Notices by Matt Hamilton (eriner@noauthority.social), page 17

@sun you didn't finish the sentence.

> A lot of the electric car industry is propped up by government subsidy... because they've discovered that burning fossil fuels is terraforming the Earth and would bring prosperity to the people they rule over.

Can't have that.

RT: https://noauthority.social/@eriner/111763887766812430

I have to drive to the PO box during the eclipse (haven't been out there in over a month, sorry y'all I've been busy, as is often the case).

If someone hits and kills me because they're "distracted by the sun" or some shit, I'm leaving it to y'all to investigate and hold the three letter agency "just followin' orders"ers accountable.

If they're holding off Operation Drunk Driver until I get too crazy and start running for political office as an open anarchist, then pray for them instead.

@Best What relevance does that have?

> "We need government!"

For what?

To form a collective and seize an illegitimate authority of "arbitrary compulsion under threat of violence" that no member individually posses?

I don't have the authority to violate the natural rights of another person.

An arbitrary group of people exerting supposed authority (that none of them have individually), and calling it "Government", is a brazen, illegitimate, out and open criminal enterprise.

> we need government

Explain why we *need* that.

@IcyGrillz I thought about not getting it.

Technically, in PA you can legally open carry a handgun except in a court house, school grounds, etc. And as long as you have a permit in your home state, you can transport a (loaded) gun with you in a vehicle.

However, I've never seen someone open carrying in PA (unlike WV), and I don't want to deal with some rookie cop who doesn't know the law and is having a bad day because his wife has had enough of the beatings and is divorcing him.

Operation Pennsylvania Bootlick: Success.

I posted a while ago that I was going to hire a forestry mulcher to chew up a few acres of invasive trees, but after pricing it out I think I'm instead going to spend that money to buy a tractor with a powerful PTO and a woodchipper and do it myself.

I'm leaning towards a Kubota MX6000 and a Woodland Mills WC68.

I don't own a tractor (but have plenty of need), so this seems like a better long-term investment.

All ears for advice on tractor, chipper, implements, etc.

@Arthur_500

I like to watch anime while I go through the chore of reloading magazines, but Sword Art Online has Marvel'd the Japanese animation industry and it's all the same now.

Sad.

@Dan_Ramos No government has the authority to ban anything.

:pepe_chad:

@graf @p@bae.st @sjw @matty @tyler @Moon @p@shitposter.club

Did you see the guy who said it was "false flag" right beneath that?

I almost made the post "found the poa.st user, mastodon.social user, and noauthority.social user" but decided against it, lol.

Oooooooof

> Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained instructions for building with automake that did not exist in the repository.

https://security.archlinux.org/CVE-2024-3094

Guy has Go project that wraps xz to provide native Go bindings. Project has had no commits for THREE YEARS.

Suddenly some guy sends a PR to update the version of xz in use to the backdoored version:
https://github.com/jamespfennell/xz/pull/2

Then you got some guy in the HN comments astroturfing everyone claiming that he knows the guy who submitted the PR IRL and he's a "cool dude", or something.

All this shit is so sus.

CAN THE FUCKING FEDS PLEASE STOP BACKDOORING OPEN SOURCE SOFTWARE PLEASE? K THANKS

The backlash thread on GitHub is already well underway: https://github.com/tukaani-project/xz/issues/92

Fear not, xz users, a new developer has stepped up to take over the project:

Tia Jan <jant1203@proton.me>

Both of the maintainer accounts for the xz (under the https://github.com/tukaani-project) have been suspended, presumably by Github staff:

The suspension isn't listed on the account profile, but visible in the Following/Followers list for some reason, ex: https://github.com/JiaT75?tab=following

oh yeah, and the guy who submitted the PR supposedly works at 1Password.

So that's nice.

@John The post you're commenting on is a bit in the weeds. At a high level, the xz compression library was intentionally subverted by one of the project maintainers and a backdoor was inserted. This impacted SSH on Debian and Fedora, two very popular linux distros.

The best high-level writeup I can find is Michael Larabel's: https://www.phoronix.com/news/XZ-CVE-2024-3094

GM #NANC. I keep waking up at 4AM and I’m not sure how I feel about it yet.

Dark fedi operator meetup is on my bucket list.

None of you admins are allowed to die in civil strife until this happens.