-
The attached is a nice explanation of the “sudo” bug, but somehow I feel that it would be better coming from @XKCD
The Qualys Research Team has discovered a heap overflow vulnerability in sudo, a near-ubiquitous utility available on major Unix-like operating systems. Any unprivileged user can gain root privileges on a vulnerable host using a default sudo configuration by exploiting this vulnerability… https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit
-
#Coffee: #JamesHoffman video on RDT / Ross Droplet Technique for #Espresso, with bonus idea: spritzing the puck /cc @jimseven
Quoth the holy James (it’s all good, but the novel bit is towards the end) For a tiny sum I purchased a box of 6+ spritzer bottles from Amazon about 2 years ago, and have been giving away the spares ever since; the Ross Droplet Technique does work amazingly well but you’re at risk of…
-
By @jon_rauch: “Trump’s presidency can be described in many ways, but one accurate description is as a relentless, continuous war on professionals and professionalism”
Long read, thoughtful, big US-legal focus, I would have expected it to be a bit more institution-centric so it’s interesting to see the arguments played-out regards individuals. The point is not that amateurs should stay out of politics and leave it to their betters. Not at all. The point, rather, is that professionals and voters,…
-
Funniest tweet I’ve seen all day. HT @jimfinnis.
https://twitter.com/foxsoup/status/1354061754561654784?s=09
-
“The following Tweets are part of a live conversation detected by an algorithm”
Nice of Twitter to surface this / explicitly make it clear, but it also suggests that “algorithms” are, like “clouds”, now a magical abstract term which needs no elaboration and lacks much, if any, meaning.
-
TwitterSearch “my business” AND “brexit”
Via Caitlin Moran, this search: https://twitter.com/search?q=%22my%20business%22%20AND%20%22brexit%22&src=typed_query
-
The Santa Claus Problem: an article by @CaseyNewton, amplifying @greggcorp, regarding “abuse” on @SignalApp and @Moxie’s response to it: this is a very old argument, and here’s the problem with it…
Everything old is new again… There’s an indefinite series of old nerd jokes about the hardest problems in software engineering; “naming things” and “off-by-one errors” speak to the challenges of writing software, and the impassioned, bikeshedding arguments that you will have when you build something new. But those problems pale by comparison to what happens…
-
“Gritter Bicycle” on YouTube
This is cute, and probably not terribly realistic or practical, but I want one.
-
Adobe Flash Shutdown Halts Chinese Railroad for Over 16 Hours Before Pirated Copy Restores Ops
It was kind-of inevitable that something like this would happen – SPOILER: as far as we know it only took out the timetables and ticketing, rather than the trains themselves. Good coverage, and plenty of links, here: https://www.thedrive.com/news/38897/adobe-flash-shutdown-halts-chinese-railroad-for-over-16-hours-before-pirated-copy-restores-ops According to a report by Apple Daily, the problem reared its head for China Railway Shenyang in Dalian,…