Earlier quoted context omitted.
Time to switch to Firefox and give Google less data. Firefox doesn't seem to send the referrer :)
Brave does not send the referrer as well.
Yes it does. I use brave and I get testicles if I click the link.
Kids find a security flaw in Linux Mint by mashing keys
161–170 of 340 posts
Re: Kids find a security flaw in Linux Mint by mashing keys
#162Earlier quoted context omitted.
So what. This is how the web works. If you don't want people linking to you, don't have a website. He puts this blog out there for people to read, is it so weird that tech sites like HN would want to link to it? And really if you're being DDoSed by a small thing like HN comment links you really have to up your game :) Wait till you get featured on reddit (previously called slashdotting when slashdot was still a big t…
He doesn't think he's getting DDoSed from here. He doesn't respect anyone who comes from here. Nor should he, not least because the redirect reliably results in ~90% of comments in any thread where jwz is mentioned being about the testicle in the eggcup rather than anything substantial.
But he refers to DDoS specifically in his eggcup image :)
PS: I have no idea what he means by "finance-obsessed"? I think the community at HN is tech-obsessed which is what I like about it. But finance? This is not yahoo finance or wherever all the finance guys hang out.
It sounds more like he had a clash with someone specific on a finance-related issue and bases his view of the HN community on that. The eggcup is a bit of an immature way to deal with this IMO. Especially as he has good points to make about X11 security, and this undermines them.
Re: Kids find a security flaw in Linux Mint by mashing keys
#163Re: Kids find a security flaw in Linux Mint by mashing keys
#164Earlier quoted context omitted.
Bad design in X11 which can't be fixed. https://news.ycombinator.com/item?id=25801693
It's not an X11 design flaw. The very concept of locking the screen is flawed. A flaw that also haunts Wayland, BTW. The concept of screen lockers is having a special layer, that can't be bypassed, which a locker creates. The whole security then hinges on the locker not crashing. X11 does have such a layer. Wayland compositors also implement it through such a layer. And for either the situation is, that if the locker…
It’s amazing to me that The most popular display managers on Linux have this flaw. Perhaps there is a workaround involving switching to another tty?
Re: Kids find a security flaw in Linux Mint by mashing keys
#165Earlier quoted context omitted.
I don't understand the part about JWZ's testicles, so here are the links without bit.ly tracking for those whose ad blockers don't allow them: - https://www.jwz.org/blog/2021/01/i-told-you-so-2021-edition/ - https://www.jwz.org/xscreensaver/toolkits.html [Edit]: I understand now. My browser doesn't send referrer URLs, and I think that's the real fix instead of using something like bit.ly!
You still get the testicles if you click this link, at least using Chrome you do. It's because the referrer field is set to HN so they know where the traffic is coming from.
In Firefox, right-click and open in a new private window and the links will work.
Just tested in Chrome and it works there as well.
Re: Kids find a security flaw in Linux Mint by mashing keys
#166Earlier quoted context omitted.
I've seen Windows do that too. It's not just Linux. My guess is that these lock screens are all bolted on afterwards rather than being in the design from the ground up.
> I've seen Windows do that too. Really? I have never seen this in Windows. Don't get me wrong, I've seen plenty of lock screen failures in Windows, usually in the form of it suddenly being unresponsive, just never anything that actually gave me access to the locked session again. The closest I've seen is when using RDP, if the Window has been minimized or hidden or otherwise has had reason not to update its display,…
Yes, really. I don't use Windows myself, but I've seen it happen to others. As another commenter said, it's usually when the computer is coming out of "sleep" or something like that. Plenty of times I've seen a glimpse of the desktop that was long enough for me to get a vague idea of what they were doing before the lock screen takes over. If one was determined enough a photograph could easily be taken in that time.
Re: Kids find a security flaw in Linux Mint by mashing keys
#167Not really the same, but I had fun back in high school. Finding the Novell messaging utility that let me send a message to (IIRC) anyone in the school board currently logged in, though not anonymously.
Using some a couple lines of VBScript to change a couple registry entries (computers didn't persist storage anyways) you could also give your local admin privileges, to install stuff. That one got me in a touch of trouble, and I lost my account for a couple weeks while they "looked at my files", because I stored it on my network drive folder.
Re: Kids find a security flaw in Linux Mint by mashing keys
#168Earlier quoted context omitted.
Bad design in X11 which can't be fixed. https://news.ycombinator.com/item?id=25801693
X11 design flaws you say? https://github.com/swaywm/swaylock/issues/162 https://github.com/swaywm/swaylock/issues/158 https://github.com/swaywm/swaylock/issues/10
If you've ever looked in the bugtracker of a big X11 screenlocker, you would love to have this small amount of bugs. In fact, some of the bugs you posted are alread solved and I can't find one bug related to displaying. Giving the display to the user could also lie in other code parts. We'll see how this ends, but it's already a huge gain that not every Everyday Linux user has experienced such things by themselves.
Re: Kids find a security flaw in Linux Mint by mashing keys
#169Margaret Hamilton's daughter Lauren still takes the first place for "kid fuzzing" the AGC IMO https://wehackthemoon.com/people/margaret-hamilton-her-daugh... But this is pretty impressive as well!
Hamilton who coined the phrase "software engineering". Great find!
Re: Kids find a security flaw in Linux Mint by mashing keys
#170Earlier quoted context omitted.
Bad design in X11 which can't be fixed. https://news.ycombinator.com/item?id=25801693
It's not an X11 design flaw. The very concept of locking the screen is flawed. A flaw that also haunts Wayland, BTW. The concept of screen lockers is having a special layer, that can't be bypassed, which a locker creates. The whole security then hinges on the locker not crashing. X11 does have such a layer. Wayland compositors also implement it through such a layer. And for either the situation is, that if the locker…
The architecture you're describing would also be good for other reasons. For example, you could start a local session, lock it, and then remotely connect to the same session over VNC without local users at the workstation being able to see or interfere with what you are doing, just as on Windows.
Mac OS almost gets this right, except it annoyingly defaults to sharing the remote session with the local console unless someone is already logged in locally.