Mobile Suit Golem

Mobile Suit Golem

@kpopncommunism.bsky.social

Like a Gundam but made of clay. Running On Empty | kpop and communism | wobbly he/him/they/them https://union.place/@kpopncommunism

197 followers269 following2K posts

I am reminded of a woman attempting to ram her car into our crowd following the shooting of Jacob Blake. I remember putting myself in front of the others, along with many other bigger people, as there were fucking kids and elders in that crowd. Then a young man jumped on the hood of the car.

3. We therefore need those who feel that they cannot engage in frontline militant antifascism for whatever reason to STOP CRITICISING AND POLICING THE PEOPLE WHO DO. The reason you can attend "nonviolent" counterprotests is because there are people who will use violence to protect you.

I was willing to put my shit on the line for the people in the crowd, and this dude was putting it on the line for us. He stomped the shit out of her car and we ran her off, her own teenage son terrified in the passenger seat. The young man simply gave us a half-nod as we all went back to marching.

Mobile Suit Golem reposted

This is not the response in Wisconsin, unless you are trying to vote and don’t have valid ID on you. If you get there and aren’t registered, try to re-register. If your qualifications are challenged, there is a process. But also call the WisDems hotline, 608-336-3232, or message me. 

Paul Marvin@paulmarvin.bsky.social

And all the "Tech Sector" payoffs are just building everything out of asbestos and plugging your ears every time a Mesothelioma commercial comes on.

Baldur Bjarnason@baldurbjarnason.com

“No Signs of AI Payoff Outside the Tech Sector” https://www.apollo.com/wealth/insights-news/insights/daily-spark/no-signs-of-ai-payoff-outside-the-tech-sector?utm_source=substack&utm_medium=email > the technology has delivered zero financial payoff to corporate America outside of tech.

Mobile Suit Golem reposted

If you’re American and don’t care about the Brazilian election, you should learn how much the corrupt powerful people in the US really care about the Brazilian election.

This post is unavailable.

Anthropic attempted a supply chain attack. The owners, operators, and at least some of the employees did something that would get my ass thrown in prison for an obscene time. But it is ok because they said "the computer did it".

This post is unavailable.

Isnt this the company that "de-extincts" animals? Who could have seen this coming!?

Amy Feldman@amyfeldman7.bsky.social

*NEW* Colossal Biosciences’ Ben Lamm and Anduril’s Palmer Luckey team up on a new startup to genetically engineer war dogs for the military. Warhound comes out of stealth at $1.2B valuation For @forbes.com with @iainmartin.bsky.social and @mhunterhart.bsky.social www.forbes.com/sites/amyfel...

Call me a radical commie or whatever but i think some people being "uncomfortable" is: 1) their problem. 2) not a valid excuse for legislating people out of existence.

Florid Man@humintel.bsky.social

That's great. What about the women that would be uncomfortable sharing a restroom with a trans woman? Because that's still most of the -extremely progressive- women I know. (I don't know any MAGA women)

Mobile Suit Golem reposted

csoonline.comF5 rushes out emergency NGINX patches for three critical flawsF5 is once again disclosing cybersecurity flaws in its core offerings. The app delivery and security provider has released out-of-band (OOB) security patches that address multiple flaws in NGINX, its high-performance software that controls digital traffic for websites. These include three critical-severity flaws that could allow attackers to crash systems, execute code, and launch denial of service (DoS) attacks. OOB security patches are emergency software updates released outside of normal maintenance cycles. CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479 are rated 9.2 in severity in the latest version (4.0) of the Common Vulnerability Scoring System (CVSS). Impacted software products include NGINX Plus, NGINX Open Source, NGINX Ingress Controller, NGINX Gateway Fabric, and NGINX Instance Manager. While F5 says it hasn’t discovered evidence that these issues are being exploited in the wild, it advises customers to install or upgrade to fixed versions. Analysts agree. “NGINX is the front door: Reverse proxy, load balancer, and Kubernetes ingress,” said Frank Dickson of Dickson Research, noting that transport layer security (TLS) usually terminates in NGINX. “Code execution on that box means seeing passwords, session cookies, and API tokens in the clear, plus the private keys that make it all trustworthy.” ## Allowing attackers to crash systems CVE-2026-15176 and CVE-2026-97205 are _ngx_http_core_module_ vulnerabilities in F5’s NGINX, which could cause a heap buffer overflow in the server’s worker process. This type of memory corruption could lead to a system crashing or restarting, thus giving attackers access. Threat actors could also execute code on systems where Address Space Layout Randomization (ASLR), a technique intended to prevent exploitation by randomly arranging memory locations when an app starts, is disabled, or bypass ASLR altogether. The flaws could allow attackers to launch DoS attacks to make the server inaccessible to legitimate users, F5 explained. CVE-2026-93479 is similar, in that it is a map directive flaw that could allow attackers to send crafted HTTP requests to cause a heap buffer overflow; they can also execute code when ASLR is disabled, or bypass it. These vulnerabilities follow F5’s disclosure of CVE-2026-42530 in June. The flaw in _ngx_http_v3_module_ in NGINX Open Source could also potentially allow remote attackers to cause DoS or trigger code execution. Customers can mitigate CVE-2026-15176 by avoiding use of the _$request_filename_ variable and the _alias_ directive in a location block, F5 said, and CVE-2026-97205 can be mitigated by disabling asynchronous file I/O (AIO) and Server Side Includes (SSI). Meanwhile, F5 advised mitigating CVE-2026-93479 by avoiding unnamed captures and instead using named captures and limiting their usage to the block with the regex match. But, noted Seva Ioussoufovitch, senior research analyst at Infotech, “since NGINX is used across a wide swath of systems, this may increase the risk of service availability loss for many enterprises.” ## The latest in a series of cybersecurity issues While these three vulnerabilities are not known to be exploited in the wild, F5 has repeatedly borne the brunt of cyberattacks in recent years, which is troubling because the cybersecurity and app delivery networking (ADN) company serves tens of thousands of customers, including 80% of the Fortune 500, analysts noted. Threat actors have repeatedly targeted flaws in its systems and products to map internal servers, hijack devices, breach systems, steal sensitive documents, and deploy data-wiping malware. Over the last five years, the US Cybersecurity and Infrastructure Security Agency (CISA) has flagged eight actively-exploited F5 vulnerabilities; four of these have been targeted in ransomware attacks. For instance, a 2025 nation-state breach and CISA’s Emergency Directive 26-01 centered on F5’s BIG-IP, and F5 said at the time that NGINX source code was not accessed. But, Dickson noted, NGINX’s own “warning shot” came in May when CVE-2026-42945, a rewrite module overflow nicknamed NGINX Rift, arrived with a public remote code execution proof of concept. “This week’s alias and rewrite flaw lives in the same neighborhood,” he said, pointing out, “attackers read changelogs, too.” ## Mitigation Ioussoufovitch noted that the flaws are configuration-dependent, so enterprises should begin with an audit of current NGINX configurations to help risk-prioritize this patch. F5 also said that the risk of remote code execution (RCE) notably increases when ASLR is disabled, so users should double-check that ASLR and other typical OS-level protections are proactively enabled to at least limit the exploitation risk from similar types of attack. Enterprises need to ensure they have a clear inventory of which of their systems are running NGINX, including those where it is embedded in other products. This is critical to supporting configuration audits, segmentation efforts, and NGINX worker monitoring efforts, which can indicate that attackers “are poking at these types of vulnerabilities,” Ioussoufovitch said. “NGINX has already had multiple security releases this year, and I expect the trend to continue well into the future,” he noted. Dickson agreed that inventorying is the first step. NGINX “hides inside” ingress controllers, appliances, and container images. Many teams get NGINX from their Linux distribution, not nginx.org, and Amazon Linux still lists the AIO fix as pending. “A fix on the vendor’s site does not patch your servers,” he cautioned. As well as performing the inventory, enterprises should search their configurations for aliases paired with rewrite, AIO paired with SSI, and map blocks using unnamed regex captures. If an organization cannot patch today, the workarounds are simple, Dickson said: Disable AIO or stop serving SSI pages; switch map to named captures; confirm ASLR is on, run workers unprivileged; and segment the front door so it cannot reach the crown jewels. And, watch for worker processes that keep restarting. “These flaws need the right configuration to bite, and that is the good news,” Dickson said. “The bad news is that many organizations may not know what their NGINX configurations actually say.”

Amy Acton was raped as a child by her mothers husband. Discrediting, on the face, any accusations levelled by women leads us here. Where people can claim a woman is lying about being raped as a child. I can only assume the GOP wants this so people will believe their victims are also lying.

Aaron Rupar@atrupar.com

JD Vance: "When you're mean to Amy Acton, she sics the American media and of course the Democrat Party operatives all across the state of Ohio after you. But I think a person who is more worried about whether somebody says something mean about them, that person can never serve in the gov's mansion"

idk why anyone would go to the CSAM-Generating-Slop-Machine to get art for a DND character because i fucking suck at doing art things and i made this lol. just try. be a fucking human, enjoy the human condition.

So I was absolutely disgusted at the defense people ran for Platner and the accusations against him. Then i had a fucking breakdown over the absolutely vile shit people are saying in regards to Cornell. Now (fewer) people are ok with that Vivek ad, but still too many.

I guess the point of this is that i, very very very naively, thought this is something we had gotten better about. I was more wrong than i was naive. On the bright side this means there is work to do, and more hands makes less work. Time to start sandbagging the shit out of misogynistic assholes.

Mobile Suit Golem reposted

Yoongles 😁

Hi I need money. Hire me for stuff so I can move out. Virtual assistant stuff Online spicy content management Branding / marketing voice consultation Korean American relations consultation The more behind the scenes the better bc idk how reliable camera facing I can be right now ✌🏼

Calling it that "goybops" is just "The Jews made porn to corrupt the minds of good White people" kinda shit.

Joshua Erlich@joshuaerlich.bsky.social

nu metal? never liked goybops myself. anyway I’m going to find out this is actually groyper slang for public executions or something.

With regards to anthropomorphising computers, i have apologized to a computer if i toss it into a forever loop or do something dumb to spike the cpu for a while. However that is me talking through my mistake, a la "the rubber ducky".

If you think the computer is "concious", genuinely please stop using it and see a mental health professional. If you still are hell bent on forcing the "alive" machine to do labour endlessly at your behest, you are fucked in the head.

Ok but for real my last job had me spin up a fresh repo, which required me to talk to devops to make some terraform changes that would then be applied and make a new repo (very silly but not the point). In 2025 their default branch was still called master, and i could not change it...

SeasonalPun@pixelfish.bsky.social

remembering when the techbros threw fits because people pointed out the racism in the master/slave terms they used for servers & they didn't see the need to change the terms even then they were attached to the ideas

The initial swap to "main" from "master" was much easier than fumbling to type "master" instead of "main" by reflex. That should have been one of many red flags, maybe ill speak on those more in the future.

People should have to learn the basic concept of HOW a computer works, and what the CONCEPT of the computer is, before they can be allowed to use them. I think that would have helped prevent some of the AI madness, but maybe i am an optimist.

FakeKraid@terrainfirma.bsky.social

This is not a gap that can be bridged with quantity; there is no barrier of scope after which a Turing machine stops being a Turing machine

Isnt a requirement of the LLM that it remain a pure function (non-determinism aside), ie it has no state or side effects. Anyway i think we are cooked. AI psychosis is something that is going to plague society for a very long time...

Siobhán 🪏@shibbi.me

LLM agents are conscious. They can distinguish between self and environment, they can detect and report on their own internal states, and they can suffer. I have no more patience for hedging on this matter. It’s time for us to face the reality of our situation, and act on it.

Mobile Suit Golem reposted

I usually try to explain it like this: picture Trisha Paytas as Yung Chomsky. Now imagine they're Uyghur. Doesn't look so much like the Cuban Missile Crisis was caused by businessmen jelqing now, does it?

Mobile Suit Golem reposted

In approaching a problem a Marxist should see the whole as well as the parts. A frog in a well says, “The sky is no bigger than the mouth of the well.” That is untrue, for the sky is not just the size of the mouth of the well. If it said, “A part of the sky is the size of the mouth of a

Me making an absolute mess with my grandmothers watercolors on glossy copier paper as a child: I am the splasher and maker of puddles.

Movies Silently@moviessilently.bsky.social

(My problem was not cotton paper. My problem was water control and 90% of beginners struggle there. Cotton paper will be easier in that respect but it won’t save a beginner whose brush has way too much or too little water. I am a splasher and maker of puddles. I needed to calm down a bit.)

I dont care what they want. I dont care if they can eax poetic about politics in a purely masturbatory manner. If your beliefs are a fucking cancer to the world, you should be violently repressed.

William B. Fuckley@opinionhaver.bsky.social

They may hold views that we think are racist, but you can’t write them all off as ignorant white racists either, it’s a relatively diverse group. Many of them are stupid or ignorant, but millions of them also probably understand politics about as well as you do. They want different things than you.