Supermariofan67

@Supermariofan67@programming.dev
0 Post – 200 Comments
Joined 1 years ago

Perfect example of a (part of a) security vulnerability being fixed in a commit that doesn't immediately seem security related and would never be back ported to a stablestale distro

The code which parses the binary MaxMind database after decompression is well guarded as of 2024 but used to look different, potentially providing more attack surface. There is also an interesting commit where a contributor makes adjustments to the gzip::decompress() function which hints at a stack overflow, as the destination buffer was changed from static allocation on the stack to dynamic allocation on the heap, though it was not exploitable due to checks before it is written to

This is why ublock origin is an essential security tool.

3 more...

I'm highly skeptical of anti-GMO claims. Usually they come from the same family of pseudoscience as anti-nuclear and anti-vaccine

19 more...

They have the money and resources to comply with it, but any small competitor won't. So Microsoft will gain even more dominance in the market

2 more...

Not at all surprised, motherboard firmware from most vendors has always been a steaming pile of shit code, often not even built to spec.

4 more...

This one is already in the default uBlock filters - Badware risks

I also strongly suggest adding https://big.oisd.nl/ as a filter list. It's a large and well maintained domain blocklist (sourced from combining lots of other blocklists) that usually adds lots of these sorts of domains quickly and has very few false positives.

If you want to take it even further, check out the Pro list and Thread Intelligence Feeds list here https://github.com/hagezi/dns-blocklists

These can all be added to a pihole too if you use one.

Any post mentioning Wayland or btrfs is guaranteed to have at least 60 comments

2 more...

Winamp published their code as "open source". Problem is...

  1. It wasn't open source, it was proprietary but you can see the source code.
  2. Their custom license didn't even allow forks, which is against GitHub TOS
  3. The codebase apparently contains proprietary code from third parties that they don't have the right to relicense.
  4. The codebase apparently contains GPL code from third parties that they probably didn't have the right to make proprietary in the first place
2 more...

For a company that claims to be desperate to cut costs they sure do have a lot of money for frivolous lawsuits...

Ogg Opus for all lossy audio compression (mp3 needs to die)

7z or tar.zst for general purpose compression (zip and rar need to die)

39 more...

I don't think it's quite as simple as someone just forking it. Realistically, a browser is an extremely complex piece of software that requires a lot of organizational effort to maintain, deal with security issues, etc. Pretty much every other piece of software on a similar scale I can think of (the kernel, KDE, Blender, Libreoffice) has some sort of organization behind it with at least some amount of officially paid work. All the major forks of Firefox or chromium follow quite closely to upstream for this reason (which is also why I'm skeptical of Brave's ability to maintain manifest v2 long term, despite their probably genuine best efforts to do so).

I do wish that Firefox were developed and funded by an organization specifically dedicated to developing it. This could of course happen if Mozilla dies. But that's going to require someone starting it, which is not at all a small or cheap task.

I could also see a future where Oracle or IBM buys it 😂🤡

1 more...

It also might appear lower due to people using vpns for for torrenting on residential networks

1 more...

Copying is not theft. Letting only massive and notoriously untransparent corporations control an emerging technology is.

5 more...

Just use silica gel packets

Benzene is used to make a large portion of all chemicals in existence, as it is a basic building block of organic chemistry. That doesn't mean it's in the final product.

This is an asinine headline capitalizing on scientific illiteracy for clickbait. No different than complaining about dihydrogen monoxide in food.

It seems like the headline is deliberately written to be funny (I did get a good laugh out of it) and the actual event isn't quite as nottheoniony. My understanding is that the court faced the question of whether the lawsuit could proceed against the doctor individually, or against the insurance company. It's bizzare but rather unsurprising and understandable that the lawyers of a doctor faced with such a claim would try, even if it's likely to fail, to have it pushed via the insurance company.

The court made the right decision of course, but this just seems like business as usual for lawsuits.

Just use the nicotine-plus client for soulseek instead. It's much more stable, and it's foss

Obscenity law needs to be eliminated entirely at this point. It's archaic entirely. Luckily, convicting under the Miller test is rare since pretty much everything has "serious artistic or political value", but these laws shouldn't be on the books at all. Needless violation of the first amendment to punish victimless crimes.

It's unfortunate that the other users are ignoring your actual question... You should still be able to bind qbittorrent to the wireguard interface, and you definitely MUST do so in order to make sure you're safe (if the VPN drops, you don't want it to fall back on your normal connection). If you aren't sure what the wireguard interface is names, try running ip a before and after activating the VPN connection and compare them.

Port forwarding allows other users to connect directly to your torrent client. Without it, it's much more difficult for you to connect to other people who aren't port forwarded (though not impossible if there's a third, mutually connected client who can facilitate initiating the connection). Things will generally still work without it, but youll connect to fewer people, so it might be slower. And if you're downloading rare torrents, you might have to be patient and wait for someone else to join and facilitate the connection

Because it's funny

Media doing everything they can to keep people fighting each other rather than the owner class...

2 more...

It's because the DEA restricted pseudoephedrine, which does work. Duck the war on drugs

When Amazon thinks "sub" means "submissive" rather than "subscriber"

1 more...

It was the point of software as a service and DRM

Clearly companies have been able to make the sodas just fine without it, so even if it isn't very harmful, it seems best not to include it. Food additives are like software bloat, the more you have, the more attack surface (in this case, possibility albeit small chance of undiscovered health problems) you get, so one should only use what actually is useful

git rsync htop `

Are you saying that political violence that one approves of is not political violence?

2 more...

Women Who Code might not be a good choice... https://www.vice.com/en/article/g5v53w/girls-who-code-team-up-with-tomahawk-missile-maker-raytheon

But I'm definitely excited to see Tor and Fight for the Future on the list!

8 more...

So meth?

1 more...

I already force Wayland global for SDL games because the xwayland one has a horrible stutter while the native Wayland works flawlessly. Making it the default sounds reasonable to me. If specific programs don't work with it, they can override it

Elaborate?

Israel's right to defend itself

This is one of the dumbest dogwhistles in existence. Everyone knows that's not the actual point of contention.

Companies cry the same way about the bills to ban end to end encryption, and they're still bad for consumers too

It's a frivolous troll lawsuit and this is a clickbait article

https://casetext.com/case/mactruong-v-abbott

In his Complaint, Plaintiff alleges that he is an inventor of “Tele-Sex or Tele-Mining on Jupiter and other planets of the Solar System,” and appears to assert a claim for copyright infringement and constitutional violations.

In his brief, Plaintiff makes fantastical allegations, stating, for example, that “Defendants are dangerous liars, criminals, traitors and co-conspirators.” Dkt. 18 at 31. He further states that Supreme Court Justices Alito, Thomas, Gorsuch, Kavanaugh, and Barrett “deserve the death penalty or at least to be disbenched from the U.S. Supreme Court.” Dkt. 18 at 40.

If this isn't satire, that's literally what Unicode and UTF-8 are

The problem is not the RSA math itself but that it is both extremely slow and implementing it is particularly susceptible to bugs and side channel attacks https://blog.trailofbits.com/2019/07/08/fuck-rsa/

1 more...

Why? What reason could there possibly be to store frequencies as high as 96 kHz? The limit of human hearing is 20 kHz, hence why 44.1 and 48 kHz sample rates are used

7 more...

It's a 30 year old format, and large amounts of research and innovation in lossy audio compression have occurred since then. Opus can achieve better quality in like 40% the bitrate. Also, the format is, much like zip, a mess of partially broken implementations in the early days (although now everyone uses LAME so not as big of a deal). Its container/stream format is very messy too. Also no native tag format so it needs ID3 tags which don't enforce any standardized text encoding.

It was always pretty bad, musk just made it worse