• To exploit this across the internet or LAN, a miscreant needs to reach your CUPS service on UDP port 631. Hopefully none of you have that facing the public internet. The miscreant also has to wait for you to start a print job.
• If port 631 isn’t directly reachable, an attacker may be able to spoof zeroconf, mDNS, or DNS-SD advertisements to achieve exploitation on a LAN. Details of that path will be disclosed later, we’re promised.

So don’t expose 631 to the internet (why would you?) and know who’s on your network. Be careful printing things on an untrusted network.

It’s serious, but seems like a wonky attack vector for most.

I think you mentioned that you were mapping gyro as right stick? Is there a reason you don’t use it as a mouse instead? The Steam version I think supports dual input, no?

I can give it a try at home, but I suspect there’s something else going on. When you use gyro, are you using it when you touch the right stick? Are you using it when you touch the right pad? How is it being activated?

Dev wouldn’t nuke your custom profile on purpose. There’s good reasons to implement a Steam Input API in their game, most notably because they can do certain things like automatic overlay switching, which further improves the experience for most people. Losing an older profile is sometimes an unintended side effect, and there’s nothing they can do about it.

I can’t hear about this game and not remember that some boomer actor thinks Belatro is going to destroy humanity, because it’s addictive.

And to be clear, an old config can look fine, but the internal structure may have changed with how the game/steam interprets it.

This most often happens to me where the devs create an official mapping later on that can do context-aware things in the game (i.e. using more than just Xinput).

It’s possible the config got changed as things updated. I have had that happen with old configs before.

You might need to rebuild your config or edit a similar one.

And I’m sure productivity will be improved afterwards, right…?

/s

Synergy has always been my go-to for a software KVM. It’s currently only $30, and it works great. I paid for a license probably a decade ago, and I’ve more than recouped my utility cost.

Looks interesting. I’m into PvE games, especially sci-fi ones, and I appreciate the fact that the dev is actively avoiding microtx. The aesthetic kind of reminds me of Death Stranding.

I probably won’t buy it very early on, but I would consider it if it was closer to release.

It’s not really random internet strangers’ place to judge someone’s parenting choices. We don’t know their overall parenting style, the personality of the child, what lessons they may be trying to teach, etc. The only thing we know for certain is that they want to use parental controls, perhaps to ensure they stay safe as they learn how to use the internet responsibly while also having a level of autonomy.

That’s not helicopter parenting, that’s just prudent.

Pretty sure it’s a 2.5" HDD.

That interesting. Well, at least you found something that works!

Why did you rebase, if you don’t mind my asking?

Also, wait until Christmas if you can. Most computer parts have their deepest sale then (it’s not Black Friday, surprisingly).

The infected apps are at the end.

The researchers found Necro in two Google Play apps. One was Wuta Camera, an app with 10 million downloads to date. Wuta Camera versions 6.3.2.148 through 6.3.6.148 contained the malicious SDK that infects apps. The app has since been updated to remove the malicious component. A separate app with roughly 1 million downloads—known as Max Browser—was also infected. That app is no longer available in Google Play.

The researchers also found Necro infecting a variety of Android apps available in alternative marketplaces. Those apps typically billed themselves as modified versions of legitimate apps such as Spotify, Minecraft, WhatsApp, Stumble Guys, Car Parking Multiplayer, and Melon Sandbox.

People who are concerned they may be infected by Necro should check their devices for the presence of indicators of compromise listed at the end of this writeup.

Druidry is/was an ancient practice that was inherently spiritual but was likely an early analog to scientific inquiry, with an emphasis on passing that knowledge down and ensuring new members became experts in their own right.

They bargained with the University I used to work for to get us things like:

• 37.5hr work weeks and still receiving full-time benefits and pay
• Good vacation accrual rates
• A guaranteed effort to move union employees into other open positions if theirs is cut
• Legal help/advice/action when Directors, etc. overstepped our rights (which I personally had to make use of)
• Paid by the hour. No salary/after-hours bullshit.

Cancel. The paid plans are mostly for business customers or the additional features. Even if you like their product, the core antivirus is the same for free tiers as it is for paid.

As for Windows Defender, it is perfectly fine for the majority of people. It is no longer the hot pile of garbage it once was. If it was me, I’d just switch to WD.

There’s something poetic about stealing from a ponzi scheme.

I’m not sure I fully agree with you, partly because she’s not talking about OSS alone. Let’s look at a recent but important example.

Yubikeys manufactured before firmware version 5.7 (before May 2024), are vulnerable to a specific type of attack that is not novel, due to a faulty IC via its code. It’s something that should have been caught during QA. Who is to blame?

Yubikey didn’t make the faulty IC, so obviously the IC maker should bear at least a good chunk of it, but I think it’s Yubikey’s responsibility to verify their work, especially since they’re the ones making the ultimate promise of cryptographic suitability that businesses and governments rely upon.

I don’t know if it’s right to call companies like this “villains,” but I think “lazy or lax” might be appropriate. Additionally, I like the idea of calling cybercrime groups funny names.