Perfect example of a (part of a) security vulnerability being fixed in a commit that doesn’t immediately seem security related and would never be back ported to a stablestale distro

The code which parses the binary MaxMind database after decompression is well guarded as of 2024 but used to look different, potentially providing more attack surface. There is also an interesting commit where a contributor makes adjustments to the gzip::decompress() function which hints at a stack overflow, as the destination buffer was changed from static allocation on the stack to dynamic allocation on the heap, though it was not exploitable due to checks before it is written to

The problem is not the RSA math itself but that it is both extremely slow and implementing it is particularly susceptible to bugs and side channel attacks https://blog.trailofbits.com/2019/07/08/fuck-rsa/

The article on theregister stated

Also inside the uploaded source code was some GPL 2 source code, which renders the not-very-open WCL moot.

Winamp published their code as “open source”. Problem is…

1. It wasn’t open source, it was proprietary but you can see the source code.
2. Their custom license didn’t even allow forks, which is against GitHub TOS
3. The codebase apparently contains proprietary code from third parties that they don’t have the right to relicense.
4. The codebase apparently contains GPL code from third parties that they probably didn’t have the right to make proprietary in the first place

This is a standard feature on any IPv6 enabled network if you enable IPv6 Privacy Extensions

Wait till you hear about the idiots who unironically make that argument for banning Bitcoin too

Framework

Copying is not theft. Letting only massive and notoriously untransparent corporations control an emerging technology is.

Benzene is used to make a large portion of all chemicals in existence, as it is a basic building block of organic chemistry. That doesn’t mean it’s in the final product.

This is an asinine headline capitalizing on scientific illiteracy for clickbait. No different than complaining about dihydrogen monoxide in food.

I think there’s a bit more to it than that.

It’s very unfortunate that this came as a result of a baseless tantrum from Elon. And his arguments are contrary to free speech.

That said… GARM is actually bad, and the world is a better place without it in my opinion. They are frequently involved in censoring legitimate journalism of violent events, anything that’s inappropriate from children, etc. You know how so many YouTubers have to carefully tiptoe around mention of controversial topics, even in non-controversial contexts, for fear of getting demonetized? I understand the POV of avoiding advertising near hate, but the fallout has real consequences when legitimate content is inevitably caught up.

https://www.techdirt.com/2024/08/09/jim-jordan-celebrates-successful-speech-suppression-as-a-claimed-win-for-free-speech/

Another way to see it is that GARM is simply a trade organization by advertisers for advertisers, with one single goal: to maximize profits for the advertising industry. No corporation actually cares about ethics; it’s just that appearing to be ethical is often profitable, and in this case, advertisers believe that avoiding advertising near controversial content is better for their bottom line. If one believes that advertising is one of the most abusive industries in our modern society, it could be seen that anything to make it a little harder for advertisers to extract more profits is a win.

I won’t shed a tear for the advertising industry

My guess is he’s illiterate and thinks that’s her real name

Accessing printers? Resolving hostnames of internal hosts? I can’t imagine having a lan without mDNS

I don’t think it’s quite as simple as someone just forking it. Realistically, a browser is an extremely complex piece of software that requires a lot of organizational effort to maintain, deal with security issues, etc. Pretty much every other piece of software on a similar scale I can think of (the kernel, KDE, Blender, Libreoffice) has some sort of organization behind it with at least some amount of officially paid work. All the major forks of Firefox or chromium follow quite closely to upstream for this reason (which is also why I’m skeptical of Brave’s ability to maintain manifest v2 long term, despite their probably genuine best efforts to do so).

I do wish that Firefox were developed and funded by an organization specifically dedicated to developing it. This could of course happen if Mozilla dies. But that’s going to require someone starting it, which is not at all a small or cheap task.

I could also see a future where Oracle or IBM buys it 😂🤡

A year ago, the majority of Lemmy was vehemently in support of banning porn

It is based on the assumption that every piece of code in the entire stack from the UEFI firmware to the operating system userspace is free of vulnerabilities

Whenever I want to pirate something I just go straight to btdig. And if there’s no torrent and I really need to search the web, I’ve had much better luck with Yandex. I figure they’re more resistant to takedowns from western corporations

Funnily enough, we do have an amendment allowing it, though it does not prohibit state governments from regulating it. All it would take is a simple bill of congress to end the requirement that states set a 21+ law. https://en.wikipedia.org/wiki/Twenty-first_Amendment_to_the_United_States_Constitution

Edit: oops this was meant to be a reply to the other comment

No. Supposedly they raised the age to 21 because of drunk driving teens, though I’m not sure what effect it had. In my opinion, the better option regardless is to introduce teens to how to use alcohol responsibly and safely, rather than prohibit until it’s too late.

This is good. Now do the same with alcohol. You can be forced to die in a war at 18 but can’t drink and enjoy the full rights of an adult citizen.