Alexandre Oliva

Main interests: Free Software, Neurodivergence, Veganism, Marxism, Politics, Social Justice, Environment; Affiliations: GNU, FSFLA, 0G, Linux-libre, GCC, glibc, Libre-SOC, AdaCore; Languages: Português; English; Español; learning Esperanto, French, Ukrainian, Japanese;
formerly @lxo@gnusocial.jp @lxo@gnusocial.net @lxoliva@diasporabr.com.br
@lxoliva@identi.ca

Public Key

npub1gyndqzp9ut22vmy6qln2j58uful0kn9lzpw86u6sng6dr3400gvq5sczug

NIP-05 Address

lxo@snac-lx-oliva-nom-br.mostr.pub

Profile Code

nprofile1qqsyzfkspqj7949xdjdq0e4f2r7y70hmfjl3qhrawdgf5dx3c6hh5xqpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qw6hgwj

Publishing to

relay.mostr.pub

Author Public Key

npub1gyndqzp9ut22vmy6qln2j58uful0kn9lzpw86u6sng6dr3400gvq5sczug

Show more details

Last Notes

2025-04-26 03:59:49

60 anos de globo foram demais pra ele resistir
tadinho do papa francisco

2025-04-05 21:06:50

- reply

não duvido do resultado da pesquisa na atual conjuntura, em que lula está no poder e bolsonaro está réu. a divisão da população em 3 grupos de tamanhos praticamente iguais me parece nada surpreendente.
mas a interpretação de maringoni (a quem admiro) é torta, pobre e decepcionante, se for só isso.
não dá pra tirar isso desses números, é uma leitura que me remete às "explicações" de flutuações do câmbio, pouco distinguíveis de horóscopos.

2025-04-05 20:45:36

- reply

that doesn't sound like him at all

2025-04-05 12:25:09

- reply

essa "citação" vem de onde? parece-me a típica visão distorcida e preconceituosa de quem quer criticar e se dispõe a torturar os números até eles dizerem o que quer. por exemplo, "bolsonarista" a um lado e "lulista/petista" do outro já começa juntando todo simpatizante do PT como se fosse um seguidor cego (ceguidor) do lula. muito suspeito...

2025-04-03 12:24:17

- reply

bacana, hein? de quando é isso?
obrigado por compartilhar!
melhor seria se o ativista de software livre não propagasse informações falsas que depõe contra o movimento que se pretende promover, ainda mais alguém com compreensão das manipulações e dos interesses capitalistas por trás dessas distorções... mas me pareceram enganos honestos. espero que ele tenha abertura (e liberdade 😉 para absorver alguns contraditórios, porque achei um email e mandei um contato. já tinha visto coisa dele antes e até tentado entrar em contato, mas a tentativa anterior foi infrutífera

2025-04-02 21:53:51

- reply

thanks for the heads up.
are there any issues with red flags, yellow lights, or black outs yet?

2025-04-02 20:05:37

- reply

wow, they look awesome!
I can tell what these are supposed to look like, but I can't tell what they actually are 😞 help?

2025-04-02 19:02:35

- reply

Friends' Phoebe Buffay's half-brother Frank, Jr loves to watch things burn and melt
no doubt his favorite car brand is Tesla

2025-04-02 18:33:20

- reply

sabe um pensamento que me deixou bem preocupado sobre essa novela?
a primeira foi ao ar em 1988, incitou ódio contra a corrupção, aí emplacaram o caçador de marajás das alagoas pra presidente, com direito a edição distorcida do debate pra não deixar o lula ganhar
já voltaram a usar a incitação contra suposta corrupção pra tirar concorrentes do páreo novamente depois, como LaFajuta, mas não descarto a possibilidade de que, com esse remake, estejam preparando o terreno para nova cilada

2025-04-02 04:50:16

- reply

if your $TERM starts with xterm or rxvt, the following may do the job:
PS1="\[\e]0;TAB NAME GOES HERE\a\]$PS1"

2025-04-02 03:55:51

- reply

grande, eu? 🙂 imagina!
outro dia descobri que minhas "inicias" lx são de Lê Xandão ;-D
fiquei grandão até nas iniciais 🙂

2025-04-02 03:12:23

I hear Xitter's LLM labeled Musk a top misinformation spreader
hopefully people will see through this maneuver to lend undeserved credibility to a bullshit generator
that it got it right this time doesn't make it reliable, trustworthy or believable
it's just an LLM, a stochastic parrot, an Autocompleter, Iterated
it has no notion of truth, of honesty, of science, only of how often words have appeared together

2025-04-02 00:56:14

Has your Amazon Echo, whose feature of not sending your voice for processing at the mothership has been revoked by the mothership, already stated your Miranda Rights?
"You have a right to remain silent. Anything you say can be used against you."

2025-03-30 21:26:24

(-: acabo de ser seguido (aqui no fediverso) por uma dupla de artistas famosa. acho que é dupla sertaneja essa Olivia & Rodrigo, é? 🙂

2025-03-30 21:22:10

- reply

so the invitation is currently sent by email by the platform, but I suppose that's immaterial: it could be sent by any party, and it didn't have to be an email, it could (also) be a post to the chat group. I don't think it has a feature to post a reminder for a recurring meeting, though; maybe that's what you were looking for?
another point I don't get is whether you want the platform to reject participants outside of the scheduled meeting time. ISTM that ensuring the platform is there at the desired time is what it takes, and if it is available at other times, I don't see how that would hurt. but I'm not the one setting the requirements, I'm just trying to understand them to see whether GNU Jami would fit the bill for you. but really the only way to tell for sure would be by your giving it a try.
the one concern I would raise is that I don't know how big the meetings are. I haven't been to big meetings on Jami, and though it has worked superbly for 1:1 meetings even with my very old and slow and low-bandwidth computer (where no other chat system did), meeting 3 or 4 people at once was more than it (the computer) could endure. even more powerful computers may face trouble with very large meetings on Jami, though, because IIUC the party that initiates the group call becomes the one who receives the audio (and video) feeds from everyone else, and passes it on to everyone else.
so very large groups in GNU Jami could be as problematic as a very underpowered Jitsi server

2025-03-30 21:12:39

- reply

GNU Jami offers some hope for that sort of features, that could presumably be added initially with its plugin architecture
that it uses per-conversation git repos with per-message commits underneath seems to make classification as simple as tagging the commits under some convention. that sort of thing would definitely be welcome to me. it's too easy to get things lost there.
CC: @nprofile…jytp

2025-03-30 17:48:26

- reply

I don't think I've come across this concept before. what are these "inbox rules" you speak of?
Jami, being Free Software, could probably have that and any other features that are desirable added. they don't even have to make sense for the business model of the original developers, and we're already at an advantage because Jami is not built with a goal of surveillance, control and exploitation
CC: @nprofile…jytp

2025-03-30 17:44:42

- reply

I'm not sure what "scheduling a call" means. is it supposed to ring everyone at the scheduled time, or just to accept callers at about the scheduled time? the latter works (at any time), within a group or with a rendez-vous account (that answers automatically)

2025-03-30 16:41:05

- reply

I'm told most people hardly ever look at their email these days. indeed, a lot of people don't even have one.
and they're not wrong. why use email that they need to go visit a web page to see, when a communicator like Jami brings messages, files and calls right into their devices?
CC: @nprofile…6qzx

2025-03-30 15:52:15

- reply

gotta compare apples to apples, though
surely you've received the URL through some kind of communicator that had to be installed, and the contact set up
Jami is that kind of communicator. once you have it installed, and contacts set up, leveling the playing field, getting into a conversation, or starting one, is actually easier than visiting a URL
CC: @nprofile…6qzx

2025-03-30 14:56:03

- reply

which part of this process seems nonstraightforward or even unfamiliar to you?
* installing the program, from https://jami.net or appstores or whatever
* creating an identifier when prompted
* establishing contact with other parties
* creating groups
* inviting contacts to groups
* starting a group call

2025-03-30 04:56:06

- reply

why consider relying on someone else's server that relies on yet another someone else's service, when you could go straight to GNU Jami and communicate with the parties you wish to communicate with, without intermediaries or servers?

2025-03-30 02:41:11

- reply

https://fed.brid.gy/docs talvez?

2025-03-29 14:33:37

- reply

free browsers are an anachronism, alas
the WWWorst App Store has become so toxic that browsers have turned into tools for drug delivery (on many levels)
gemini (the right one) offers some hope for information sharing the good way. remote execution is not part of its picture, which makes it highly superior IMHO.
CC: @nprofile…ysdp

2025-03-29 14:30:01

- reply

there's no way. governments and banks should offer secure APIs and perhaps free programs to interact with them. not TRApps, CRApps or WRApps with security theater built in.
CC: @nprofile…ysdp

2025-03-29 14:16:14

- reply

it does in that you can install it and run it out of your own server
CC: @nprofile…ysdp

2025-03-29 13:59:59

- reply

it's like free software running on the site server, in that it's under the site operator's control.
even though the javascript is free and runs on your computer, it's under the site operator's control, so it's not free for you in that setting.
CC: @nprofile…ysdp

2025-03-29 11:30:50

- reply

maybe go back to your reference book and see how the traveling salesman problem that is NP-complete is defined.
while at that, look at the definition of NP-complete: problems that (apparently) cannot be solved in polynomial time, but whose solutions can be verified in polynomial time
CC: @nprofile…rl74

2025-03-29 11:14:35

- reply

there are plenty of problems that are very expensive to solve and very easy to verify. all NP-complete problems are like that. all of these can serve as proof-of-useful-work, there's no need to demand proof-of-waste. plus, verification can also be made into proof-of-useful-work, if you're smart enough.
now, the token-granters need not really be concerned with any of that: it could be up to the customers paying for computing to be performed by other parties to figure out how to break up their problems into smaller verifiable pieces.
even if they're hard to break up, the architecture could have room for longer tasks that grant more tokens, that dedicated compute machines (as opposed to browser-based PoWs) could engage in.
I don't know enough about proteinfolding@nprofile…rl74 to tell how verifiable the results are, but I know SETI@nprofile…rl74 had verification built into the architecture. those are inspiring examples of very distributed computing architectures, not necessarily systems that could be trivially integrated into such a hostile environment as proof-of-useful-work systems.

2025-03-29 01:40:19

- reply

tipo remake do filme Yesterday em que quase ninguém mais lembra do Flamengo, né?
como quem não lembra sentiria esse desgosto, eu me pergunto...

2025-03-29 01:28:06

- reply

firm nod! our neural pathways cross again 🙂 kudos, you've got a greatly illustrative example there!
https://blog.lx.oliva.nom.br/2023-08-20-stochastic-parrots-vs-intelligence.en.html

2025-03-29 00:42:07

new blog post: against proof of waste
https://blog.lx.oliva.nom.br/2025-03-28-against-proof-of-waste.en.html
As web servers get overwhelmed by LLM bots, some operators are resorting to programs that demand visiting web clients to perform some relatively expensive computation to be granted access to the website. This is called Proof of Work, but when that computation doesn't yield any useful results, it might as well be called Proof of Waste. Why not get clients to compute something useful and valuable, so that LLM scrapers become an essentially infinite supply of computing power, and our servers pay for themselves and for the creative works we put in them?

2025-03-27 09:03:42

será que alguém já fez uma paródia de Januária, do Chico Buarque, que em vez de "Januária na janela" diz "Januária for Windows"?
eu lembro que Bê & Thoven brincavam que um deles teve uma namorada que não saía da janela, mas ela se chamava Edite. o refrão "Intel mais tarde, a[r?]qui voWindows" eu ainda lembro, mesmo depois de umas 3 décadas.
também lembro que uma vez ele ficou mais de uma semana sem falar com a Edite. pra não interromper.
saudades desses musicômicos, era uma dupla e tanto, mas muito pouco ficou: ainda se encontram umas entrevistas do Jô Soares, tenho um CD com algumas músicas divertidas deles, mas lembro de muitas mais que vi em shows dos quais não parecem existir registros. o que não sei é se eu ainda acharia tão divertido hoje como achei na época.

2025-03-27 00:56:57

- reply

tá reclamando que o time do bozó perdeu de goleada ontem, é? :-P

2025-03-27 00:36:28

- reply

don't forget:
💩 No enshittification
https://www.fsfla.org/~lxoliva/#Unshittify

2025-03-26 22:15:55

- reply

sites que exigem execução de código arbitrário no computador do visitante são barreiras de acessibilidade para seres humanos livres. por favor não faça isso conosco!
CC: @nprofile…0y65

2025-03-26 01:37:39

o que significa quando o leitor de tela diz, na plataforma de relacionamentos, que "deu, mete"?

2025-03-26 01:16:53

nota mental: não confundir bahamas com barra mansa

2025-03-25 18:45:31

- reply

who's this mythical person who wants phone number integration though?
I don't know of any person who as much as cares about that, it's just a requirement imposed by the (snooping) platform providers as far as I'm concerned, and one that excludes (as in phase out) other computing platforms to force the cattle towards the slaughterhouse
the challenge of interoperation that we're up against walled gardens full of prisoners, not that we don't use phone numbers that enable user tracking
apps that work on phones, but not exclusively on phones, are certainly part of the solution. but they need no integration whatsoever with phone numbers. phones are mobile computers with tracking devices on them. we need to focus on the mobile computers part, and reject the user-tracking aspects with as much strength as possible
CC: @nprofile…v035

2025-03-25 18:07:29

- reply

melhor evitar antropomorfizar as frentes quentes.
é que elas são muito esquentadinhas

2025-03-25 17:13:37

- reply

message gets delivered when sender and receiver can contact each other. that's the only way to go without involving intermediaries.
(in groups, any peer that receives a message can pass it on to others later)
the need for others to share the same platform is somewhat artificial: we'd be better off with protocols that multiple different programs and platforms could use to exchange messages. but the centralizing 'app' mentality pushes us the wrong way. Email, XMPP and the Fediverse, for some examples, have different servers and different clients, and they all interoperate to some degree. now, maybe you consider the protocol as the platform.
anyhow, GNU Jami would likely benefit from different applications, including TUI and CLI. GUIs are often inconvenient and constraining.
we don't need server, so we can't need server integration.
phone book? what phone?!? who needs anachronic phone numbers when we can have mnemonic nicknames (backed by crypto-strong hashes) that are not traceable to a tracking device?
CC: @nprofile…v035

2025-03-25 16:38:44

- reply

you seem confused
using the software to do your computing, and controlling others through the software they use, are two entirely unrelated issues. the former is about freedom (= control over your own life), the latter is about power (= control over others' lives). people usually get very confused when they conflate these two distinct concepts.
CC: @nprofile…vqps @nprofile…dxfh

2025-03-25 16:35:58

- reply

correct, they never managed to take the step from socialism to communism
CC: @nprofile…9h3l @nprofile…dxfh @nprofile…ja0h

2025-03-25 01:14:16

- reply

why even get any server in the loop, when messages can be delivered directly between interested parties, as with GNU Jami?
CC: @nprofile…v035

2025-03-24 23:19:16

- reply

gracias, no lo conocía

2025-03-17 14:37:01

ô fred, eu tava aqui vendo o programa (*) com você e o skarnio, e me bateu essa ideia:
você já pensou em criar sua própria mídia social?
podia chamar fred's
ia causar uma certa confusão boa 😉
(*) tá muito interessante essa série, parabéns!
to: @nprofile…m48n
cc: @nprofile…ema8

2025-03-16 18:38:26

- reply

I meant the concern-awareness poster

2025-03-16 01:51:40

- reply

Yay, I'm relieved that you seem to have just blessed the extension I'd identified and proposed to your concepts of enshittification, twiddling, and darth vader's deal-changing, that you'd originally applied to (dis-)service platforms, to (other kinds of) software and devices as well.

2025-03-15 22:13:34

my other car is not a tesla either 🙂

2025-03-15 21:56:39

- reply

someone at IBM had warned (threatened?) me about corporate efforts to replace all things GNU and copyleft years ago. they wouldn't say more, but it soon became apparent that they were talking about Rust 😞
we have long had GNAT with strong copyleft, great memory safety and lighterweight compilation, which kind of renders the illusionism behind the push for Rust no better than a rich men's hat trick. but there it is, and people are falling for it.

2025-03-15 21:48:55

- reply

as youtube gears up the adoption of digital handcuffs (DRM), following the steps of streaming platforms, we'll soon need a variant of that for video as well.

2025-03-15 20:25:32

- reply

thank you professor!
now that you mention it, I can see that the "blotch of light" from behind earth's lower right quadrant, that I had mistaken for a distortion, does indeed draw a perfect arc that is indeed apparently smaller than the earth, in the proportion I would have expected. the refraction around the earth's atmosphere had indeed confused me, to the point of misidentifying the arc of the sun as that.
now, with the concern that it might be a fake entirely relieved (thanks @nprofile…mm4d too for the reassurance) I can go back to the awe and the appreciation of the beauty of the moment captured in the picture. wow!
CC: @nprofile…pu6p

2025-03-15 20:13:44

- reply

isso só explica o sol e a lua terem o mesmo tamanho aparente, vistos da terra. não há novidade aí, embora já seja uma baita coincidência.
a coincidência composta com essa que me pegou de surpresa na foto foi que também o sol e a terra tinham o mesmo tamanho aparente, vistos da lua, pelo menos no momento do eclipse desta semana. parece-me que não era pra ser assim: penso que a terra deveria parecer maior

2025-03-15 10:45:47

- reply

there's something very puzzling about this picture, that seems to call for some fact checking
I mean, it's a great coincidence to begin with that the moon and the sun have the same apparent sizes when seen from the earth in solar eclipses
but the earth is significantly bigger than the moon, and the moon is as far away from the earth as the earth is from the moon, so the apparent size of the earth as seen from the moon should be bigger than that of the moon as seen from the earth
but the earth seems slightly smaller than the sun in the picture, and it's not like the moon is closer to the sun than the earth is to justify this discrepancy by seeing an apparently bigger sun
ISTM that it's too much of a coincidence that the apparent size of the earth would be as close to that of the sun as seen from the moon, on top of the coincidence that the apparent sizes of the moon and of the sun are about the same when seen from the earth.
it's not absolutely impossible, but the moon orbit would have to be just weird enough to make for this coincidence just at the time of the eclipse that I'm having trouble believing that.
can anyone offer evidence that the compounded coincidence is indeed plausible, and that the picture isn't a fake? I could more easily believe it's a picture of an earlier solar eclipse seen from the earth, or some AIrstistic rendering of a solar eclipse as seen from the moon misgeneralized from pictures of solar eclipses taken from the earth
cc: @nprofile…a0uk @nprofile…r362 @nprofile…ug6u

2025-03-15 01:19:23

enquanto colonizados comemoram o dia do pi imperialista,
celebramos o dia em que marx transcendeu a matéria e passou em definitivo para a história

2025-03-15 01:04:03

- reply

how about 13 with a 10% tip? it's exact, not an approximation, but... 13 is a very interesting number, isn't it?

2025-03-15 00:29:41

- reply

o k do kgx é invejinha do kde, nénão? :-P

2025-03-15 00:24:19

- reply

dificil mesmo é cortar o arroz
os grãos são tão pequenininhos!

2025-03-14 10:41:10

- reply

como não pensei nisso antes?!? 🙂

2025-03-14 07:46:36

- reply

dude, you misspelled eggscuseflation throughout the thread! 🙂

2025-03-13 21:14:19

- reply

👍

2025-03-13 06:30:05

- reply

catfish or meowrmaid?

2025-03-12 21:09:27

- reply

it's security in the same sense as in job security, and it's for apple, not for you

2025-03-12 21:09:08

- reply

it's security in the same sense as in job security, and it's for apple, not for you

2025-03-11 14:41:49

- reply

aí fui finalmente ler a matéria, e vi que nem tem a interface gráfica, é só linha de comando mesmo, coisa que já dava pra fazer antes. quanto mais eu olho, mas confuso eu fico... parece até anúncio de coisa requentada, mas pelo alarde que estão fazendo agora, pode ser só "novidade" de reinvenção de roda mesmo...
CC: @nprofile…6vu3

2025-03-11 14:37:57

- reply

ah, sim, GNU e Android são dois sistemas muito diferentes, mesmo usando o mesmo Linux como kernel.
mas eu sei que dá pra rodar programas estáticos do GNU/Linux no Android (e no Replicant), porque já fiz isso.
também já soube há muito tempo que dava pra instalar ambientes GNU/Linux, inclusive Debian, em cima do Android, direto de loja de aplicativos. ficava tipo um Cygwin instalado em cima de MS-Windows.
então se estou entendendo direito, fico achando que a novidade é que agora tem GNU/Linux virtualizado no Android, que possibilita usar até a interface gráfica. será isso, tipo um W[G]LS pra Android?
aí fica pra mim a pergunta: se tanta gente quer tanto usar GNU/Linux nos seus dispositivos (Ê! 🙂, por que raios os gigantes ficam empurrando pros usuários outros sistemas maléficos por baixo do GNU/Linux?

2025-03-11 03:52:19

- reply

tem algo torto aí nessa manchete, não tem?
Android tem suporte a Linux desde que foi lançado.
Android é um sistema operacional construído sobre o núcleo Linux desde o princípio.

2025-03-11 03:18:04

- reply

the flip side of what you're saying is that, when no public API is offered, the intent is indeed to control the client. QED
CC: @nprofile…kkpr @nprofile…4hhn

2025-03-11 01:19:46

- reply

há uns 30 anos, o colega de república saiu de férias e deixou o cheque pra pagar a parte dele do aluguel no local combinado. só fiquei eu na casa. uns dias depois, chegou o dia de pagar o aluguel e eu não conseguia achar o cheque de novo. achei-o amassado no cestinho de lixo da cozinha. não era esse o local combinado. sorte que eu só comia no bandejão, não tinha cozinhado nada em casa, o cestinho só tinha o cheque mesmo. até hoje não sei nem como nem quando foi que eu fiz essa bobagem.

2025-03-10 02:56:48

- reply

tempos temíveis em que interfaces de programação são consideradas backdoors
malignos hackers podem dar instruções para que o computador que compraram faça o que desejam que faça! que horror!
amigo meu escreveu sobre isso em 1987, mas como ficção distópica, não como manual de instruções 😞
https://www.gnu.org/philosophy/right-to-read.html

2025-03-09 22:00:46

- reply

wow, this website is fantastic! thank you very much for sharing!

2025-03-07 05:38:12

- reply

shifting your computing costs onto your users may "scale", but it's abusive without consent. "you must do what I command or else" is not consent.
CC: @nprofile…vqps @nprofile…kkpr @nprofile…4hhn

2025-03-07 05:33:58

- reply

the only thing that captchas do to users is deny them the opportunity to automate interactions on their end. it's creates an asymmetry in which the server is automated but the client can't be. it's ideal for exploitation. it's terrible for user autonomy.
now, there are legitimate reasons to avoid abusive uses of services. with the rise of software that can replicate human's responses to web sites' demands for humans to behave like computers, you're just wasting resources in a fool's errand, and annoying your actual users. way to go! (not)
CC: @nprofile…vqps @nprofile…kkpr

2025-03-07 05:24:01

- reply

the battle against scraping is pyrrhic
whenever you place an expensive web page in front of a cheap resource meant to be public, you're not making yourself any favors, unless you enjoy shooting yourself in the feet. it's like blowing up an expensive piece of equipment to protect a fuse
captchas don't require javascript. only some current implementations do, and they do so not because it's needed, but because they wish to normalize and impose poor security and freedom practices
CC: @nprofile…vqps @nprofile…kkpr

2025-03-07 02:55:04

- reply

you're absolutely correct that, unless the website is yours, you won't be in control. that's the point of the discussion, and of the free software movement: when a program is doing your computing, you should be in control.
of the web apps that you mentioned in another post, some do communication/collective computing, but those that do your computing shouldn't be web apps at all. that they are a tool of oppression and control.
now, this conversation started about a website whose goal is (presumed to be) making security information available to others. it's about publishing, not anyone reader's computing. but the computing that the server wishes to impose on users is not the users' computing either; users should be allowed to reject that abuse of their computing resources. but if that implies that the site won't make the information available to users who make that choice, the site is failing its purpose of making the information available.
now, if the site is a tool of control, sure, it will impose unnecessary and undesirable computing on users and demand them to disable their web firewalls and make themselves vulnerable in order to get access to the security information. see the problem there?
note I'm not saying the site must not offer interactive possibilities using JavaScript. what I'm saying is that the site should degrade gracefully and offer the information, that's what users are after, even if they won't lower their shields. it's not that hard, unless developers are determined to make it impossible. and if they do, we must wonder why they do.
CC: @nprofile…kkpr

2025-03-06 23:04:34

- reply

https://blog.lx.oliva.nom.br/2025-03-06-not-so-neofeudalism expands these thoughts a little further
CC: @nprofile…9rgm

2025-03-06 18:31:42

- reply

with inspiration from you and from varoufakis, I'm coming to the conclusion that so-called capitalists aren't really capitalists, they're feudal lords in disguise, imposing capitalism on others while enjoying their lordship. it checks out: they aim for rent extraction rather than selling products in a competitive market; they make vassals out of customers and users; they don't even sell stuff: they rent it, or they just pretend to sell it while still owning it, allowing them to use stuff as the lords see fit while charging vassals for the privilege, and enforcing their loyalty. we don't seem to have had actual capitalism for over a century: during the imperial expansions and wars of the early 1900's, neofeudal lords had taken over from capitalists already, and we've been going downhill since then. but feudal lords learned from capitalism in the process of swallowing it: the practice of reinvestment for exponential growth seems to have been adopted very successfully by them.

2025-03-06 18:06:16

(-: quando eu crescer, vou formar uma banda cover de the mama's & the papa's
já pensou cantar california dreamin' até não poder mais?
a banda vai se chamar de mamões & de papayas 🙂

2025-03-05 18:09:03

- reply

now, your deeper incorrect assumption is that I'd need to debate this with informed professionals. people who are aware of the security implications of running arbitrary third-party code in vulnerable sandboxes do scratch their heads trying to mitigate this poor behavior when it affects them. but most of the time, it's somebody else's problem, none of their concern, lusers be damned.
CC: @nprofile…4hhn @nprofile…vqps @nprofile…kkpr

2025-03-05 18:05:19

- reply

WTH are you even talking about? what are you making about me? turn this around and see how much opposition you are (not) seeing to the nonsense you're pushing that untrusted JavaScript (download from third parties) can be executed safely, but iFrames (that carry JavaScript also from third parties, for that matter) can. does it follow that, because you're not seeing opposition, it's because (as you put it so fake-politely) nobody else was willing to waste time as I was to share informed opinions and discuss honestly with you, or to believe your ability to think rationally? I see your point, I regret wasting my time with you already. hopefully what I wrote in this thread may have a positive effect on others.
CC: @nprofile…4hhn @nprofile…vqps @nprofile…kkpr

2025-03-05 17:56:55

- reply

true. I just think that, if you were seeing it, you'd know what I was alluding to.

2025-03-05 17:47:04

- reply

your mask of fake politeness is transparent to me, but your aggression and insults are very visible to me. but don't worry, I'm not returning in kind.
running code under control of a third party is always a bad move, because it makes you a subject to the third party who controls the code. there's increasing pressure to force users to submit to that control. I, as someone who realizes the harm in this practice, am part of the resistance.
CC: @nprofile…kkpr

2025-03-05 00:16:47

- reply

how nice of you to completely disregard the threat models that others are under. not!
not everyone is an exploited consucker; some people take security seriously. that 98% of the websites expose their exploited consuckers to risks they don't understand on purpose is just something to be expected in the enshittocene. that some participants in their exploitation will minimize the risks is to be expected; likewise, some losers will believe them. I don't care which of these you are, but what you're saying, along the lines of "relax and allow the masters to rule over us all" doesn't appeal to me.
try asking those web site operators whether they'd allow you to upload code to run on their servers, within a VM sandbox even, and see the kind of response you'd get. if you run into someone aware of actual security, they'll teach you about layers of defense and security in depth. relying on a single sandbox barrier for your security against hostile agents would be extremely very naïve. typical consuckers may get away with that (they're already fully compromised anyway), but those who actually wish to keep control over their devices and their computing can't afford to take that kind of risk. it would amount to giving up security and freedom.
CC: @nprofile…kkpr

2025-03-04 19:16:23

- reply

heh, I guess this means my assessment that everyone is seeing it is wrong, for at least one person isn't
CC: @nprofile…vqps @nprofile…n83x @nprofile…kkpr

2025-03-04 04:41:46

new blog post: near death experience
https://blog.lx.oliva.nom.br/2025-03-04-near-death-experience.en.html

2025-03-04 04:34:20

- reply

the oversight has already failed, evidently, to have allowed such a contradictory web site to use their name. everyone is seeing how easy it is to turn a whole country with a quarter-millennium tradition of laic democracy into a self-destructing theocracy. your attitude of blind trust on the good intentions and harmlessness of common malpractice is anachronistic and unfit. your attempts to ridicule concerns that prove right time and again are an irresponsible embarrassment to serious security professionals, and to anyone paying attention to world politics without hiding the head in the sand.
as for living in irrational fear... should I remind you that it was you who brought into my timeline a report of a security problem related with allowing third parties to run arbitrary code on our computers? are you suggesting that nobody should take those reports seriously?
or are you one of those believers that the leopards will never bite your face?
CC: @nprofile…vqps @nprofile…kkpr

2025-03-03 20:50:03

- reply

even if it were still safe now, it is one take-over away from becoming nonsafe, and all the wrong things it's teaching now will become vulnerabilities that the future hostile owner will be able to exploit. it's negligent security malpractice.
CC: @nprofile…vqps @nprofile…kkpr

2025-03-03 15:00:13

- reply

thank you, I suppose. nothing much useful on this page, alas. maybe others would have more interesting materials.
likewise, even if we take for granted your statement that the code currently served by this web site is indeed safe to use (and that's a big if), that doesn't reassure me or anyone else that this will still be the case tomorrow. it's basically playing digital russian roulette. it's been normalized, but that doesn't make it good, it's just a giant pile of poo that has been "democratized", and is force-fed equally into everyone.

2025-03-03 14:55:24

- reply

so you run trojans from two malicious web sites to "prove" that another web site is not malicious. that's as reasonable as asking both coca-cola and pepsi whether their softdrinks are healthy to drink. they don't seem to be affecting only browsers, but also users' brains 😞
that it makes the site completely inaccessible to, per your own numbers, 2.31% of browsers, where web standards recommend graceful degradation instead of big bold red letters stating "don't feel welcome" to those with specific accessibility needs that both major brands of browsers can't tend to, is a big "screw you" to me and others
that it renders computers unusable to access this very site, computers whose manufacturers have abandoned, by refusing to patch known security vulnerabilities that can be exercised with remotely-supplied javascript and refusing to allow owners to patch them by themselves, computers that would still be perfectly usable to visit web sites that actually took the trouble to abide by web standards instead of jumping on the "you must enable javascript" "screw you" mindless bandwagon, adds insult to injury, and more litter to the pile
that a web site that ought to be as security conscious as it goes, and reports vulnerabilities even on browsers, that enable web sites to induce remote execution of arbitrary code on visitors' computers, demands visitors to open up their computers to such risks is not only contradictory to its mission, it's a "screw you" to security education as well.
CC: @nprofile…vqps

2025-03-03 08:04:04

- reply

for clarity, IANA FSF spokesperson either; this has been strictly my personal opinion, uninformed by the FSF
CC: @nprofile…99je

2025-03-03 07:59:26

- reply

this malpractice, of using a well-known license with restrictions that cancel out permissions it spells out, could be referred to as "ignore all previous permissions" licensing.
like, a program that states it's licensed under e.g. the GNU GPLv3, but also says: "except that the provisions of the GNU GPLv3 don't really apply; and instead of them you don't get the permissions that it grants, and you get other permissions under alternate restrictions", is not licensed under the GNU GPLv3. it's a different license that's borrowing community goodwill from the GNU GPLv3 without any of the compatibility benefits.
CC: @nprofile…99je

2025-03-03 07:51:01

- reply

wow, what a mess the register has made
the report conflates two entirely distinct situations:
- the license's requirements that distributors don't add further restrictions when distributing the work or derivative versions
- the previously-implicit understanding that, when copyright holders misleadingly publish their own original works under "the license + additional restrictions", recipients are being given permission to distribute the work under "the license" (without additional restrictions).
IANAL, but backpedaling from the granted permission looks like fraud to me: if they don't want to allow distribution under "the license", they should have distributed their program under another license that suits their needs and doesn't grant the permission that's spelled out there but they didn't want, instead of confusing users (and courts? 🙂 with licensing practices that pretend to use a well-known name but sets forth incompatible provisions

2025-03-03 06:01:20

novo pôste no blog: unidade nacional
https://blog.lx.oliva.nom.br/2025-03-03-unidade-nacional.pt.html

2025-03-03 06:00:37

new blog post: dehumanizing
https://blog.lx.oliva.nom.br/2025-03-03-dehumanizing.en.html

2025-03-03 02:25:17

- reply

ironically, the cve website itself also attempts to install and run commands on your computer, and if you don't allow it, it will refuse to let you know about the vulnerability

2025-03-03 00:47:07

- reply

do you already pronounce "target" the proper french way? 🙂
the french way of pronouncing it always reminds me of "tarjeta", because of some portuguese leakage into my spanish. and then, I find myself wondering if one can pay cash there...

2025-03-02 22:45:30

- reply

that's the perfect hardware complement to free software!

2025-03-02 07:20:50

- reply

rust prevention spray? I hear some developers of the kernel Linux might be interested! :-P

2025-03-02 01:45:42

- reply

muito efeito do ataque especulativo que fez o dólar disparar. baixou um tanto depois, mas preços derivados que sobem na subida raramente caem na queda. é a economia, e dói no órgão mais sensível do povo. por isso que esse tipo de ataque funciona.

2025-03-01 23:45:38

- reply

my previous reply was long enough, but then I was brought to the OP of the thread, and noticed that a very unkind term was used there.
in CoC-enforcing communities, that could lead to swift action and immediate ban from participating in any community activities or even from contacting community members.
in GKCG communities, I'd expect the community to let the poster know that this behavior is unkind and thus not conducive of the sort of community we wish to maintain.
but whether or not the person ends up moderated or even removed from fora, contributions from that person are not banned. nothing stops someone from accepting or even seeking submissions from this external contributor. I personally find this opportunity for accepting external contributions a feature, not a bug, when it comes to advancing the project while preserving its community and protecting its most vulnerable participants, and it is in line with my thinking of separating the author from the contributions. I think society suffers significant losses out of throwing away works and ideas without consideration, over indirect associations with other deeds (real or imaginary) by their authors/proponents. but I know others feel just as strongly about this in opposite ways, and I don't feel that imposing one way of thinking over the other would be in line with my way of conceiving of freedom.
CC: @nprofile…46gc @nprofile…d045 @nprofile…xnqn