1·
2 days agoAh, sorry.
D-Bus has a similar mechanism to the one that got this hacker arrested. I guess I was expanding upon the previous conversation about how much stuff is considered inside the inner security circle for d-bus.
- 0 Posts
- 14 Comments
Joined 3 months ago
Cake day: April 4th, 2026
You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.
3·4 days agoApart from what everyone else here has said LegalEagle did some videos on this, and the big takeaway was that everybody needed to get a lawyer ASAP instead of trying to plead their case in the court of public opinion via podcast/youtube videos/whatever. Reckless Ben got the audio from his court case and used it to make a youtube video (he was representing himself). This whole thing went from ordinary mess to Great Big Mess with no signs of anyone trying to dial it down.
It think this is the one depending on how far the rabbit hole you want to go down:
Long story short: Microsoft just helped pop an alleged hacker using some windows device ID. I linked to a post in the hackernews thread about d-bus:
https://johncderrick.com/dinosaur-timeline
The timeline stuff always gets me.
Pretty good resource for that kind of thing if you have another interested kid and access to the internet. There’s also this:
https://en.wikipedia.org/wiki/Newton's_law_of_universal_gravitation
I, too, try to avoid the water fountains on the common wetwall where the water in the pipes is cycled all the time thanks to the constant use of the bathrooms. I usually shoot for the fountain next to the old eyewash station they were forced to put in when the electronics lab used to be the chemical lab–there’s never anyone using that one.
I know this is a shitpost, but here’s the explanation: you can’t force people to like you.
You may get off on power trips going to businesses where people aren’t allowed to deny you service or return bad attitude in kind, but everywhere else you’re a $1000/hour with a forty hour minimum payment in advance work starts after the check clears kind of guy.
Who defines the untrusted applications though?
¯\(ツ)/¯
If GNOME wrote it then they probably trust it. If you’re using GNOME, then you’ve accepted their security model on some level.
At least you know to go look for it. Attackers will only get more sophisticated:
according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.
That won’t be a popular stance to take when someone eventually steals a bunch of cached, unlocked credentials off of D-BUS because of an oversight somewhere in the npm/aur/pip/cargo/whatever ecosystem.
More rabbit hole:
Hm. Had been thinking of it in terms of controlling the local file system.
Thanks.
people then concluded that FROST is harder to exploit in real-world scenarios than in the lab
What happens if there’s an extra 4GB of stuff laying around?
A jeep renegade I rented did ok
You must’ve gotten a good one.
2·1 month agoTry the c++23 standard. There’s been a lot of cross pollination. Contrived example follows:
#include <format> #include <numbers> #include <print> #include <string> int main(int argc, char *argv[]) { double pi = std::numbers::pi; std::string fstr = std::format("{}, {:>.2}, {:>.5}, {:>.10}", pi, pi, pi, pi); std::string h = "Hello"; std::string w = "World"; std::println("{}, {}!", h, w); std::print("This won't have a {},", "newline"); std::println(" but this will add it."); // Add a newline. // Can't put a non-constant string as the first argument to // print or println so they can be checked at compile time. std::println("{}", fstr); return EXIT_SUCCESS; }
https://www.usconcealedcarry.com/resources/ccw_reciprocity_map/ne-gun-laws/
The laws across the US are a patchwork of random thoughts that are constantly amended poorly. If you have any questions you should ask a local lawyer (this is a recommendation from a Paul Harrell video from youtube) since none of us will be there to bail you out of jail or pay legal fees in the event something goes wrong.