News for hackers. Stuff that matters.
Re:Two vulnerabilities in Zoom could lead to code execution by m0xte on Sunday June 07, 2020 @05:50AM (#23446103)
Slack is definitely malware feeling territory. The amount of juice it requires feels like it’s running a crypto mining operation in the background.
Re:Two vulnerabilities in Zoom could lead to code execution by boudin on Sunday June 07, 2020 @06:28AM (#23446284)
The funny thing is that if you disable all the gif and animated gif features it behaves much better. I also disabled spelling checks, automatic replacement of emojis and this kind of not really useful things.

On my work computer it went from using kind 60% of a core to almost nothing.

Re:Two vulnerabilities in Zoom could lead to code execution by dylan604 on Sunday June 07, 2020 @10:06AM (#23447423)
I went looking for these options after ready your message. I'm now wonder why in the world is "Allow animated images and emoji" in the Accessibility section of the preferences and separated from the other options for images and media? Seems oddly located to me
Re:Two vulnerabilities in Zoom could lead to code execution by hanniabu on Sunday June 07, 2020 @10:58AM (#23447810)
Still doesn't excuse it from eating up all your resources. It's not a great productivity tool if you can't do anything else on your computer when it's open.
Re:Two vulnerabilities in Zoom could lead to code execution by catalogia on Sunday June 07, 2020 @11:28AM (#23448053)
There's an attitude I've seen bandied about a lot in recent years that "unused RAM is wasted RAM." In a literal sense, this is true. However it's nearly always misapplied. Unless your program is likely to be the raison d'être for that computer existing, then you shouldn't assume the user has all that RAM so that your program can use it. The user probably bought all that RAM for something else and you shouldn't feel justified in slurping it all up yourself.
Re:Two vulnerabilities in Zoom could lead to code execution by the_pwner224 on Sunday June 07, 2020 @12:14PM (#23448382)
> unused RAM is wasted RAM

I've only ever seen this when explaining to people why Linux appears to be using all their RAM - it caches your disk to make subsequent reads faster, and when an application needs more memory the cache will be evicted immediately and at almost no performance cost.

It's completely insane to suggest the user's RAM is yours to consume. Some people have 64 gb of memory in their desktops, and others have 4gb on their $300 laptop because that's all they could afford, and some have 2gb on their cheap phone.

Re:Two vulnerabilities in Zoom could lead to code execution by catalogia on Sunday June 07, 2020 @12:22PM (#23448439)
> I've only ever seen this when explaining to people why Linux appears to be using all their RAM - it caches your disk to make subsequent reads faster, and when an application needs more memory the cache will be evicted immediately and at almost no performance cost.

That's where it's taught I think, and certainly it's the truth in that context. But more than a few times I've encountered it as a defense for stuff like bloated chat programs slurping up gigabytes of RAM.

With respect to hardware diversity, I think part of the problem is most programmers do their development on powerful hardware and become accustomed to it. Certainly nobody wants to sit around for an hour waiting for their build to finish on low-end hardware when a powerful computer, which they or their employer can easily afford, could finish the build in minutes. But because of that, they lose touch with end users who will be running that software on very modest hardware.

Re:Two vulnerabilities in Zoom could lead to code execution by boudin on Sunday June 07, 2020 @11:59AM (#23448268)
I'm not saying it's an excuse. I actually fail to understand how can a animated gif feature can require a full core...
Re:Two vulnerabilities in Zoom could lead to code execution by Shorel on Sunday June 07, 2020 @01:35PM (#23449023)
For me, it is more a failure of the Electron/JavaScript framework everyone is using now.

Find Ripcord, it is fast and works for Slack and Discord.