Due to lemmy.world blocking pirating communities, I will now be using !CosmicTurtle0@lemmy.dbzer0.com

  • 2 Posts
  • 46 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle







  • They don’t need to be a techie. Just someone who can click a button.

    I am remembering Julian Assuage has/had a payload that was distributed via BitTorrent. The file was encrypted with a private key and his public key was posted either as a file in the package or on the site where the magnet file was downloaded.

    Before he was arrested, he encouraged everyone to download the file and sit on it and to keep seeding it. He said in the event of his untimely death, the password would be released for everyone to decrypt.

    That would be another option but you sort of need the notoriety to make this work.


  • I’ve actually given this a lot of thought over the years. The biggest issue for me is all my AWS services that no one in my family knows about.

    So the idea would be to, at minimum, let my family know what services are being used.

    Unfortunately there isn’t a turn-key solution. I’ve seen a number of well-meaning solutions and some that are quite novel but they all suffer from the same problems: how do you deal with false positives and how do you verify your deadness.

    I imagine that the problem is similar to the Yellowstone trash can problem, in that any solution to mitigate one will make it harder on the other.

    The best solution I’ve found is to have a two-person solution, similar to launching a nuke. You have automation that tests if you are active that emails a close friend or relative to verify you are indeed dead.

    Ideally there would be more than one person on this list a confirmation from two people would kick off all of the automations you code.




  • The problem is companies that fully take advantage of open source, as is their right, and then fully expect the volunteer dev to provide support them when they have a Sev 1.

    Sure they read the license and saw that it was free, but they didn’t read the part that it was free but offered literally no support.

    The amount of money that my company has made on the backs of open source developers is probably in the literal billions. But we don’t give fuck squat to them outside of one day a year that we contribute code back to a few select libraries.



  • I use GitHub private repos for my home configuration stuff. So it’s not open source since I’m the only one using it and I don’t want someone else to know how to attack my network.

    For certain configurations, self hosting doesn’t make sense. For people like me, who would rather spend his time doing the stuff I care about instead of maintaining the stuff I don’t care about, I’m okay giving Microsoft some “control” over my code for the convenience.

    That said, I am thinking about moving my FOSS code off of GitHub since that is an option. I’d have to see their CI/CD pipelines though.



  • Which, by itself, is fine. But their contributions to open source are very one-handed and pale in comparison to how much they benefit out of it.

    Hell, my company is no different. They allocate one day out of the year as “open source day” where devs can contribute back to open source projects on company time. But it must be something we already use.

    No personal development. No non-essential libraries.

    We make literally millions off of these libraries and we don’t even contribute monetarily.

    If these companies gave even 0.01% of their revenue to these essential libraries, they’d never even have to ask for money.