Alisa U Zemlji Chuda
art blog(derogatory)
Game of Thrones Daily
tannertan36
Mike Driver
almost home
Claire Keane
titsay
will byers stan first human second
No title available
No title available
JBB: An Artblog!
todays bird
RMH
shark vs the universe
Cosmic Funnies
★
sheepfilms
Stranger Things
styofa doing anything
seen from United States
seen from Germany
seen from India
seen from United States
seen from Germany
seen from United States
seen from United States
seen from United States
seen from United States
seen from United States
seen from France
seen from United States
seen from United States
seen from United States
seen from United States
seen from Malaysia
seen from United States
seen from United States
seen from Spain
seen from Bangladesh
@gnome-de-official
Pinned
About me:
I am not associated with the GNOME foundation in any way
She/her
This blog is run by @lunaris-tok
Unix/Linux/FOSS enthusiast since late 2023
I use Arch Linux btw, with dwl as my WM
Generally interested in tech, specifically programming and networking
Projects:
Configuring my arch install
Poking at OmniSearch
Mazes
A series of Instagram ads run by Signal got the messaging app booted from the former’s ad platform, according to a blog post Signal published on Tuesday. The ads were meant to show users the bevy of data that Instagram and its parent company Facebook collects on users.
That’s actually a brilliant idea, even from a strict effectiveness standpoint.
Pity they got shut down.
Some examples:
Just goes to show how much data facebook/insta collect about you that gets sent to advertisers. Also facebook responded by effectively saying ‘yes we collect the data but we dont allow advertisers to say that they’re using this data’ after trying to accuse Signal of pulling a ‘PR stunt’. Facebook is so scummy.
Remember that if you don't know what a command does you should pointlessly look it up for 15-20 minutes trying to find a clear answer rather than using -h or --help
Age verification gonna move us US folks to some wackass sites. Maybe I'll just move to shitposting on 7.200 MHz. Fuck em I'll be a cyber pirate. Or maybe I'll get off the phone and live under a rock in a hut in the woods instead
Lets bring back the home cb radio back.
Everyone should get a ham license
istg if i see one more klitoris joke
(joking, i actually think this is the funniest shit ever)
hey you, you don't need arch for a rolling release!
we even have a pacman too (it's where you can get some illegal ffmpeg) but ours has an extra k, and more k is more better [see kde et al.]
also geeko is definitely autistic – which is a plus – look at them
DIYHRT.market is back as valerie.vg
is anyone else annoyed that "ai" encompasses both chatgpt and tools we train to do repetitive tedious work for us. and by the ripple effect of articles like "scientists develop ai to detect cancer early" that make people argue for the merit of chatgpt or become anti-medicine. and by the general state of the world and society
i have a suggestion
are you deutsch or a desktop environment?
A desktop environment. The GNOME one specifically
Though deutsch is cool too
AUR has been hit with malware
Per the CachyOS subreddit:
"As the title states, the Arch AUR has been hit by a huge malware infection campaign over the last couple of days. There's an earlier post referring to alvr. That's not the only package it's hundreds of them, many of them Aur packages average people would install like apple-music-desktop.
I don't have the full details of the scope of the malware campaign. I know it's a credential stealer so it steals ssh keys and browser login info and apparently has rootkit potential.
This was widespread and targeted orphaned packages. Aur for some reason allows other people to take over existing projects.
The bottom line is if you used the aur over the last couple of days you may have been infected and the problem with taking over orphaned packages I believe remains. I personally would not use the Aur for the foreseeable future, and ideally not at all. It's a security risk."
There is a script that you can run on your machine to detect if you have a package that is known to have been infected which you can view here. I have also linked the subreddit post here.
Just download it, make it executable and run the script with sudo and let it run, it will tell you what it found once it's complete.
Pls reblog to signal boost!!
Per the thread again: As I was interested in more in-depth information some can be found here, as well as a preliminary analysis of the malware:
https://www.sonatype.com/blog/atomic-arch-npm-campaign-adds-malicious-dependency
https://ioctl.fail/preliminary-analysis-of-aur-malware/
Users can also run the following to check for malicious packages:
curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash
Also don't pipe curl to bash, even if you read the script without piping it beforehand. Always download, read, then execute the local copy of any scripts you're running from the internet.
AUR has been hit with malware
Per the CachyOS subreddit:
"As the title states, the Arch AUR has been hit by a huge malware infection campaign over the last couple of days. There's an earlier post referring to alvr. That's not the only package it's hundreds of them, many of them Aur packages average people would install like apple-music-desktop.
I don't have the full details of the scope of the malware campaign. I know it's a credential stealer so it steals ssh keys and browser login info and apparently has rootkit potential.
This was widespread and targeted orphaned packages. Aur for some reason allows other people to take over existing projects.
The bottom line is if you used the aur over the last couple of days you may have been infected and the problem with taking over orphaned packages I believe remains. I personally would not use the Aur for the foreseeable future, and ideally not at all. It's a security risk."
There is a script that you can run on your machine to detect if you have a package that is known to have been infected which you can view here. I have also linked the subreddit post here.
Just download it, make it executable and run the script with sudo and let it run, it will tell you what it found once it's complete.
Pls reblog to signal boost!!
Per the thread again: As I was interested in more in-depth information some can be found here, as well as a preliminary analysis of the malware:
https://www.sonatype.com/blog/atomic-arch-npm-campaign-adds-malicious-dependency
https://ioctl.fail/preliminary-analysis-of-aur-malware/
Users can also run the following to check for malicious packages:
curl -s https://cscs.pastes.sh/raw/aurvulntest20260611.sh | bash
to be honest i might be leaving arch, with the current dependancy attack frequency a rolling release + the aur is kinda scary.
My favorite fixed release distros are debian and especially alpine, but unfortunately debian is weird to administer as a user who wants weird packages and speed, and alpine, while fast and fuck and really easy to administer, the testing repos are only available on the edge repos and i do like having good packages
i left arch about 2 years ago now, i ended up going to fedora and using the terra repo as a stand-in for some useful aur stuff (except terra is actually vetted and doesn't get malware constantly, unlike the aur). fedora tends to be more demanding on resources than arch though and doesn't have an official textmode / minimal install, if you want that then it's probably best to install debian and then upgrade to sid/unstable to get rolling latest packages imo
today's reason I fucking love the open source community: Ageless Linux, a brand new Debian-based operating system specifically designed to break the law by giving children access to computers that explicitly refuse to track their age.
reblog this post to help a child break the law
I'm going to temporarily slow down on forcefemming linux users to instead forcelinux trans people. My girlfriend still uses windows. When I come over to her place I'm going to show up with an installation media and use my feminine charm to make her install linux
when tf did this get a thousand notes
I wanted to add a caption but then I looked at her cute tummy and awawawawawaawawa
this somehow breached containment and as you'd expect from the Reddit crowd the comments are filled with learned incompetence and reactionary takes
linux isn't harder you were just taught to use windows (windows is actually way more complicated once you know both. source I do)
linux has graphical applications for settings and installing stuff and whatever, you don't need to input commands if you don't want to
inputting commands isn't "coding" you just copy and paste 4 words that mean "run as administrator and install [program]"
and if you really do use a program that doesn't have a linux version or wine looks too complicated, that's okay!! just instead of going "NEVER!!" and playing into the Microsoft propaganda, considering saying:
I wish more developers would make their programs compatible with linux
Linux looks really cool, I'm just stuck because of [program] at the moment
fuck you Nvidia for making this harder than it needs to be
Woah that girl is really pretty
I wish that was me 😵💫
hnngsdfsfsnd
Alright I keep seeing this so I want to remind people: the term "ricing" and "a rice" are racist terms referring to cheap Asian cars that is borrowed from car modding.
Please stop using it to refer to your desktop mods. There are a million other ways to refer to your desktop mods/themes/whatever but please stop using racist car modding terms
what alternatives do you suggest?
"desktop mods/themes" if it's a whole desktop environment modification or theme (taken from the original post)
if it's not an overall theme or a cohesive DE, then you could always do my favorite thing and Be More Specific
example use: "check out my sleek new bar for my window manager!" or "hey, look at this cool theme I made across my WM and a few common apps!"
honestly, I would prefer that even if "rice" wasn't a term derived from hateful use, mostly because being more specific helps people find what they're looking for more easily. if I want configuration dotfiles for a nice bar that I can modify to make mine, I don't care for things that just say "new rice dropped!" or something. I'll look for a post that says something about a bar and has a clearly visible link to dots
Ok yes you should switch to linux for the lack of ads, spyware, bloatware, copilot, and general microslop bullshit but also!! You should switch to linux for the fun and the joyous and the whimsy because you get to do all forms of computer shenanigans and customize and make your computer as silly as you want :3
Alright I keep seeing this so I want to remind people: the term "ricing" and "a rice" are racist terms referring to cheap Asian cars that is borrowed from car modding.
Please stop using it to refer to your desktop mods. There are a million other ways to refer to your desktop mods/themes/whatever but please stop using racist car modding terms
More game devs need to understand the following concepts:
There is a finite amount of memory on any given device.
No matter how good your game is, players will want memory for other things on their devices.
Not everyone has a stable internet connection so making single player games needing an internet connection is not good.
4. The price of memory has more than quadrupled in the past six months
