[-] Supermariofan67@programming.dev 13 points 2 years ago

Perfect example of a (part of a) security vulnerability being fixed in a commit that doesn't immediately seem security related and would never be back ported to a ~~stable~~stale distro

The code which parses the binary MaxMind database after decompression is well guarded as of 2024 but used to look different, potentially providing more attack surface. There is also an interesting commit where a contributor makes adjustments to the gzip::decompress() function which hints at a stack overflow, as the destination buffer was changed from static allocation on the stack to dynamic allocation on the heap, though it was not exploitable due to checks before it is written to

[-] Supermariofan67@programming.dev 14 points 2 years ago

Looks like the birdie has escaped phoronix...

In the small chance that this comment is serious, Nvidia is found this because the corporate server-based customers need the ability to troubleshoot and debug the driver.

The actual trade secrets are being moved into the proprietary firmware blob and out of the driver.

[-] Supermariofan67@programming.dev 13 points 2 years ago

Never thought I'd see banknote inflation rule 34

[-] Supermariofan67@programming.dev 13 points 2 years ago

Distrowatch has a torrent RSS that can be added to qbittorrent to automatically fetch new releases https://distrowatch.com/news/torrents.xml

[-] Supermariofan67@programming.dev 13 points 2 years ago

Bluetooth connection is lossy, with the exception of some Sony proprietary shitcodecs that can rarely actually maintain a stable enough connection to stay in lossless mode.

Whether you'll actually hear any difference is a different question, but the answer is maybe. The Bluetooth codecs are generally low quality, despite opus already existing and being on paper really good for the job (and implemented by pipewire but nothing else unfortunately). Bluetooth instead standardized some patent encumbered codecs with high licensing fees that are only about as good as or possibly worse than mp3. They also have very high latency and using them to watch videos of people talking sucks

[-] Supermariofan67@programming.dev 12 points 2 years ago* (last edited 2 years ago)

Take a look at this guide, it's what I've been following https://learnjapanese.moe/guide/

Essentially, use Anki to study vocabulary in bulk, and use grammar guides like Tae Kim's. And spend a lot of time reading and listening to real native content

It's worth noting that Duolingo has always been considered.very bad by most of the Japanese learning community.

[-] Supermariofan67@programming.dev 13 points 3 years ago

Zip has terrible compression ratio compared to modern formats, it's also a mess of different partially incompatible implementations by different software, and also doesn't enforce utf8 or any standard for that matter for filenames, leading to garbled names when extracting old files. Its encryption is vulnerable to a known-plaintext attack and its key-derivation function is very easy to brute force.

Rar is proprietary. That alone is reason enough not to use it. It's also very slow.

[-] Supermariofan67@programming.dev 13 points 3 years ago

It's a container format that can hold either lossless or lossy codecs

[-] Supermariofan67@programming.dev 13 points 3 years ago

Her legacy is warmongering, supporting the NSA, and anti-working-class policies

[-] Supermariofan67@programming.dev 14 points 3 years ago

I used this too. Btw, YouTube does not serve mp3 files. It serves Opus files and (low quality) m4a files. If you select the mp3 output option with spotdl, it converts them to mp3 and you lose quality. To get the highest quality, you must chose the opus option.

view more: ‹ prev next ›

Supermariofan67

0 post score
0 comment score
joined 3 years ago