Aatube

The crying "History" button at the top right sends its regards. Yes, the World Jewish Congress has published a report that demands Wikipedia add a feature to view the history of articles, see what actions were performed by whom, and "host forums and discussions within the Wikipedia community to address concerns about neutrality and gather feedback for policy improvements". It also wants to force all admins and above to reveal their real names.

They settled for $2.4M and shut everything down.

We write today to inform you that yuzu and yuzu’s support of Citra are being discontinued, effective immediately.

The convictions of the two paramedics shook the world of emergency workers who have typically been shielded from criminal prosecution — and it forced questions about the dynamic between the police and paramedics at a scene.

Though Mr. McClain was visibly distressed and in handcuffs, paramedics never spoke to him, touched him or checked his vital signs before diagnosing him with excited delirium, a controversial condition characterized by agitation and exceptional physical strength. Paramedics then injected him with what authorities later said was a dose of ketamine inappropriate for Mr. McClain’s body weight.

Why was Hollywood so obsessed with sky beams? I mean they cared more about making sky beams evil than making sure we knew how evil their producers were.

The heightened state of unease over the possibility of a 'Con Air' sequel resulted in an influx of security personnel. It just goes to show, when it comes to Nic Cage, the need for increased security is always 'Raising Arizona.'

Waterfox is integrating Tree-Style Tabs as a vertical tabs solution, complete with image tab previews and optimizations for tabs outside the scrolling.

The intelligence was made public, in part, in a cryptic announcement on Wednesday by Representative Michael R. Turner, Republican of Ohio and the chairman of the House Intelligence Committee. He called on the Biden administration to declassify the information without saying specifically what it was.

His committee took the unorthodox move of voting on Monday to make the information available to all members of Congress — a step that alarmed some officials because it is not clear in what context, if any, the intelligence in the panel’s possession was presented. In a note to lawmakers, the House Intelligence Committee said the intelligence was about a “destabilizing foreign military capability.”

Representative Jim Himes, Democrat of Connecticut and the ranking member of the House Intelligence Committee, said that the issue was “serious” and that Mr. Turner was right to focus on it. But he added that the threat was “not going to ruin your Thursday.”

Shipped in Windows 11 Insider Preview Build 26052. https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html claims it has a big security problem that makes the program accept calls to elevate from anywhere once first run

Edit:

1. The security problem has been internally fixed and will be available in the next release
2. It's not just an alias for 'runas'. It seems to be able to configurably block user input for sudo'd commands, retain the existing environment, ditch it and open a new window, and remember that you've sudo'd in the last minute or so.
3. It brings up UAC instead of having you input the password

Shipped in Windows 11 Insider Preview Build 26052. https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html claims it has a big security problem that makes the program accept calls to elevate from anywhere once first run

Edit:

1. The security problem has been internally fixed and will be available in the next release
2. It's not just an alias for 'runas'. It seems to be able to configurably block user input for sudo'd commands, retain the existing environment, ditch it and open a new window, and remember that you've sudo'd in the last minute or so.
3. It brings up UAC instead of having you input the password

A mountain of research has linked loneliness to an increased risk of dementia, depression, anxiety, heart disease, stroke and early death. The Board of Supervisors of San Mateo county, which includes part of Silicon Valley, passed a resolution on Tuesday that declared loneliness a public health crisis and pledged to explore measures that promote social connection in the community.

Relative to white people, Black people face a higher risk of premature death linked to social isolation. Older adults have a higher risk of loneliness in general, since they are more likely to live alone or have chronic illnesses that limit their mobility or leave them homebound.

This news is from almost exactly 8 years ago. Softpedia reported 13 days later that eBay partially patched it, but the patch was insufficient. I could not find further updates, but I do know that eBay has since removed more advanced JavaScript (incl. JSFuck) from all listings in 2017.

"An attacker could target eBay users by sending them a legitimate page that contains malicious code," Check Point researcher Oded Vanunu wrote in a blog post published Tuesday. "Customers can be tricked into opening the page, and the code will then be executed by the user's browser or mobile app, leading to multiple ominous scenarios that range from phishing to binary download."

To exploit this vulnerability, all an attacker needs to do is create an online eBay store. In his store details, he posts a maliciously crafted item description. eBay prevents users from including scripts or iFrames by filtering out those HTML tags. However, by using JSF**k, the attacker is able to create a code that will load an additional JS code from his server. This allows the attacker to insert a remote controllable JavaScript that he can adjust to, for example, create multiple payloads for a different user agent.

eBay performs simple verification but only strips alpha-numeric characters from inside the script tags. The JSF**k technique allows the attackers to get around this protection by using a very limited and reduced number of characters.

eBay has no plans to fix a "severe" vulnerability that allows attackers to use the company's trusted website to distribute malicious code and phishing pages, researchers from security firm Check Point Software said.

In an e-mail sent to Ars after [their article] went live, eBay officials wrote: " "eBay is committed to providing a safe and secure marketplace for our millions of customers around the world. We take reported security issues very seriously, and work quickly to evaluate them within the context of our entire security infrastructure. We have not found any fraudulent activity stemming from this incident.”

The e-mail added:

Also, it's important to understand that we have been in touch with the researcher and have implemented various security filters based on his findings to detect this exploit. Since we allow active content on our site it's important to understand that malicious content on our marketplace is extraordinarily uncommon, which we estimate to be less than two listings per million that use active content on the eBay marketplace.

I remember there being a post here that I've boosted/saved that highlights a pretty *top tool. I also had a minor argument with someone about how this might be useful. Now, I can't find it. Any ideas?

Edit: It's btop.