trasz2

Isn’t pledge(2) trivially easy to escape anymore? This used to be one of the differences compared to eg capsicum(2).

Not just BSDs; no major operating system other than Linux uses procfs anymore.

>Browser vendors have other priorities besides having the latest-greatest compressor: code size, attack surface, long-term maintenance and compatibility risks, and interoperability.

You’ve missed two most important ones: “business reasons”, eg trying to harm some (potential) competitor, and someone trying to get promoted. Don’t assume there are valid technical reasons behind every corporate decision like those; usually there aren’t.

Daily reminder that Chrome (and Chromium) is not unlike other Google projects: users are its cattle, not its clients. It’s naive to assume good intentions here.

By eliminating the main perpetrator - Russia. Smaller countries are manageable.

tl;dr USA is evil because it helped Ukraine defend against Russian meddling.

>I doubt that countries bordering Russia are keen to have failed chaotic states with economic problems on their borders.

As opposed to a single, stronger failed state with economic problems?

It's also the only scenario that guarantees long-term stability. Also, it's not like we've hadn't been through this twenty years ago already, and the result was quite good.

I suppose it might look pointless if you need to jump through the hoops to get it running. In FreeBSD ZFS is properly integrated, and ZFS is a perfectly fine default root filesystem; there's no reason not to use it, except eg very memory-constrained virtual machines.

Note that, thanks to capsicum(4), this vulnerability is not very exploitable.

Being able to get around doesn't matter - what matters is whether it's inconvenient enough to make the propaganda business unprofitable.

And with revision log.

FWIW, Coinbase Wallet hasn’t been very useful simply because it’s owned by Coinbase, and thus cannot be trusted.

“Sink a carrier” is, in terms of how hard it is, somewhere around “bomb White House”. It’s absurdly hard to do even for a well-equipped nation state.

Also, a huge problem with modern Russian hardware is that it’s largely vaporware. That’s why they are using all that USSR-era equipment.

If you have a way to make them ping your host at just the right moment, and then keep that ping process running.

Western countries don't have so much hardware, but they have much better hardware. Simply put, if NATO entered the war, Russian air force and land bases would get eradicated from safe distance, thanks to aviation and missiles Ukraine doesn't have.

Note that in FreeBSD, ping is sandboxed using capsicum, so the impact of this is rather low - you can get ping to crash, and send arbitrary packets, and write arbitrary stuff to the terminal, and I think that's it.

Interesting story, especially the part where the Canadian scientist got assassinated by (probably) Israel.

Note that this is about the _second_ witch trial, a civil case between two members of a weird pseudoscientific cult.

Also, regarding the first trials, the really inappropriate thing would be some Christian stall, as it would glorify the perpetrators. I don’t see anything wrong with witchcraft stalls - they are at worst neutral.

Any responsible journalist would mention that while there have been no backdoors found in Huawei equipment, despite independent audits, there have been numerous backdoors in their American counterparts.

Except those losses are often purely virtual.

There is no reason for Google to not be lying about it.

There are two fundamental differences. One is that Russian invasion and genocide is happening now, not couple of decades ago. Second is that the fact we can’t punish US doesn’t mean we shouldn’t punish other offenders.

Fertility isn’t a problem, insufficient immigration is.

Not “millions”, as FTX barely had a million customers. And most of the money belonged to entities like Sequoia Capital and SoftBank and not actual people.

Also, given it was a crypto exchange, ie a ponzi scheme by design, I’m not sure if there’s any point in blaming the owners for making it a bit more scammy.

The problem with operators is not only that they often delayed fixing critical bugs for no good reason; they also liked to add maliceware. I remember a Nokia phone with one key dedicated to trick users into starting it by accident, which of course was billed.

Apple preventing network operators from breaking their software on purpose was a huge step forward.

>We never thought our startup would be threatened by the unreliability

Daily reminder that cloud services are vastly less reliable than traditional hosting; it’s just that they manipulate the terminology to deflect that, replacing reliability with availability, aka “making impression of working”.

>Huawei is beholden to the CCP and can be coerced

It works the exact same way with every American company, as evidenced by numerous backdoors revealed by Snowden and other folks.