Why stop there? Drivers should be mandated to install cameras and sensors from an independent 3rd party that answers to the government (eg. NHTSA). Then when an accident occurs (there are going to be plenty of accidents), the public and the government can accurately figure out who/what was to blame.
Trusting the driver to not doctor their footage and testimony to avoid blame is quite foolish.
The protocol and data that made up the story was distributed though, you could argue those are protected under that guise, as opposed to the server binary distribution if you want to take that logic.
The summary and post it links to implies the Telegram client is executing cryptomining code on its own.
From the summary:
Kaspersky said on its website that users were tricked into downloading malicious software onto their computers
From the article:
Kaspersky said on its website that users were tricked into downloading malicious software onto their computers that used their processing power to mine currency, or serve as a backdoor for attackers to remotely control a machine.
From Kaspersky:
According to the research, the Telegram zero-day vulnerability was based on the RLO (right-to-left override) Unicode method. It is generally used for coding languages that are written from right to left, like Arabic or Hebrew. Besides that, however, it can also be used by malware creators to mislead users into downloading malicious files disguised, for example, as images.
I don't really see it "implying" that the "Telegram client is executing cryptomining code on its own" ?
If you are receiving an executable that way, there should be a warning.
When you launch an executable from Telegram that you've downloaded on Windows, it actually prompts you the normal way Windows does for a downloaded executable in a browser.
These aren't links though? These are files being sent over Telegram.
These are filenames. Literally, I can create files following this convention that exist that way on the Windows and Linux desktop. This is a "feature" of UTF-8.
They have disrupted industries and improved overall Internet services in doing so. I remember when webmail services had a limit of 15MB, when office suites were not really affordable, when search was filled with obnoxious advertising, when online storage services were massively expensive.
They have provided significantly better services, for free. The competition have in turn had to remain competitive and in turn, made the web significantly cheaper, accessible and usable for the vast majority out there.
It just gets both funnier and sadder every time someone tries.
Google have done plenty wrong too, but your question was specifically how they are "the good guys".
Why is there even a code interpreter in a "secure messaging app"?
I don't know what you're talking about? The vulnerability is using UTF-8 characters to make a filename use right-to-left, so "gpj.abc.exe" appears as "exe.cba.jpg". This works on other platforms too.
It's not even self executing though. They're just using right-to-left UTF-8 to make "gpj.abc.exe" appear as "exe.cba.jpg", you can do this on most platforms too...
Linux has very few "platform users" that aren't part of the "community".
Honestly, your previous "community" description sounds more like you're talking about the Stallman-ideological people who don't have much relevance where notable open source interactions that are formed around, for example in the Linux kernel, Ubuntu, Gnome, KDE, AOSP etc. I would typically describe those as "communities", but you seem to have pirated this term for some other purposes, I don't know.
Regardless, what you've been talking about has very little applicability to the reality.
And [citation needed] that the majority don't fit the description.
See mentioned projects.
We've been doing nothing but fucking infighting for years now and I'm seeing a lot of forums become more and more elitist and hostile over the past 10 years.
Forums? Most Linux users who have technical issues are using wikis, stack exchange or issue tackers... If you're talking about LUGs, they've never been more open and accepting? We've even got "open source advocates" now in businesses who work with users, developers and managers to reap the benefits... I have no idea where you're getting this from really? If it's just forums, yeah, I can believe that. Most forums in general have toxicity, just look at Apple's or Microsoft's forums before they get moderated, or even Steam's... And even then, you'll still find some.
Instead of targeting "the community", target the platform users instead, solved. Because the vast majority of platform users don't fit the criteria you have described.
To be honest in the FOSS space, Krita has been a better candidate as an alternative to Photoshop rather than GIMP for over a decade... Why are you recommending GIMP?
Out of curiosity, why doesn't Google Docs fulfill that better? I would have thought the revision control, backup, seamless online-offline operation, multi-user and historical feature set would be a bigger improvement. Especially when it's free.
Slashdot Mirror
LinkedIn worked for me, but, I guess we can't expect much from journalists. I mean, they can't even play video games well.
Just tried it... I see why, it's completely empty and devoid of life...
No, he was just a liar.
Put the car computer in prison, done.
Why stop there? Drivers should be mandated to install cameras and sensors from an independent 3rd party that answers to the government (eg. NHTSA). Then when an accident occurs (there are going to be plenty of accidents), the public and the government can accurately figure out who/what was to blame.
Trusting the driver to not doctor their footage and testimony to avoid blame is quite foolish.
Since the driver was unable to detect this incident too, they better remove all drivers as well!
Could you link the original video, article or conference where he specifically said that?
The protocol and data that made up the story was distributed though, you could argue those are protected under that guise, as opposed to the server binary distribution if you want to take that logic.
From the summary:
Kaspersky said on its website that users were tricked into downloading malicious software onto their computers
From the article:
Kaspersky said on its website that users were tricked into downloading malicious software onto their computers that used their processing power to mine currency, or serve as a backdoor for attackers to remotely control a machine.
From Kaspersky:
According to the research, the Telegram zero-day vulnerability was based on the RLO (right-to-left override) Unicode method. It is generally used for coding languages that are written from right to left, like Arabic or Hebrew. Besides that, however, it can also be used by malware creators to mislead users into downloading malicious files disguised, for example, as images.
I don't really see it "implying" that the "Telegram client is executing cryptomining code on its own" ?
When you launch an executable from Telegram that you've downloaded on Windows, it actually prompts you the normal way Windows does for a downloaded executable in a browser.
You already have one. They've changed much of the online industry for the better in many instances.
These aren't links though? These are files being sent over Telegram.
These are filenames. Literally, I can create files following this convention that exist that way on the Windows and Linux desktop. This is a "feature" of UTF-8.
They have disrupted industries and improved overall Internet services in doing so. I remember when webmail services had a limit of 15MB, when office suites were not really affordable, when search was filled with obnoxious advertising, when online storage services were massively expensive.
They have provided significantly better services, for free. The competition have in turn had to remain competitive and in turn, made the web significantly cheaper, accessible and usable for the vast majority out there.
Google have done plenty wrong too, but your question was specifically how they are "the good guys".
I don't know what you're talking about? The vulnerability is using UTF-8 characters to make a filename use right-to-left, so "gpj.abc.exe" appears as "exe.cba.jpg". This works on other platforms too.
It works on IRC and PGP too.
It's not even self executing though. They're just using right-to-left UTF-8 to make "gpj.abc.exe" appear as "exe.cba.jpg", you can do this on most platforms too...
Honestly, your previous "community" description sounds more like you're talking about the Stallman-ideological people who don't have much relevance where notable open source interactions that are formed around, for example in the Linux kernel, Ubuntu, Gnome, KDE, AOSP etc. I would typically describe those as "communities", but you seem to have pirated this term for some other purposes, I don't know.
Regardless, what you've been talking about has very little applicability to the reality.
See mentioned projects.
Forums? Most Linux users who have technical issues are using wikis, stack exchange or issue tackers... If you're talking about LUGs, they've never been more open and accepting? We've even got "open source advocates" now in businesses who work with users, developers and managers to reap the benefits... I have no idea where you're getting this from really? If it's just forums, yeah, I can believe that. Most forums in general have toxicity, just look at Apple's or Microsoft's forums before they get moderated, or even Steam's... And even then, you'll still find some.
Instead of targeting "the community", target the platform users instead, solved. Because the vast majority of platform users don't fit the criteria you have described.
I use these tools and Krita is functionally closer to Photoshop than GIMP.
My monitor takes about two seconds to start and by then, my computer is already booted and ready?
Why doesn't it install in like less than a minute for you?
My Amiga used share libraries quite commonly?
Yes, didn't even have true multi-tasking.
No, that came later and it was broken from day one since developers couldn't properly deal with user information.
To be honest in the FOSS space, Krita has been a better candidate as an alternative to Photoshop rather than GIMP for over a decade... Why are you recommending GIMP?
Like what?
Out of curiosity, why doesn't Google Docs fulfill that better? I would have thought the revision control, backup, seamless online-offline operation, multi-user and historical feature set would be a bigger improvement. Especially when it's free.
High-speed trains. TGV operator Thalys for example links the Netherlands and Germany.
As long as they're not directly hurting other people, I don't really care. Let them live life and be happy.
TGV train to Germany doesn't seem that impractical?