Quoting: TheRiddickI wonder if Valve will setup a expected death of account owner timer. So once you turn 80yo they consider you dead and invalidate your entire library, lol. That would be dystopian but I suspect in 40years time we will all have MUCH more pressing issues to deal with other then computer stuff.

GDPR has already been pushing tech companies to nuke accounts after 2 years so it actually could very well happen.

View this comment - View article - View full comments

None of this is news. There have been Youtubers and stuff reporting about this every once in a while since years ago. It is in the SSA for new Steam accounts and the license for many of the games that you purchase that they are legally non-transferable. While this is not usually enforced in practice, Valve openly admits and has proven in the past that they will ban people who share accounts. This is part of the reason why the new family sharing system was introduced in the Steam Client Beta.

If you were concerned about maintaining the legal right to transfer your Steam account, you should not have made a Steam account, simple as. Sharing your games with someone is not rendered impossible by this because many Steam games do not have any DRM, some of those without DRM don't even tie into Steam at all, and DRM will be brokenーas for the sharing of the account itself I can't imagine why you would want to do that for any practical reason when you can just trade all of your items off anyway. Sentimental value is the only real justification, and Valve probably isn't going to accuse you of stealing an account because your deceased friend gave it to you as a memento.

TL:DR; this is not a big deal whatsoever. Go home

View this comment - View article - View full comments

Quoting: whizseOh, this might be bad. Seems like an inside job by the new'ish maintainer:

https://boehs.org/node/everything-i-know-about-the-xz-backdoor [External Link]
https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27 [External Link]

If so, someone needs to go through xz-utils with a fine toothed comb.

Quoting: pleasereadthemanual

Quoting: pleasereadthemanual

Quoting: whizseOh, this might be bad. Seems like an inside job by the new'ish maintainer:

https://boehs.org/node/everything-i-know-about-the-xz-backdoor [External Link]
https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27 [External Link]

If so, someone needs to go through xz-utils with a fine toothed comb.

So it would seem that this new maintainer has been trying to gain control of XZ since 2021, and has had control of it since 2023. That's quite concerning and surprising. It seems unusual for bad actors to try to gain control of the supply chain long-term. Older XZ releases might have other unreported vulnerabilities even on stable distributions...

This maintainer has at least 750 commits to his name: https://hachyderm.io/@joeyh/112180715824680521 [External Link]

But to quote Glyph:

I really hope that this causes an industry-wide reckoning with the common practice of letting your entire goddamn product rest on the shoulders of one overworked person having a slow mental health crisis without financially or operationally supporting them whatsoever. I want everyone who has an open source dependency to read this message https://www.mail-archive.com/[email protected]/msg00567.html [External Link]

It gets a lot worse. This bad actor has made contributions all over core Linux projects like systemd: https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27?permalink_comment_id=5005888#gistcomment-5005888 [External Link]

A malicious patch series almost got into the kernel, too.

Github has removed the xz repository entirely.

Jesus, if that's what it's come down to...

Gentoo users probably having a field day laughing at us right now compiling all their stuff from scratch.

View this comment - View article - View full comments

Lots of exciting news for GeForce this year isn't there?

I remember it was just a couple of years ago you couldn't connect more than one monitor to a Pascal card without KDE Plasma burning itself alive (in my experience). Wouldn't be shocked if we had a pretty competent, complete open source driver stack close to Radeon's within the next 4 years.

View this comment - View article - View full comments

I'm sour about Yuzu not fighting against that DMCA. The legal precedent for emulation is in their favor whether they were selling early access to builds or not. It's THEIR work.

The more Ls Nintendo gets to hand out to the community then the more they're going to bully people until whatever they want eventually becomes law through lawsuit after lawsuit. Somebody needs to prove they're more bark than bite and push them back into the corner they were in when Sony lost the Bleem case. They can gaslight people all they want but a DMCA complaint is a warning at best and amounts to absolutely nothing if they do not have legal ground to begin with, and they don't. All Nintendo has is lots of money and lots of time to waste. Maybe that's the problem but seeing as Yuzu was kind of a big deal and was fairly profitable off donations alone for a community project I don't see why they couldn't afford a court battle.

View this comment - View article - View full comments