They're talking about the attack surface to get accidental code execution from opening files that try to exploit vim. Integrating shell commands with vim/less is a valid feature.
>namespaces (which have been a frequent source of vulnerabilities)... Unprivileged user namespaces sure, but I don't think that applies to namespaces in general (which without unprivileged user namespaces can only be…
Services may be in a different mount namespace from systemd for sandboxing or other reasons (also means you have to worry about filesystem permissions I suppose). Passing an fd from the parent (systemd) is a nice direct…
Use Invidious, use RSS, use yt-dlp, use Tor.
The vast majority of services and user programs don't need to escalate privileges by invoking SUID/SGID binaries. no_new_privs should be used on them so that the "setuid with libc/LD programs" security boundary is…
It could be a FOSS portable binary that runs outside of a web browser.
They aren't preventing you from using a content filter nor are they making it difficult to scrape the site. The counter measures against this are the problem.
I agree, I don't even care about ads in specific. I primarily use the tor browser which doesn't block ads due to fingerprinting (it's ok for casual browsing, though some sites are actually obnoxious and slow down the…
For faster session establishment in OpenSSH consider ControlMaster in ssh_config(5), which multiplexes multiple sessions in one connection instead of creating a new connection for each session.
Also, malicious code can be pushed to the website if you are logging in through that. You have to trust that their infrastructure is safe.
You can mark individual files as No_COW in btrfs, and No_COW + preallocation is a requirement for swapfiles anyway due to how the swap subsystem works.
Instead of replacing the md5sum on the download page an attacker could replace the infohash/magnet link/.torrent file.
There's at least some differences, such as HTTP/2 usage, or maybe algorithm usage/bugs in newer versions. Whether or not most tracker staff actually bother to attempt fingerprinting, IDK.
The captcha on this page takes a few seconds then says "Failure", with no message, then restarts itself, when using Tor Browser on the Safer mode. edit: Was able to get a mix of a few successes and a few failures upon…
They have a couple more joke physical JP input methods: https://github.com/google/mozc-devices
What in particular needs to be upstreamed and to what projects?
It's just a bit more involved to use for this use case, especially if the data is confidential (having to set the private flag so clients don't publish the infohash to DHT, using a built-in tracker in your client,…
Torrents also don't provide encryption between peers, unless you use SSL torrents, but it's clearly designed towards sharing between a group, not one-on-one transfers.
For good, functionality-related reasons at the time[0], and everyone in the Wayland space had been using the mesa library except nvidia with their own proprietary libgl. [0]:…
Surely, browsers could create a setting to toggle DNT per hostname?
I think Discord servers for a software project tend to attract a younger audience and are more noisy/active and have offtopic discussion, compared to something like a user/-dev channel on IRC.
I don't disagree with you, except browsing creepjs from Tor Browser it says there have been hundreds of visits with my fingerprint since June (when the 12.5 series was released).
I agree there is less bloat like iMessage and less installing random crap apps. The biggest holes if an attacker is determined are probably the browser and images/video, and maybe common networking libraries or…
I agree. I would use protonmail or something else for signing up for websites, as a domain would be linked to me (unless I buy dozens of domain names anonymously). For Git commits or communication tied to my real…
Will libwebp get a new release/tag soon?
They're talking about the attack surface to get accidental code execution from opening files that try to exploit vim. Integrating shell commands with vim/less is a valid feature.
>namespaces (which have been a frequent source of vulnerabilities)... Unprivileged user namespaces sure, but I don't think that applies to namespaces in general (which without unprivileged user namespaces can only be…
Services may be in a different mount namespace from systemd for sandboxing or other reasons (also means you have to worry about filesystem permissions I suppose). Passing an fd from the parent (systemd) is a nice direct…
Use Invidious, use RSS, use yt-dlp, use Tor.
The vast majority of services and user programs don't need to escalate privileges by invoking SUID/SGID binaries. no_new_privs should be used on them so that the "setuid with libc/LD programs" security boundary is…
It could be a FOSS portable binary that runs outside of a web browser.
They aren't preventing you from using a content filter nor are they making it difficult to scrape the site. The counter measures against this are the problem.
I agree, I don't even care about ads in specific. I primarily use the tor browser which doesn't block ads due to fingerprinting (it's ok for casual browsing, though some sites are actually obnoxious and slow down the…
For faster session establishment in OpenSSH consider ControlMaster in ssh_config(5), which multiplexes multiple sessions in one connection instead of creating a new connection for each session.
Also, malicious code can be pushed to the website if you are logging in through that. You have to trust that their infrastructure is safe.
You can mark individual files as No_COW in btrfs, and No_COW + preallocation is a requirement for swapfiles anyway due to how the swap subsystem works.
Instead of replacing the md5sum on the download page an attacker could replace the infohash/magnet link/.torrent file.
There's at least some differences, such as HTTP/2 usage, or maybe algorithm usage/bugs in newer versions. Whether or not most tracker staff actually bother to attempt fingerprinting, IDK.
The captcha on this page takes a few seconds then says "Failure", with no message, then restarts itself, when using Tor Browser on the Safer mode. edit: Was able to get a mix of a few successes and a few failures upon…
They have a couple more joke physical JP input methods: https://github.com/google/mozc-devices
What in particular needs to be upstreamed and to what projects?
It's just a bit more involved to use for this use case, especially if the data is confidential (having to set the private flag so clients don't publish the infohash to DHT, using a built-in tracker in your client,…
Torrents also don't provide encryption between peers, unless you use SSL torrents, but it's clearly designed towards sharing between a group, not one-on-one transfers.
For good, functionality-related reasons at the time[0], and everyone in the Wayland space had been using the mesa library except nvidia with their own proprietary libgl. [0]:…
Surely, browsers could create a setting to toggle DNT per hostname?
I think Discord servers for a software project tend to attract a younger audience and are more noisy/active and have offtopic discussion, compared to something like a user/-dev channel on IRC.
I don't disagree with you, except browsing creepjs from Tor Browser it says there have been hundreds of visits with my fingerprint since June (when the 12.5 series was released).
I agree there is less bloat like iMessage and less installing random crap apps. The biggest holes if an attacker is determined are probably the browser and images/video, and maybe common networking libraries or…
I agree. I would use protonmail or something else for signing up for websites, as a domain would be linked to me (unless I buy dozens of domain names anonymously). For Git commits or communication tied to my real…
Will libwebp get a new release/tag soon?