njaard

joined 1 year ago
[–] njaard@lemmy.world 13 points 6 days ago (1 children)
  • Congress person addresses young people's concern 😁
  • Young people don't vote anyway πŸ₯±
  • Congress person gets replaced by gerontological conservative πŸ˜”
  • Young people [surprised Pikachu face]
  • Boomers continue to bankrupt social security πŸ€‘
[–] njaard@lemmy.world 6 points 2 months ago (7 children)

Yes, they have to do something with the male chicks

[–] njaard@lemmy.world 16 points 2 months ago

That's not how tax deductions work.

Gates is a dirtbag though.

[–] njaard@lemmy.world 4 points 4 months ago

This is dumb and makes no sense, even for the intended purposes.

[–] njaard@lemmy.world 25 points 6 months ago

Man, this is looking really appealing:

  • Headphone jack!
  • Great global and US network support
  • "Honest" marketing of its cameras (lol!)
  • Huge :(

Now the only thing that's missing is if it's reasonably easily rootable, so I'll keep an eye on this phone.

 

Possibly one of the most important invention of the 20th century

[–] njaard@lemmy.world 0 points 1 year ago (1 children)

Not sure what you mean by OS-level

By OS-level, I mean Linux terminated the process because the process tried to do an instruction it wasn't allowed to do, specifically, trying to access a memory location it wasn't allowed to. That leads to a segmentation fault, on Linux.

It’s pretty much a DoS at this point.

Calling it a DoS is missing a lot of nuance because you're blaming Google's script, not Firefox. Having 20000 variables in a single frame is something a javascript program is allowed to do; it's a well-formed program that doesn't violate any rules of Javascript, so the fault is not in google's script, but in Firefox's JS interpreter. That doesn't mean that Google's script is good quality, but it's still valid.

Finally, what makes this particularly bad? Any "undefined behavior" can be exploited as security holes [ Β§ "Undefined Behavior and Security Don't Mix Well"].

Now, it is possible to get a segmentation fault without having gone through a undefined behavior: by allocating memory, and then asking linux to make that memory inaccessible.

It's also possible to have undefined behavior and not get a segmentation fault: by chance you go past the end of a memory allocation into another valid allocation. This would be very bad because then your program definitely has a security hole.

So, if we decide that "google's JS is so bad that we shouldn't run it", the script should stop running because Firefox's JS interpreter stops running it. Firefox should pop up a window saying "the Javascript on this page was cancelled because Google sucks". I think this is incorrect, because the script is valid, but it's not bad because at least there's no exploitable security hole.

Or, you could have Firefox force itself to exit without triggered undefined behavior. That would actually would be a DoS, but at least you can't steal encryption keys or whatever off the system.

[–] njaard@lemmy.world 0 points 1 year ago* (last edited 1 year ago) (3 children)

Any os-level crash in a js interpreter is by definition a bug in the js interpreter and not the javascript.

[–] njaard@lemmy.world 1 points 1 year ago

Based on just that trailer... I would watch the original series first.

[–] njaard@lemmy.world 2 points 1 year ago (1 children)

According to J Michael Straczynski's tweet*, this is "totally separate and apart" from the B5 reboot, which I'm also thrilled about.

[–] njaard@lemmy.world 0 points 1 year ago (1 children)

No, I only write plain text emails, mailjet only has ip addresses that are generally not blocked by the big providers and they do all the DCIM stuff.

[–] njaard@lemmy.world 1 points 1 year ago (3 children)

Yes, and I love it.

I use mailjet as a proxy on outgoing emails so that I get fewer of my sent messages rejected, which works.

It was a pain to setup but it's treating me very well.

view more: next β€Ί