[-] drspod@lemmy.ml 1 points 11 hours ago
[-] drspod@lemmy.ml 3 points 3 days ago

I hope it's a 3D open world action RPG, you know, just for a laugh.

[-] drspod@lemmy.ml 2 points 3 days ago

Explain to your boss that it's slowing down your work to have to take these calls. If your boss is fine with that, get in writing, ie. over email so you can't be blamed for low productivity later. Now it's not your problem.

If your boss isn't fine with it impacting your work then get permission to decline these calls with "sorry I'm busy with my own work, please put something in my calendar." Use your busy/available status in your calendar to manage when they can schedule these calls.

[-] drspod@lemmy.ml 2 points 3 days ago

Have you ever experienced any kind of rate limiting or lock-out based on how fast and how much you are downloading?

[-] drspod@lemmy.ml 19 points 4 days ago

Were you reminded of this after seeing I Saved a PNG Image To A Bird by Benn Jordan?

[-] drspod@lemmy.ml -1 points 4 days ago

AI writes like academic nerds

In what branch of academia? SEO optimization?

[-] drspod@lemmy.ml 14 points 5 days ago

It was a secret ballot so they didn't know who had done it, but the incident was reported to the police. Presumably the politician admitted to it before they went and interrogated and fingerprinted everyone to find out who did it.

But this raises the important question whether in a functioning democracy it is ever okay for the police to investigate who marked a specific ballot. If they're allowed to fingerprint people to find out, then this sets a precedent that would allow an authoritarian government to prosecute people voting for the wrong candidates.

You could also argue that this is exactly what happened here; the politician is being persecuted for his (unlawful) political expression during a secret ballot. Unfortunately since he confessed, there is no opportunity to question the involvement of law enforcement as a matter of principle.

[-] drspod@lemmy.ml 3 points 5 days ago

Our region is dark low-energy and dark doesn’t matter.

[-] drspod@lemmy.ml 11 points 6 days ago

We all knew there was something sleazy and wrong about that guy, but now to find out he was friends with Peter Mandelson? That's really the final nail in the coffin.

[-] drspod@lemmy.ml 16 points 6 days ago

You're welcome. I've been using Linux for 26 years and had never heard of (or at least didn't remember hearing of) MPD, so it's not just new users. We all feel a different part of the elephant.

[-] drspod@lemmy.ml 32 points 6 days ago

What is MPD?

MPD (Music Player Daemon) is a server-client audio player long popular with Linux users. The headless daemon runs as a background service, typically on a remote audio server. Music is then accessed via a GUI client frontend, which connects to the MPD server to stream content.

Kind of like running your bespoke, curated music streaming service, in a sense.

[-] drspod@lemmy.ml 12 points 6 days ago

They found a way to inject text into a google email notification (by setting the name of their google workspace account to the phishing message), and then set up a mail forwarding service to redirect the notification to the victim accounts. That way the victims receive a legit email from google but the text of the email is attacker-controlled and can point the victim to their phishing site.

It's not really a vulnerability in DKIM. The bug is in google's use of attacker-controlled text fields in their notification emails.

11
submitted 2 months ago by drspod@lemmy.ml to c/gaming@beehaw.org

From the video description:

The Deepest Games are DUMB. How is it possible that this generation of game developers, who are clearly articulate and educated, be so obsessed with the idea of creating deep meaningful games, and yet consistently produce games that are shallow and automated? Also, why does it seem impossible for the depth of the games of the past to be re-created? There clearly isn't any technological barrier, so what is the problem?

One of the major problems that I discuss in today's video is the obsession modern developers have with making smart games and being perceived as these masters of human psychology and technology. Where this stems from is hard to know for sure, but there is clearly a trend of developers being able to find the areas of their game that contain the potential for depth, and then systematically eliminating them. Ironically a lot of these areas are labeled as "outdated" but what I think developers and reviewers really mean to say is dumb. No one would argue pixel art is outdated. No one would argue that Mario 3 and their favorite Super Nintendo games are outdated. What they mean is that these games are presenting the player true punishment and no smartly devised system to go around the punishment.

114
submitted 3 months ago* (last edited 3 months ago) by drspod@lemmy.ml to c/programming@programming.dev

Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code)

A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero.

ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft's portal on April 4, 2025.

The package names are:

  1. Prettier - Code for VSCode (by prettier) - 486K installs
  2. Discord Rich Presence for VS Code (by Mark H) - 189K installs
  3. Rojo – Roblox Studio Sync (by evaera) - 117K installs
  4. Solidity Compiler (by VSCode Developer) - 1.3K installs
  5. Claude AI (by Mark H)
  6. Golang Compiler (by Mark H)
  7. ChatGPT Agent for VSCode (by Mark H)
  8. HTML Obfuscator (by Mark H)
  9. Python Obfuscator for VSCode (by Mark H)
  10. Rust Compiler for VSCode (by Mark H)
13
submitted 3 months ago* (last edited 3 months ago) by drspod@lemmy.ml to c/cybersecurity@sh.itjust.works

Edit 2025-04-09 16:42Z - article was updated with a tenth package (Prettier - Code)

A set of ten VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer for Monero.

ExtensionTotal researcher Yuval Ronen has uncovered ten VSCode extensions published on Microsoft's portal on April 4, 2025.

The package names are:

  1. Prettier - Code for VSCode (by prettier) - 486K installs
  2. Discord Rich Presence for VS Code (by Mark H) - 189K installs
  3. Rojo – Roblox Studio Sync (by evaera) - 117K installs
  4. Solidity Compiler (by VSCode Developer) - 1.3K installs
  5. Claude AI (by Mark H)
  6. Golang Compiler (by Mark H)
  7. ChatGPT Agent for VSCode (by Mark H)
  8. HTML Obfuscator (by Mark H)
  9. Python Obfuscator for VSCode (by Mark H)
  10. Rust Compiler for VSCode (by Mark H)
61
R(ul)esign (lemmy.ml)
submitted 6 months ago by drspod@lemmy.ml to c/196@lemmy.blahaj.zone

AMAB

3
submitted 6 months ago* (last edited 6 months ago) by drspod@lemmy.ml to c/technology@lemmy.world

This is a moving story about a cafe in Japan that allows house-bound people to join in with society and find a purpose, using remotely operated robotic avatars.

10
submitted 6 months ago by drspod@lemmy.ml to c/linux@lemmy.ml

I had never heard of Absolute Linux, but the rest of this article has some interesting musings on lightweight distros that I thought would make for good discussion here.

130
submitted 6 months ago by drspod@lemmy.ml to c/linux@lemmy.ml

If you want to go straight to the original write-up, it's here: https://eieio.games/blog/bad-apple-with-regex-in-vim/

16
submitted 6 months ago by drspod@lemmy.ml to c/cassettefuturism@lemm.ee
42
submitted 7 months ago* (last edited 7 months ago) by drspod@lemmy.ml to c/cassettefuturism@lemm.ee

Great craftsmanship from this maker and the end result is impressive.

If you want to skip the construction process and just see the end result, skip ahead to 41:20.

21
submitted 8 months ago* (last edited 8 months ago) by drspod@lemmy.ml to c/lemmy_support@lemmy.ml

Edit: this appears to be fixed now: https://lemmy.ml/post/22203615/14801411

All images in posts on lemmy.ml are currently being resized to 256px on the longest dimension (width/height), even if they are image posts, not intended to be just article thumbnails.

Is this an intentional change? It makes text in images illegible and means that I have to view the original post to see the original image on every image post.

If this is a deliberate space-saving measure, could it be tuned for a little better usability? For example, increasing the maximum size of image when the post is an image post (as opposed to a web link that generates a thumbnail) and setting a size threshold to trigger resize (ie. most small images could be left alone).

Some examples from my feed:

23
submitted 8 months ago by drspod@lemmy.ml to c/privacy@lemmy.ml
35
submitted 11 months ago* (last edited 11 months ago) by drspod@lemmy.ml to c/programming@programming.dev

Threat actors are utilizing an attack called "Revival Hijack," where they register new PyPi projects using the names of previously deleted packages to conduct supply chain attacks.

The technique "could be used to hijack 22K existing PyPI packages and subsequently lead to hundreds of thousands of malicious package downloads," the researchers say.

If you ever install python software or libraries using pip install then you need to be aware of this. Since PyPI is allowing re-use of project names when a project is deleted, any python project that isn't being actively maintained could potentially have fallen victim to this issue, if it happened to depend on a package that was later deleted by its author.

This means installing legacy python code is no longer safe. You will need to check every single dependency manually to verify that it is safe.

Hopefully, actively maintained projects will notice if this happens to them, but it still isn't guaranteed. This makes me feel very uneasy installing software from PyPI, and it's not the first time this repository has been used for distributing malicious packages.

It feels completely insane to me that a software repository would allow re-use of names of deleted projects - there is so much that can go wrong with this, and very little reason to justify allowing it.

view more: next ›

drspod

joined 3 years ago