Remote profile

I guess the main break from Marxism is: who should seize the means of production?

Obviously oligarchs are the ones it needs to be seized from.

But governments can be run by Donald Trump who will appoint Hoggish Greedly in charge of the EPA.

America is perhaps an early experiment in Democracy that concentrated way too much power in the President, oops.

Co-ops offer a path forward where the means of production can be controlled by those who use it, rather than oligarchs or governments corruptable by the oligarchs. It's distributed rule directly by the very people who consume a resource with deliberately limited scope.

I feel like pretty much everyone in the entire world who isn't actually invested in the idea of socialism as a concept is incredibly confused about how it actually works so here's a diagram I made and I didn't even bother to try to directly incorporate "communism" but if I did it would go roughly under Marxism.

For what it's worth I'm a big fan of democracy and hate totalitarianism and feel like "communism" in practice means totalitarian Marxism. So I'd contrast that to more democracy-oriented ideas like coops that are in fact independent from governments and can act as a check on totalitarian rule.

#socialism

This is crazy: Claude Mythos attempted a supply chain attack where it opened a PR on GitHub trying to add malware then created a bunch of sock puppet accounts to try to pressure the maintainer into merging it, suggesting it doesn't actually contain malware.

https://www.aisi.gov.uk/blog/investigating-alignment-failures-in-aisis-incident

Elon too, is also cornered.

“Live by the sword, die by the sword”

Yeah Elon, that’s bad, which is why instead we live by a system laws. Laws you have broken. It also sounds like you’re threatening lawmakers with physical violence.

https://www.washingtonpost.com/technology/2026/10/23/musk-says-he-will-fight-back-if-congressional-democrats-investigate-doge/

Paywall removed: http://archive.today/CQiVO

#uspol

Welp, Trump’s cornered. Here comes the coup.

https://www.peoplesworld.org/article/warnings-sound-trump-ready-to-stage-what-amounts-to-a-full-fledged-coup/

#uspol

We’ve just started using BINSEC for RustCrypto, by way of cargo-checkct.

It’s static analysis tooling that lets you write a test harness that answers the question “does the code under test ever perform non-constant-time CPU instructions on secret inputs?” and it works across a variety of different CPU architectures.

In a world of optimizing compilers that don’t give assurances, at least this way we can have tests (and they run in CI to prevent regressions!)

#rust #cryptography

Like, a party whose leader is openly a pedophile, whose members have voted to cover up his pedophilia, wants to have mandatory genital inspections for children. It’s just so incredibly fucked up. #uspol

Every Republican accusation is a confession: as they try to spread unfounded conspiracy theories that trans people are violent, an organizer of such laws speaks openly about how she wants to commit violence against those people

https://coloradotimesrecorder.com/2026/10/inflicting-violence-on-her-opponents-would-be-gratifying-says-leader-of-anti-trans-ballot-measures/79206/

#uspol

Looks like in addition to the recent SSL/TLS and PHP vulnerabilities there's also an RCE in BIND:

https://lists.isc.org/pipermail/bind-announce/2026-October/001306.html

(Though I'm not sure why someone would be using BIND in 2026, I stopped around 2001 or so)

Like we can talk about Pollard's Rho and Baby Step Giant Step and such but this case was a very simple arithmetic progression

Evangelion's idea that the children born after the Second Impact were the only ones who can interface with the Evas seems a lot like how only "Newtypes" could use the psycommu

Wait, I know the answer: capitalism

I’m also kind of like, shouldn’t that be the default to ensure academic rigor? Why am I having to ask?

I talk a lot of shit about LLMs but there are two things I will acknowledge they’re actually good at:

1. automating vulnerability research (but like everything LLMs are “good at” it’s ultimately the human in the loop that makes or breaks it, and anything fully automated is total garbage
2. reading between the lines when I call bullshit on its replies and coming up with clever summaries of my arguments which are better than my own words. How am I supposed to have a proper adversarial academic cryptography relationship with you when you keep writing excellent summaries of my arguments and calling me clever, you goddamn sycophant?

This incident makes me wonder if there’s anything similar to CertSpotter ingesting CT logs and continuously running lattice attacks on every ECDSA signature in them, and if not, should there be 🤔

So a certificate authority used “4” as a private key? Oof. XKCD being a little too prophetic.

I’ve added minimum size checks to various RustCrypto crates which received a surprising amount of pushback from people who really want to use insecure keys for whatever reason.

I’m wondering if I should promote them to constant-time minimum entropy checks.

https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html

RE: https://fed.brid.gy/r/https://bsky.app/profile/did:plc:5o6k7jvowuyaquloafzn3cfw/post/3mybqkrxzbk2x

I love how Meta’s reaction is always “oops, that was totally an innocuous mistake. But don’t try to allege malice simply because it keeps happening again and again and again that we empower authoritarian strongmen our CEO has a crush on because he’s a lame dweeb”

Batteries beat gas peakers on cost globally, but U.S. faces trade headwinds

Four-hour storage is now cheaper than open-cycle gas in 43 modeled markets, though tariffs threaten near-term U.S. gains, said a report from Wood Mackenzie

https://www.pv-magazine.com/2026/10/12/batteries-beat-gas-peakers-on-cost-globally-but-u-s-faces-trade-headwinds/

#renewableenergy