this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
Uncategorized
11
Posts
7
Posters
38
Views
-
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
-
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
@ariadne
breaking news: the x11 fork for chuds learning in realtime why it's useful to keep gay furries on your security team -
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
@ariadne@treehouse.systems oh my fucking god why are they doing it like that
-
@ariadne
breaking news: the x11 fork for chuds learning in realtime why it's useful to keep gay furries on your security team -
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
@ariadne Wait, so I just need to sneak in a binary named zenity to the front of the PATH to get it executed in an elevated security context?
-
undefined oblomov@sociale.network shared this topic on
-
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
@ariadne wow there's so many issues with that commit I don't even know where to start.
-
this is truly incredible: https://github.com/X11Libre/xserver/pull/1627/files
they are using system(3) inside a security-critical domain (the display server).
but yes, sure, my refusal of xlibre on security grounds is the problem
there are quite a few reactionaries in my comments, some of which have been defederated in their entirety.
for the others:
1. although the system("which ...") use is silly, that isn't the problem here.
2. what do you think will happen when the code in this PR encounters a process named `" && :() { : | : & }; :&`? will it safely handle such a process name? before saying "that's impossible" please read setprocname(3), setproctitle(3), or in the case of Linux, understand that argv[0] is mutable.
3. yes, it is an open PR. it is also reflective of the code quality of many other PRs which have been merged to Xlibre already. how do you think that impacts its security record?
-
there are quite a few reactionaries in my comments, some of which have been defederated in their entirety.
for the others:
1. although the system("which ...") use is silly, that isn't the problem here.
2. what do you think will happen when the code in this PR encounters a process named `" && :() { : | : & }; :&`? will it safely handle such a process name? before saying "that's impossible" please read setprocname(3), setproctitle(3), or in the case of Linux, understand that argv[0] is mutable.
3. yes, it is an open PR. it is also reflective of the code quality of many other PRs which have been merged to Xlibre already. how do you think that impacts its security record?
and yes, sometimes i post these things as bait to find out if we are missing alt-right reactionary servers that we need to defederate. it's like vaccines but for social media ❤️
-
and yes, sometimes i post these things as bait to find out if we are missing alt-right reactionary servers that we need to defederate. it's like vaccines but for social media ❤️
vaccines are good btw
-
vaccines are good btw
by the way, the ":() { : | : & }; :&" part earlier? that's a forkbomb. don't run it unless you want to deal with the consequences of running a forkbomb (in most cases, hard rebooting).
-
by the way, the ":() { : | : & }; :&" part earlier? that's a forkbomb. don't run it unless you want to deal with the consequences of running a forkbomb (in most cases, hard rebooting).
@ariadne or replace the hardware. A student ran a forkbomb. The PC got hot and ran for a weekend with all fans at max. Week after: fan error. The fan controller, hard soldered to the main board, was faulty.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@budfox ma infatti!!! Bonjour 😘
-
E se vi dicessi che alcuni utenti potrebbero avere problemi con #Wayland su #Linux ?
E se vi dicessi che questo problema deriva dal fatto che il progresso ad un certo punto è necessario?
Mi credereste? Ne parlo nel mio ultimo video!
-
perché fai già il passo a «schierarsi dalla parte di qualcuno»? Il giudizio su un conflitto si può valutare anche senza prendere parti (anzi).
> E se si vuole fare la genesi dei conflitti siamo così sicuri che la narrazione aggredito/aggressore possa realmente reggere?
In genere sí. Esitono casi piú e casi meno netti, ma in genere è abbastanza chiaro.
> Chi è l'aggredito e chi è l'aggressore tra Iran e Israele
Israele.
-
@d10c4n3 senza escludere che le riforme sulla architettura giudiziaria possano essere indispensabili, non possiamo escludere nemmeno che sia sufficiente il combinato disposto delle leggi ordinarie e dei dispositivi di bilancio necessari per ottenere una giustizia più efficiente, più digitalizzata, più finanziata, meno politicizzata e più giusta (ad esempio abolendo reati criminogeni legati al consumo ricreativo di cannabis, ai rave party, alle migrazioni irregolari o alle querele temerarie).
-
@oblomov gli stati servono a fare gli interessi delle classi dominanti su di un dato territorio. Gli interessi tra chi domina diversi territori sono contrastanti e negli ultimi anni abbiamo visto il ritorno a una concezione territorialista dei conflitti con una conquista diretta del suolo. Perché uno dovrebbe schierarsi con un aspirante dominatore o con un altro aspirante tale? E se si vuole fare la genesi dei conflitti siamo così sicuri che la narrazione aggredito/aggressore possa realmente reggere? Chi è l'aggredito e chi è l'aggressore tra Iran e Israele, e magari la Turchia, stati che hanno entrambi una forte spinta espansionista sugli stessi territori? @d10c4n3 @andre123
-
@nwalfield @fesshole actually no. An irrational number whose expansion includes all possible integers as subsequence is called a normal number, not all irrational numbers are normal; in fact, not even all transcendental numbers are normal. In fact (bis), pi and e are only CONJECTURED to be normal. No proof of their normality has ever been given.
-
@carnage4life This is why tech workers need more unions. Enshittification is here, and if we don't act fast it will eat our jobs right along-side how it has eaten the internet.
-
Studiate sempre tutte le materie anche quelle che non servono a niente mi raccomando! Ahaha scherzo studiare è importante ciao prof
