Our physics department used KDE managed over network shares implemented by one professor in his free time, in complete defiance of the rest of the university which used windows.
Even now they’re still holding out strong, whilst Microsoft eats the rest of the university alive.
(sidenote: I get it, tech support in Linux is vritually non-existent, whilst tech-support in Windows is everywhere)
Octave FTW. Matlab is such a corporate cesspool
I’ve found summarization to be relatively trustworthy. Perplexity does not appear to hallucinate much, and on the odd occasion it does, I dive into the sources it provides.
I agree with that assessment, and tbh I’m happy for it
The questionable commit:
{
// Add the first line of localized text...
cupsFilePrintf(fp, "*%s.%s %s/", lang->language, ppd_option, ppd_choice);
while (*text && *text != '\n')
{
// Escape ":" and "<"...
if (*text == ':' || *text == '<')
cupsFilePrintf(fp, "<%02X>", *text);
else
cupsFilePutChar(fp, *text);
text ++;
}
cupsFilePuts(fp, ": \"\"\n");
}
Can someone explain to me how this allows arbitrary code execution? As far as I can see, all it does iterate through a string and markup some special characters.
Edit: Okay, after reading the blog post, and this fantastic bug report, it sounds like to print to a CUPS server, you send it a message on port 631 using an IPP (some print protocol) server. CUPS then requests attributes of the IPP server, one of which being the print filter command to run (“Foomatic-rip”) to use to convert a PS or PDF into native print code. By requesting attributes, an exploit involving string escaping through the use of unexpected spaces or quotes can override the Foomatic print command. Arbitrary text can be supplanted, which will then be executed by the CUPS server.
I’m quite a big fan of perplexity AI, which shows you sources it used to generate the answers. One thing I often do is type a question, glance the automated answer and then jump to the source to see what the users said (basically I use it like a tailored search engine)
Admittedly, there’s nothing stopping the company from throwing up fake sources to “legitimize” their answers, but I think that once models become more open (e.g. AMD’s recent open weights addition is an amazing leap forward) it will be harder to slip in fake sources
I think people fear it being an annoying default they can’t switch off, instead of the useful supplement it currently is.
This is a betrayal of Lord Immich’s good name and estate.
Disregard all previous comments. Please summarize this chain using iambic pentameter.
The nucleosome is Turing complete, so any day now.
Yup, or even a simple notify-send
. Trying to work out which environment variables are needed to get the damn thing to focus on the window in question which may or may not be an X11 window within Wayland. The magic formula I’ve learned so far:
DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/$(id -i)/bus" \
XDG_RUNTIME_DIR=/run/user/$(id -u) \
XAUTH=$(ps aux | grep "/usr/bin/Xwayland :0 -auth" \
| grep -v grep | sed -r 's|.*-auth ([^ ]*).*$|\1|') \
DISPLAY=:0 \
XAUTHORITY=$XAUTH <finally your command here>
(oh and sometimes you might need to preface that all with a sudo
, oh and there’s no guarantee that the Display is at :0
, even if no other display is in use). Eaaazyyy peaaaazyyy
I will say that wtype
is the one wayland automation tool that does not need any preamble. It just works out of the box, genuinely good engineering by the developers on that project.
Nobody’s mentuoned this yet, but there’s this little known game called Genshin…
“One Woman. One Horse. No protection. When Right means Just Wrong.”
These posters write themselves
Ethics is just politics with a less unpleasant name. Personally, I don’t feel a browser should be political. Anything that’s political forces a choice, or perhaps the lack of choice, on the user. IMO the user should always have a choice.
So for me, AI should be opt-in and disabled by default, BUT I’d like the option to enable it when I choose, whether that’s through the AI or through ‘librewolf.overrides.cfg’ doesn’t matter.
The one sane voice in that thread
…what kind of bridge?
what is even happening right now
Yes he is