Viktor

"Was mich nicht umbringt, macht mich stärker"
Cybersecurity Engineer & Linux know-it-all

[Viktor @viktoracoric]

@Philenose @BrendanEich @LundukeJournal @brave Anyways, I really love Brave Origin idea where free software can be monetized as well. We're at the point where Google's "free" stuff is also starting to become charged for, so paying for actually good stuff is definitely an emerging market.

[Viktor @viktoracoric]

@Philenose @BrendanEich @LundukeJournal @brave So yeah you're right, I derailed a bit, even though it still is partly true. People could freely reverse engineer the software, source code leaks could be freely distributed, etc., etc.

We would definitely have more free software/less proprietary/SaaS if those laws were gone.

[Viktor @viktoracoric]

@Philenose @BrendanEich @LundukeJournal @brave This can only be done by abolishing dumbass copyright laws written in previous millenia

[Viktor @viktoracoric]

@popovicu94 Just wait 50 years for GNU Hurd to be finished, then you'll see 😂

[Viktor @viktoracoric]

@vxunderground Arch project literally everywhere: "guys AUR is unofficial repo where anyone can upload everything, be mindful when you use it, read the PKGBUILDs"

People for some reason: yay most-random-shit-imaginable # haha
y
y
y

[Viktor @viktoracoric]

@RNR_0 @cyb3rops "I ran taylor_swift_-_blank_spaces.exe and now I'm infected hurr durr"

[Viktor @viktoracoric]

@cyb3rops For the argument "you check PKGBUILDs, many people don't" -- they should!

Arch project says everywhere that AUR is not official repo and that you should be mindful of what you're installing!

Basically the same thing as curl | sh.

[Viktor @viktoracoric]

@cyb3rops I don't know if obfuscation works better here.

If I saw npm install totally-not-malicious-package inside PKGBUILD, I would perhaps think it's a new dependency or whatever.

If I saw obfuscated code, I'd be like "this shit is 100% malicious" the same second.

[Viktor @viktoracoric]

Holy moly, time flies!

[Viktor @viktoracoric]

@anton_chuvakin Which is funny because I also get annoyed at people shitting on Arch Linux because of its rolling release update model, as if it's less secure.

Meanwhile, whenever some common package vulnerability drops, Arch systems are rarely affected, because it's already fixed.

[Viktor @viktoracoric]

@anton_chuvakin "Update software regularly" people. Not because it's bad advice, quite the opposite in most cases, but because it has become too cliche to the point where people think software not updated for a year is vulnerable.

[Viktor @viktoracoric]

@frankrietta @anton_chuvakin "Log everything" depends on the phase of logging everything. People log everything too early, and then detections are not good, and post-incident stuff is a mess too. You have to know what you ingest!

[Viktor @viktoracoric]

@techspence Most of cybersecurity industry is a sham and most "professionals" and influencers alike don't know what they're talking about, they just do so very confidently.

[Tal Be'ery @TalBeerySec]

1/ WhatsApp View Once is broken again, but this time @WhatsApp won't fix!
🧵👇

[Viktor @viktoracoric]

@markessien @dhh Bro gave the UK as high IQ example 💀

[jss @jsensarma]

1. Subsidize code generation 90% so everyone forgets how to read/write code manually.

2. Now charge 10x - to ensure the generated code - that you largely can't understand - actually works.

Donut and Dietician shop working out of same office.

[nullptr 🐱🍩 @notnullptr]

the leaked minecraft console source code builds and runs! use visual studio 2012 in debug mode using the Windows64 config. also, you might need to remove references to the xbox sdks in the csproj files.

[Ozymandias𓆏 @0zmnds]

Hermann Hendrich

[FFmpeg @FFmpeg]

OG FFmpeg developer @astrange_e on C++ developers