Gwmngilfen @gwmngilfen@fosstodon.org

Nice! Thousands of scientific findings are invalidated because of a misunderstanding in how a Python function works

http://www.blog.pythonlibrary.org/2019/10/13/thousands-of-scientific-papers-may-be-invalid-due-to-misunderstanding-python/

Hey #Linux fans, make sure you check for updates.

There was a serious security flaw found in sudo.

https://www.tomshardware.com/news/apple-researcher-finds-huge-flaw-in-linux-sudo-command

Another thing: I can't stand people that pretend passion for a trade/practice, then proceed to gatekeep. My knowledge is free, and I'm eager to help when others run into issues I have experience resolving. Even if I don't, I'm willing to learn with you.

I jotted down some of the reasons why I don't use #Facebook. I thought maybe some people may find it useful.

https://kevq.uk/why-you-shouldnt-use-facebook

I’m looking at some of the 404s we've gotten in the last few hours. Of interest:

- /login/username/.wp-config.php.swp

(Don’t vim your config file on the prod server, kids)

- *.php

As if.

- Various permutations of ‘backup.sql’
- Lots of…/.ssh/id_rsa
- Lots of .svn and .git
- Lots of paths to /etc/passwd
- Lots of paths to Jenkins admin stuff

This is great. Terrifying, but great.

https://xkcd.com/1732/

RT @OBSProject@twitter.com

We’re proud to announce @Twitch@twitter.com as a Premiere sponsor of the OBS Project. Twitch has gone above and beyond in their financial support of OBS, and the program would not be what it is today without their contribution. Read the blog: https://obsproject.com/blog/twitch-becomes-premiere-sponsor-of-the-obs-project

🐦🔗: https://twitter.com/OBSProject/status/1176207893311426567

Great presentation by @gwmngilfen on #Ansible statistics - improving the Ansible #community with data. Check out https://stats.eng.ansible.com/apps/ and https://emeraldreverie.org/

#AnsibleFest #ansiblefest2019

Just re-upping this offer: because being comfortable with git is a barrier to entry to many FS/OSS projects, and because I care deeply about lowering those barriers, I will tutor anyone who asks for help with git, and/or connect them with any mentor(s) they might prefer.

I'll do this while I put energy and work into making the tool more approachable, and into making better tools and learning paths.

Boosts gratefully appreciated.

#gittutors

Is there a word for the lack of perspective that causes techies to create "privacy" solutions that boil down to:

"Don't trust that guy, trust me!"

... while not realizing that to the general public, that's effectively the same thing?

Sure, YOU trust yourself. Why should I?

(See: ProtonMail, Tutanota, much of the Fediverse, any "I'll host it for my friends" FOSS solutions.)

We need to build and advocate systems that don't require the end-user trust us blindly. Such trustable architectures do exist, usually by separating concerns and distributing power. We can build systems which actively curtail techie power.

(The GPL itself is such a tool.)

This is a fundamental principle guiding my work; it's one of the reasons #Mailpile will never directly provide a hosted service offering.

I feel like it's a principle not many techies share with me, and I'm not sure how best to advocate for it.

I really hate when communities use Slack. I have a Pinebook as my main laptop, and my phone cost $200 since I try to use cheap computers that last.

But Slack wants to use all of my RAM. I can't actually run it on most of my devices.

My company let me release this as Free Software: https://github.com/aminohealth/pytest-honors

It's a pytest plugin to let you mark Python certain unit tests as supporting, or "honoring" constraints. Say you have some design requirement tests that are super important, or tests that validate compliance with some ISO 27001 controls. Now you can mark them for easy identification, run reports to show which tests demonstrate which constraints, and enforce in CI that you never accidentally remove a marked test.

Heard of a cool tech-bro-weeding interview technique the other day. A male and female engineer conduct the interview session together. If, when the female engineer asks the candidate a question, he directs his answer to the male engineer, then he's out. They said it happens a lot