https://github.com/KerfuffleV2 — various random open source projects.

  • 1 Post
  • 64 Comments
Joined 2 years ago
cake
Cake day: June 11th, 2023

help-circle
















  • The timing and similarity highly suggests this is a problem with how almost all software has implemented the webp standard in its image processing software.

    Did you read the article or the post? The point was that both places where the vulnerability was found probably used libwepb. So it’s not that there’s something inherently vulnerable in handling webp, just that they both used the same library which had a vulnerability. (Presumably the article was a little vague about the Apple side because the source wasn’t open/available.)

    given that the programs processing images often have escalated privileges.

    What? That sounds like a really strange thing to say. I guess one could argue it’s technically true because browsers can be considered “a program that processes images” and a browser component can end up in stuff with escalated privileges. That’s kind of a special case though and in general there’s no reason for the vast majority of programs that process images to have special privileges.



  • It’s actually not that hard to start having them pretty frequently. I always had that same problem though: I’d realize I was dreaming, say “Wow, I’m actually dreaming and aware of it. This is amaz-” and wake up. There are supposedly tricks you can use to prevent yourself from waking up like spinning around, but it didn’t seem to help even when I remembered to try in the dream.

    You can make them more frequent by just thinking to yourself “Am I dreaming?” and checking if you are a bunch of times a day. 5-6 is probably enough. Keep that up for a few weeks and you’ll probably start having frequent lucid dreams. I read that lucid dreams aren’t really that restful compared to normal sleep though, so don’t try to induce them unless you can spare the sleep time.


  • Ahh, I hate Snap so much. It actually what drove me to switch to Arch (btw). It was just so annoying going to install something and having it try to pull in snap and all its dependencies… And of course, if you don’t want Snap you have to deal with the inconvenience of finding another way to install the app.

    There are reasons to dislike Snap on principle and also very practical reasons. It liked randomly preventing the system from shutting down. Installing a new OS on a slow or unreliable internet connection and want a browser? How about we install Snap and then tell to download that thing and maybe a bunch of random internal dependencies with no visible progress and unreliable error handling? Get it away from me.