Sign in

Lake

@lake.map-rust.com
75 followers 203 following 1.2K posts

Lake. She. Admin of MAP-rust. <TBD>. Coming Soon. Rust Software Development and <TBD> community.

PostsRepliesMedia
Lake @lake.map-rust.com · 29/09/2026
001
Lake @lake.map-rust.com · 27/09/2026
at some point I should actually read theory huh
000
Lake @lake.map-rust.com · 27/09/2026
common windows L common firefox L
4. Windows: Direct Website Leakage
On Windows, mounting a ReadDirectoryChangesW watch on a non-readable directory results in a permission-denied error. However, mounting it on the root directory (e.g., C:\) bypasses this restriction, causing Windows to report all filesystem events system-wide along with the filename, regardless of whether the affected files are readable. In our responsible disclosure with them, Microsoft said that they consider this an undocumented feature.

One example where filenames leak information is the directory created by browsers when visiting a website. Firefox creates and uses a separate directory for every website that uses local storage, IndexedDB, or cache. Notably, this directory contains the name of the website. On Firefox, an attacker can reliably monitor top-1000 websites with an F1 score of 97.8%.
010
Lake @lake.map-rust.com · 27/09/2026
bruh inoti.fyi
1. Linux: Inter-Keystroke Timing
On Linux, mounting an inotify watch on a file without read-permission results in a permission denied error. However, if the file’s parent directory is readable, watching that directory will report all events that occur on the file.

This means that if a user can’t read /dev/input/event4, adding an inotify watch on the file results in a permission-denied error. However, if the user can read /dev/input – i.e., they can list the files in the directory – then an inotify watch on the directory succeeds, and the user receives notifications for all files inside it, as shown below:

Figure 1. Bypassing read permissions on Linux by mounting a watch on the file's parent directory.

On this system, event4 happens to correspond to a keypress. Important to note is that which key is not leaked, but only that a key was pressed. Although this may not sound terrible, there has been 2+ decades of research on inter-keystroke timing attacks: the time taken between keys leaks information. For example, in the word ‘WindRunner’, users tend to type the second ‘N’ faster than the other characters due to the finger already being over the ‘N’ key.
101
Lake @lake.map-rust.com · 25/09/2026
I thought this was 3 identical replies but no this got independently reposted to my feed 3 times in short order 😭
020
Lake @lake.map-rust.com · 24/09/2026
holy shit so roblox has this event going on i hadnt checked out but i did just now and it has erik.cassel, which was a shock because i doubt many new players know this but he died of cancer in 2013, it was a big and event on roblox. also seems kinda creepy idk www.roblox.com/games/742055...
100
Lake @lake.map-rust.com · 23/09/2026
this is the best one because many things point to it being a unsolvable hardware issue with their stupid fucking horrible all metal lap burning case github.com/FrameworkCom... evidence also points it to breaking when... enumerated. such as by fwupd at least i can theoretically repair it
Pretty interestingly, it seems like there might be some connection between this type of failure and touching the outside case of the laptop when there is some electrical potential built up relative to the case. I might be way off base here, but when it's not plugged in and I touch the laptop case with the prong of the charger, I often get this same message:

`Aug 03 23:01:19 redacted kernel: usb 1-4.1: reset full-speed USB device number 9 using xhci_hcd`

... coupled with a reset of USB devices such as external monitors and headphones. I discovered this accidentally when going to plug the thing in to charge it while journalctl -k -f was up.

Also, that kernel log up above (with the SCSI, reset device number 7, and so on) happened right when I got up to turn on the lights, did so, and then sat back down and touched the computer. There's no carpet here and I'm not doing anything crazy electrically speaking. But it does seem like a remarkable coincidence if it is a coincidence.

Happy to provide more info or answer any questions about my setup that you have (whether or not it ultimately turns out that my weird theory about touching the case turns out to be accurate in any way.)
110
Lake @lake.map-rust.com · 23/09/2026
so thats why i couldnt initially find the link
010
Lake @lake.map-rust.com · 23/09/2026
i just realized i have the rust docs-rs lead RES tagged as a troll and RES voteset to be very in the negative and have for 6 years entirely because of this one comment but its literally just this one 6 year old comment that made me do this and good backups that have kept my RES settings
100
Lake @lake.map-rust.com · 23/09/2026
if you get bored of or dont want glue we have other delicious options such as Bandage Treatment, Skin Treatment, and- ignore that one i dont know how it got there im tytrying to delete it
110
Lake @lake.map-rust.com · 23/09/2026
210
Lake @lake.map-rust.com · 22/09/2026
twitter screenshot @greenTetra_ - Sep 8, 2024 two tweet thread

1

Art for children should be created with the exact same care and passion as art for adults, even if they would not notice or care in the moment. The reduction of all children's media to pure saccharine is one of my least favorite trends in the contemporary media landscape.

2

Not that the contemporary media landscape affords much care and passion to art made for adults, anyways. At least there is *something* there; there are still arthouse movies, experimental indie games, and so on. Meanwhile, nobody is making anything like that for children!
041
Lake @lake.map-rust.com · 22/09/2026
..I expected at least a few percent, what
120
Lake @lake.map-rust.com · 19/09/2026
010
Lake @lake.map-rust.com · 19/09/2026
i like that the 1 game i dont own that valve is recommending is horny villa i also enjoy the implication valve had to play horny villa.
100
Lake @lake.map-rust.com · 17/09/2026
the cylinder MUST remain unharmed
001
Lake @lake.map-rust.com · 17/09/2026
ROSSMAN? for fucks sake.
001
Lake @lake.map-rust.com · 17/09/2026
lol
000
Lake @lake.map-rust.com · 17/09/2026
WAIT WHAT JEFF FUCKING GEERLING???
111
Lake @lake.map-rust.com · 16/09/2026
aw cmon
110
Lake @lake.map-rust.com · 14/09/2026
my favorite part is where every single Mac OS X device in existence has this bug
Simpler code but the bug is still there. This dates 25 years back, to the release of Mac OS X. We start getting a grip on the situation, the bug was there since the first release of Mac OS X shortly after the internet boom. Which means all modern macOS and iOS software were affected by this bug. Nice, so everyone is impacted but I still want to find the origin of the bug.
170
Lake @lake.map-rust.com · 06/09/2026
I don't understand what's supposed to be concerning. It's just this but in a language center equivalent that's more capable at those kinds of patterns and across more symbols. LLM tokens aren't words or letters
060
Lake @lake.map-rust.com · 04/09/2026
wait, roblox has *re-introduced* Safe Chat, which it had removed many years ago, but worse, more limited, and weirdly corporate? just bring back safe chat and My House Is On Fire, GTG
000
Lake @lake.map-rust.com · 04/09/2026
lol.
000
Lake @lake.map-rust.com · 01/09/2026
that's not a joke btw they have the whole thing planned out until 2035, new seasons and movies and I think some spin offs There's a better image timeline somewhere I can't find
010
Lake @lake.map-rust.com · 28/08/2026
@drunk.moe spotted
120
Lake @lake.map-rust.com · 24/08/2026
wake up sheeple
020
Lake @lake.map-rust.com · 24/08/2026
hey don't worry, it could still all be wrong because man pages are untrustworthy and unreliable on linux! Maybe what actually happens is sensible and has been for a decade and the documentation is just obsolete? wait..
140
Lake @lake.map-rust.com · 23/08/2026
For example "In general, the kernel community has long worked to maintain a vague and scary ambiguity around the legal status of proprietary modules while being unwilling to attempt to ban such modules outright." lwn.net/Articles/603...
It is worth noting that nobody has said that symbols exported with plain EXPORT_SYMBOL() can be freely used by proprietary code; indeed, a number of developers claim that all (or nearly all) loadable modules are derived products of the kernel regardless of whether they use GPL-only symbols or not. In general, the kernel community has long worked to maintain a vague and scary ambiguity around the legal status of proprietary modules while being unwilling to attempt to ban such modules outright.
120
Lake @lake.map-rust.com · 23/08/2026
110
Lake @lake.map-rust.com · 23/08/2026
oh all of its builds fail and take longer than the limits huh? docs.rs/crate/enprot... seems they usually take 40 minutes to fail and succeeded exactly once, in 2020, at version 0.3.1(which is also the first version)
100
Lake @lake.map-rust.com · 23/08/2026
hm that seems right, 30 minutes into a max 15 minute run docs.rs/crate/enprot...
100
Lake @lake.map-rust.com · 21/08/2026
hmm. this feels sus to me but im not well versed enough in cryptography to know or articulate why www.rath.org/s3ql-docs/im...
Once the session key has been calculated, a SHA256 HMAC is calculated over the data that is to be uploaded. Afterwards, the data is compressed (unless --compress none was passed to mount.s3ql) and the HMAC inserted at the beginning. Both HMAC and compressed data are then encrypted using 256 bit AES in CTR mode using PyCrypto. Finally, the nonce is inserted in front of the encrypted data and HMAC, and the packet is send to the backend as a new S3 object.
000
Lake @lake.map-rust.com · 20/08/2026
ah yes pixels
120
Lake @lake.map-rust.com · 19/08/2026
yeaup
He believed that the kuru researchers had failed to address the problem their research was supposed to resolve. “The white men did not understand how sorcery is embedded in the system of life,” he said. The kuru epidemic had ended, but premature deaths continued; according to one count, one in eight children in the eastern highlands died before the age of five. Scientists had not offered a compelling enough theory of illness to replace the old ones. “America and the world can brag about the kuru studies and the many, many prizes, but what was the outcome of those studies?” Luwi asked. “They took a handful of us to America to be educated, but something could have been done for the community—they built no school, no clinic, no project for women to be who they can be.” He told me, “They took what they wanted and left us with an empty bowl.”
100
Lake @lake.map-rust.com · 19/08/2026
god this next part is horribl Michael just comes out and says the obvious and gajdusek is of course unwilling to care, as he'd been his whole life. The theme throughout is a complete of care in others wants and needs except to a minimum extent for his own benefit
truncated

An F.B.I. agent began trying to interview the children, but the only one who spoke freely was a twenty-three-year-old whom I’ll call Michael. He had met Gajdusek in Pohnpei, a volcanic island in Micronesia, when he was fourteen. His departure was arranged so quickly, Michael told me, that he never said goodbye to his parents. In America, Gajdusek quickly found ways to touch him. “Being a doctor, he could say, ‘Hey, come here. I need to check you, because you’ve got to make sure your medical is clear,’ or whatever,” Michael said. “I didn’t understand it. I was always finding reasons to explain it to myself.”
In his journal, Gajdusek described Michael as “aloof in a strangely disturbing way,” often “slinking into the house” without announcing his arrival. “I detect a certain rage,” Gajdusek noted. After a fight, Michael said he wanted to go home, explaining, Gajdusek wrote, that “he has always wanted to anyway, it is me who is holding him here.” By the time Michael was in college, Gajdusek acknowledged that the relationship was “pathological,” but he blamed Michael. “I keep hoping and praying that he will resolve his peculiar conflicts with me,” he wrote.
Michael agreed to secretly record a conversation with Gajdusek for the F.B.I. In 1996, he called Gajdusek at his lab and said that investigators had been trying to question him.
Gajdusek was about to leave for Paris for a conference on prion diseases, where he would give the keynote lecture. He told Michael that he should simply say that he was never molested.
“So you want, you want me to, like, lie to them?” Michael asked.
“Yes,” Gajdusek said. “Absolutely.”
“Well, now that I’m thinking about it, I wanna know why.”
“What?”
“I wanna know why you did it to me.”
Gajdusek switched to a private line in his office. “Look,” he said. “If you go on and talk to people about that, you’re gonna get us in so much trouble that you’re gonna close the life down for the kids at college, close my accounts down. I’ll have t…
100
Lake @lake.map-rust.com · 19/08/2026
Seriously it cannot be understated how much of a piece of shit he was to them, so much neglect and blatant disfavor after growing up, beating them, having them cook for visitors, not supporting them in school, blatantly replaceable and replaced, and so full of delusions about his treatment of them
Gajdusek often wrote about the ways in which “relationships of long standing slowly fall apart and disintegrate from neglect or directly destructive action,” adding, “This fascinates me and since I am increasingly a part of such alienations I look at them in awe.” He noted, “It remains as always, the ‘denouement’ that are the problem.”

image of guy and kids

Luwi became one such source of trouble. In the fall of 1986, he went to Paul Smith’s College, in upstate New York, where he remembers being among only a handful of students who weren’t white. He drank heavily and didn’t do his schoolwork. After a year, he flunked out. He told Gajdusek, “I cannot stay around this place anymore. I just want to go home.” Gajdusek, who recognized that Luwi’s year in college had “injured his ego,” bought him a ticket to Papua New Guinea.
The night before his departure, Luwi’s friends threw a party at a park and he stayed up all night drinking. When Gajdusek saw him early the next morning, he wrote, Luwi was “in tears & at times near to rage in inebriated disequilibrium, crying that I avoided him & ‘never talked with him.’ ” A few hours later, Gajdusek took him to the airport and waved at him from the departure lounge as Luwi cried. “I am very glad that he is off,” Gajdusek wrote.
That same day, Gajdusek’s newest ward, Daniel, arrived from Micronesia. He was nine years old, the son of a man who had been one of the first generation of boys from Micronesia to come to the U.S. “I am in love with Daniel!” Gajdusek wrote, two days after Luwi left. “He is a wonderful, bright & alert & non-demanding small boy.”
110
Lake @lake.map-rust.com · 19/08/2026
the fucking delusion
During Luwi’s third year in the U.S., Gajdusek read Henry James’s first two novels, “Roderick Hudson” and “Watch and Ward.” Both novels are about “would-be benefactors” who are “basically sexually crippled, gifted persons,” Gajdusek observed. He was struck by James’s insights about “the sense of undeserved obligation, and imprisonment or slavery or mind washing” in youth drawn into a benefactor’s orbit. He copied several lines from “Roderick Hudson” into his journal. “May I learn ever better to produce freedom in adolescence & not bondage in all the kids I touch,” he wrote.
100
Lake @lake.map-rust.com · 19/08/2026
didn't even support them properly
Luwi got D’s in algebra and woodshop, and his head almost “burnt down” when he had to stand up in his U.S.-history class and read aloud his paper about the War of 1812. “BOY DO I NEED HELP VERY MUCH,” he wrote in his journal. But Gajdusek was often travelling, or busy with work. There were nights when no adult was at home. He and the other boys poured whiskey in their coffee in the morning, to keep warm as they walked to school. After Gajdusek stormed off one evening, angry that Luwi was being too noisy and hadn’t done the laundry, Luwi wrote, “Good luck Carleton wherever you are out having a nice meal and maybe a glass of champagne but remember we depend on you.”
110
Lake @lake.map-rust.com · 19/08/2026
the delusion in thinking you were full of love and wonder and audacity of "handling" other people you didnt even ask if they wanted to go to the US let alone fuck you
Wegstein, the computer scientist who had helped raise the first generation of boys, had developed Alzheimer’s. A pediatric hematologist from China named Cheng-Ting Chin, who worked in Gajdusek’s lab, moved into Prospect Hill. She asked Gajdusek to marry her, but in a letter he told her that he needed to be “free of binding personal ties and commitments except to my kids—who are all prepubertal when I pick them—and even with them,” he added, “I want them as adults to reduce me to a memory alone.” The people he really loved, he wrote in his journal, were “the small fish whom I can handle, play with, behold with love and wonder and return to the sea.”
100
Lake @lake.map-rust.com · 19/08/2026
lol
020
Lake @lake.map-rust.com · 16/08/2026
rip lol
000
Lake @lake.map-rust.com · 15/08/2026
What is this script in my @tangled.org which does not exist in my source tangled.org/lake.map-rus... why is there a cloudflare script i didnt put there
100
Lake @lake.map-rust.com · 12/08/2026
0141