Robert Barat

gaymer. infosec. FOSS.

EN/ES/IT/עברית

@[email protected]
@volt4ire.bsky.social

[Samuel Watling @watling_samuel]

"Blair won 3 general elections so you need to listen to him" yeah well Harold Wilson won four so I guess it's time for a 98% marginal tax rate on unearned income and price controls on milk.

[they/them might be giants ☭ @babadookspinoza]

1977 San Francisco Gay Day Parade

[Peter Raleigh @PetreRaleigh]

Deadspin was the canary in the coal mine for how these kinds of ideologically-motivated "business" decisions would play out at big media companies. You had VC guys issuing a "stick to sports" mandate at a site where politics posts were consistently the strongest performers by far

[David Weigel @daveweigel]

Since 2022, the share of Republicans saying "gay or lesbian relations" are "morally acceptable" has plunged from 56% to 35%.

[evgrieve @evgrieve]

As the mural says, Let’s Go Knicks!” (I added the !) New mural of Jalen Brunson by Zimer on Houston & Eldridge on the Lower East Side. @nyknicks

[Adam Tooze @adam_tooze]

Nvidia really isn’t a second Cisco. More featured on today's Chartbook Top Links in the comment below.

[𝚑𝚎𝚕𝚕𝚜𝚙𝚊𝚝𝚒𝚜𝚜𝚎𝚛𝚒𝚎 @hellspatisserie]

this is a crazy ass detail of Yanis Varoufakis’ biography

[Robert Barat @volt4ire]

@elizalian Go back to San Francisco

[GrapheneOS @GrapheneOS]

June 2026 Android Security Bulletin notes CVE-2025-48595 is being exploited in the wild. It's being widely misreported in tech media as a 0-day vulnerability being exploited. That's a major misunderstanding of Android Security Bulletins and how poorly OEMs keep up with patches.

Google disclosed CVE-2025-48595 to OEMs in a security preview release near the end of September 2025. Those patches are allowed to be shipped right away, so it was included in our 2025092501 release. We noted it was already publicly fixed so it was added to our regular releases too in 2025100300.

We quickly shipped the patch after it was disclosed to OEMs by Google but we plan to do better in the future. SQLite 3.44.5 was released with this backport on 2025-07-24. We weren't previously aware SQLite maintained upstream LTS branches for Android but our plan is to closely follow those now.

In this case, Google slipped up and took 2 months to add the patch to the security preview releases. We plan to avoid that in the future by handling this ourselves because this happens too often. It's also a nice example of how Android Security Bulletins are set extremely low expectations for OEMs.

GrapheneOS quickly ships all security preview patches. Every AOSP patch included in the Android Security Bulletins was already available in GrapheneOS for over a month. We end up shipping patches 2-3 months earlier. Google having such low expectations for OEMs and even themselves is ridiculous.

Android's security patch system doesn't make any sense and is completely at odds with how quickly people can discover and exploit vulnerabilities with the help of LLMs. The security preview release system would be far more reasonable if the embargo for sources and details was no more than 48 hours.

Google's embargo system harms security for nearly all Android users by setting the expectation of patches taking 2 to 6 months for OEMs to ship after disclosure. Patches are available to sophisticated attackers as soon as Google discloses them to OEMs. A partial embargo for months makes no sense.

[Robert Barat @volt4ire]

@oldviennalager It's the novelization of the meetcute between Justin Trudeau's parents

[Robert Barat @volt4ire]

You just won a 2-Nacht, all-expenses-paid vacation. But there’s a catch: you have to stay within one region the whole time. What region are you picking?

[Zohran’s Femme 💖 @harshwoke]

happy pride to queers in the arts and @claireforny

[Robert Barat @volt4ire]

Guy who thinks Pride is both too sex-positive and too corporate

[Joseph Massey @jmasseypoet]

During Pride Month, I’d like to acknowledge all of the ordinary gay people who simply want to be left alone to live their lives, and who refuse to participate in a corporatized kink fest.

[Blake ™ @NeilNevins]

You never saw this shameless behavior from a Mr. Randy Newman, I can tell you that much.

[Robert Barat @volt4ire]

Happy Pride!!

[Editing TheGrayLady @nyt_diff]

Change in Headline

[donaldparkinson🇵🇸 @donaldp1917]

“My dialectic method is not only different from the Hegelian, but is its direct opposite. To Hegel, the life-process of the human brain, i.e. the process of thinking, which, under the name of ‘the Idea’, he even transforms into an independent subject, is the demiurgos of the real world… With me, on the contrary, the ideal is nothing else than the material world reflected by the human mind, and translated into forms of thought.”
https://t.co/l466pZ6sJi

[Hunter📈🌈📊 @StatisticUrban]

It's literally happened before.

[Robert Barat @volt4ire]

I have the best mom

[Robert Barat @volt4ire]

@deanwball @SPolcz https://t.co/Cd5tOfkCoD