• 10 Posts
  • 729 Comments
Joined 1 year ago
cake
Cake day: June 6th, 2023

help-circle

  • Right, and everything Russia does is amazing. Come on, whilst I agree that NATO is definitely more of an aggressor in this conflict than western media portrays, that doesn’t excuse the atrocities committed within it, no more than I can accept the atrocities committed within my own western country.

    All governments do bad things, and objection to one of those things does not equate unbridled support for their enemies. To see the world so black and white is hollywood fiction.



  • Oh sorry, I thought you were trolling me by literally writing “removed”. I just now followed your fediverse link and can see that you wrote “removed”.

    Yes that word is replaced on the server. I would say it’s a bit overkill too, but hey it’s a derogatory word towards women, so I think there are more general words like “fuck”, “shit”, “dick” and “cunt” that can be swapped in to convey the same point.



  • Our physics department used KDE managed over network shares implemented by one professor in his free time, in complete defiance of the rest of the university which used windows.

    Even now they’re still holding out strong, whilst Microsoft eats the rest of the university alive.
    (sidenote: I get it, tech support in Linux is vritually non-existent, whilst tech-support in Windows is everywhere)









  • The questionable commit:

        {
          // Add the first line of localized text...
          cupsFilePrintf(fp, "*%s.%s %s/", lang->language, ppd_option, ppd_choice);
          while (*text && *text != '\n')
          {
            // Escape ":" and "<"...
            if (*text == ':' || *text == '<')
              cupsFilePrintf(fp, "<%02X>", *text);
            else
              cupsFilePutChar(fp, *text);
            text ++;
          }
          cupsFilePuts(fp, ": \"\"\n");
        }
    

    Can someone explain to me how this allows arbitrary code execution? As far as I can see, all it does iterate through a string and markup some special characters.

    Edit: Okay, after reading the blog post, and this fantastic bug report, it sounds like to print to a CUPS server, you send it a message on port 631 using an IPP (some print protocol) server. CUPS then requests attributes of the IPP server, one of which being the print filter command to run (“Foomatic-rip”) to use to convert a PS or PDF into native print code. By requesting attributes, an exploit involving string escaping through the use of unexpected spaces or quotes can override the Foomatic print command. Arbitrary text can be supplanted, which will then be executed by the CUPS server.




  • Exactly. Is it just a webpage served up with some native UI buttons to make it look more glossy? Are app permissions implemented as separate system users under POSIX? How many apps are written in languages/frameworks running from interpreters, and how many actually touch bare metal? Are app media that use Gallery permissions duplicating data or linking to it?

    No one knows what an app is, the app development frameworks I learned 10 years ago are no longer relevant and have likely shifted to a whole new paradigm. If it looks perplexing to me, I can imagine it looks like magic to non-techies.