@Zerosquare Wow, they managed to make worse than a modern HP printer. This takes effort.
Posts made by Medinoc
-
RE: I hate printers, with a passion
-
RE: WTF Bites
@Bulb UNIX-type systems make this even weirder with command chains.
They too abide the convention that
0
is success and anything else is error, yet when you want a script to "execute program A, and if A succeeded, also execute program B", this is what you need to type:
./programA && ./programB
So the
&&
here isn't an actual short-circuit boolean AND operator, because it actually checks that program A returned0
. -
RE: WTF Bites
This week I learned (through the new pgAdmin) that someone liked the idea of Electron so much they made another.
(that said, switching to an Electron-like system is still a huge improvement for the "desktop" version of pgAdmin, which badly needed it)
-
RE: Wow! "NEW" Microsoft Teams!
Yesterday my remoting VM's "NEW Microsoft Teams" listed everyone as "Unknown User", had to revert to "Old" to get a working Teams.
-
RE: WTF is happening with Windows 10? And nothing else
@loopback0 said in WTF is happening with Windows 10? And nothing else:
@Arantor said in WTF is happening with Windows 10? And nothing else:
the Win11 stuff
Windows 11 is just Windows 10 without the ability to put the taskbar in weird places
Which is exactly the part of Windows 11 that will significantly hamper my ability to do remote work.
-
RE: Abode unCreative Suite (includes hoodie!)
@Atazhaia Wait, so this kickstarter is from the Black 2.0 guy? Interesting (but not in an "interested in the product" way).
-
RE: Abode unCreative Suite (includes hoodie!)
Did the installer delete itself after use?
-
RE: Hacking News
@cvi Yeah, seeing the same thing in my own logs taught me that there is no such thing as "too obscure to be targeted"; because bots don't care, they simply target everyone.
-
RE: WTF Bites
@Zecc I've never seen nodejs code before. Just what does
require
return?
And how can aconst
ant be computed (when?) from its return? -
RE: Hacking News
@izzion said in Hacking News:
@Medinoc said in Hacking News:
I heard Apex Legends players were hacked through a vulnerability in the game's kernel-mode anti-cheat program (which makes their entire Windows install thoroughly compromised).
This kind of shit is (part of) why I don't play MMORPGs. If your game needs to run a Big Brother with admin access or worse, that's vulnerabilities waiting to happen.It’s mostly shooters and MOBAs that run anti-cheats. The two biggest MMOs either have extensive mod support (WOW) or mostly have a don’t ask don’t tell implementation of their no third party programs rule (FFXIV)
AFAIK Star Wars The Old Republic uses an anti-cheat. I know it at least runs something that demands administrative privileges.
-
RE: Hacking News
I heard Apex Legends players were hacked through a vulnerability in the game's kernel-mode anti-cheat program (which makes their entire Windows install thoroughly compromised).
This kind of shit is (part of) why I don't play MMORPGs. If your game needs to run a Big Brother with admin access or worse, that's vulnerabilities waiting to happen. -
RE: WTF Spam!
What kind of person would ever want to "need protection"?
...oh. -
RE: Wow! "NEW" Microsoft Teams!
@Medinoc Okay, I'm gonna give this one to Microsoft: I tested "Copy Image" in the NEW Teams, and this time it works as expected. So at least they fixed that.
What they broke was the Spellchecker, or at least its support for languages other than the UI's (I have English UI but communicate in French, and can't get NEW Teams to accept French as a real language).
-
RE: Wow! "NEW" Microsoft Teams!
@jinpa Yet the right-click menu has no "Save Image..." you need to maximize the image and click the download icon.
...And then rage as the file is immediately put in your Downloads folder because letting the user choose where they want a file is so 2003 I guess! -
RE: Wow! "NEW" Microsoft Teams!
I have been sent an image through Teams (here, it's the "old" Teams).
- I right-click the image, and select "Copy Image".
- Then I open Paint, and... Paste is grayed out.
- Uh? DId it copy the image as a file instead? I open Explorer, and... Paste is still grayed out.
- Then I open a clipboard viewer program, and it turns out... the contents is text.
<img src="data:image/png;base64,(anonymized;base 64 goes here)" alt="image" iscopyblocked="false">
Teams copies images as HTML with a data URL (which Paint can do nothing with), and not as actual images. -
RE: WTF Bites
@dkf Damn, that's pretty counter-intuitive to me...
Well I suppose that could work with extensive amounts of mutexes and other interprocess synchronization mechanics, but that also means no possibility of caching when two clients access the same table (unless the IPC includes shared memory). Wait that's not nearly snarky enough and way too reasonable an answer for WTDWTFThis explains so much. -
RE: WTF Bites
@ixvedeusi You're right.
I also had another example where a forking server would likely cause more problems than it solves: A database server. -
RE: WTF Bites
@PleegWat HTTP may not be that hard to parse, but it still sucks nonetheless for lacking a fixed
size
field... Instead it has (or not)Content-Length
which moves around depending on the size of the URL and any headers before it, and whose own size is variable.
On the traditional forking server: I'd say it's fine for stuff like FTP servers or good old static HTML, but the moment you're expected to allow clients to interact with each other (i.e. a chat program), your forking server finds itself having to deal with inter-process communication.
-
RE: Wow! "NEW" Microsoft Teams!
Teams just forcibly switched me to New Teams.
More accurately, it offered me the choice between "switch now" and "switch on exit", with no way to close the popup.
Then the toggle was still visible in New Teams, so I reverted back to working Teams immediately. -
RE: Wow! "NEW" Microsoft Teams!
@Steve_The_Cynic While , Windows binaries generally aren't considered fat due to the MS-DOS executable's insignificance (and likely also it being completely divorced from what the Windows executable does -- typical fat binaries are generally two versions of a program meant to accomplish a similar purpose)
-
RE: UI Bites
@Arantor Technically the only wiki I edit with any regularity currently is TV Tropes. But I have no knowledge of it doing any kind of keyboard shortcut management and am fairly confident I could reproduce the problem with a simple "edit page" on Wikipedia.
-
RE: UI Bites
It's often I edit some wiki pages on Firefox. If a page is big and the wiki has no convenient section-editing feature, this means using Ctrl+F (find in page) to get to the part I wanted to edit.
I don't know exactly how Firefox managed to screw up their keyboard input queue that badly, but if you Ctrl+F and continue typing immediately, focus will remain on the wiki's TextArea for one second or so, and with it, the first few characters you meant for the searchbox.
-
RE: Can I borrow an apology?
@Gustav Thanks, I'll give Rust a look (though I still plan to keep C# as main since it's what I do for a living).
-
RE: Azure bites
@Unperverted-Vixen Could be... Does VS Community require logging in?
-
RE: Azure bites
@Bulb said in Azure bites:
The WHAT‽
I still have a major program of mine compiled with .Net 2 too.
Why?
Because I got a Visual Studio 2005 pro from attending a school partnered with Microsoft. Permanent CD key, no user account, only problem is C# 2.0 is quite unwieldy compared to later versions.I plan to get VS Code with the .NET Core SDK so I can learn .NET Core and port that project of mine, but... time and energy, man.
-
RE: Can I borrow an apology?
In the end, seriously, among the slew of "new" programming languages, is Rust worth learning? (and if not Rust, which one?)
I don't want to fall too behind technologically, since I'd rather not be fired and replaced by an upcoming youth in twenty-plus years when I'm five years away from retirement.
-
RE: WTF is happening with Windows 10? And nothing else
@Arantor said in WTF is happening with Windows 10? And nothing else:
Et tu, Telemetry, et tu??
WHAT THE EVERLOVING FUCK ARE YOU ACTUALLY DOING
I've had this same question today, only it was taking 100% of the hard drive I/O.
-
RE: WTF Bites
I don't think people code this way out of "purism",
theywe simply do it out of lazyness.What people think is "If the INSERT fails, a database error just occurred and we log it as an error with full stacktrace (and if you're good, the failing query and its parameters." The code doesn't know that this error was an input error because it doesn't bother to check (and it would be a paint to implement in some cases, especially if you have to handle multiple DBMSs). So the result is, "Any error not caught in the front-end returns HTTP code 500 even when it should be 4xx".
It's up to the maintainer (me again) to check the log and tell the customer to stop wasting my time and get their shit together.
-
RE: Unit of Measurement WTF
@Zecc So that's why the handegg is called a football!
-
RE: Internet of shit
@PleegWat I like the subtle rounding error introduced rounding neither half-up nor banker.
-
RE: Internet of shit
@dcon Looks awfully flimsy.
ETA: And it also looks pretty awful. -
RE: WTF Bites
@dcon Try anyway... if it's the first printing, then it's an original :p
-
RE: UI Bites
@Applied-Mediocrity said in UI Bites:
@Bulb Or how this crazy, if arguably too simple for modern "solutions", idea: using
monospace
for technical data such as identifiers?But you have to plan the width for the widest of the fonts it can fall back to, while praying the customer left their browser's monospace font on default.
...Or maybe you can specify the width inem
? -
RE: Overheard in the next cube
@Tsaukpaetra "My code isn't broken, the build process team broke it!"
-
RE: So Windows 11 Paint supports layers now...
@marczellm https://en.wikipedia.org/wiki/Open_Packaging_Conventions
It's the thing used for docx and the like, NuGet packages etc.
The API to manipulate them is part of the .NET Framework Base Class Library and accessible through COM, so clearly they wanted it to be ubiquitous. -
So Windows 11 Paint supports layers now...
Except you can't easily save them.
- None of the formats supported by "Save As..." support layers, so each of them will give you a warning that saving will flatten the image
- The layer list has a context menu, but that menu has a "Save Layer As..."-shaped hole in it.
- The only way I've found for saving the layers involves hiding all layers, showing one, saving the pic with "Save As...", and moving on to the next (Don't Ctrl+S, or you'll overwrite your previous save instead).
They couldn't even be bothered to add any saving format, not even something basic like "a dumb zip with all layers as PNG files in it".
ETA: Oh and GIF support is still broken. Still shows the "this might degrade color quality" when the actual number of colors used in your image is less than 256 (my test pic had a grand total of two colors, without gradient), and even with the new transparency support, saving as GIF will simply make the background white.
-
RE: UI Bites
@hungrier But only if the program knows it's running on a VM.
That said, most VMs are pretty vulnerable on this angle, especially to a program that demands administrative rights:
-
RE: Youtube vs ad blockers
@jinpa "Contest losers will be robbed of their intellectual property. Contest winner will get a small cash prize... and be robbed of their intellectual property."
-
RE: Youtube vs ad blockers
@Zerosquare There aren't enough shocked Pikachu faces in the world for this.
-
RE: UI Bites
@BernieTheBernie Have you tried installing it on a virtual machine? That would be my first reflex for this kind of stuff.
-
RE: Hacking News
@HardwareGeek said in Hacking News:
WEBP
JUST SAY NOThat's what this is for:
SomeFile.JPG
) -
RE: Hacking News
@Gustav said in Hacking News:
@LaoC said in Hacking News:
It cannot be the same as the stack-based ones because you won't overwrite any return addresses by simply going higher and higher - which is what virtually every overflow ACE exploit relies on.
There are open source exploits for Heartbleed, for Shellshock, for that Log4j thing, and many more. Not all exploits are embargoed. There must be the source code for a heap buffer overflow ACE exploit if such thing is possible at all. So until I see one - or someone explains the exact method it could be achieved - I'm going to assume it's not in fact possible and all the "may lead to ACE" you see in CVE descriptions are just the usual security researchers' fearmongering who abuse the fact you can't prove ACE isn't possible.
You cannot* overwrite a return address with a heap buffer overflow, but you could overwrite the vtable pointer or a nearby C++ (or some other OOP language) object that happens to have a vtable.
*I'm sure in some planetary-alignment-grade circumstances you could possibly have a heap buffer overflow that goes all the way up to the stack without encountering a non-writable page first...
Speaking of heap buffer overflows, apparently there's one in libwebp that was recently patched out in most browsers. -- this time with a confirmed ACE exploit in at least one program that used libwebp.
https://www.bleepingcomputer.com/news/security/google-assigns-new-maximum-rated-cve-to-libwebp-bug-exploited-in-attacks/ -
RE: A fool and his not-really-money are soon parted
@DogsB said:
NFTs Are Now Worthless
(with apologies to the forumgoer who first posted this, and
whom I'm currently ripping offwhom I right-clicked) -
RE: WTF Bites
So...
is a POJO supposed to be how the Java crowd calls POD types? -
RE: WTF Bites
The
WCMUsePojo
abstract base class that POJOs derive from is 242 SLOC.What does the "S" mean again? I always forget (assuming I'm correct in remembering the last three as "Lines Of Code").
-
RE: Circle of Size
@LaoC said in Circle of Size:
do a HEAD on each gif in a page and if it was bigger than a few kB, rewrite it to a request to my own web service. That downloaded the picture and returned a new URL for a local copy that would have the image transcoded to jpg or mp4
So, a precursor to Twitter, Imgur, Mastodon and countless others' GIF mangling?
Edit: Fixed possessive grammar.