fguerraz

I just contributed this [1] which does what you want for seccomp. Well, not by default, but profiling is now effective against this attack.

Oh, an this [2] just happened

[1] https://github.com/containers/oci-seccomp-bpf-hook/pull/209 [2] https://github.com/moby/moby/pull/52501

However, the author managed to squeeze the word "however" eleven times in this article, however.

In cryptography, you want operations to run in constant time, even if it’s wasteful, otherwise an attacker could guess information about the key or plaintext by measuring execution times.

Modern compilers are extremely clever and will produce machine code that takes full advantage of modern CPU branch predictors, and reorder instructions to better take advantage of pipelining. This in itself will make the same code run at different speeds depending on the input data.

Then there is the whole issue of compiler version roulette. As a developer you have no idea which version of compilers your users and distros will use, and what new and wonderful optimisation they will bring.

Cryptography and video codecs are notable exceptions, they put a lot of effort to making the code provably memory safe: no recursion, limited use of stack variables, no dynamic allocations, etc. As a result, memory safe languages bring nothing but trouble by making it non deterministic, that’s especially true for crypto where compiler “optimisations” guarantee you side channels attacks.

Distributions using outdated (sorry “stable”) kernels are stupid.

We are not 20 years ago, the world in which it made sense doesn’t exist anymore, but the industry is slow to move on. Just pick a long term release and update it regularly.

Like this: https://archive.is/2026.03.03-070033/https://www.nytimes.com...

You’re correct, the article doesn’t say anything about that, I’m using my own judgement given the facts that I have.

All I know is, if I was at war with the USA, I would definitely cut the internet in my country. Not doing it is like being at war with a big maritime power, and not protecting your coastline.

There is no naivety on my part, the USA has publicly admitted that it orchestrated and even armed the protests [1]

[1]: https://www.aljazeera.com/news/2026/4/6/has-trump-confirmed-...

Excepts the internet blackout has nothing to do with censorship at all. This is just Iran protecting itself from cyber attacks, if they had kept Internet running, they would have been completely pwned.

I find it interesting that the BBC published this at a time they are already under heavy criticism for their coverage of the war in the Middle East (where they didn’t blink at Trump’s genocidal threats and published an article claiming that Iranians wanted to be nuked).

Now we’re saying that war is just natural. It must be a coincidence.

Interestingly, I think 3 or 4 out of the 5 bugs would have been prevented / mitigated quite well using https://github.com/anthraxx/linux-hardened patches...

(disabled io_uring, would have crashed the kernel on UAF, and made exploitation of the heap overflow very unreliable)

A lot of AI generated horseshit.

Yes, if you count the Drax power plant as renewable, sure.

If you add to that deindustrialization and buying everything from abroad and not caring where that energy comes from, it’s super easy.

yes, I do mean Firefox specifically. Mozilla fundation is not Mozilla corporation. The money you give to the fundation is for their charity work, none of that goes to the development of Firefox.

We have no idea what is in that contract with Google. They get to be the default search engine, but what else? Does it prevent Firefox from accepting some sources of funding, like donations?

It would be great to get transparency on this…

I found the horse revenge-porn image at the end quite disturbing.

They lost me at Vista lol

In all honesty, it was easy for me to switch to Linux because I was always more interested in the computer itself rather than what useful things I could do with it, so I actually never missed a particular application. I also was more interested in making a game run in Wine with maximum effort rather than actually playing it (I did play countless hours of World of Warcraft though...)

Facebook would start listening on port X and and then their embedded SDK in other websites or app would query that IP and port, get their unique id, and track users much better.

Sounds farfetched? https://www.theregister.com/2025/06/03/meta_pauses_android_t...

They have an absolute monopoly on a very niche market in developed countries. 5G beats satellite in both speed and convenience IMHO.

It's a completely different story in countries with crappy networks (looking at you Philippines), remote areas, or offshore.

As mentioned in the article, every bug is potentially a security problem to someone.

If you know that something is a security issue to your organization, you definitely don't want to paint a target on your back by reporting the bug publicly with an email address <your_name>@<your_org>.com. In the end, it is really actually quite rare (given the size of the code base and the popularity of linux) that a bug has a very wide security impact.

The vast majority of security issues don't affect organizations that are serious about security (yes really, SELinux eliminates or seriously reduces the impact of the vast majority of security bugs).

The ICC was never meant to be used against the West.

You can’t fix censorship with tech. The only solution is booting the facists out.

I still can’t give them money, so what’s the point? Just like with Mozilla, they rely on sponsors and you are the product.

ProtonVPN clearly marks these “virtual locations” in their UIs as “smart routing”, so there really isn’t any deception here https://protonvpn.com/support/how-smart-routing-works

> The unification energy between the graviton and quantum field theory is on the order of 10^19 GeV, over a dozen orders of magnitude beyond anything we can generate.

lol the confidence.

> Something one doesn't see in news headlines.

I hope this wasn't a terrible pun

So what?

Of course it’s stupid and it’s never going to work. The same is true for Carbon Capture and Storage, blue hydrogen, etc. It’s nonsense from the start, but it didn’t stop governments around the world to spend billions on it.

It works like this: companies spend a few millions on PR to market a sci-fi project that’s barely plausible. Governments who really want to preserve the status quo but are pressured to “do something” can just announce that they’re sinking billions in it and voila! They’re green, they’re going to save the world.

It’s just a scam to get public money really.

OpenAI created this problem all by themselves. If the intention for private chats is that they should be private, then they should be e2e encrypted.

This is just corporate greed!

I live in a EU country in an apartment and 5GHz is completely crowded and pretty much unusable because of DFS (making your WiFi AP unexpectedly stop to do a complete scan and choose a new channel), so 6GHz is the only stable, high bandwidth option here, and we need more channels so that most peopole chan switch to it.

The cellular networks operators can have that shitty 5GHz part of the spectrum if they want it!

While I truly admire how much progress they’ve made, and respect that everyone should pursue whatever they feel like doing with their time, it still feels to me like such a waste that it’s not written in a modern memory safe language.

I fear it’s ultimately going to be the most promising, least safe browser to use.

But hey, I want to be proven wrong, so I still gave them some money…