News for hackers. Stuff that matters.

mark4o

Re:Zoom zero-day discovery on Friday April 09, 2021 @02:28PM (#26754155)
On macOS my experience with Zoom in the browser is that the gallery mode works in Chrome, however in Chrome it has problems with the camera (it reports that the camera is in use, or will hog the cpu and work at about 1 frame per second). On Firefox the camera works fine, but there is no gallery mode. On Safari the gallery mode and camera both work, but audio does not work! So I need to choose whether to do without video, audio, or gallery mode, or I can connect to the meeting twice with two different browsers.
Re:Google open-sources the Lyra audio codec on Tuesday April 06, 2021 @09:57PM (#26719722)
It won't even work on Windows, macOS, or iOS.
Re:The origins of XXX as FIXME on Monday April 17, 2017 @02:57PM (#14133457)
I suspect that the reason for switching from ### to XXX is that grep ### requires quoting in the shell.
Re:Remote code execution affecting most iOS/macOS apps on Saturday April 08, 2017 @01:46PM (#14068033)
In https://support.apple.com/en-us/HT207617 Apple admits that this may lead to arbitrary code execution.
Re:2038: Only 21 years away on Tuesday March 21, 2017 @01:48PM (#13924492)
In Unix v1 (1971) it actually did not even track the year. The time system call was documented as "get time of year", and returned "the time since 00:00:00, Jan. 1, 1971, measured in sixtieths of a second" (https://www.bell-labs.com/usr/dmr/www/pdfs/man22.pdf). The operator had to set the time on each boot, and there was no option to set a year. The PDP-7 hardware could increment a counter every 1/60 second but only while it was powered on. Later the time was changed to whole seconds and redefined to be the time since January 1, 1970 00:00:00 GMT (now UTC), but was kept 32 bits.
Re:Epoll is broken – part 2/2 on Tuesday March 21, 2017 @12:43AM (#13919921)
POSIX does not require EOF to be returned from a blocking read() if the same file descriptor is passed to close() in another thread. Even if it appears to work on some particular OS, consider the case where the reading thread may have called read() but is preempted just before entering the kernel. If another thread then closes the file descriptor, expecting the first thread to see EBADF or EOF, but then the file descriptor is reused (e.g. by accept()) before the first thread resumes, the reading thread may block reading from an unrelated socket. Even if you can guarantee that accept(), open(), or other calls that explicitly allocate a file descriptor will not be called, ordinary library functions are generally allowed to use file descriptors internally (e.g. to read a configuration file), so closing the file descriptor while another thread is reading from it is almost certainly a bug.
The bug is architecture independent, although a particular exploit may work only on a specific architecture.
Re:Farbfeld – A suckless image format on Friday January 15, 2016 @02:03AM (#10907713)
Existing image formats support color profiles, which allow use of colors beyond sRGB.
Re:Farbfeld – A suckless image format on Thursday January 14, 2016 @10:46PM (#10907036)
If you're going to go with 16 bits per component, please at least increase the color gamut. sRGB is fine if you can only dedicate 8 bits per component, but with 16 bits per component the extra depth is more useful as an increase in the color space rather than only greater precision.
Re:Ogg objections (2010) on Friday November 20, 2015 @11:24PM (#10605598)
Monty wrote up a detailed response to this in 2010: http://people.xiph.org/~xiphmont/lj-pseudocut/o-response-1.h...
Re:A message from the FFmpeg project on Saturday August 01, 2015 @11:42PM (#9989654)
An FFmpeg developer has already volunteered to continue the libav merges: http://lists.ffmpeg.org/pipermail/ffmpeg-devel/2015-August/1...
Re:FFmpeg's future and resigning as leader on Saturday August 01, 2015 @09:37PM (#9989395)
The message on the FFmpeg site http://ffmpeg.org/index.html#message sounds hopeful for a reconciliation of the forks.