[-] rotopenguin@infosec.pub 4 points 23 hours ago* (last edited 23 hours ago)

"Two pointers" makes a lot of sense if you actually have the ability to pay attention to two things simultaneously. Most froods are not hoopy enough for this.

[-] rotopenguin@infosec.pub 2 points 4 days ago

Nouveau or Nvidia's own drivers? X11 or Wayland?

[-] rotopenguin@infosec.pub 9 points 6 days ago

Looks like you need winetricks to install CJK_fonts.

[-] rotopenguin@infosec.pub 68 points 6 months ago* (last edited 6 months ago)

How do you know there isn't a logic bug that spills server secrets through an uninitialized buffer? How do you know there isn't an enterprise login token signing key that accidentally works for any account in-or-out of that enterprise (hard mode: logging costs more than your org makes all year)? How do you know that your processor doesn't leak information across security contexts? How do you know that your NAS appliance doesn't have a master login?

This was a really, really close one that was averted by two things. A total fucking nerd looked way too hard into a trivial performance problem, and saw something a bit hinky. And, just as importantly, the systemd devs had no idea that anything was going on, but somebody got an itchy feeling about the size of systemd's dependencies and decided to clean it up. This completely blew up the attacker's timetable. Jia Tan had to ship too fast, with code that wasn't quite bulletproof (5.6.0 is what was detected, 5.6.1 would have gotten away with it).

[-] rotopenguin@infosec.pub 78 points 8 months ago* (last edited 8 months ago)

Patch notes: clause unnecessary. Refactored to cover the general case.

[-] rotopenguin@infosec.pub 77 points 9 months ago

It's an ".avi.exe".

[-] rotopenguin@infosec.pub 71 points 10 months ago

It's kinda wild that GTK's grandpappy is now the last thing to get updated to the current GTK.

[-] rotopenguin@infosec.pub 152 points 1 year ago

I use Ubuntu, which is apparently the least popular distro around.

[-] rotopenguin@infosec.pub 166 points 1 year ago

It's a shame that Valve couldn't get Steam to issue them a new AppID, so they had to delete CSGO in order to put CS2 on the store. It was the only way.

[-] rotopenguin@infosec.pub 94 points 1 year ago

My favourite part is when it ends with "buy the steam deck on Amazon [affiliate link]"

Yeah, that's the last place where I'll buy it.

[-] rotopenguin@infosec.pub 86 points 1 year ago

But I might need 99 of every potion for the last boss!

[-] rotopenguin@infosec.pub 76 points 1 year ago

Has anybody mentioned yet that tar isn't even a "compression format"?

view more: next ›

rotopenguin

joined 1 year ago