Posts Tagged ‘Linux’

Does Malicious Backdoor Compromise SSH?

Monday, April 1st, 2024

A newly discovered backdoor found in the xz liblzma library of XZ Utils, the XZ format compression utilities included in most Linux distributions, targets the RSA implementation of OpenSSH.

For those outside of tech, that sentence was an unreadable jumble of acronyms. For those inside tech, a chill probably ran down their spine, as those technologies are everywhere. Anytime anyone buys something online, they’re going to be using SSH to create a secure channel to pass transaction information. [As a commenter noted, SSH is a command tool rather than Secure Socket Layer (SSL), which is used for encrypted transactions. Mental typo. My bad. – LP.] Depending on how many distros are using that library, the consequence range from “bad” to “really, really bad.”

Details:

A vulnerability (CVE-2024-3094) in XZ Utils, the XZ format compression utilities included in most Linux distributions, may “enable a malicious actor to break sshd authentication and gain unauthorized access to the entire system remotely,” Red Hat warns.

The cause of the vulnerability is actually malicious code present in versions 5.6.0 (released in late February) and 5.6.1 (released on March 9) of the xz libraries, which was accidentally found by Andres Freund, a PostgreSQL developer and software engineer at Microsoft.

“After observing a few odd symptoms around liblzma (part of the xz package) on Debian sid installations over the last weeks (logins with ssh taking a lot of CPU, valgrind errors) I figured out the answer: The upstream xz repository and the xz tarballs have been backdoored,” he shared via the oss-security mailing list.

According to Red Hat, the malicious injection in the vulnerable versions of the libraries is obfuscated and only included in full in the download package.

“The Git distribution lacks the M4 macro that triggers the build of the malicious code. The second-stage artifacts are present in the Git repository for the injection during the build time, in case the malicious M4 macro is present,” they added.

“The resulting malicious build interferes with authentication in sshd via systemd.”

I’m just going to note for the record that a whole lot of longtime Linux programmers absolutely hated the introduction of systemd. I don’t have deep enough Linux chops to take a side in this controversy, or know whether systemd was a significant factor in allowing the exploit to work.

Moving on:

The malicious script in the tarballs is obfuscated, as are the files containing the bulk of the exploit, so this is likely no accident.

“Given the activity over several weeks, the committer is either directly involved or there was some quite severe compromise of their system. Unfortunately the latter looks like the less likely explanation, given they communicated on various lists about the “fixes” [for errors caused by the injected code in v5.6.0],” Freund commented.

One silver lining is that the problem doesn’t look to be as widespread as it could be.

“Luckily xz 5.6.0 and 5.6.1 have not yet widely been integrated by Linux distributions, and where they have, mostly in pre-release versions.”

Red Hat says that the vulnerable packages are present in Fedora 41 and Fedora Rawhide, and have urged users of those distros to immediately stop using them.

“If you are using an affected distribution in a business setting, we encourage you to contact your information security team for next steps,” they said, and added that no versions of Red Hat Enterprise Linux (RHEL) are affected.

Since Red Hat is usually the default for big E-commerce platforms, it looks like this exploit is merely “bad” rather than “really, really bad,” which means its not nearly as bad as, say, Log4J was. Your Amazons and eBays are probably safe from the exploit.

The people who are likely going to be hurt by this exploit are mom and pop E-commerce sites using their webhost’s “build an E-commerce site using these easy tools” feature. The smaller the site, the more likely they’re using a free distro, some of which may have this vulnerability.

Whatever the site, they should run an updated software composition analysis tool on stacks and build-chains to see if they’re vulnerable.

Low-Calorie LinkSwarm Substitute

Friday, July 7th, 2023

This week’s been a bear…

…and I’ve just run out of time to do a decent LinkSwarm. Instead, in honor of police finding Hunter Biden’s cocaine unexplained cocaine of unknown origin at the White House, here’s a video of Norm MacDonald doing cocaine jokes, followed by a mini-LinkSwarm.

  • Russian ammo dump blows up real good.
  • Peter Zeihan: Scottish independence is a suicide pact.
  • RedHat is trying to paywall open source code. Penny wise and pound foolish.
  • “DC Police Say They May Never Discover Who Left Bag Of Cocaine Labeled ‘Property Of H. Biden’ At White House.”
  • Protip for professional sports teams: Don’t hold Dog Night and Fireworks Night on the same night.
  • Log4J and Internet Castles Made of Sand

    Thursday, December 16th, 2021

    If you work outside of a tech company, chances are you’ve spent this week primarily concerned with getting ready for Christmas. If you work inside a tech company, there’s a significant chance your company spent much of this week patching a critical vulnerability in an open source Java logging library called Log4J.

    Here’s a non-technical explanation of the problem:

    It’s a vulnerability that was discovered in a piece of free, open source software called log4j. This software is used by thousands of websites and applications, to perform mundane functions most people don’t think about, such as logging information for use by that website’s developers, for debugging and other purposes.

    Every web application needs functionality like this, and as a result, the use of log4j is ubiquitous worldwide. Unfortunately, it turns out log4j has a previously undiscovered security vulnerability where data sent to it through that website — if it contains a special sequence of characters — results in log4j automatically fetching additional software from an external website and running it. If a cyberattacker exploits this, they can make the server that is running log4j run any software they want — including software that can completely take over that server. This is known as a Remote Code Execution (RCE) attack.

    To use a technical phrase, this is Really Bad.

    The net result is that, left unaddressed, cyberattackers right now can completely take over thousands of websites and online applications, allowing them to steal money, data, and access. The security community has been completely focused on this vulnerability for the past two days, and updating servers running log4j as quickly as possible to protect against this vulnerability.

    The good news is that mitigations are relatively easy to implement. The bad news is that left unmitigated, the vulnerability is extremely easy to exploit. iCloud, Minecraft, Baidu, and many other sites have been confirmed to be vulnerable so far, and you’ll likely hear more about many other sites being vulnerable in the coming days.

    And those companies are just the tip of the iceberg. LAMP stacks (Linux, Apache, MySQL, and PHP) are used as the technological underpinnings for a wide variety of web applications of all sizes. (It’s not universal, as NGINX has taken over as a market leader from Apache, and there are still a few all-Microsoft houses that use IIS, and neither of them have the vulnerability.)

    Open Source has been a revolutionary invention because it provides rapid development by armies of distributed developers, and Linus’s Law states that “with enough eyes, all bugs are shallow.” But there are tens of thousands of Open Source components out there running critical infrastructure that haven’t had nearly as many eyes on the code as the Linux kernel. It’s simply the nature of the beast. XKCD had a cartoon for this occasion:

    Internet applications gain usefulness from widespread adoption and the number of other components they tie into and support. You know what creates new vulnerabilities? A larger user base and the number of other components they tie into and support, which creates more attack surfaces for malicious actors to exploit.

    The flaw isn’t the fault of Random Guy in Nebraska, the fault is the company adopting software that they can’t possibly test for all the use-cases they’re going to use it for. Surprise! Just about every high tech company in the world is in the same boat. Pretty much everyone uses a wide panoply of open source tools for their Internet applications, and no one can test all the permutations of how each component might be put to use.

    You can’t eliminate the risk, you can only minimize and mitigate it. You can use containerization strategies (Docker, Kubernetes, Container D, etc.) to minimize attack surfaces and limit contagion. You can run all your code through security scanning tools on your CI/CD platform of choice. You can do constant testing and keep rolling backups of everything to limit risk and speed recovery. (You can also train your employees not to click on random email links without verifying the sender is who they say they are, and not to give any any account information or passwords over the phone, and train them enough so that the lessons stick, even though phising and human engineering weren’t factors in the Log4J vulnerability.)

    But there still a good chance that the platform you’re using today is different than the platform you’ll be using ten years from now, and you’ll have to go through the same learning lessons discovering new vulnerabilities for the new platform all over again.

    Castles made of sand all fall into the sea eventually…

    LinkSwarm for May 28, 2021

    Friday, May 28th, 2021

    Like inflation and unemployment, crime rates are rising again. Biden is really the 1970s gift that keeps giving!

  • Democrats are weaker than they appear:

    Vulnerable red- and purple-state Democrats need some bipartisan cover if they’re going to vote for another massive spending bill. And Biden would prefer to have a unified Democratic Party blaming Republicans for the inability to come to a consensus than to have a divided Democratic Party with one side of the Senate caucus blaming the other side of the Senate caucus for the inability to come to a consensus.

    Chuck Schumer is largely bluffing when he says the Senate will pass an infrastructure bill in July, with or without Republicans. Democrats can go down this path, but it’s a risk that at least a handful of their senators don’t want to take, and when the Senate is split 50–50, the Democrats can’t afford to lose anyone. Those with long memories can remember when Democrats were convinced all the legislation they passed in 2009 and 2010 would protect them in the midterms.

  • Speaking of Democrats in trouble, rising violent crime rates are another thing that might doom them in midterm elections:

    A rise in violent crime is endangering slim Democratic congressional majorities more than a year out from the midterm elections and threatening to revive “law and order” as a major campaign issue for Republicans for the first time since the 1990s.

    Homicides in cities increased by up to 40% over the previous year, the biggest single-year increase since 1960, a trend that has not abated so far in 2021. Sixty-three of the 66 largest police jurisdictions saw a rise in at least one category of violent crime, ranging from homicide and rape to robbery and assault, according to the Major Cities Chiefs Association. Homicides and shootings have gone up for three straight years in Washington, D.C., and at least a dozen mass shootings were reported nationwide over the weekend.

    Democrats’ flirtations with defunding the police — a handful of lawmakers on the Left nearly scuttled a $1.9 billion Capitol security bill in the House — may make them ill-equipped to handle the reemergence of crime as a top issue for voters.

  • Speaking of rising crime rates, having Soros-backed Democratic District Attorney Larry Krasner overseeing Philadelphia has helped create the largest open-air heroin market on the East Coast:

    Mirrors are useful. A hooker walking down the street can easily fix their makeup. They can lean on them when they nod out too. In addition, when a heroin addict has no more veins left to inject in their arms, that mirror can help them find one in their neck.

    It’s kind of hard to inject a needle in your neck otherwise. Think about it.

    You’ll eventually get a sideview mirror ripped off your vehicle sooner or later. It generally happens as they nod out or “dip out” when the drugs kick in. When they slump towards the ground, they generally just take the mirror with them.

    You also become way to comfortable with people “dipping out”. It’s the local dance craze around here. As heroin takes effect, it’s almost like they fall asleep on their feet — slowly getting ever so close to the ground. Miraculously, they rarely hit the pavement. Many yoga masters couldn’t duplicate their prowess.

    Dippers are everywhere. It’s so common, YouTube has endless clips up and down Kensington Avenue; many have hundreds of thousands of views. A YouTuber named “HoodTime” has over 5 million views on a walk he captured through Kensington March of this year. Many others are following suit.

    Just walking through Kensington and filming gets you instant material. There’s always something to see here. It’s sometimes hard to tell if you’re in America or a third-world nation at points. But money hides in trash and addiction.

    As Mike Newall explains in his article for the Philadelphia Inquirer, some of the drug corners near where I work pull in over $20 million a year. He also quotes Pennsylvania Attorney General Josh Shapiro as saying Kensington’s drug trade is close to a billion dollar a year enterprise.

    (Hat tip: Dwight.) There are ways to decriminalize drugs that don’t give a pass to widespread “quality of life” offenses. merely ceasing to prosecute people for open criminality doesn’t make the problems that open criminality engenders go away.

  • Even Ezra Klein says that rising crime rates are a threat to Democrats. Gee, I must have missed him expressing such concerns when antifa and #BlackLivesMatter were burning down large swathes of American cities last year…
  • In news of the Biden recession, both both inflation and unemployment picked up in April. (Hat tip: Stephen Green at Instapundit.)
  • “Gov. Ron DeSantis said Friday that he opposes teaching critical race theory in the state’s public schools, calling the ideas pushed by its advocates as ‘based on false history’ and ‘teaching kids to hate their country and to hate each other.'” Good.
  • Kurt Schlichter: Bring on the ‘Asperger’s Republicans’:

    Far too many Republicans, for far too long, have found themselves distracted and/or enslaved by the elite consensus, restrained by norms and conventions that the liberal elite demands we observe, but that it itself flaunts when those rules limit its options. These Fredocons care what people who care nothing about them think, and they find themselves responding to the outside stimuli of the garbage mainstream media instead of focusing intently on conservative change while disregarding the slings and arrows of the haters. When it comes to fighting the establishment, political Asperger’s is indicative of awesomeness.

    And our next generation of Republicans needs to embrace their place on the Spectrum – the more inappropriate the liberal elite finds their reactions to its cues and signals, the better. No more tame, pliable sissies like Mitt (R-ish – Miracle Whip). No more of Nikki! Haley’s sucking up to the establishment while trying to grift the base by leveraging hack conserva-cliché’s from 2005 to present to us as hardcore instead of Jeb! in a dress. No more Kristi!s and Asa!s fronting as all tuff about men pretending to be girls to win races then folding the second the establishment disapproves. Instead, we need GOP politicians who are utterly immune to the siren song of a media and an establishment that seek to draw them in and crash them upon the rocks. Our pols need to ignore MSNBCNN and its hysterical horsehockey. They need to stop reading the NYT and WaPo and being scared that a bad write-up will get them uninvited to all the cool parties. They need to lock onto their target and take it out like an Israeli missile flattens a Hamas/AP frat house.

    Look at Ron DeSantis – he just doesn’t care what the bad guys say. Not at all. They scream that he won’t enforce face-diapering, that he’s too hard on election fraud, that’s he’s declared open season on those Antifa/BLM nimrods who trap normal citizens in their cars on public roads, and then DeSantis just goes ahead and does what he wants anyway. And it works – he’s super popular.

  • Also weighing in against Critical Race Theory: Austin Knudsen, Montana’s Attorney General.
  • How Democratic foreign policy “experts” are projecting their own failures on Jared Kushner:

    For the past four years, there was no greater laughingstock in the American foreign policy cognoscenti than Jared Kushner. A full-on consensus reigned that cast the previous administration’s Middle East policies as hopelessly ignorant and one-sided, a view that went unchallenged in the smart set’s Op-Ed pages. There was no easier laugh to be had, no quicker way to pull a nodding agreement, than to mock the intelligence and good will of the former president’s son-in-law, charged with crafting an American peace plan, and obviously in way over his head.

    But the Young Pretender in charge of the Mideast portfolio is gone, and the mommies and daddies are back in charge, their think tanks falling over each other producing glossy full-color booklets promoting policies that would bring to bear the priorities of people who actually understood a thing or two about Israelis, Palestinians, international law, justice, and most importantly, American strategic interests.

    And four months into the methodical implementation of all the bright ideas reflecting off those glossy booklets, the situation on the ground in Israel and the Palestinian Territories has taken a dramatic turn for the worst.

    Though Kushner is long gone, this latest conflagration has been laid at his feet. His name trended on Twitter for days as hostilities between Israel and Hamas escalated. “They really put Jared Kushner, the slumlord millionaire who couldn’t properly fill out security clearance forms, in charge of Peace in the Middle East. Failure was inevitable,” read one viral tweet. “Kushner’s Absurd Peace Plan Has Failed” blared the headline to Michelle Goldberg’s New York Times column.

    This is not just wrong; it’s complete projection. Kushner-era policies—on Jerusalem, UNRWA, and regional diplomacy—were promised again and again to lead to an “explosion,” but didn’t. The return of the experts was supposed to improve lives and prospects for Israelis and Palestinians alike, but hasn’t. In fact, it was the foreign policy intelligentsia’s values and vision that have led to disaster.

    Back in March, mere weeks into the new Biden administration, a leaked internal State Department memo outlined the contours of a new direction on American policy toward the Palestinian issue. The document called for renewed diplomatic ties with the Palestinian Authority, restoring aid that had been cut, renewing American contributions to UNRWA, putting pressure on Israel for moves in Jerusalem that would make a new Palestinian Authority election possible, and pursuing a two-state arrangement based roughly on the pre-1967 lines.

    These were all priorities of the smart set miffed by a previous administration that was too close to Israel for their tastes. But they were also terrible ideas. Take the renewal of UNRWA funding. UNRWA is the U.N. agency dedicated to perpetuating, rather than solving, the Palestinian refugee problem. By cultivating the myth of a non-existent “right of return” rather than rehabilitating displaced persons and their descendants, UNRWA ensures that a negotiated two-state deal cannot be reached.

    (Hat tip: Stephen Green at Instapundit.)

  • Drew Holden takes us on a trip down memory lane of various MSM talking heads declaring that the Wuhan coronavirus lab leak hypothesis was a “conspiracy theory,” including all the usual suspects (New York Times, CNN, etc.).
  • “Washington, D.C., Attorney General Karl Racine (D) filed an antitrust lawsuit against Amazon Tuesday, alleging that the e-commerce giant has unfairly raised prices and hurt innovation.”
  • Glenn Greenwald: “A federal appellate court on Thursday invalidated the racial and gender preferences in President Biden’s $1.9 trillion American Rescue Plan Act as unconstitutional. The Cincinnati-based Sixth Circuit of Appeals ruled that provisions of that law, designed to grant preferences to minority-owned small-restaurant owners for COVID relief, violate the 14th Amendment’s guarantee of equal protection under the law.”
  • “Moms Demand Action [AKA another branch of the Brady Bunch Hydra] member-turned-congresswoman in hot water over bribe.” Allegedly newly-elected Illinois Rep. Marie Newman bribed opponent Lymen Chehade to drop out of the race, then reneged on the cushy congressional job.

  • “Support for Black Lives Matter Movement Collapses Among Whites and Hispanics, Drops For Blacks.” The only question is why it took so damn long, when it’s been obvious for a long time that it is radical marxist garbage.
  • Christian teacher suspended after opposing the district’s transgender doctrine. “The teacher, Byron “Tanner” Cross, made the defiant declaration at a Loudon County school board meeting on Tuesday, according to the nonprofit group, Parents Against Critical Race Theory.”
  • Ted Cruz gets Biden ATF director nominee David Chipman to admit under oath that he wants to ban the AR-15. (Hat tip: The Other McCain.)
  • Speaking of Ted Cruz: Israel has a right to defend itself.
  • “Hunter Biden’s Ukraine salary was cut two months after Joe Biden left office.” What a curious coincidence!
  • China Warns Australia’s Military Is “Weak“, Will Be “First Hit” In Any War With Western Alliance.” Knowing Australia, this is far more likely to piss them off than make them cower. Maybe Australia should develop it’s own nuclear arsenal…
  • CNN hits new lows. I suppose I should clarify that’s new ratings lows… (Hat tip: Ace of Spades HQ.)
  • Screwed up even by the standards of Baltimore.
  • Politifact tries to fact check The Babylon Bee yet again. (Hat tip: Director Blue.)
  • IDF stats:

  • Interesting: Higher reasoning functions wake up first from anesthesia. (Hat tip: Instapundit.)
  • Enjoy the original video for David Bowie’s “Space Oddity”.” A very different sound mix as well.
  • If you’d told me 10 years ago that one day Windows would run Linux apps, I’d give you a funny look. But that appears to be happening. “New Windows 10 test build adds first preview of Linux GUI apps on WSL.” That’s “Windows Subsystem for Linux.”
  • Now you’ll finally get a chance to read John Steinbeck’s werewolf novel.
  • “Public School Teachers Issue Students Their Summer Book-Burning Lists.”
  • “Newsom Announces Sweepstakes Where 5 Lucky Winners Get To Move Out Of California.”
  • A vicious pack pulls down its pray:

  • LinkSwarm for October 5, 2018

    Friday, October 5th, 2018

    Welcome to the season where ugly monsters in lurid costumes go running around shrieking at the sheer delight at scaring other people. And those are just the Democratic protestors on Capitol Hill!

    The Brett Kavanaugh cloture vote today, and the Supreme Court confirmation vote is Saturday. And Kavanaugh links dominate the top of this LinkSwarm:

  • Republicans are fired up after the Brett Kavanaugh hearings, and the Democratic edge for the 2018 midterms has disappeared. Or so says that notorious Republican shill organization, NPR.
  • More on the same subject:

    Let’s say you’re Joe Manchin in West Virginia. What you needed was for this nomination to be uncontroversial, and a sure thing for confirmation. A party-line contested vote the whole country is watching is a nightmare. Why? Because in a red state like the one Manchin represents, the majority will favor confirmation and find it to be a decisive issue in their vote — so Manchin voting against Kavanaugh will set him up to reap the wrath of the voters in a state which went 65 percent for Trump in 2016.

    But it’s worse than that for Manchin, because he doesn’t have a good escape from the Kavanaugh confirmation. You’d say his easy way out is to vote yes, except what the Left has done is to so whip up their voters with the Ford allegations and the copycats who followed that Manchin will lose votes from his own side if he votes to confirm the judge.

    This isn’t a theory, by the way. It’s what the polls show.

  • A new poll finds that 58 percent of voters in West Virginia think Brett Kavanaugh should be confirmed to the Supreme Court following his testimony to the Senate Judiciary Committee on Thursday.
  • The Public Opinion strategies poll commissioned by the Judicial Crisis Network found an overwhelming majority of West Virginians (59 percent) thought Kavanaugh’s testimony was more believable than Christine Blasey Ford, who accused the federal judge of sexually assaulting her more than 35 years ago at a drunken high school party. Those who believe Kavanaugh include 81 percent of Republicans, 43 percent of Democrats and 62 percent of Independent voters.
  • Manchin is locked in a dead-heat race against Patrick Morrissey, West Virginia’s Attorney General, and his vote is now going to be the defining issue in that race either way.

    Manchin’s conundrum isn’t unique. Claire McCaskill in Missouri is already a committed no on Kavanaugh, and her troubles have begun as well…

  • A new poll released by The Missouri Scout on Saturday shows that Republican challenger Josh Hawley has taken a two-point lead over Sen. Claire McCaskill (D-MO) in the Missouri Senate race just days after she announced she will be voting against the confirmation of Judge Brett Kavanaugh to the Supreme Court.
  • Hawley leads McCaskill by a margin of 48 percent to 46 percent in the poll conducted by Missouri Scout over two days, from Wednesday, September 26 to Thursday, September 27.
  • McCaskill announced her opposition to Kavanaugh on September 19. The second day of the poll was conducted on the same day Judge Kavanaugh and Dr. Christine Blasey Ford, who has accused him of attempting to sexually assault her 36 years ago at a time and place she cannot recall and with no corroborating witnesses or evidence, testified before the Senate Judiciary Committee.

    The Missouri Scout poll had worse news for the incumbent Democrat — in that what’s driving down her numbers is unquestionably the Kavanaugh vote…

  • Significantly, the poll found that 49 percent of likely voters said the Supreme Court confirmation process for Brett Kavanaugh has made them less likely to vote for McCaskill, while only 42 percent said it made them more likely to vote for her.…
  • Among female respondents, 47 percent said the confirmation process made them less likely to vote for McCaskill, while 42 percent said it made them more likely.
  • Among male respondents, 50 percent said the confirmation process made them less likely to vote for McCaskill, while 41 percent said it made them more likely.
  • Among Non-Partisan respondents, 46 percent said the confirmation process made them less likely to vote for McCaskill, while 39 percent said it made them more likely.
  • Among Republican respondents, 85 percent said the confirmation process made them less likely to vote for McCaskill, while 8 percent said it made them more likely.
  • Among Democrat respondents, 82 percent said the confirmation process made them more likely to vote for McCaskill, while 8 percent said it made them less likely.
  • Also, a new poll commissioned by NBC North Dakota News showed the race between Democrat incumbent Heidi Heitkamp and Republican challenger Kevin Cramer has the latter with a commanding 51-41 lead. That poll has the Kavanaugh nomination as the most important (with 21 percent) of nine named issues in the race, with 60 percent of North Dakota voters polled saying they support the judge’s confirmation against only 27 percent opposed. Heitkamp has publicly called herself a “no” vote, which amounts to more or less a surrender in the race. Without North Dakota, there is only a minuscule chance of the Democrats winning control of the Senate.

  • And still more:

    Of all the cohorts measured by the poll (including Independent men and women), Democratic women are the only group to display less enthusiasm for the midterms this week than they did in July. Meanwhile, Republican women seem invigorated. In July, 81 percent of Democratic women said the November elections were very important, compared to 71 percent of Republican women. Now, Republican women are 4 percentage points likelier to view the midterms that way (83 percent to 79 percent). That’s a 14-point swing in female voters’ interest in the midterms—after the hearings, and in Republicans’ favor.

    (Hat tip: Instapundit.)

  • “Will the ‘Brett Bounce’ Unseat Bob Menendez in New Jersey?” Let’s hope so. (Hat tip: Stephen Green at Instapundit.)
  • “Accused doxxer of GOP senators allegedly threatened to publish lawmakers’ children’s health info.” I just can’t imagine why Republicans are so upset with Democrats in congress…

  • And unless Kavanaugh is confirmed, things will get worse:

    There is no circumstance where everyone involved with those norm-breaking steps suddenly wakes up, has a crisis of conscience, and realizes that they were morally wrong. The only way they decide not to take similar steps in the future is if they conclude that those steps are not effective.

    If these sorts of tactics work, we will get more of them. Right now, Kavanaugh could be a squish who wimps out on Roe vs. Wade and I’d still want him on that court, because this isn’t really about him anymore. This is about what kind of proof is needed before you believe a man is a monster. This is about whether decades of respected public and private life can be wiped away by an allegation without supporting witnesses. This is about whether anyone who ever knew you at any chapter of your life can suddenly come forward and paint you as a malevolent deviant of every kind . . . or whether people who never knew you at any chapter of your life can suddenly come forward and paint you as a malevolent deviant of every kind.

  • The Democrats’ war against the presumption of innocence:

    Social justice presumes the guilt of certain people because of their politics, their positions, their races and their genders. It creates different rules for different classes of people with some entitled to an absolute presumption of innocence, even in the face of indisputable guilt, and others forced into an equally absolute presumption of guilt, even in the absence of any indisputable proof of their guilt.

    America cannot operate under two systems of guilt and innocence, one public and one private. If the majority of Americans are to be judged by a system that presumes their guilt, that attitude will inevitably go on to permeate the courtroom. By eroding the presumption of innocence in public life, the left is eroding it as a legal right. Lynch mobs and kangaroo courts can’t be expected to stop at the courthouse door when they are celebrated and operate freely throughout the rest of the land.

    Kavanaugh’s case is about more than the malicious exploitation of the #MeToo movement to destroy a political opponent. It’s the latest assault on the social presumption of innocence by shadowy forces whose ‘scoops’ dominate the media through cut-outs while their sources remain silently invisible.

    If kangaroo courts and media lynch mobs succeed in overturning a Supreme Court appointment, they will have proven that their war on the presumption of innocence extends even to the highest court in the land. If a Supreme Court justice can’t be presumed innocent, what hope do the rest of us have?

    (Hat tip: Director Blue.)

  • Let’s not put too fine a point on it: Christine Blasey Ford is a liar.

  • China used it’s supply chain to implant a spy chip in many of America’s top companies, including Apple and Amazon. This is why outsourcing so much of your technological infrastructure is a national security issue.
  • Apple and Amazon issue strenuous denials. I’m not sure they could do otherwise, even if the allegation is true, especially since Amazon currently derives the lion’s share of its profits from AWS. (Hat tip: Stephen Green at Instapundit.)
  • President Donald Trump’s approval rating hits 50%.
  • Including 35% of blacks. That’s disasterous for Democratic electoral chances. (Hat tip: Director Blue.)
  • Theresa May will change her Brexit policy, or the Tories will change their leader.

    Worse than Remain? Well, yes. May’s Brexit proposals — now known as “Chequers,” after the PM’s country house, where they were imposed on a surprised cabinet days after May had personally assured the secretary of state for exiting the EU that she had no such intentions — would effectively keep Britain inside the EU’s single market (i.e., by accepting its current and future regulations) and its customs union, and keep it subject to the jurisdiction of the European Court of Justice while forfeiting its votes in all EU institutions.

    Not enough for you? Then ponder this: The London Times has reported that the government is now prepared to cut a deal with the EU that would prevent a post-Brexit U.K. from reaching free-trade deals with other countries such as Australia, Canada, and . . . the United States. Such a deal would breach the reddest of red lines laid down by Theresa May and the Tory party since the 2016 referendum. Yet no one thinks the report is mistaken. And May has continued to say in interviews that final agreement with the EU will require concessions from both sides. But what has May left to concede?

  • More pushback on the Linux SJW-inspired CoC change. (Hat tip: Borepatch.)
  • Saudi solar project flops. (Hat tip: Stephen Green at Instapundit.)
  • 96 sheriffs endorse Ted Cruz.
  • Austin government needs an independent audit. Naturally the the city power structure is opposed…
  • “Kamala Harris: ‘We Would Apply The Same Fair Standards To Any SCOTUS Nominee Whose Life We Were Trying To Destroy.'”
  • A typeface to help retain memory? There’s just one tiny problem…

  • First edition of The Wealth of Nations to be auctioned.
  • “Bottle of whisky sold for world record £848,000.”
  • Swedish road covered in herring after elk accident.”
  • Happy birthday, Wallace Stevens.
  • LinkSwarm for September 28, 2018

    Friday, September 28th, 2018

    We have survived Kavanaugh Week and made it to fall. On to the LinkSwarm:

  • Republican senate insiders are saying they have the votes to confirm Kavanaugh.
  • Alan Dershowitz: Kavanaugh has “more corroboration on his side”:

  • Sen. Chuck Grassley’s office gets respectful messages opposing Kavanaugh. Ha! Just kidding! “I hope you get raped.” (Hat tip: Ace of Spades HQ.)
  • Why are Democrats so violent?” (With examples.)
  • The Kavanaugh attacks were so vile they turned Lindsey Graham into Phil Gramm.
  • Entire nail salon full of women agree: “I’m disgusted at the whole thing. It’s totally political.” (Hat tip: Director Blue.)

  • Russian collusion theory: sad as a wrinkled little balloon.
  • Tweet:

  • Dem Rep Brings Convicted Money Launderer onto Full-Time Staff.”

    Democratic representative Alcee Hastings (Fla.) has officially brought a convicted money launderer onto his full-time staff after paying the individual for “part-time” work over the past several years.

    Dona Nichols Jones, who has received compensation from Hastings since April 2014 for what was listed as “part-time” employment as an aide and community liaison out of his Palm Beach County office, is now listed as a “staff assistant” in his office, Legistorm filingsshow.

    Dona Nichols Jones is married to Mikel Jones, who worked for Rep. Hastings from 1993 to 2011 as a district administrator. The couple was convicted of money laundering, conspiracy, and fraud in 2011 after they had used hundreds of thousands of dollars from a business loan for personal use.

  • Multi-deported illegal alien arrested for multiple baseball bat murders.
  • More on Linus Torvalds caving to Social Justice Warrior demands.
  • Online voting: Why you should be terrified:

    Online voting is a persistently bad idea, one that is only liked by people who are completely ignorant of the security issues, and yet one that seemingly will not go away. If you are suspicious that Stalin’s dictum of it’s not who cast the vote that matters, what’s important is who counts the vote is in play here, you’re not the only one.

  • Did three unnamed UT officials just pull a dirty sex smear on Republican State Senator Charles Schwertner? (Schwertner​ is my state senator, though I do not know him personally.)
  • Cop: “Pull over!” Driver: “No! I drive a Prius!.”
  • A San Antonio Baptismal Book from 1703.
  • “Denton, Denton! You’ve got (clap) baby punching!” (Hat tip: Dwight. You’ll just have to figure out the obscure tagline reference on your own…)
  • “Delay Tactics: The Democrats Just Demanded The Senate Watch All 639 Episodes Of ‘The Simpsons’ Before Kavanaugh Vote.”
  • The Finalists for the Wildlife Comedy Photo Awards.

    (Hat tip: Amy Alkon on Twitter.)

  • LinkSwarm for September 21, 2018

    Friday, September 21st, 2018

    And you may ask yourself how did I get here why I didn’t do any blog posts about the “bombshell” Brett Kavanaugh allegations earlier this week? Simple: They were as obviously stupid as they were predictable. Thanks to my sloth foresight, I managed to avoid writing about the mess before the Democrats’ unpopular ploy collapsed into the stinking pile of garbage it always was!

  • More on the Democrats’ Kavanaugh stupidity:

    The tactics they’re now employing against Kavanaugh, while extreme, are nothing new for them. They’ve always shot from the hip and aimed for the heart, hoping to sway public opinion by means of passion rather than reason. The more convinced they are of the righteousness of their cause—call it their “higher loyalty” to the arc of history—the more antic they get, like chimps in the zoo at feeding time, moving from whingeing servility to outright viciousness the hungrier they get. Left unchecked, even the cuddliest Cheetah eventually will rip off your face.

    (Hat tip: Stephen Green at Instapundit.)

  • There should be a big difference between vague accusations of sexual assault 35 years ago and documented instances of assault from last year, as in the case of Keith Ellison. But the media seem strangely incurious about the congressman and DNC vice-chair…
  • Do all-girl preppie high schools typically approve of blackout drinking and teenage sex? I can’t even imagine anyone even trying to document such antics in my own high school yearbook.
  • “Trump Hit Iran With Oil Sanctions. So Far, They’re Working.” Or so says those notorious pro-Trump shills at the New York Times
  • “Foreign money bankrolls climate change lawsuits against US oil companies.” (Hat tip: Steve Malloy on Twitter.)
  • Japan issues warning to China by conducting military exercises in the South China Sea.
  • Donald Trump’s race against death.” (Hat tip: Director Blue.)
  • This seems worrisome:

    The real news is that Linux, the project, adopted the “Contributor’s Covenant” code of conduct and thereby acknowledged SJW ideological supremacy. The CC is an SJW vehicle promulgated by Coraline Ada and a related group of activist malcontents. While the CC appears on the surface to be a call of civility, it’s actually the tip of a very long and exsanguatory anti-meritocracy spear, one that ultimately seeks to elevate high-verbal-IQ non-technical politics-playing San-Francisco-residing cliques of social justice advocates into positions of recognition and authority in the free software world and beyond. If you write code and you’re good at it, these people are a direct threat to your status, your hobby, and your livelihood, because if these people get their way, your technical excellence becomes secondary to their wokeness.​

  • #MeTooFar:

  • Republican congressmen demonstrates provable sexual misconduct. GOP: “Resign, sleazeball.” Democratic state senator demonstrates sleazy, felonious personal conduct. Democrats: “We shall defend him to our last breath! Or, you know, until he’s actually convicted.” Result: Republicans now hold all those seats.
  • Beto O’Rourke says we need an illegal alien amnesty so Mexicans can work cotton gins. (Hat tip: Director Blue.)
  • Want a healthier heart? Eat a steak.
  • Bert and Ernie are not gay. So says their actual creator.
  • Solar Observatory closed by the FBI. Old and Busted explanation: Aliens! The New Hotness: Child porn server.
  • Aleksandr Solzhenitsyn should be awarded the Presidential Medal of Freedom. Wait, Solzhenitsyn wasn’t already awarded the Medal of Freedom? (Hat tip: The Other McCain.)
  • “A US tech company was found guilty of abusing the H-1B visa.” That’s People Tech Group, for those of you playing along on the home game…
  • Apple-1 computer for sale. 1 MHz processor, 4K of memory. Current bid: $175,000.
  • Suge Knight pleads guilty to manslaughter, to spend 28 years in the big house. (Hat tip: Dwight.)
  • Oh Florida Man, don’t ever change:

    The operator of a Florida-based animal sanctuary says she was the target of an Oklahoma zookeeper who was indicted last week on federal murder-for-hire charges.

    Carole Baskin of Big Cat Rescue said she’s clashed in the past with Joseph Maldonado-Passage, who goes by the nickname “Joe Exotic.”

    “He’s been threatening me for many, many years,” Baskin told The Oklahoman after Maldonado-Passage’s arrest last week.

    Prosecutors allege that Maldonado-Passage tried to hire two separate people to kill an unnamed woman, who wasn’t harmed. One of the unidentified people he sought to hire connected him with an undercover FBI agent, who met with Maldonado-Passage in December 2017. The indictment was unsealed Friday and Maldonado-Passage remains jailed in Florida. He didn’t reply to an email seeking comment and court records don’t list an attorney for him.

    Is there a mugshot? Why yes. Yes there is.

  • Facebook Adjusts Algorithm To Show You Even More Terrible Content.” I’m glad they mentioned that super-annoying Ray-Ban tag spam. Also this:

    Content will also appear in a completely jumbled, totally incoherent order, even more so than before. “Something that was posted a few minutes ago you’ll probably never see, even if you try. But stuff that got posted three weeks ago, we’ll plaster your screen with it to no end.”