Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kids find a security flaw in Linux Mint by mashing keys

github.com

Post reply on HN
Print view View original

251–260 of 340 posts

Re: Kids find a security flaw in Linux Mint by mashing keys

#251

Post by passivate »

kuter wrote: post #18

For anyone interested there is something called fuzzing that uses usually code coverage based heuristics to generate data to find bugs. For example LLVM's lib fuzzer uses instrumentation to track code coverage and mutates data to find invalid behaviour. https://llvm.org/docs/LibFuzzer.html It uses a compiler pass to insert code to branch points functions calls etc. I think it uses genetic algorithms to increase cover…

Well, I guess the obvious question to ask is has anyone run this particular fuzzer on the code in question?

Re: Kids find a security flaw in Linux Mint by mashing keys

#253

Post by vlovich123 »

smnrchrds wrote: post #204
dr_cypher wrote: post #196

Earlier quoted context omitted.

jwz has a lot to say about complex graphical toolkits/desktop environments and their complex locking mechanisms. It's an interesting series of posts. If you are not running xscreensaver on Linux, then it is safe to assume that your screen does not lock. Once is happenstance. Twice is coincidence. Three times is enemy action. Four times is Official GNOME Policy. https://www.jwz.org/xscreensaver/toolkits.html

Never directly link to jwz from HN. https://web.archive.org/web/20210117212403/https://www.jwz.o...

Why?

Re: Kids find a security flaw in Linux Mint by mashing keys

#254

Post by notRobot »

vlovich123 wrote: post #253
smnrchrds wrote: post #204

Earlier quoted context omitted.

Never directly link to jwz from HN. https://web.archive.org/web/20210117212403/https://www.jwz.o...

Why?

Because you won't be able to actually view anything on the website.

Re: Kids find a security flaw in Linux Mint by mashing keys

#255

Post by thesh4d0w »

vlovich123 wrote: post #253
smnrchrds wrote: post #204

Earlier quoted context omitted.

Never directly link to jwz from HN. https://web.archive.org/web/20210117212403/https://www.jwz.o...

Why?

Cause he redirects based on referrer to https://cdn.jwz.org/images/2016/hn.png

Re: Kids find a security flaw in Linux Mint by mashing keys

#256

Post by mmis1000 »

speedgoose wrote: post #86
Illniyar wrote: post #84

Earlier quoted context omitted.

This happens to me regularly with macOS too, so perhaps it's harder then you imagine.

Never happened to me on Windows, so it shouldn't be that hard.

Windows have multiple desktop sessions(the normal user session, and the safe desktop). Even if you ever able to crash the one that host lock screen without bsod. You still won't be able to go back to the normal desktop.

Re: Kids find a security flaw in Linux Mint by mashing keys

#257

Post by smnrchrds »

toyg wrote: post #247
nefitty wrote: post #229

Earlier quoted context omitted.

Not to belabor the meta discussion, but your comment sparked a question. If it is how you say, and using a politico-economic lens, I wonder if there has been any discernible shift in commenter attitudes as the demographics have changed. Specifically, if the shift was from entrepreneurs -> skilled wage workers, as you’ve asserted. The interests of the petit bourgeoisie (entrepreneurs, et al), the professional manageme…

This is OT, but I can't resist. I've been around HN since 2011, and tone has definitely shifted in the last 5-6 years. I used to stumble on HN posts that infuriated me relatively often, it was part of the deal (i.e. understanding how the self-appointed entrepreneurial classes actually rationalize certain things). That doesn't really happen anymore. > those overlaps would probably translate to some overarching strains…

What I miss about the old HN is learning about all the cool new programming tools, libraries, frameworks, etc and participating in the discussions about them. These days, you rarely see posts about programming tools, unless it is one of the big ones like React, Qt, or TypeScript. I used to stumble upon so many great tools on HN, but that has become a rare experience these days.

Is there still somewhere on the web, perhaps on Reddit or another platform, where you can find such posts and discussions?

Re: Kids find a security flaw in Linux Mint by mashing keys

#258

Post by passivate »

Leherenn wrote: post #235
mercora wrote: post #207

Earlier quoted context omitted.

i don't think these permissions are enforced client side... I also think write and delete are separate permissions on windows and i am pretty sure i never lost a file on accidentally doing only the first halt of a cut and paste aka move... so i conclude this "someone" either had nothing to do with the incident or removed it by accident...

I was surprised as well, but we could reproduce it. Delete would not work, "normal" cut and paste would throw an error when pasting, but cut and switch off power -> file was gone.

Sounds like something funky was going on, server side. For file operations, I don't believe the OS does anything to the file/folder for Cut and Copy operations, it simply notes the handle. Its only when you paste the file is when the operation happens. You can try this yourself, cut/copy a large file and see if your mem usage spikes and/or perform cut on any folder which you don't have delete rights for.

Re: Kids find a security flaw in Linux Mint by mashing keys

#259

Post by rexpop »

mightybyte wrote: post #143

Years ago I taught a high school typing class in a K-12 school. The school didn't have the funds to get a commercial typing program so I wrote my own typing program. It evolved over time with features to help me track the students' progress etc. One day we had a school open house where all the parents could come to school. We had a bunch of different activities set up in different classrooms and I ended up getting as…

> The school didn't have the funds to get a commercial typing program so I wrote my own typing program.

Off-topic, but:

It seems absurd, to me, that such a conclusion could ever be reached. Obviously, from my perspective, the economies of scale, the infrastructure, overhead, and institutional resources available to programmers at a dedicated software development firm would produce an application at better quality per dollar (however you measure it) than a high school teacher in their off-hours. To me it seems that it's certainly not cheaper for us as a society, as a species, and only appears so because you are under-paid. If you were paid your actual worth, the school would say "we don't have the funds to develop this in-house, and had to buy a commercial typing program off-the-shelf, despite its loose fit for our use case."

How can we, as rational members of society, abide this?

Re: Kids find a security flaw in Linux Mint by mashing keys

#260

Post by nitrogen »

smnrchrds wrote: post #257
toyg wrote: post #247

Earlier quoted context omitted.

This is OT, but I can't resist. I've been around HN since 2011, and tone has definitely shifted in the last 5-6 years. I used to stumble on HN posts that infuriated me relatively often, it was part of the deal (i.e. understanding how the self-appointed entrepreneurial classes actually rationalize certain things). That doesn't really happen anymore. > those overlaps would probably translate to some overarching strains…

What I miss about the old HN is learning about all the cool new programming tools, libraries, frameworks, etc and participating in the discussions about them. These days, you rarely see posts about programming tools, unless it is one of the big ones like React, Qt, or TypeScript. I used to stumble upon so many great tools on HN, but that has become a rare experience these days. Is there still somewhere on the web, pe…

https://lobste.rs was supposed to be something like that.
Post reply on HN