Bill Totman

[Bill Totman @BillTotman]

@ChaunceyGardner @SMB_Attorney What's the correct response to a 'car bomb' - especially if it kills someone?

[Bill Totman @BillTotman]

@Itsfoss FreeBSD.

Rock solid albeit target-hardware-constrained

[Bill Totman @BillTotman]

@aimanhasnoname @AdamHoltererer The old grey mare, she ain't what she used to be:

[Bill Totman @BillTotman]

@aimanhasnoname @AdamHoltererer 811 10th Ave, NYC: 'a place not made for humans' is how it felt when I did some work in it.

[Bill Totman @BillTotman]

@MatthewPhone @aimanhasnoname @AdamHoltererer That's the best view of that building - from afar it becomes, well, duller.

[Bill Totman @BillTotman]

@eliana_jordan The hardware isn't the choke point as much as performance-debilitating software updates and the inevitable cessation of security updates bring about obsolescence.

[Bill Totman @BillTotman]

@SMB_Attorney It is most definitely not because they are a private company.

[Bill Totman @BillTotman]

@Palak3312 @Saanvi_dhillon Mostly due to RAM optimization not being a priority for too many developers these days.

Then, some apps are distributed with their own libraries - to keep tight control over dependencies. This can make an app like Slack use 1 GB by itself.

[Bill Totman @BillTotman]

Heads up

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.

[Bill Totman @BillTotman]

@girdley There are several 'features' in the email standards/protocols that should not allowed to be used on their own, like "delivered to" - when used without 'send to' it will leave you off the "to:" field in your client & with the server treating the (always spam) as if it were normal.

[Bill Totman @BillTotman]

@dalenz2 @girdley You can call it "Lurkers"

[Bill Totman @BillTotman]

@girdley Teaching people who spend other people's money on things they won't own on why to be frugal.

[Bill Totman @BillTotman]

This is evidence that demands an investigation.

[Dissident Media @DissidentMedia]

The medical examiner who studied Epstein’s corpse noted an enlarged prostate, but Epstein’s own words and medical records in the released files seem to indicate his prostate was removed.

[Bill Totman @BillTotman]

'While both sell you, a "Vendor" is transactional.

A "Partner" sells you solutions for your business problems.'

[Michael Girdley @girdley]

I was a CEO.

A potential new supplier calls on us.

In the meeting, they ask a few surface-level questions:

"We want to understand your business!"

But, they do not ask why we took the meeting.

• What is the business problem we're solving?
• What is essential to us?
• How can we best help?

This supplier pitches us.

Emphasizing features we don't care about.

Without caring what is important to us.

This episode taught me:

Vendors versus Partners.

While both sell you, a "Vendor" is transactional.

A "Partner" sells you solutions for your business problems.

Over time, I learned to use Vendors for the short term.

And stick with Partners for the long term.

[Bill Totman @BillTotman]

@theralkia …ask, "Who is this?"

[Bill Totman @BillTotman]

@tonyhawk I wonder what he's up to lately.

I'm surprised he hasn't come after your handle.

Must be a real chill guy.

[Bill Totman @BillTotman]

@davepl1968 Definitely the best computer pinball ever made.

[Bill Totman @BillTotman]

@PcPhilanthropy Anything that made you wait as long as long as the peripherals shown here did is definitely going to have character... building qualities.

[Bill Totman @BillTotman]

@Adityapandeydev I was surprised how much I liked the nub.

[Bill Totman @BillTotman]

@heyshipz Akira Kuwasawa