我们蠢人也有说话的权利吧

我也是支黑啊，搖了我吧

仰止？那個問答網站？2047 的姊妹計畫嗎？

神蛆就是神畜。

别说普通考试了，就算出IMO的题，想刷号的人分分钟用AI给你刷爆。

thphd这么多年来一直以为当年那个膜乎外交部是mohumo，或者是原膜乎用户【菅义伟】，其实另有他人。事情就是这么狗血。

原膜乎用户【岛村卯月】，自己在拜登论坛注册“膜乎外交部”账号，未和他人商量，私下代表膜乎全体用户答应与thphd合作的。

我寻思全世界的服务器不都是私有的吗，难道还能有公有服务器？

真·公有服务器不就成公共厕所了。

神经是一本好书，适合发神经

这个帖子原版是thphd发的

哪还有实验自杀的？

你是誰？r/mohu 創建者 hengyuanshi，以及我，對於「與 2047 合作」的事項似乎都不知情。

被支黑给气走的

natasha 咋了 求科普

本站也是私有服务器，请对本站也保持谨慎，使用安全的工具浏览本站

另外我要补充一点，本站对外链图片有白名单限制，不知道或者懒得搞的朋友请贴上图片URL而不是插入图片。当然读者们也可以通过点击菜单-查看源码来找到帖子插入的图片。

深绿有深绿政党，民进党统战不了，也不想统战，因为民进党更想搞大帐蓬统战浅蓝。从蔡英文又是赞赏蒋经国又是强调中华民国的时候就看出来了，民进党是执行牺牲深绿，吸收浅蓝，坐稳自己的浅绿基本盘的玩法。

呵呵，阿篱注册了多少个小号你不知道吗？考试并不能限制蠢人，只能限制懒人。

woc，原来之前注册需要考试啊，这解答了我的很多疑惑。

之前我一直奇怪为什么论坛的素质下降的这么快，原来是因为之前有门槛。

感觉要想保障理性平和的风格，论坛只能走两条路：

1. 通过考试，限制蠢人入内；

2. 管理员铁腕删帖，不让太蠢的发言被看到。

欢迎台湾人解答

民进党是否容许无党籍真绿 不是萁娃娃垃圾不分蓝白那种

我往往會把粉紅和支黑當作他們真的那樣想，重要的是正常的討論氛圍不能被破壞。如今經驗證明，嚴格管理才是出路，對支黑必須格殺勿論，雖然極有可能招來這類人的污名化。

仰止站長還是too young,這些天不管支黑言論了，還是有不少人在意論壇的氣氛的，放任支黑就是噁心他們，降低他們來造訪和發表內容的意願。

图发不出来，凉凉

欧盟各国好好反省一下吧，什么叫吃相难看，口嫌体正直

请来那么多“临时难民”好吃好喝供着，结果人家也不找工作

我家大门常打开，开给Islamists 和 Jihadists ？

送了两架飞机就全网瞎jb宣传

调查报告一出，你才给乌军援助了那么一点钱？都花在高等难民福利身上了吧？

神蛆是什么网络群体

以色列是不让美国省心的罗马帝国外交负资产 不是AIPAC影响力极大 抛弃以色列挣取中东国家其实明智 冷战终结后伊拉克战争之前的九十年代 以色列就是鸡肋 苏联都没了 中东国家可以投靠

其实维尼是中共异类 中共原来本质是类似越共+钱权色 以前很瞧不起中国老百姓的 以前胡时代不说爱国 又有什么可说的话语体系？

让川普放飞自我世界可能会毁灭 右派也分很多种 川普心底可能是野兽派

新注册的神蛆天天没事找事试图政变罢了

女权要彩礼 要独立 这本质就是矛盾的 核心就是自私的利益主义

这个站也应该明确不欢迎任何仇恨言论 禁止种族主义词语

神畜疑似有组织 污染海外中文圈 可能真有大外宣存在

歡迎回來2047。 站長出事了，網站復活後新帳號註冊不需要入站考試，以往最活躍的那批人都沒來了，管理制度變得很寬鬆。於是幾個月的時間就把過去溫和友善的人文氣息給整沒了¯_(ツ)_/¯

2047原则上不会对在站内贴出的外部链接（以及宣称能够进行安全通信的“私有服务器”）进行额外审查，除非它们对2047网站本身的安全构成直接危害。

请诸位自行斟酌访问这些外链以及使用来路不明的通信服务器的潜在安全风险，切勿抱持“只要是没有被2047站方删除的帖子，其发帖者所说的内容就一定可靠、可信”的错误观点。

伟人说，人总是要死的

thphd说，品葱是要完的

2047之赛博疯人院，彻底疯狂

5年过去了，新品葱不仅还在，每天还有不少新帖。倒是贵站不仅凉透了，连你也失踪了。

暂时就这一篇

不搞修正主义行吗？

HI,不知道還有沒有人記得我@@ 翻看自己的帖，好像還在三年前， 豆沙餡，遙遙，梓喵，rebeca 不知大家是否安好。 隨著我生活安定，又來尋回大家了。

ps:看到站內戾氣有些重，不知發生了什麼，有人可以告訴我嗎@@

支那🐷骂她是因为性权利是阶级地位的真正反映，国男无法接受自己在性歧视链是最底层的事实

但混乱仍会持续一段时间

这是一篇付费墙The Atlantic文章，请多多支持订阅The Atlantic

马斯克的政府效率部真实的目的并不是要提高政府效率，而是要消除联邦公民社会服务（非党派或意识形态 尊重法治和宪法 政治中立 执行合法的政策改变）及公民服务的文化和价值观，之后取代的是一种要求忠诚效忠的赞助人制度，不再会是服务所有美国人。

删了一些，不是全文。

How regime change happens in America

Anne Applebaum

Despite its name, the Department of Government Efficiency is not, so far, primarily interested in efficiency. DOGE and its boss, Elon Musk, have instead focused their activity on the eradication of the federal civil service, along with its culture and values, and its replacement with something different. In other words: regime change.

No one should be surprised or insulted by this phrase, because this is exactly what Trump and many who support him have long desired. During his 2024 campaign, Trump spoke of Election Day as “Liberation Day,” a moment when, in his words, “vermin” and “radical left lunatics” would be eliminated from public life. J. D. Vance has said that Trump should “fire every single mid-level bureaucrat, every civil servant in the administrative state, replace them with our people.” Steve Bannon prefers to talk about the “deconstruction of the administrative state,” but that amounts to the same thing.

These ideas are not original to Vance or Bannon: In the 21st century, elected leaders such as Hugo Chávez or Viktor Orbán have also used their democratic mandates for the same purpose.. Chávez fired 19,000 employees of the state oil company; Orbán dismantled labor protections for the civil service. Trump, Musk, and Russell Vought, the newly appointed director of the Office of Management and Budget and architect of the Heritage Foundation’s Project 2025—the original regime-change blueprint—are now using IT operations, captured payments systems, secretive engineers, a blizzard of executive orders, and viral propaganda to achieve the same thing.

This appears to be DOGE’s true purpose. Although Trump and Musk insist they are fighting fraud, they have not yet provided evidence for their sweeping claims. Although they demand transparency, Musk conceals his own conflicts of interest. Although they do say they want efficiency, Musk has made no attempt to professionally audit or even understand many of the programs being cut. Although they say they want to cut costs, the programs they are attacking represent a tiny fraction of the U.S. budget. The only thing these policies will certainly do, and are clearly designed to do, is alter the behavior and values of the civil service. Suddenly, and not accidentally, people who work for the American federal government are having the same experience as people who find themselves living under foreign occupation.

What precisely replaces the civil-service ethos remains unclear. Christian nationalists want a religious state to replace our secular one. Tech authoritarians want a dictatorship of engineers, led by a monarchical CEO. Musk and Trump might prefer an oligarchy that serves their business interests. Already, DOGE has attacked at least 11 federal agencies that were embroiled in regulatory fights with Musk’s companies or were investigating them for potential violations of laws on workplace safety, workers’ rights, and consumer protection.

The new system, whatever its ideology, will in practice represent a return to patronage, about which more in a minute. But before it can be imposed, the administration will first have to break the morale of the people who believed in the old civil-service ethos. Vought, at a 2023 planning meeting organized in preparation for this moment, promised exactly that. People who had previously viewed themselves as patriots, working for less money than they could make in the private sector, must be forced to understand that they are evil, enemies of the state. His statement has been cited before, but it cannot be quoted enough times: “We want the bureaucrats to be traumatically affected,” he said at the time. “When they wake up in the morning, we want them to not want to go to work because they are increasingly viewed as the villains … We want to put them in trauma.”

But the true significance of USAID’s destruction is the precedent it sets. Every employee of every U.S. department or agency now knows that the same playbook can be applied to them too: abrupt funding cuts and management changes, followed by smear campaigns. The Consumer Financial Protection Bureau, which safeguards bank customers against unfair, deceptive, or predatory practices, is already suspended. The Environmental Protection Agency and the Department of Education, which mostly manages student loans, may follow. Within other agencies, anyone who was involved in hiring, training, or improving workplaces for minority groups or women is at risk, as is anyone involved in mitigating climate change, in line with Trump’s executive orders.

In addition, Musk has personally taken it upon himself to destroy organizations built over decades to promote democracy and oppose Russian, Iranian, and Chinese influence around the world. For example, he described the journalists of Radio Free Europe/Radio Liberty, who take extraordinary risks to report in Russia, Belarus, and in autocracies across Eurasia, as “radical left crazy people.” Not long after he posted this misleading screed on X, one RFE/RL journalist was released from a Belarusian prison after nearly three years in jail, as a part of the most recent prisoner exchange.

Putting them all together, the actions of Musk and DOGE have created moral dilemmas of a kind no American government employee has faced in recent history. Protest or collaborate? Speak up against lawbreaking or remain silent? A small number of people will choose heroism. In late January, a career civil servant, Nick Gottlieb, refused to obey an order to place several dozen senior USAID employees on administrative leave, on the grounds that the order violated the law. “The materials show no evidence that you engaged in misconduct,” he told them in an email. He also acknowledged that he, too, might soon be removed, as indeed he was. “I wish you all the best—you do not deserve this,” he concluded.

Others will decide to cooperate with the new regime—collaborating, in effect, with an illegal assault, but out of patriotism. Much like the Ukrainian scientists who have kept the Zaporizhzhia nuclear power plant going under Russian occupation because they fear catastrophe if they leave, some tech experts who work on America’s payment systems and databases have stayed in place even as Musk’s team of very young, very inexperienced engineers have demanded illegitimate access. “Going into these systems without an in-depth understanding of how they work both individually and interconnectedly is a recipe for disaster that will result in death and economic harm to our nation,” one government employee told my Atlantic colleagues Charlie Warzel and Ian Bogost.

Eventually, demonstrations of loyalty might need to become more direct. The political scientist Francis Fukuyama points out that a future IRS head, for example, might be pressured to audit some of the president’s perceived enemies. If inflation returns, government employees might feel they need to disguise this too. In the new system, they would hold their job solely at the pleasure of the president, not on behalf of the American people, so maybe it won’t be in their interest to give him any bad news.

And the fate of federal employees will, in turn, serve as a precedent for what will happen to other institutions, starting with universities. Random funding cuts have already shocked some of the biggest research universities across the country, damaging ongoing projects without regard to “efficiency” or any other criteria. Political pressure will follow. Already, zealous new employees at the National Science Foundation are combing through descriptions of existing research projects, looking to see if they violate executive orders banning DEI. Words such as advocacy, disability, trauma, socioeconomic, and yes, women will all trigger reviews.

There are still greater dangers down the road—the possible politicization of the Federal Electoral Commission, for example. Eventually, anyone who interacts with the federal government—private companies, philanthropies, churches, and above all, citizens—might find that the cultural revolution affects them too. If the federal government is no longer run by civil servants fulfilling laws passed by Congress, then its interests might seriously diverge from yours.

None of this is inevitable. Much of it will be unpopular. The old idea that public servants should serve all Americans, and not just a small elite, has been part of American culture for more than a century. Rule of law matters to many of our elected politicians, as well as to their voters, all across the political spectrum. There is still time to block this regime change, to preserve the old values. But first we need to be clear about what is happening, and why.

如果你对命令行深恶痛绝，本教程是你的不二之选。

如何用GPA(GNU Privacy Assistant)校验签名？

一、创建自己的密钥

1.安装GPA。如果你在用whonix那么你的虚拟机中已经预装了GPA。

2.启动GPA。在程序菜单里找，这个也没什么好说的。

3.如果你是第一次启动它，它会问你是否要产生私钥(private key)，选“Generate key now”。如果它没有问你，菜单栏里找 Keys/new key...，效果等同。

4.在“Your Name”输入你的暱称，当然别填真实姓名。然后点下一步（Forward）。

5.在“Your Email Address”填写你的邮箱。在熟悉密匙管理前，建议不要填写真实存在的邮箱。你可以不填或者随便编一个邮箱，

6.“Do you want to create a backup copy?”，你想创建一个副本吗？选“Do it later”

7.“Please enter the passphrase to protect your new key”，为你的密钥设置密码。

8.如果你的密码太简单，它会让你重新设置。选“Enter new passphrase”。

9.随便晃晃鼠标，等密钥创建完毕。

二、导入别人的公钥

怎么辨别公钥？

如果你看到一段乱码开始的一行是这样： “-----BEGIN PGP PUBLIC KEY BLOCK-----” 结束的一行是这样： “-----END PGP PUBLIC KEY BLOCK-----” 这段文本就是他们的公钥（public key）

有的公钥是写在文本文件里的，有的是贴在网页里的。无论什么形式，当你要用它时，把它复制到一个txt文件里。

1.启动GPA

2.点导入（import），选你复制/下载的别人的公钥

3.鼠标右击选中导入的公钥。点“Sign Keys”。

4.输入第一章节第7步你设置的密码。接下来你就可以用这个公钥验证他们的签名了。

三、校验签名

怎么辨别签名？

如果你看到一段乱码开始的一行是这样：

-----BEGIN PGP SIGNATURE-----

结束的一行是这样：

-----END PGP SIGNATURE-----

这段文本就是他们对某个文件或者某段话的签名（SIGNATURE）。在量子计算机足以破解PGP前，签名可以证明所签名的文本或文件来源于——作者本人，与公钥相对应的私钥的持有者。

签名有两种形式：

1.文本文件:通常以.sig或者.asc结尾 2.纯文本：以-----BEGIN PGP SIGNATURE-----为开头出现在网页中，如果你得到的文本是这样的：

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

一段金玉良（fei）言（hua）
-----BEGIN PGP SIGNATURE-----
一堆乱码
-----END PGP SIGNATURE-----

其中一堆乱码就是对一段金玉良（fei）言（hua）的签名，这段属于纯文本的形式。

下面将讲解如何处理两种形式的签名：

文本文件：

1.启动GPA

2.在菜单里找windows/File Manager

3.准备签名文件和你想验证的文件，通常签名文件是被校验的文件的文件名加后缀“.sig”，检查它们的名称是否一致（重点），把两个文件放在同一个文件夹。

4.点Open选择你想校验的文件。

5.点Verify

纯文本：

1.启动GPA

2.在菜单里找windows/Clipboard

3.把类似这样的文本粘贴到GPA-Clipboard

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

一段金玉良（fei）言（hua）
-----BEGIN PGP SIGNATURE-----
一堆乱码
-----END PGP SIGNATURE-----

4.点Verify

四、实战：验证Warrant Canary

本文以qubes.live的Warrant Canary为例，Warrant Canary是一种定期报平安的方式。

该团队的的公钥在：

https://blog.qubes.live/rule

Canary声明:

https://blog.qubes.live/2025/02/04/Qubes-live-Canary-1/

1.打开网页https://blog.qubes.live/rule，创建三个文本文件，分别用于存储该页的三个公钥。

2.启动GPA。

3.导入三个公钥。

4.鼠标右击选中导入的公钥，点“Sign Keys”。三个公钥所以要操作三次。

5.打开网页https://blog.qubes.live/2025/02/04/Qubes-live-Canary-1/，复制第一个代码块中的文本。

6.在文件管理器中创建文本文件“Qubes-live-Canary-1”，粘贴文本，保存，关闭。

7.在网页找到第二个代码块Bar’s PGP signature，复制。这里以Bar的签名为例，如果你想验证其他人的签名，复制其他人的公钥，并且重复7~11。

8.在文件管理器中同一个文件夹里创建文本文件“Qubes-live-Canary-1.sig”，粘贴文本，保存，关闭。

9.启动GPA，在菜单里找windows/File Manager

10.点Open，选择你刚刚保存的文件“Qubes-live-Canary-1”

11.点Verify。“GPA found a file that could be a signature of .... Would you like to verify it instead?”，点Yes。如果显示绿色的Valid则验证成功，如果显示其它的，考虑一下是不是你的操作有问题，也有较小可能是信息遭到了篡改。

参考：

验证Qubes Canary：https://www.qubes-os.org/news/2024/06/14/canary-039/

(license: CC 3.0)

我的公钥

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=EVl7
-----END PGP PUBLIC KEY BLOCK-----

签名

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

如果你对命令行深恶痛绝，本教程是你的不二之选。

如何用GPA(GNU Privacy Assistant)校验签名？

一、创建自己的密钥

1.安装GPA。如果你在用whonix那么你的虚拟机中已经预装了GPA。

2.启动GPA。在程序菜单里找，这个也没什么好说的。

3.如果你是第一次启动它，它会问你是否要产生私钥(private key)，选“Generate key now”。如果它没有问你，菜单栏里找 Keys/new key...，效果等同。

4.在“Your Name”输入你的暱称，当然别填真实姓名。然后点下一步（Forward）。

5.在“Your Email Address”填写你的邮箱。在熟悉密匙管理前，建议不要填写真实存在的邮箱。你可以不填或者随便编一个邮箱，

6.“Do you want to create a backup copy?”，你想创建一个副本吗？选“Do it later”

7.“Please enter the passphrase to protect your new key”，为你的密钥设置密码。

8.如果你的密码太简单，它会让你重新设置。选“Enter new passphrase”。

9.随便晃晃鼠标，等密钥创建完毕。

二、导入别人的公钥

怎么辨别公钥？
如果你看到一段乱码开始的一行是这样：
“-----BEGIN PGP PUBLIC KEY BLOCK-----”
结束的一行是这样：
“-----END PGP PUBLIC KEY BLOCK-----”
这段文本就是他们的公钥（public key）

有的公钥是写在文本文件里的，有的是贴在网页里的。无论什么形式，当你要用它时，把它复制到一个txt文件里。

1.启动GPA

2.点导入（import），选你复制/下载的别人的公钥

3.鼠标右击选中导入的公钥。点“Sign Keys”。

4.输入第一章节第7步你设置的密码。接下来你就可以用这个公钥验证他们的签名了。

三、校验签名

怎么辨别签名？
如果你看到一段乱码开始的一行是这样：
“-----BEGIN PGP SIGNATURE-----”
结束的一行是这样：
“-----END PGP SIGNATURE-----”
这段文本就是他们对某个文件或者某段话的签名（SIGNATURE）。在量子计算机足以破解PGP前，签名可以证明所签名的文本或文件来源于——作者本人，与公钥相对应的私钥的持有者。



签名有两种形式：
1.文本文件:通常以.sig或者.asc结尾
2.纯文本：以“-----BEGIN PGP SIGNATURE-----”为开头出现在网页中，如果你得到的文本是这样的：

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

一段金玉良（fei）言（hua）
- -----BEGIN PGP SIGNATURE-----
一堆乱码
- -----END PGP SIGNATURE-----

其中“一堆乱码”就是对“一段金玉良（fei）言（hua）”的签名，这段属于纯文本的形式。



下面将讲解如何处理两种形式的签名：
文本文件：
1.启动GPA

2.在菜单里找windows/File Manager

3.准备签名文件和你想验证的文件，通常签名文件是被校验的文件的文件名加后缀“.sig”，检查它们的名称是否一致（重点），把两个文件放在同一个文件夹。

4.点Open选择你想校验的文件。

5.点Verify


纯文本：
1.启动GPA

2.在菜单里找windows/Clipboard

3.把类似这样的文本粘贴到GPA-Clipboard
“-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

一段金玉良（fei）言（hua）
- -----BEGIN PGP SIGNATURE-----
一堆乱码
- -----END PGP SIGNATURE-----”

4.点Verify

四、实战：验证Warrant Canary
本文以qubes.live的Warrant Canary为例，Warrant Canary是一种定期报平安的方式。
该团队的的公钥在：
https://blog.qubes.live/rule
Canary声明:
https://blog.qubes.live/2025/02/04/Qubes-live-Canary-1/

1.打开网页https://blog.qubes.live/rule，创建三个文本文件，分别用于存储该页的三个公钥。

2.启动GPA。

3.导入三个公钥。

4.鼠标右击选中导入的公钥，点“Sign Keys”。三个公钥所以要操作三次。

5.打开网页https://blog.qubes.live/2025/02/04/Qubes-live-Canary-1/，复制第一个代码块中的文本。

6.在文件管理器中创建文本文件“Qubes-live-Canary-1”，粘贴文本，保存，关闭。

7.在网页找到第二个代码块Bar’s PGP signature，复制。这里以Bar的签名为例，如果你想验证其他人的签名，复制其他人的公钥，并且重复7~11。

8.在文件管理器中同一个文件夹里创建文本文件“Qubes-live-Canary-1.sig”，粘贴文本，保存，关闭。

9.启动GPA，在菜单里找windows/File Manager

10.点Open，选择你刚刚保存的文件“Qubes-live-Canary-1”

11.点Verify。“GPA found a file that could be a signature of .... Would you like to verify it instead?”，点Yes。如果显示绿色的Valid则验证成功，如果显示其它的，考虑一下是不是你的操作有问题，也有较小可能是信息遭到了篡改。

参考：
验证Qubes Canary：https://www.qubes-os.org/news/2024/06/14/canary-039/

(license: CC 3.0)
-----BEGIN PGP SIGNATURE-----
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=/MVO
-----END PGP SIGNATURE-----

支持解散！支持v2ex立即原地解散！

Your qubes.live blog is built with Hexo. What blog theme are you using?

骂的好！还有没有其它檄文了？