New Google ChromeOS updates cause 100% CPU usage, heating issues
bleepingcomputer.com
bleepingcomputer.com
I helped a teacher last week reinstall her OS. She was about to buy a new $1300 gaming PC (not reimbursed by the school district) because she kept getting kicked out of her video calls with her students and apps randomly crashed.
And now it’s good as new, no need for a new computer.
I think us tech people sometimes lose sight of the amount of crapware that non-techies accumulate / download / install over a period of years.
In recent decades (at least in the US) we have already gutted civics and home economics completely, and effectively gutted arts and music programs, in the pursuit of STEM and looking good on PISA rankings. What else are we going to eliminate for this new requirement?
It’s also unclear given the general sorry state of education salaries in the US who we’d be getting to teach these classes. Most adults aren’t that computer literate either, and I doubt a high-falutin’ FAANG employee is about to work in an urban school with lead paint and asbestos for a ~50k salary, some of which you have to use to pay for chalk, tissues, paper towels and other basics of the classroom.
> ChromeOS is targeted towards the non-technical and non-computer-literate.
you just answered why :)
So, sort of because of missing files, but more about ignoring an exception and running on into code that's probably looping.
[1] https://bugs.chromium.org/p/chromium/issues/detail?id=113245...
https://android.googlesource.com/platform/frameworks/base/+/...
I like to add sanity checks to loops that force them to break after some “clearly unreasonable” amount, and other such guards, just in case.
The common usage pattern in low level C is:
if (attacker_size == 0)
return SizeError;
char* string_buffer = malloc(attacker_size+1); // oops, string_buffer could be 0 sized.
memcpy(string_buffer, attacker_buffer, attacker_size);
This caused huge security issues, 2 separate times. The first time was when attackers started understanding integer overflow attacks. The second time was when codebases switched from 32 to 64 bit. The last one is more tricky. But I have seen code 'ported' (that I think looked) like this: uint64_t attacker_size = ...;
if ( attacker_size == 0 || attacker_size == UINT64_MAX)
return SizeError;
uint32_t string_size = ((uint32_t)attacker_size+1)*2; // Oops, overflow on 32 bit register, string_size = 0;
// etconly until you reach googol, then it should be fine /s
Of course, Google gave their vending product the privilege of running in background. Because it's important.
[1] https://stackoverflow.com/questions/50368716/how-to-automati...