Salix

joined 1 year ago
[–] [email protected] 3 points 1 month ago

Unfortunately, it doesn't work on GNOME 46 yet. But looks like the porting is almost done!

https://github.com/cass00/enhanced-osk-gnome-ext/pull/15

[–] [email protected] 6 points 2 months ago (1 children)

Banking apps and Amazon don't seem to like it

Try going into the app's settings and toggle Exploit protection compatibility mode. That let me use my banking apps that didn't work before.

[–] [email protected] 10 points 2 months ago* (last edited 2 months ago) (2 children)

It's a paid service, so it'd be a bad default for a web browser. Not saying it's a bad search engine; saying that it's a bad search engine default for the every day folk who just installed a web browser.

[–] [email protected] 8 points 2 months ago* (last edited 2 months ago) (1 children)

I didn't even know paid lunch breaks were/are even a thing. Most jobs I've been in had 30 min unpaid lunch.

I work 9 to 6 with 1 hour unpaid lunch at my current job. I don't really do anything during my lunch besides sit in the office wasting time for an hour. Home is 30 min drive away, so I can't go home. No parks nearby to walk around. Makes it feel like I am working a 9 hour shift getting paid 8 since I am sitting in the office for 9 hours...

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago)

I don't think California would be able to handle the influx of people moving to California if they do pass universal healthcare. As a State, they don't have as much funding as a Federal program would have.

[–] [email protected] 6 points 2 months ago* (last edited 2 months ago)

Would love it if there is actually an active Tea community on Lemmy. The ones on Lemmy are pretty much dead. The Reddit one is super active.

Also, Lemmy doesn't have active communities for individual games like Reddit does. They are useful to obtain information, get help, talk about builds, etc

[–] [email protected] 6 points 2 months ago* (last edited 2 months ago) (1 children)

There’s no AI on DDG

Uh.. The settings for AI Chat and DuckAssist are both on by default when you use DuckDuckGo. You can see them in Settings -> AI Features

[–] [email protected] 4 points 3 months ago* (last edited 3 months ago)

If Microsoft announces that this is going to be forcibly installed on all versions of Windows, then we can grab our pitchforks. Ideally this would end up being an opt-in feature. If it's an opt-out when they release, again, pitchforks.

Well, per Microsoft's website:

On devices that are not powered by a Snapdragon® X Series processor, installation of a Windows update will be required to run Recall.

So it sounds like everyone on Windows 11 will get it via Windows Update eventually

[–] [email protected] 5 points 3 months ago* (last edited 3 months ago)

All milk sold in the US is pasteurized.

That's a false claim. It is state dependent. Many grocery stores and some butcher shops in my state also sells raw milk.

https://worldpopulationreview.com/state-rankings/raw-milk-legal-states

[–] [email protected] 13 points 3 months ago* (last edited 3 months ago)

it is liberal, aka generally right-of-center

A lot of people don't seem to know this in the US. If you look at most Liberal Parties, they are centre or centre right. Though some are centre left as well. That's not a full list in that link.

Japan's Liberal Democratic Party is the major right wing conservative party of Japan.

Do note that the US' centre starts farther to the right than many other developed countries.

[–] [email protected] 4 points 3 months ago* (last edited 3 months ago)

Someone did a ELI3 explanation for this a couple days ago. The ELI5 explanation was more complicated so someone asked for ELI3 lol

ELI3

Pouring a cup of juice is something an adult needs to be involved with.

sudo is when you ask for permission to pour your own cup of juice. You ask an adult, they give you the cup and the juice, and then you’re responsible for pouring it. If the adult isn’t paying attention they may leave the fridge open for you to go back for more juice or another beverage, but otherwise you’re limited to the amount of juice the adult has given you.

run0 is when the adult just gets you a cup of juice. You tell them what you want, they go and pour the juice, and just give you the cup with the juice in it. You never enter the kitchen, so you don’t have access to the fridge, just your cup of juice.

ELI5

Basically, the SUID bit makes a program get the permissions of the owner when executed. If you set /bin/bash as SUID, suddenly every bash shell would be a root shell, kind of. Processes on Linux have a real user ID, an effective user ID, and also a saved user ID that can be used to temporarily drop privileges and gain them back again later.

So tools like sudo and doas use this mechanism to temporarily become root, then run checks to make sure you’re allowed to use sudo, then run your command. But that process is still in your user’s session and process group, and you’re still its real user ID. If anything goes wrong between sudo being root and checking permissions, that can lead to a root shell when you weren’t supposed to, and you have a root exploit. Sudo is entirely responsible for cleaning the environment before launching the child process so that it’s safe.

Run0/systemd-run acts more like an API client. The client, running as your user, asks systemd to create a process and give you its inputs and outputs, which then creates it on your behalf on a clean process tree completely separate from your user session’s process tree and group. The client never ever gets permissions, never has to check for the permissions, it’s systemd that does over D-Bus through PolKit which are both isolated and unprivileged services. So there’s no dangerous code running anywhere to exploit to gain privileges. And it makes run0 very non-special and boring in the process, it really does practically nothing. Want to make your own in Python? You can, safely and quite easily. Any app can easily integrate sudo functionnality fairly safely, and it’ll even trigger the DE’s elevated permission prompt, which is a separate process so you can grant sudo access to an app without it being able to know about your password.

Run0 takes care of interpreting what you want to do, D-Bus passes the message around, PolKit adds its stamp of approval to it, systemd takes care of spawning of the process and only the spawning of the process. Every bit does its job in isolation from the others so it’s hard to exploit.

[–] [email protected] 3 points 3 months ago (1 children)

You'll probably like countries that follows the Nordic Model

view more: ‹ prev next ›