Open Source Software Community - it's about ethics in Code of Conducts

[Betonhaus]

i don't know if anyone posted this?

https://seclists.org/oss-sec/2026/q2/332

the jokes write themselves really.

…did they think everyone telling them that switching to uutils was a bad idea were just joking or being transphobic?

 

[Gilgamesh]

Whenever anyone mentions anubis i like to link this blog post by Tavis Omandy https://lock.cmpxchg8b.com/anubis.html. You may or may not know of him, he's a security researcher at google and has found numerous high profile vulnerabilities (such as cloudbleed). It's a good read,

https://nitter.net/taviso/status/1958328766188679214#m

twitter replies are fun too.

His article is actually cited a lot on the Anubis Wikipedia page under “Criticisms”. One of the few good Wikipedia articles

 

[reactionary]

https://nitter.net/taviso/status/1958328766188679214#m twitter replies are fun too.

Do you think money can just buy any skill? For example, it doesn't matter what your salary is, you can't buy politeness

Have you tried buying politeness? For example, maybe you could send some bitcorn to [BTC ADDRESS] to support a trans woman who could very likely be homeless in 10 days. Maybe then I'll be polite to you

Sorry to hear that, but I don't have any crypto sorry. I hope everything works out okay.

Wait a minute, you have a well paying job at Google, just go on Coinbase and buy some.

I'm not into crypto sorry. Look, I wish you all well, but I'm not sending anyone bitcoin and I'm muting this thread.

I don't care. You owe the woman money. Why don't you delete this thread, you fucking coward?

>money can't buy politeness
<gibs me money im trans!!1
>i don't want to
<you work at google now fork the money over
>leave me alone
<you owe "her" money now idc

Sides, meet orbit.

 

[Meth Reindeer]

Whenever anyone mentions anubis i like to link this blog post by Tavis Omandy https://lock.cmpxchg8b.com/anubis.html. You may or may not know of him, he's a security researcher at google and has found numerous high profile vulnerabilities (such as cloudbleed). It's a good read,

https://nitter.net/taviso/status/1958328766188679214#m

twitter replies are fun too.

Wow so Anubis is a massive waste of time and energy. Ironic, it's supposed to stop AI crawling but just increases the cost of it in automated compute terms. If they really cared about this stuff they would do something more akin to a CAPTCHA or delay as that article points out.

>money can't buy politeness
<gibs me money im trans!!1
>i don't want to
<you work at google now fork the money over
>leave me alone
<you owe "her" money now idc

Sides, meet orbit.

Can you imagine if someone spoke that way to someone else in a public place? How pathetic. "She" has time to develop and argue about some ineffective anti AI scraping tool and demand money, but not enough time to make rent.

 

[CEO of Gay]

check out these cool drawings @dcss made!
Ver archivo adjunto 9118579Ver archivo adjunto 9118580Ver archivo adjunto 9118581Ver archivo adjunto 9118583Ver archivo adjunto 9118585Ver archivo adjunto 9118586Ver archivo adjunto 9118587

There needs to be one for Gentoo that looks even more autistic than the Arch one.

 

[777-]

FreeBSD has the better mascot.
Ver archivo adjunto 9119115

the actual mascot:

 

[AmpleApricots]

All these anti-bot measures who want to "stick it to all the evil corporations" only lock out your average guy like me who wants to look at webpages without having to load 8768758544 .js files and use VPNs/Tor to at least somewhat protect their privacy. The corpos have the resources/ip ranges/manpower/etc. to circumvent all that shit easily anyways.

 

[Max Weber]

All these anti-bot measures who want to "stick it to all the evil corporations" only lock out your average guy like me who wants to look at webpages without having to load 8768758544 .js files and use VPNs/Tor to at least somewhat protect their privacy. The corpos have the resources/ip ranges/manpower/etc. to circumvent all that shit easily anyways.

Ah, but you see, it will cost them 20 cents a day more to keep scraping like this!

 

[Penne Dreadful]

Ah, but you see, it will cost them 20 cents a day more to keep scraping like this!

20 whole cents a day? The cost estimate in the article is under one cent a week.

 

[Lard Shart]

Whenever anyone mentions anubis i like to link this blog post by Tavis Omandy https://lock.cmpxchg8b.com/anubis.html. You may or may not know of him, he's a security researcher at google and has found numerous high profile vulnerabilities (such as cloudbleed). It's a good read,

Anyone who puts bot detection in front of (what should be) a static web page is the blackest retard gorilla nigger on earth. Modern hardware can serve tens of thousands of pages a second. Apparently they can serve the bot detection page to every visitor, why not directly serve the actual content?

 

[LarpBait]

There needs to be one for Gentoo that looks even more autistic than the Arch one.

@dcss made more

 

[Fraygorryt The Wise]

What is this faggy homestuck shit doing in the holy OSS thread?

 

[CEO of Gay]

What is this faggy homestuck shit doing in the holy OSS thread?

Pointing out that the kind of autist who hilariously spergs in OSS related communities if often the same kind of person who hiliariously spergs in Homestuck related communities?

 

[The Noise]

All these anti-bot measures who want to "stick it to all the evil corporations" only lock out your average guy like me who wants to look at webpages without having to load 8768758544 .js files and use VPNs/Tor to at least somewhat protect their privacy. The corpos have the resources/ip ranges/manpower/etc. to circumvent all that shit easily anyways.

I imagine you're primarily talking about Anubis, which reminds me of this blogpost by Tavis Ormandy where he details how easy it is to bypass and how, by default, completing the challenge gets you access to the site being protected for seven days. So all a soulless AI vendor has to do is complete the challenge once (probably costing a fraction of a cent per completion) and they have unmitigated access to scrape whatever for a week.

Also this isn't related to the tech behind it but I really, really hate the forced tranime branding that means serious sites like the Linux Kernel Mailing List are plastered with some cunt's anime OC. They do offer a variant that doesn't have the branding but you need to be either a $50/mo Github sponsor or personally email the trannies for an invoice. And of course it's MIT licensed because everyone knows the best way to fight soulless scraping corpos is by bending over and letting them steal your code for free.

Honestly I can't bring myself to hate it too much because it's competition with Cloudflare and any tech that eats into Cloudflare's monopoly on anti-DDoS is always good even if it's tranny-branded.

 

[LarpBait]

Anubis is kinda a piece of shit but it works to stop your gitea from being flooded with jeetbots spamming "SAAR REDEEM THE NEEDFUL VIAGRA CONDOM", so i use it. If there are other options though that aren't such fragile pieces of shit and don't break the gitea api i'd gladly use them

 

[Betonhaus]

Can anyone pay to use Tartarus for their site yet?

 

[LarpBait]

Can anyone pay to use Tartarus for their site yet?

no because null is a selfish little fuck who won't post the source code

 

[Unimaginative Username]

I imagine you're primarily talking about Anubis, which reminds me of this blogpost by Tavis Ormandy

LMAO, I couldn't get past the part where he shows that they check the number of leading hex zeroes rather than the number of leading binary zeroes, because I was laughing too hard. They literally take the hash as a string of hex digits and count the leading zeroes! You can only increase or decrease difficulty by a factor of 16! I thought that standard hash-based proof-of-work was bad because you couldn't adjust difficulty by a factor less than 2, but this really takes the cake. This has to be some of the laziest troonslop to have ever been slopped out, since it wouldn't have been that hard to count the leading hex zeroes, multiply by four, and then add in the result of a table lookup on the next hex digit.

 

[Dante Alighieri]

Honestly I can't bring myself to hate it too much because it's competition with Cloudflare and any tech that eats into Cloudflare's monopoly on anti-DDoS is always good even if it's tranny-branded.

But it's not competition, it doesn't actually do shit except annoy people and look faggy

 

[Ferryman]

no because null is a selfish little fuck who won't post the source code

+1 Null, my good saar, please do the needful and be open sourcing of your most excellent Taurus Software saar. I will write the most excellent Guix package for it saar, blessed by Vishnu and many cow dungs, saar!