• 6 Posts
  • 75 Comments
Joined 2 years ago
cake
Cake day: June 5th, 2023

help-circle










  • I’d like to add that Wikipedia itself, while an amazing resource, can be full of propaganda. I came across a page for an international organisation against chemical warfare and went to the edit history. Sourced additions regarding complaints by scientists on the ground in Syria that their findings were being completely misrepresented to show Assad was using chemical warfare were consistently scrubbed without any reason given.

    It’s funny that I was actually looking at that page randomly while considering how to code a tool that would highlight the most recent (and therefore unreviewed) edits on wiki. I got the idea from a Defcon talk on how to counter and deal with misinformation. It’s ironic that in this instance, it was the more established editors that were propagating misnformation.





  • Really? I had an app that would autogenarate time sheets for work in Google Sheets. I decided to minimise API calls by doing a single call to Google Drive then parse the HTML and reupload. Not a big Python project but ChatGPT hit a wall pretty fast on that one. Though, tbf the documentation was suprisingly opaque so I suppose that goes back to your point.

    That project also produced my finest pile of spaghetti code since I had to account for stretched cells in the HTML parsing. I still have a piece of paper with my innumerate math scribbles. The paper makes sense to me. The code does not.





  • gwilikers@lemmy.mltoLinux@lemmy.mlWhy do we hate SELinux?
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    29 days ago

    SELinux is an access control system for Linux. Traditionally Linux uses Dynamic Access Control (DAC) which basically means the person who creates a file can determine who can access that file. Thats pretty fine for day to day use but there are some problems with this model in terms of security. One I can think of is that it’s more vulnerable to privilege escalation (a hacker getting access to a higher level account like admin through a lower level account) because it puts the onus on the user to define who can access the file. SELinux was invented by our good friends at the NSA to remedy these kinds of problems. It’s an example of Mandatory Access Control. It works on top of DAC by creating policies that work to prevent things like privilage escalation. It’s also a lot more comprehensive than DAC. It allows for things context based access, taking into account the broader security context of an access attempt, the user’s role, etc.

    I’m actually not entirely sure why some people don’t like it. Understandably, some people are wary of anything the NSA let’s out into the public. But as it’s open source and has been integrated into a number of Linux distros like Fedora, it’s unlikely they’ve backdoored it. If I was to hazard a guess, I’d say some people don’t like it for the same reason they don’t like systemd: Linux has often been an OS where user’s like a big degree of control through simple traditional systems and those don’t like the idea of losing some of that control to the complexity overhead involved in these new systems.