• 6 Posts
  • 133 Comments
Joined 5 months ago
cake
Cake day: March 12th, 2024

help-circle





  • Its still the same extension, same source code, same logic, just less capable

    the same… but not the same… ??

    I think the technologies are quite different.

    uBOL is entirely declarative, meaning there is no need for a permanent uBOL process for the filtering to occur, and CSS/JS injection-based content filtering is performed reliably by the browser itself rather than by the extension. This means that uBOL itself does not consume CPU/memory resources while content blocking is ongoing – uBOL’s service worker process is required only when you interact with the popup panel or the option pages.

    Are you claiming non-lite does the same, plus more?

    You say it’s the same source code, but it’s a different source code repository. non-lite, lite.




  • the most relevant:

    To take advantage of the vulnerability, a hacker has to already possess access to a computer’s kernel, the core of its operating system.

    For systems with certain faulty configurations in how a computer maker implemented AMD’s security feature known as Platform Secure Boot—which the researchers warn encompasses the large majority of the systems they tested—a malware infection installed via Sinkclose could be harder yet to detect or remediate, they say, surviving even a reinstallation of the operating system.

    For users seeking to protect themselves, Nissim and Okupski say that for Windows machines—likely the vast majority of affected systems—they expect patches for Sinkclose to be integrated into updates shared by computer makers with Microsoft, who will roll them into future operating system updates.


  • notably

    Windows is not impacted by this issue.

    quoting the main, critical part:

    1. Under public domain (.com), the browser sent the request to 0.0.0.0.
    2. The dummy server is listening on 127.0.0.1 (only on the loopback interface, not on all network interfaces).
    3. The server on localhost receives the request, processes it, and sends the response.
    4. The browser blocks the response content from propagating to Javascript due to CORS.

    This means public websites can access any open port on your host, without the ability to see the response.







  • The reasons for this shift in budget away from funding Free Software and the NGI initiative seems to be an allocation of more funds for AI, leaving internet infrastructure by the wayside. Meanwhile, the EC has thus far declined to comment to share its official reasoning for striking this funding from its budget.

    Investing into AI seems/feels more speculative and inefficient. I think you can get a lot more value by investing the same into actual, practical projects. Training AI, and training it well, is very expensive. And the gains or results are not necessarily even predictable, let alone certainly useful or used.






  • I think it’s still a net-positive.

    After that author’s post (from 2020) Microsoft acknowledged and apologized the bad way they went about it. (IIRC anyway.)

    It’s certainly a shitty situation for the author, with the PM opportunity at Microsoft not working out (reason unknown/not visible to us). The author can’t invest as MS can into their project. The author could continue, but obviously, it’s less “useful” now as a product, with a “better” alternative.

    Having it be a Microsoft-maintained project gave and gives it a lot more impact and significance, both functionality-wise and public-/enterprise-wise. Having an official package manager like this is a very good thing.

    And the author on the post you linked says as much in their post. They’re not upset about anything else other than the communication in regards to the hiring process he was not that interested in anyway. That’s not really “stealing”. Just superseding. With an aside shitty-communication.