“According to Mozilla, PPA involves websites asking Firefox to remember ads they show and to potentially generate an interest report. Firefox creates the data but then submits it to an aggregation service, where the report is combined with similar ones.”
Mozilla is not your friend.
My favorite video game of all time is currently on sale for $1.99 on the Switch—if you haven't played it yet, please please do yourself the favor:
The amount of much-needed work going into Firefox bug 1590215 for forced-colors support in DevTools is incredible to watch.
Thunderbird for Android is coming soon! Find out how to get involved, from beta testing to localization to support and more, in our shiny new contributor guide!
(Seriously, by soon, we mean soon!)
Bubu reshared this.
Nice to see you on Android.
Working well on android 9.
Look like, close to K-9 mail...
I hope soon on Harmony Os Next !
Hackers showed me (there's video) how a website vulnerability let them locate, unlock, honk the horn, start ignition of any of millions Kias in seconds, just by reading a car's license plate.
They found similar bugs for a dozen carmakers over the last two years.
So this "CVSS 9.9" "unauthenticated RCE vs all GNU/Linux systems (plus others)" thing...
- Does NOT affect all GNU/Linux systems.
- Is not CVSS 9.9. I put it at a 6.3
It also requires:
1) The victim system has no active firewall to block incoming connections.
2) A user on the victim system must print something to a printer that mysteriously appears on the system that has never been there before.
If these two things happen, then command execution can happen as the "lp" user.
<yawn>
We get it. You found a vulnerability.
Lying about it to try to stir up interest in it is not appreciated by anybody who takes themselves seriously in this industry.
CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 have been assigned.
evilsocket.net/2024/09/26/Atta…
Github is telling me that because of my role in “the software supply chain” I am no longer allowed to disable 2FA on my account
and quite frankly there’s nothing else you could have said that would have given me a greater desire to remove 2FA from my GitHub account
the site basically enlisted everyone who used it into helping it become critical societal infrastructure, in the same way that Amber Alerts now include t.co links to x dot com accounts that require you to be signed in in order to read
and it was us who helped it get there, simply by participating
I have so much to quibble with here, but I just have to endorse your key insight that IT IS NOT A SUPPLY CHAIN and the "supply chain" verbiage and assumptions are corrosive and they chafe a little more every time I hear them.
However, you *should* turn on 2FA on Github (and everywhere else) because of the position of social and infrastructural trust that your packages place you into. I really want better language to describe this role that isn't "supply chain" based, but I don't have it
My All Systems Go talk, "busd: There is a new D-Bus broker in town" is going live in less than an hour.
cfp.all-systems-go.io/all-syst…
Live stream: streaming.media.ccc.de/asg2024
I wrote a benchmark of game engine performance primarily geared towards the types of 2D games that are popular these days.
Here are the results for Flutter, Flame, Unity and Godot. It's a long read with many caveats, so buckle up.
New app listing: Mirror Hall
Use Linux devices as virtual displays in a peer-to-peer fashion
People on StackOverflow telling people to screw up #accessibility with the HTML dialog element defeats the purpose of using that element in the first place IMO. Please upvote my answer that corrects the numerous wrong answers, including the accepted answer, to this question if you have an SO account.
stackoverflow.com/a/79028606/2…
#webDev #a11y #html #css #javaScript
Reminder that the original Metatext third party app is no longer being maintained, as its lead developer had to step back due to health issues.
However, there is a new version of Metatext run by different people called Feditext which is currently in public beta testing. You can follow the official Feditext account at:
➡️ @Feditext
If you would like to join the public beta testing, it's on Apple TestFlight. There are more instructions here:
reshared this
special.usps.com/testkits/acce…
Sutherland said the threshold for informing Canadians was deliberately set very high because of the risk that such an alert could disrupt an election.
[speechlessly confused/exasperated Mal.gif]
Knihy z předprodeje jsou, samozřejmě, se slevou a podpisem. Když budete knihu číst mezi prvními, bude to rozhodně nejlepší. knihydobrovsky.cz/kniha/syndik…
reuters.com/world/uk/britains-…
The least competent people on earth are burning all the resources they can get their hands on to maintain the illusion that this system is not completely on fire and collapsing.
There are a narrow set of cases where LLMs do provide value, and somehow "leaders" everywhere have decided instead to invest in the use cases where they are indistinguishable from magic.
Can someone please invent a new snake oil to sell these fucking people that doesn't require the power of a small nation?
Ok, so reading people who have cats they sound like a mixture between the devil incarnate and the spirit of contradiction.
Why do people even like them?
they're small and soft and warm, they love you and need you, and it's so easy to make them happy with treats or toys. It all adds up to making them ridiculously good at lighting up our parental reward circuits. They even have voices and faces like babies.
And cats mostly warn you before biting or scratching. That's why people joke that cats insist on consent. One of my friends who does kink education says that reading cats' non-verbal signals is really good practice for doms.
I'll admit the sounds can be quite cute, both the purring and meowing thing. The hissing... not so much. :)
Good catch with the consent issue though, you're the second person on my replies that highlights that side of it and it had never come to my mind.
aws.amazon.com/blogs/storage/s… #aws #blog
Samsung unveils the $649+ Galaxy S24 FE, a "Fan Edition" value-focused version of the S24 with a 6.7" display, Exynos 2400e, and 8GB of RAM, in five colors (Ben Schoon/9to5Google)
9to5google.com/2024/09/26/sams…
techmeme.com/240926/p26#a24092…
Philosophy and mental health are deeply interconnected. The practical wisdom derived from philosophical reflection offers valuable insights and tools for navigating life's challenges. By integrating philosophical concepts into counseling, individuals can gain a deeper understanding of themselves and their experiences, fostering greater mental well-being.
reshared this
Wir blicken eine Woche lang hinter die Kulissen des größten Volksfests der Welt. Eine Doku-Serie zeigt das Fest und seine vielen Helfer in fünf Teilen.
Habt ihr das Oktoberfest schon einmal besucht und richtig mitgefeiert? Wie sind eure Erinnerungen?
zdf.de/dokumentation/oktoberfe…
Aight, listen up y'all.
Here are 5 reasons why you should sponsor me ⬇️
1. I maintain your favorite CLI tools for Arch Linux btw (~500)
2. I write useful blogs, craft interesting posts & promote projects
3. Maintainer of @ratatui_rs
4. Creator of @git_cliff, binsider.dev & more
5. All my work is open source and streamed on YouTube
6. Not convinced? I make music too!
💖 GitHub Sponsors: github.com/sponsors/orhun
#rustlang #ratatui #opensource #sponsorship
Bubu
in reply to Neven Mrgan • • •Reinout van Schouwen
in reply to Bubu • • •Bubu
in reply to Reinout van Schouwen • • •