angelmountain

joined 3 weeks ago
[–] angelmountain@lemy.nl 4 points 1 day ago (1 children)

This article talks about "typosquating", that just means they introduced packages with a similar name to other packages but in this case also containing malicious code.

I expect other package managers to be just as vulnerable to this. The only way I can think of to mitigate this is very strict registry policies, someone checking all version of all packages in the registry to make sure there is no malicious code in them. That would take a lot of effort.

I think the biggest problem with npm is just that it is very popular, so for attackers the chance of hitting something with their attack is bigger than with other systems.

I don't believe yarn is any more secure than npm, especially not for this type of attack. Yarn used to be a bit more secure because it checked checksums where npm didn't, but that has been added to npm as well now (https://sebhastian.com/npm-err-code-eintegrity/)

[–] angelmountain@lemy.nl 3 points 3 days ago

Hehe

Also, Linux is really quite nice nowadays πŸ˜‰

[–] angelmountain@lemy.nl 2 points 3 days ago* (last edited 3 days ago) (2 children)

Ventilation is very important to keep the air inside breathable and to keep things like mold outside.

I like to show the importance of this by lighting some incense (or vaping a bit) to show how the smoke just does not go away with the window closed. The same happens with the CO2 that comes out of your mouth, you just don't see it in that case.

Exceptions would be when your building has some other ventilation system built in, but the smoke would show that.

Overhere I always have some form of ventilation open (our house has these ventilation thingies above the windows, that I get angry about when my partner closes them).

[–] angelmountain@lemy.nl 13 points 4 days ago (1 children)
[–] angelmountain@lemy.nl 3 points 4 days ago* (last edited 4 days ago)

Wow very cool website indeed!

Horrible message

[–] angelmountain@lemy.nl 2 points 6 days ago* (last edited 6 days ago) (1 children)

Troll. Smiling and sunshine is free, all other things require some sort of payment in this world.

[–] angelmountain@lemy.nl 45 points 1 week ago (2 children)

Cambridge Analytica accusing Brave? Who is the bad guy in this story? I am confused.

[–] angelmountain@lemy.nl 6 points 1 week ago

May all Musk's businesses have the same results. Amen.

[–] angelmountain@lemy.nl 3 points 1 week ago

Well I still think you're a doofus when you say "aluminum" instead of "aluminium"

[–] angelmountain@lemy.nl 35 points 1 week ago

Land of the free

[–] angelmountain@lemy.nl 1 points 2 weeks ago (2 children)

The best way to watch sports is to go to the arena, the second best way is to go to the pub/bar/sports cafe and watch with the neighbours. Like the old days.

[–] angelmountain@lemy.nl 1 points 2 weeks ago

That's going to be lovely for all the people who mistrusted the COVID vaccines, now they don't have to worry about a government trying to control them with things inside it

view more: next β€Ί