stsquad

joined 2 years ago
[–] stsquad@lemmy.ml 5 points 1 year ago (1 children)

Hmm don't know why the image gets clipped. Is today a Mastodon or Lemmy issue?

[–] stsquad@lemmy.ml 36 points 1 year ago (2 children)

Well the account is focused on one particular project which makes sense if you expect to get burned at some point and don't want all your other exploits to be detected. It looks like there was a second sock puppet account involved in the original attack vector support code.

We should certainly audit other projects for similar changes from other psudoanonymous accounts.

[–] stsquad@lemmy.ml 60 points 1 year ago (4 children)

It's looking more like a long game to compromise an upstream.

[–] stsquad@lemmy.ml 34 points 1 year ago* (last edited 1 year ago) (1 children)

Time to audit all their contributions although it looks like they mostly contribute to xz. I guess we'll have to wait for comments from the rest of the team or if the whole org needs to be considered comprimised.

[–] stsquad@lemmy.ml 2 points 1 year ago (1 children)

NI is just another tax that goes into the total pot, albeit one that is not progressive and adds to the cost of employment. I'd be happy with it being scrapped and it all going on income tax, perhaps with a scaled employer contribution component. How about the employer contributes a scaled percentage for all employees over the median income for the company?

[–] stsquad@lemmy.ml 18 points 1 year ago (2 children)

Microsoft has been working with a number of open source projects for some time now. It shouldn't be that surprising anymore.

[–] stsquad@lemmy.ml 2 points 1 year ago (1 children)

European systems have quite a bit of private provision but they are still generally single payer and heavily regulated. Private involvement in healthcare doesn't automatically involve what they created in the USA.

[–] stsquad@lemmy.ml 3 points 1 year ago

I think narrowing it down to one tax type isn't overly helpful. Ultimately it comes down to spending and policy. We underspend and we are more reactive: https://data.oecd.org/healthres/health-spending.htm

Systems that are insurance based (ignoring the mess that is the usa) at least have an incentive to catch things early because they are cheaper to deal with before they become chronic. With delays in primary care and waiting lists we end up getting much less bang for our buck as conditions develop before getting treatment.

[–] stsquad@lemmy.ml 8 points 1 year ago (3 children)

We have a lower tax burden than most of Europe, or at least the ones with decent healthcare. https://data.oecd.org/tax/tax-revenue.htm

[–] stsquad@lemmy.ml 4 points 1 year ago

I have not, but I will now thanks.

[–] stsquad@lemmy.ml 4 points 1 year ago

The declarative approach also allows for better composability - user tweaks can just be the relevant lines on top of the packaged default config.

[–] stsquad@lemmy.ml 3 points 1 year ago (1 children)

You can end up with a lot of boiler plate code and with duplication you run the risk that one unit tweaks the boiler plate in a way that behaves differently. This isn't insurmountable and a lot of rc scripts source a library of common functions shared between units. However from the point of view of the executor each unit is it's own whole ball of shell script code.

view more: ‹ prev next ›