namingthingsiseasy

The “just add reddit” or “just add site:reddit.com” has been trash for a while

Has that ever been true? I always assumed it was some sort of shadow marketing campaign to get people to look at reddit more. Pretending that one website is the only reliable source of answers on the internet is incredibly audacious, it always seemed very farfetched to suggest that

“Ukraine’s decision fundamentally threatens the security of supply in Hungary,” the country’s Foreign Minister Péter Szijjártó said Monday

Oh my God!!! I can't possibly imagine them being concerned about anything more serious than that right now!!!

Thanks for letting me know. That sounds promising, so I'll give it a shot!

Thanks, I'm using yt-dlp too. I was a bit sloppy while writing the post and updated it to make it clear that I'm also using yt-dlp

I am also a Void user, but will agree that the installation process can be very difficult, especially if you want to set up encryption in ways the standard installer does not support. You have to install it into a chroot (which I believe is how Debian was installed 20+ years ago).

That said, it is a great learning process and really helps you appreciate how awesome xbps is as a package manager!

I believe you're thinking of Gentoo. But it seems that you can get precompiled kernels in Gentoo these days.

I dunno. I’m a believer that there is real benefit to diverse teams and there is some evidence in support of this.

You're 100% right! But good luck convincing the bean counters.

Can I interest you in links?

Or how about lynx?

With the exception of maybe Princeton or Columbia, top research isn’t coming out of Ivy League schools.

Doesn't Harvard have one of the most advanced medical programs in the entire world? Perhaps the best even. Especially in fields related to cancer research.

"Pay money, receive happiness" is just so typically corporatist. Ridiculous, absurd amounts of money. Sometimes, more than an entire family makes in a whole year.

Even better when it's used as a blackmail for children's happiness. Trying to make it seem like spending 5 figures USD is some quintessential part of life, otherwise your children will not have a complete childhood.

21st century economics at its ~~worst~~best here, everyone!

Oh I guarantee you, the Disney Corporation has a very sophisticated shadow marketing operation

The full write-up can be found here and should be fairly readable for users of this forum.

Some quotes that I thought were interesting:

With a heap corruption as a primitive, two FILE structures malloc()ated in the heap, and 21 fixed bits in the glibc's addresses, we believe that this signal handler race condition is exploitable on amd64 (probably not in ~6-8 hours, but hopefully in less than a week). Only time will tell.

So 64-bit systems seem to be a bit more resistant to this it seems? But I can't be completely sure given how much I've read about this yet.

This vulnerability is exploitable remotely on glibc-based Linux systems, where syslog() itself calls async-signal-unsafe functions (for example, malloc() and free()): an unauthenticated remote code execution as root, because it affects sshd's privileged code, which is not sandboxed and runs with full privileges. We have not investigated any other libc or operating system; but OpenBSD is notably not vulnerable, because its SIGALRM handler calls syslog_r(), an async-signal-safer version of syslog() that was invented by OpenBSD in 2001.

It seems that non glibc-based systems also could be vulnerable, but they have not yet tried to demonstrate it yet (or have tried and not been successful).

And OpenBSD wins again it seems.