Oof real. I love taking the 4Runner places off the beaten path (but still on a proper trail ofc). Get far enough out on a hard enough trail and it becomes zero to slight peopley

I have a feeling there are a lot of busy people trying to answer that question, now. Yikes.

Yeah it sounds pretty wild already with some kind of, like, door knock mechanism using certificates? So you can’t scan for it. And some reverse engineering countermeasures.

Like everyone else, I have to wonder what libraries have been compromised in a way that nobody has noticed yet.

I would go nuts or od if not for the pill organizer. Refilling sucks. But I sigh loudly every Sunday and manage to do it lol

Fortunately they can write up 3 Rx and then send to the pharmacy every month until my next appt.

Of course my pharmacy can’t get the stuff due to the shortage so I have been without for 2wks now. It’s a process to have the Rx sent over to a different pharmacy. Easy for someone normal. But ADHD without meds? Yeah.

Very annoying - the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it’s “great new features”. We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor he had added). We had to race last night to fix the problem after an inadvertent break of the embargo.

He has been part of the xz project for 2 years, adding all sorts of binary test files, and to be honest with this level of sophistication I would be suspicious of even older versions of xz until proven otherwise.

Damn. I would love to see a full post mortem on this compromise.

Well maybe they aren’t experienced info security professionals :)

Fair point. I am actually concerned about just bouncing around aimlessly when I retire. I know that will not go well.

What you’re talking about sounds like what I had in mind. Structure for at least part of the day. Every day.

I also need to have specific goals laid out. I’m starting to make a master list of post retirement goals. I imagine having one big long term project and a few short term ones would work as long as I keep to a rough timeline on each.

Back when I had a better work schedule I usually had one or two small projects or else one big project going at any time and was able to stick to them.

I’m also thinking that taking a class or doing a part time job (or volunteering) would be a good idea. And another option is switch to part time at my current job. I know a few who have.

Idk what you’re into buddy

but I like it.

Inflation.

What the saying is trying to convey:

Sometimes people focus on a few small details of some problem to such a great degree that they completely fail to consider the larger context and purpose.

It isn’t trying to say details are unimportant. Only that the larger context matters and should be considered while investigating the details of a problem.

I am trying to think of a good example. The one I found online is something like, “the senator was so focused on the wording of one subsection of the bill he didn’t stop to consider the bill was too unpopular to ever pass regardless of the wording”.

Ok how about this. Let’s say a company is to unify access control across disparate systems. The overarching goal is to be able to set policy in one place not in each individual application.

A team is in the process of evaluating a candidate product. They want to complete the evaluation in a set time frame and focus on a particular scenario (web app, specific tech stack) for a proof of concept that isn’t representative of many of the typical scenarios in the company (web, database, API, etc).

The team spends their time focused on getting the evaluation done and discovers the product doesn’t integrate as well as originally expected with a key system. They focus on coming up with a solution so they can complete the proof of concept.

They consider their efforts a success when they finish up the eval on time.

But the evaluation wasn’t useful because it didn’t really consider the overarching project goals and in the end the solution didn’t even meet those goals!

Hope this helps.

Work is stupid. We should be working 20 hours weeks and fucking around the rest of the time. Everyone would be so much happier.

Or maybe everyone with ADHD (and, this, 80 gagillion hobbies)

Hm. I have one vacation day left after being sick. Won’t get more until next week. Work 10 hour days 4 days a week and the too exhausted to relax most of the remaining 3.

What if… Hear me out… What if I were to be, idk, run over by a bus and hospitalized for a month? /s

Irritable, you say? 🤔

Uh oh 👀

🧠 – haha get fukt

I get where you’re coming from but is he managing his risk or not?

Does he understand the risk? If yes, good. No? Bad.

Is he ignoring the risk? If yes, bad. No? Good.

Is he weighing the risks against the benefits he receives of using these apps and taking appropriate steps to mitigate those risks? If yes, then good. No? Bad.

Cyber security isn’t “lock everything down at all costs”. Otherwise I would insist you throw your phone in an incinerator along with all your computers, live in a bunker reinforced against nuclear attack with a small army to guard you, never leave it, never talk to anyone… Etc.

It is enabling one to achieve their goals with a tolerable amount of risk. That level of tolerable risk is different for everyone.

Barbara Sher, “Refuse to Choose”

My takeaways…

Keep an ideas journal. Write down your project ideas. Let yourself go wild on paper. Sometimes getting the creativity out on paper “scratches the itch” and you no longer need to actually start the project

We sometimes take on new hobbies and projects for a purpose other than conventional completion. And that’s perfectly ok. We might want to get a sense of what it is like, or achieve some level of recognition, or gain proficiency but not expertise.

For example, I used to do autocross racing and after a couple years I won a podium finish and a trophy in a local race and I felt like “ok cool good enough” and the interest waned.

It is still important to be able to learn how to accomplish goals, though. Because it feels good and builds some self esteem and gives us a chance to learn how to plan better, and improve our ability to stick to something, even if only a little.

I’ve had to recognize that I have to significantly pare down what I work on, and be choosy about which projects to actually commit to. That’s why the ideas journal helps me.

I know I don’t have to start everything, won’t forget anything, but be able to recognize those projects of greatest interest that I keep thinking about long term. Those are the ones I am going to be able to finish.

Are you being an asshole about it? Oh wait I don’t need to look it up lol

Man not ours. Couldn’t say shit anywhere lol.

Even our computer labs weren’t too 3rd-spacey.

Man I miss college sometimes tho. Back when I had friends and a life lol