• 0 Posts
  • 50 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle


  • Looking at the profiles for the executives, you definitely get the feeling that they’re either the sort that prioritizes “my work put good into the world and you don’t need to squint to see it” over cash, so “yeah, that lets me live” is sufficient, or their seemingly going for a high score for number of “oh, nice!” organizations they can put on their CV, and the total compensation from them all is probably more than competitive.


  • first article that popped up with reliable numbera

    Except…the numbers weren’t reliable. Where did they get $400 million in cash from? That’s just not a thing.

    $100 million is purely cash on hand, it doesn’t take into account any otger WMF assets.

    It’s $80 million cash, $274M counting all assets, like it says in the audit and my comment.

    unsurprisingly, the WMF reports that WMF are spending their money responsibly and are barely managing to sustain themselves

    Are you saying that their financial audit is fraudulent? “Wikipedia is committing tax fraud” is a pretty hot take, not gonna lie.
    Their financial report also doesn’t claim they’re barely scraping by, so I’m not sure where you’re getting that.

    Wikipedia has plenty of money, they spend it irresponsibly

    That’s a different argument which you seemingly haven’t actually argued. “They make enough money, here’s some incorrect financial claims to justify it” is very different from “I don’t think they spend money wisely, and need to change what they spend on”.

    it’s nice that you’re excited about Wikipedia, and it can be a useful resource, but these are not contentious facts.

    I never actually made a statement for or against donation, I only pointed out that your information was incorrect. “$400 million cash” is a very different situation than “$80 million cash”.
    I’m gonna disagree very strongly that these are “not contentious facts”, because they’re not correct in the slightest. Being off by $320 million dollars strongly undercuts the credibility of an argument.

    Honestly, I’m confused about why you seem so angry at Wikipedia.

    Yes, I am ageist about facts. What a weird thing to take issue with. The financial state of an organization two years ago doesn’t have as much bearing on if they should get donations as the current financial statement does.
    Does this financial statement from 2006 feel just as relevant and make you want to donate to them?

    That article is at least accurate in how it describes their financial situation. It’s also kind of amusing that the author concludes that donation is reasonable:

    So, bottom line: Should someone with financial means donate when they see Wikipedia’s banner ads running in December? It depends. In my view, people who volunteer a lot of time improving Wikipedia’s content have already made their “gift” and should feel no obligation. For everyone else, the calculus is personal. One volunteer suggested donating to smaller but allied organizations like OpenStreetMap, which provides map data that is used for Wikipedia pages. Other contributors said that even if Wikipedia is only indirectly supported by the WMF, the WMF is still the best-positioned organization to advance free knowledge overall by virtue of its scale and connections.

    Clearly, Wikipedians are right to engage in vigorous discussion about how donations are solicited from visitors and to oversee how those funds are actually spent. For me, there’s also the small matter of the external environment. In recent years, Wikipedia has been attacked by authoritarian regimes and powerful billionaires—people who do not necessarily benefit from the free flow of neutral information. If $3 helps hold them off, then that’s coffee money well spent.






  • Depends on what he means by “ultra-processed”, but you can bet that it’s probably not a reasonable criteria that he’ll be using.

    The man isn’t rational, and doesn’t base his conclusions on sound reasoning.

    Note the call to lessen regulations around “raw milk, chelating compounds, ivermectin, hydroxychloroquine”. That’s pretty insane.

    And I can almost be certain that what they’ll do is eliminate funding for snap benefits and school lunches going to what they’ll classify as “ultra processed foods”, without adjusting funding to account for what they left behind being significantly more expensive. Some definitions of “ultra-processed” include things like “store bought bread”, “frozen meals”, “soup concentrate”, “yoghurt” and “sausage”.
    Call me cynical, but I think if you apply the stricter work requirements for benefits they always want, while reducing the scope of the benefits to cover fewer things, and almost nothing helpful for the people with the severe time restrictions the work requirements can cause you’ll end up seeing people use the benefits far less often, because they give less usable food for the money. Then they’ll use that to justify reducing the size of the program even further.

    We expect people making school lunches to make hundreds of meals that finish at the same time, to have the meal be nutritionally complete, tasty, and now also not use frozen or premade ingredients. We give them literally $1 for the ingredients for these meals, and maybe another $2 for operational overhead like labor costs and equipment.
    Saying you can’t use canned tomato sauce, peanut butter, pre-packaged bread or ground meats is basically just cutting funding for feeding children under the guise of not paying for a scary sounding classification of food.







  • Depends on the vendor for the specifics. In general, they don’t protect against an attacker who has gained persistent privileged access to the machine, only against theft.
    Since the key either can’t leave the tpm or is useless without it (some tpms have one key that it can never return, and will generate a new key and return it encrypted with it’s internal key. This means you get protection but don’t need to worry about storage on the chip), the attacker needs to remain undetected on the server as long as they want to use it, which is difficult for anyone less sophisticated than an advanced persistent threat.

    The Apple system, to its credit, does a degree of user and application validation to use the keys. Generally good for security, but it makes it so if you want to share a key between users you probably won’t be using the secure enclave.

    Most of the trust checks end up being the tpm proving itself to the remote service that’s checking the service. For example, when you use your phones biometrics to log into a website, part of that handshake is the tpm on the phone proving that it’s made by a company to a spec validated by the standards to be secure in the way it’s claiming.


  • Package signing is used to make sure you only get packages from sources you trust.
    Every Linux distro does it and it’s why if you add a new source for packages you get asked to accept a key signature.

    For a long time, the keys used for signing were just files on disk, and you protected them by protecting the server they were on, but they were technically able to be stolen and used to sign malicious packages.

    Some advanced in chip design and cost reductions later, we now have what is often called a “secure enclave”, “trusted platform module”, or a general provider for a non-exportable key.
    It’s a little chip that holds or manages a cryptographic key such that it can’t (or is exceptionally difficult) to get the signing key off the chip or extract it, making it nearly impossible to steal the key without actually physically stealing the server, which is much easier to prevent by putting it in a room with doors, and impossible to do without detection, making a forged package vastly less likely.

    There are services that exist that provide the infrastructure needed to do this, but they cost money and it takes time and money to build it into your system in a way that’s reliable and doesn’t lock you to a vendor if you ever need to switch for whatever reason.

    So I believe this is valve picking up the bill to move archs package infrastructure security up to the top tier.
    It was fine before, but that upgrade is expensive for a volunteer and donation based project and cheap for a high profile company that might legitimately be worried about their use of arch on physical hardware increasing the threat interest.


  • ricecake@sh.itjust.workstoMemes@lemmy.mlMeh burger
    link
    fedilink
    arrow-up
    8
    ·
    3 months ago

    Most of them are mediocre. Most burger places were mediocre, and then the American gastropub trend saw burgers being made nice as opposed to diner food or bar food. They could also charge more money because they were making nicer food.

    Eventually a bunch of the mediocre places shifted to try to also be nice, but mostly just increased prices, changed decor, and started using the word aioli more than mayo. Oh, and pretzel buns on burgers that got taller without being bigger and are cumbersome to eat.

    In the plus side, if you like a Swiss burger with a garlic aioli, a burger with a fried egg on it, or a burger with 2 pieces of bacon, a spicy BBQ sauce, and fried onion strings and you’re in the mood for some fries with bits of peel on them and a garlic Parmesan butter, then you know exactly what they’re going to put in from of you and exactly what it’ll taste like.

    Mediocre. Not bad, but definitely not the best you’ve ever had.