalk-next
8. https://www.npmjs.com/package/chokidar-next
#npm #vueadminbeautiful #OpenSource #Ecosystem #SupplyChain #Security
Telegram 原文
The "YouTube (Direct)" one is reversed. So if it's not accessible, it's good.
If YouTube can be accessed directly in China, that's a big news.
@mariotaku 让我康康(
Here is a more sophisticated one: If it is not working, try a different GCC version. Those bugs might magically fix themselves.
Yet another YouTuber to recommend.
Sometimes I always blame myself for spending too much time on YouTube. Maybe I can spend some time diving into some protocols, or maybe dive into GraalVM and other things, or just learning a new language, my neighbor definitely won't complain about that, or perhaps I can spend some time to keep finding jobs. It's almost half a year after I graduated from university, and I am still unemployed.
But this YouTuber is different, videos are delightful to watch. Maybe it's good for easing the anxiety, I don't know. Check it out, maybe you will like it too.
----
#6 FINALE | Staircase Restoration
by carlrogers
https://www.youtube.com/watch?v=9wBz0HtzZOk
Might be the last time I talked about copyright (in the near future).
https://twitter.com/BuildEnginePics/status/1610626880297701376?t=EqdruG3WwW8LhdZ3EBPwUQ&s=19
Of course they have everything they sold. They will store those things properly. But they won't published for free, even if it can make money. The longer they hold those data, the more precious it is. And eventually, they physically owned the data.
That's why I'm super "left" on copyright related topics. We're overprotected the owner, and we're eliminating those creative works.
From the comment, the main character in first section might be 眞帆志ぶき, performed in Paris. But I didn't find any info from the wikipedia nor google.
Also, according to wikipedia, 眞帆志ぶき died of pneumonia on March 9, 2020.
Here is a post related to this clip, written in Japanese, which I can't read: https://ameblo.jp/kazesayaka/entry-12611307221.html
Ten years. WOW.
----
We've made some BIG mistakes... - Reacting to our WORST Videos
by Linus Tech Tips
https://www.youtube.com/watch?v=0E44CQ-8ooI
That's why I'm not happy with the current copyright law.
The "creative work" may eventually go into the public domain, but when that happens, can you find a properly stored copy? Can you find any full recordings of Takarazuka from 70 years ago?
This 11 minutes clip from 1968 shows the Takarazuka Revue. But what's the title of the show? Who they are? Maybe takarazuka has the full recording, even the original film, but will they publish that? Of course not. The same thing applies to games.
Companies make money, but they don't care about their consumers. Or, maybe, you will be a consumer if and only if when you pay.
----
Takarazuka Revue - extracted from movie Die grösste Schau der Welt - Die Girls von Takarazuka (1968)
by Rodion Zhirnov
https://www.youtube.com/watch?v=Ph3Zgk4EaVo
@sauricat@m.cmx.im 关于贵重礼物,我的想法可能有点不要脸,我觉得送能力所及的礼物就可以了,如果对方财力很高,送我很贵重的物品,我也会欣然接受,毕竟是你乐意送,又不是我拿刀拿枪安在你脖子上逼着送的。我不知道这样想对不对,反正我家里经济条件也一般,这几年全靠亲戚给钱,一开始还有点不好意思,但后来我发现我是真的喜欢钱,所以就这样想了。不过接受礼物是一方面,另一方面,我也会在我能力所及的范围内给亲戚做些事情,如果遇到我不愿意做的事情,我也会果断拒绝,毕竟之前你给的钱是赠予,不是劳务报酬。你给我的东西/钱,不一定会促使我达成某种行为。
不过我感觉,单从「这些礼物基本上都是她喜欢的东西。。。没有太多我真正喜欢的东西」这一点来看,我觉得这样的人还是绕开比较好(抱歉突然对你的事指手画脚orz)
Abandoned since this instance is broken. Please follow my new account: @skyblond