sli

There's this other name for the same vuln: https://broccoli2shell.com/

Frankly I just want IrfanView ported. This is 80% wasted screen space.

This is where I am, currently. There's a lot of talk about the low opportunity-cost here, but I think that relies on the assumption that there also isn't a single opportunistic person out there with access to the RCE. That doesn't strike me as a strongly supported assumption, in my experience.

Shockingly, this is the only time I've seen this xkcd comic referenced during the whole debacle. The best joke about this was already written in 2007!

That's why the time is Almost<T> instead of just T.

Well all of the linker script is just two standard memory map files, one for the 2040 and one for the 2350, so really it suggests that this needed very little code to make this work. The 6.4% shell represents a shebang line, two comments, and a single `set -e` call, after all.

This is one of the reasons why all of my browsers identify as a recent Chrome version. All of those problems just up and disappear. I started doing that when Google claimed (lied) that some of their products no longer support Firefox and would block me from accessing right up until my browser identified itself as Chrome. No bugs, no issues.

Previous versions of the Rust compiler don't just up and disappear just because I moved to a new workstation or setup a new build server. I understand it's not optimal to rely on a download always being available, but even then, that is not at all exclusive to any single language. Why would earlier versions of Rust be susceptible to this but not something like gcc? I don't see it.

They're saying due to the real world effects, the current system isn't meaningfully different from violence. They aren't advocating for violence in turn.

I'm absolutely sure there are people who do. Chromebooks just have a practically nonexistant market share compared to Windows, and a lot of those users being kids being issued school laptops probably doesn't translate to a lot of visible complaining about Chromebook-specific problems.

This will start happening to Ring cameras as well soon if it's not already.

I agree that the work culture promoting this is bad, but being sick is still simply not an excuse to fabricate quotes with AI. It's still just journalistic malfeasance, and if Ars actually cares about the quality of their journalism, he should be fired for it.

Dating apps would go out of business if they did their job, because success means leaving the platform. They make more money if they hold out a carrot and make it difficult to succeed.

This is also true of those services that "delete" your data from data brokers. Their entire business model relies on them failing to do their job.

Only three years ago, too. That kinda surprised me.

Even considering that one can personally control their own chat service is already a pretty big leap in technical knowledge. Many, many average users don't even know that's an option, nevermind how it's even done.

Every single website on the internet just says "whoopsie doodle, me made an oopsie" instead of just telling me what the problem is. This so-called mistake is so widespread that it has been the standard for at least a decade.

I agree it's a mistake, but I don't believe that it's viewed that way by anyone making the decision to do it.

It's stated under the "Sandboxes?" heading.

> Deno Sandbox gives you lightweight Linux microVMs (running in the Deno Deploy cloud) ...

Perceptual hashes are a type of locality sensitive hash.

All of those are optional restrictions, not mandatory. On Windows, it's (practically) mandatory.

Maybe some Windows wizards could get around the mandatory restrictions, but an average Linux user can get around the optional ones.

I've had a lot of fun training Markov chains using Simple English Wikipedia. I'm guessing the restricted vocabulary leads to more overlapping sentences in the training data. Anything too advanced or technical has too many unique phrases and the output degrades almost immediately.

You're missing the input type, essentially. Those are just array types. The TypeScript type signature more of a function type, it expresses flattening a n-dimensional array (input type) into a flat array (output type).

I'm skeptical that it's of any use considering it's only going to be installed by people who specifically want to dislike. It seems more likely that the like/dislike ratio is going to be heavily skewed towards dislikes just by the stated purpose of the plugin and who it appeals to.

Entering two dashes on the iOS keyboard inserts an emdash, I would use them frequently when I had an iPhone.

Tiktok primarily causes harm and plenty of people voluntarily reject it. What's your point? We shouldn't do good things because sometimes people don't want them?

I've always maintained that if a corporation breaks the law, the entire C-suite should be individually charged as if they personally committed the crime. It's their company and their responsibility.

I'm using dev edition v143.0b2 and I'm apparently not seeing what everyone else is seeing, because I'm just seeing the axis tags moving around using some pretty simple math. Clearly something isn't working and I'm missing something, based on the comments here. Regression in Firefox?

I found the OP comment amusing because Emacs with a Jetbrains IDE when I need it is exactly my setup. The only thing I've found AI to be consistently good for is spitting out boring boilerplate so I can do the fun parts myself.

It just seems to me like far less work to just write a real binary that execs this static command than it does to setup a whole Electron project.

I spent far more time writing my own generator with Babashka than I have putting actual content on the site. I was almost disappointed when I finished it. It doesn't support compiling stuff like TS or Elm, but the only JS on my site is a console.log that says there's no other JS on the entire site.

> Because then you won't know the design of the code or how it even works.

I would argue that this is already true for people who practice vibe coding, because otherwise they'd spend less time just banging it out themselves instead of twisting prompts to get something that mostly works and needs hours of debugging.