

Local Privilege Escalation - i.e. someone who is already a non-admin user (whether through other hacks or normally) on your computer getting admin privileges.
Person interested in programming, languages, culture, and human flourishing.


Local Privilege Escalation - i.e. someone who is already a non-admin user (whether through other hacks or normally) on your computer getting admin privileges.


My understanding is that they’re withholding part of their source code (which is forbidden by AGPLv3 as described in the article) so that they can keep lock people with their devices into their cloud services (and of course corresponding subscription fees, privacy nightmares, etc.), rather than having the printers able to receive files and print them themselves.


Does the livestock figure include the water being used to grow their feed? Probably not because of course there’s no guarantee that their feed is Texas sourced. But there are just SO many examples of already too dry places having astronomical amounts of water given (read: stolen legally) to farm stupidly water intensive crops that are only good for feeding livestock like alfalfa.
For what it’s worth, the Popover documentation is very explicit that <dialog> is the only right tool for the job when you want a modal:
modal, meaning that while a popover is being shown, the rest of the page is rendered non-interactive until the popover is actioned in some way (for example an important choice is made).
non-modal, meaning that the rest of the page can be interacted with while the popover is being shown.
Popovers created using the Popover API are always non-modal. If you want to create a modal popover, a
<dialog>element is the right way to go.


This is such an exciting proposal for the web. From what I understand, this would be one of the final hurdles to having WASM “just work” in browsers the way people always expected it to (i.e. having standardized support for directly interacting with Web APIs/the DOM, without any janky glue code and skipping the huge inefficiencies of intermediary JS).
The end result would be developers having a much easier path to implementing huge parts of their applications with native-like speeds in any language they want. Some people will want to do their whole application this way, and others will have specific modules that can benefit hugely from this while still making considered use of the rest of the web platform.
As they say in the article, the current status quo is that this is possible but that ad-hoc/custom WASM modules are out of reach for all but the largest developers because of the cliff of complexity involved in moving beyond the most well-trod paths.


What RCE are you talking about?


To add two numbers, for example, it constructs the midpoint between them, then doubles the distance from the origin.
It’s basically a self-defined system of arithmetic, with no actual numbers. e.g. rather than 1 + 2 = 3, you have [radius of unit circle A] + [radius of 2 unit circle B] = [length of 3 unit line C]. I’ll confess I don’t totally understand how you can extend that to the point that it can correctly implement RSA, but I believe it can be done based on other achievements with unquantified geometry I’ve witnessed in the past.
For example, this excellent video about constructing flags using only the shape drawing tools of PowerPoint without ever applying external measurements to the shapes.
Servo has been picked back up by a community of devs outside of Mozilla (currently housed in the Linux Foundation Europe) and has been gaining momentum since 2023, to the point it seems to be moving faster now than when Mozilla was funding it.


The number of times I’ve seen people link to this thread while completely misunderstanding the context of it drives me nuts. The issue isn’t being able to export keys, it’s that KeepassXC was making it trivial to export keys in plaintext with no user warning/verification, which fundamentally undermines the biggest security advantage of passkeys - phishing resistance. In other words, if users can be easily talked through exporting their keys via a simple in-app flow that gives them no warning about the danger of what they’re doing, then they will do that and be scammed horribly by it.
The person who raised the issue was asking KeepasXC to come up with a better solution for exporting keys - originally he asked them to wait for the now standardized process that every passkey provider uses, but then they settled on showing the user an explicit warning about the danger of plaintext exports in the meantime.
If you choose to read the most hostile and uncharitable subtext into every word a person writes in public, you can misunderstand what he’s saying. Otherwise, this is a pretty cut-and-dry example of a person genuinely trying to support the interests of end users.


Hell yeah nushell! Truly a life-changing upgrade.
Thank god Temporal is finally in Stage 3, and already rolled out in Firefox. I can’t wait to be done with JS’s Date forever.
I agree, except that we are legally not allowed to control the software on our phones in lots of cases. Notifications, ads, upgrades, etc. are all controlled by the manufacturer and it’s illegal to override their software on the device you own.
Add to that that specific pieces of software are becoming increasingly necessary to function in society, and you start to see that it’s not really a matter of individual choice, anymore than people shopping at walmart can be blamed for buying processed, sugary foods when that’s 90% of what walmart stocks (And all they promote), and walmart is the only affordable option in their community.
Cities are centuries older than cars though. Cars are the new thing. And yet it’s true that cars are an obvious QoL improvement for anyone in a rural area, and no reasonable person is suggesting that people in rural areas shouldn’t drive cars.
The real issue is that Americans (among others) have decided they want all the convenience and amenities of living in a city (sewer, water, energy, convenient access to most goods and services, etc.), but they want to pretend they live in a rural area, with no density whatsoever. This has resulted in the suburban sprawl that is financially ruinous and requires cars to be able to go anywhere and do anything, which creates traffic, which we solve by building bigger roads and pushing things farther apart, creating more traffic.
Thus, the answer really is that if you want city amenities, you need to live in a city. It doesn’t have to be as dense as New York. Not Just Bikes just posted a great video about the smallish town of Bergen in Norway that is not a super dense urban hellscape, it is medium density with human-centric development.


repairable and upgradable*
I know it’s an absolutely banal nitpick, but I think it’s unfortunately a revelation in the current laptop market that ~90% of a laptop stays good for a really really long time, and the other 10% can be upgraded piecemeal as the need arises. Obviously this was never news to the Desktop world, but laptop manufacturers got away with claiming this was impossible for laptops in the name of efficiency and portability.


If you’re in any of these states:
You can use the IRS’ new Direct File service. It’s what we should’ve had ages ago, letting citizens file their taxes directly without a for-profit middle man. There are still a couple of scenarios they don’t support, since it’s still in development and is only in it’s second year of use, but in my experience it’s already competent and helpful.
And, as a bonus, you don’t have to give any money to Intuit/TurboTax to keep lobbying the government to make our tax code as arcane as possible so that people need their services to file taxes.


- There was a serious lack of current kernel developers (which I don’t think there is)
Maybe not at the moment, but my understanding is that the pool of qualified C programmers is shrinking rapidly, because the old guard is all ageing out and there simply are not enough intermediate developers coding in C at the level that Kernel development requires.
Having a larger (and growing) pool of upcoming developers interested in systems programming and software excellence is one of the explicit stated reasons that Linus et al. considered Rust in the first place.


I’m a bit confused, it sounds like Yale will no longer offer CS50, but unless I’m misunderstanding, won’t Harvard still be producing the course?


I broadly agree.
However, “Existing maintainers have every right to push back where they see fit” is tenuous when the Linux project as a whole has already (exhaustively) discussed and debated this exact question alongside all the other questions about adding Rust, and the explicit declared direction is that Rust should become an increasingly large part of the Linux kernel.
This is valid if your city doesn’t have dedicated bike infrastructure that gets plowed. Snow can be hardly an inconvenience at all if bike infrastructure is treated with equal importance as car infrastructure.
Oh the Urbanity! on Youtube has a really realistic take on this in Montreal: https://youtu.be/sokHu9bhpn8
I would think an Astrophotographer needs to know which distant objects in the night sky are going to be illuminated and/or washed out when, so maybe that’s what it’s referring to? I.e. the joke is not that he knows where the sun is pointing on Earth, but that he knows where in the observable galaxy the light will be best for his needs?