HNHacker News
TopNewBestAskShowJobs

boutique

40 karma · joined January 24, 2023

submissionscomments
boutique··on Linux removed 11 maintainers from Russia
I think it's pretty careless of GHK not to provide any references to the 'compliance requirements'. It just opens the door for all kinds of speculation and guesswork.

On another note, Huawei has 42 maintainers listed in the upstream MAINTAINERS file, even with all the sanctions from the US. It's a bit puzzling, and I'm not quite sure what to make of it.

boutique··on Telegram founder Pavel Durov arrested at French airport
Self-admittedly he has over 100 children. OTOH, Telegram's DCs are in: the US, the Netherlands and in Singapore [0] and he was just arrested in the EU.

So I don't follow how you've made a connection between Putin and (Putin's?) "(fake?) victim" Durov.

[0] https://docs.pyrogram.org/faq/what-are-the-ip-addresses-of-t...

boutique··on Telegram founder Pavel Durov arrested at French airport
Telegram is also one of the very few places where ordinary Russians can read alt-news and not only Kremlin-approved propaganda. And Russia's stringent internet censorship is only tightening as years go by.
boutique··on ICC judges issue arrest warrants against Shoigu and Gerasimov
“I’m afraid electricity also drives command and control systems. If President Milošević really wants all of his population to have water and electricity all he has to do is accept NATO’s five conditions and we will stop this campaign. But as long as he doesn’t do so we will continue to attack those targets which provide the electricity for his armed forces. If that has civilian consequences, it’s for him to deal with … [so] that water, that electricity is turned back on for the people of Serbia.” -- NATO spokesperson Jamie Shea during NATO aggression against the SRY. (He's also the person who coined the propaganda term "collateral damage" against civilian casualties.)

It can be said that pretty much everything NATO did in 1999. in SRY, Putin is now doing in Ukraine.

boutique··on Deep Dive into XZ Utils Backdoor [video]
Jia Cheong Tan is anagram for CIA Agent John. If you consider how much went into planning the backdoor operation, it seems virtually certain it's an internal joke.

And why an Asian name? It's certainly exploiting a psychological bias. Apart from what you noted, the names are much more generic than Ugandan names and IMO it's virtually impossible to track a legend down. And the number of OSS contributors from East Asia is much larger than from Africa. Hence a more normalized/frequent occurrence. And lastly if things start going south, some play on the r-card is always up the sleeve of PsyOps personnel.

boutique··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Both are suspended for me. Check followers on both accounts, both have a suspended pill right next to their names.
boutique··on Backdoor in upstream xz/liblzma leading to SSH server compromise
No, they're not. They are saying that due to the extraordinary circumstances with this case US agencies cannot be excluded from suspicion. At this time no actor seems to be a more likely perpetrator than the next. (Keep in mind that false-flag operations are a very common occurrence in cyber warfare and this cannot be ruled out yet.)
boutique··on Fedora 38 LLVM vs. Team Fortress 2
Thanks a lot for the guidance/tip, I've learned something new. And you're absolutely right about the cause of the mentioned crash -- I've updated the Github issue with a bit of new info I've gathered.

Regarding the function, here it is: https://github.com/dreamstalker/rehlds/blob/master/rehlds/fi...

Interestingly, strdup gets compiled into:

  89 04 24           mov   [esp+101Ch+name], pszContentPath ; s
  E8 82 DC 00 00     call  strlen
  66 C7 04 03 2F 00  mov   word ptr [pszContentPath+eax], 2Fh ; '/'
Which is basically:

  *(_WORD *)&pPath[strlen(pPath)] = '/';`
and would explain why Valgrind says it goes one byte over.
boutique··on Fedora 38 LLVM vs. Team Fortress 2
Funnily enough, on Half-Life 1 engine-based games (i.e. the engine that came before HL2 - on which Team Fortress 2 runs; such as Counter-Strike 1.6), a different allocator problem exists -- glibc's malloc() just decides to fail miserably[0] on some setups.

[0] https://github.com/ValveSoftware/halflife/issues/3158