So this "CVSS 9.9" "unauthenticated RCE vs all GNU/Linux systems (plus others)" thing...
- Does NOT affect all GNU/Linux systems.
- Is not CVSS 9.9. I put it at a 6.3
It also requires:
1) The victim system has no active firewall to block incoming connections.
2) A user on the victim system must print something to a printer that mysteriously appears on the system that has never been there before.
If these two things happen, then command execution can happen as the "lp" user.
<yawn>
We get it. You found a vulnerability.
Lying about it to try to stir up interest in it is not appreciated by anybody who takes themselves seriously in this industry.
CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 have been assigned.
evilsocket.net/2024/09/26/Atta…
My All Systems Go talk, "busd: There is a new D-Bus broker in town" is going live in less than an hour.
cfp.all-systems-go.io/all-syst…
Live stream: streaming.media.ccc.de/asg2024
I wrote a benchmark of game engine performance primarily geared towards the types of 2D games that are popular these days.
Here are the results for Flutter, Flame, Unity and Godot. It's a long read with many caveats, so buckle up.
New app listing: Mirror Hall
Use Linux devices as virtual displays in a peer-to-peer fashion
People on StackOverflow telling people to screw up #accessibility with the HTML dialog element defeats the purpose of using that element in the first place IMO. Please upvote my answer that corrects the numerous wrong answers, including the accepted answer, to this question if you have an SO account.
stackoverflow.com/a/79028606/2…
#webDev #a11y #html #css #javaScript
Reminder that the original Metatext third party app is no longer being maintained, as its lead developer had to step back due to health issues.
However, there is a new version of Metatext run by different people called Feditext which is currently in public beta testing. You can follow the official Feditext account at:
➡️ @Feditext
If you would like to join the public beta testing, it's on Apple TestFlight. There are more instructions here:
reshared this
special.usps.com/testkits/acce…
Sutherland said the threshold for informing Canadians was deliberately set very high because of the risk that such an alert could disrupt an election.
[speechlessly confused/exasperated Mal.gif]
Knihy z předprodeje jsou, samozřejmě, se slevou a podpisem. Když budete knihu číst mezi prvními, bude to rozhodně nejlepší. knihydobrovsky.cz/kniha/syndik…
reuters.com/world/uk/britains-…
The least competent people on earth are burning all the resources they can get their hands on to maintain the illusion that this system is not completely on fire and collapsing.
There are a narrow set of cases where LLMs do provide value, and somehow "leaders" everywhere have decided instead to invest in the use cases where they are indistinguishable from magic.
Can someone please invent a new snake oil to sell these fucking people that doesn't require the power of a small nation?
Ok, so reading people who have cats they sound like a mixture between the devil incarnate and the spirit of contradiction.
Why do people even like them?
they're small and soft and warm, they love you and need you, and it's so easy to make them happy with treats or toys. It all adds up to making them ridiculously good at lighting up our parental reward circuits. They even have voices and faces like babies.
And cats mostly warn you before biting or scratching. That's why people joke that cats insist on consent. One of my friends who does kink education says that reading cats' non-verbal signals is really good practice for doms.
I'll admit the sounds can be quite cute, both the purring and meowing thing. The hissing... not so much. :)
Good catch with the consent issue though, you're the second person on my replies that highlights that side of it and it had never come to my mind.
aws.amazon.com/blogs/storage/s… #aws #blog
Samsung unveils the $649+ Galaxy S24 FE, a "Fan Edition" value-focused version of the S24 with a 6.7" display, Exynos 2400e, and 8GB of RAM, in five colors (Ben Schoon/9to5Google)
9to5google.com/2024/09/26/sams…
techmeme.com/240926/p26#a24092…
Philosophy and mental health are deeply interconnected. The practical wisdom derived from philosophical reflection offers valuable insights and tools for navigating life's challenges. By integrating philosophical concepts into counseling, individuals can gain a deeper understanding of themselves and their experiences, fostering greater mental well-being.
reshared this
Wir blicken eine Woche lang hinter die Kulissen des größten Volksfests der Welt. Eine Doku-Serie zeigt das Fest und seine vielen Helfer in fünf Teilen.
Habt ihr das Oktoberfest schon einmal besucht und richtig mitgefeiert? Wie sind eure Erinnerungen?
zdf.de/dokumentation/oktoberfe…
Aight, listen up y'all.
Here are 5 reasons why you should sponsor me ⬇️
1. I maintain your favorite CLI tools for Arch Linux btw (~500)
2. I write useful blogs, craft interesting posts & promote projects
3. Maintainer of @ratatui_rs
4. Creator of @git_cliff, binsider.dev & more
5. All my work is open source and streamed on YouTube
6. Not convinced? I make music too!
💖 GitHub Sponsors: github.com/sponsors/orhun
#rustlang #ratatui #opensource #sponsorship
***** Controlling AI scraping *****
Cloudflare's plan to give its users ways to block and/or monetize AI scraping is interesting, but of course there are ethical and other reasons to avoid using Cloudflare, since they continue to support some of the most disreputable sites on the Net.
This does however suggest the concept of an open source mechanism to provide the same sorts of features broadly (e.g., in conjunction with Apache servers) to any sites, anywhere. This could be paired with a system to keep sites updated about discovered source IP addresses of AI scrapers that are not adhering to robots.txt directives. Sidenote: #Google announced an effort to expand robots.txt to better deal with AI scraping issues, a concept I had already earlier suggested. I signed up for this, but never heard another word about it since the earliest days.
Time to get serious about controlling AI scraping.
Hey I have been reaching out all week on support mail, however I keep getting blocked on IP address from using my paid subscription. This is basically screwing me out of work. I am NOT doint anything untowards, not generating a lot of traffic. Please make sure someone gets in touch ASAP to stop this shit.
Myslíte, že by problémy českých Pirátů řešila větší uzavřenost diskuzního fóra širší veřejnost a médiím?
#pirati #anketa #ankety #politika
- Jsem člen Pirátů - ano (0%, 0 votes)
- Jsem člen Pirátů - ne (5%, 1 vote)
- Jsem volič Pirátů - ano (26%, 5 votes)
- Jsem volič Pirátů - ne (21%, 4 votes)
- Nečlen a nevolič - ano (10%, 2 votes)
- Nečlen a nevolič - ne (26%, 5 votes)
- Nevím nebo nepovím (10%, 2 votes)
@SuspiciousDuck ano, a co přesně hodlá provést strašného, pokud se dostane k moci? Což se nedostane, protože prudí Čechům do jejich chlastu... a to se odpouští ještě míň, než "komunismus" 
Matthew Lyon
in reply to Matthew Lyon • • •Matthew Lyon
Unknown parent • • •the site basically enlisted everyone who used it into helping it become critical societal infrastructure, in the same way that Amber Alerts now include t.co links to x dot com accounts that require you to be signed in in order to read
and it was us who helped it get there, simply by participating
Glyph
Unknown parent • • •I have so much to quibble with here, but I just have to endorse your key insight that IT IS NOT A SUPPLY CHAIN and the "supply chain" verbiage and assumptions are corrosive and they chafe a little more every time I hear them.
However, you *should* turn on 2FA on Github (and everywhere else) because of the position of social and infrastructural trust that your packages place you into. I really want better language to describe this role that isn't "supply chain" based, but I don't have it