True, it’s a private (not local) IP. It could easily have connected to a remote system, as their proof-of-concept did.
This code execs cmd.exe and pipes output to and from a hardcoded IP. That’s pretty weird. What’s running on that IP? How does the extension know something is there?
It looks like VS Code has no review — human or automated — or enforced entitlement system that would have stopped this or at least had someone verify it was legit.
Their findings included an extension that opens an obvious reverse shell.
Thanks. That’s good to know.
Use this shortcut from Ricky Mondello, the lead for Apple’s password development team.
I get the feeling they wanted to do a Passwords app for some time but needed to get, probably executive-level, buy-in to get it done.
Apple will get bad PR about this: they are “Sherlocking” password managers. 1Password will write a blog post about how this is actually good for them because now password management is mainstream; 3rd party password managers will decide to focus more on the enterprise market; Microsoft will come out with a competing password manager that re-uses the name of a previous product and is bundled with Edge, etc. How it always goes.
It’s nice that this is compatible with Redis clients, and even Redis cluster operations. But I wish they would take this opportunity to make scaling more ergonomic. The Redis cluster mode is a pain to use because certain commands don’t work on a cluster (and developers don’t seem to realize this, leading to implementation issues).
It’s better now. No more bottles and kegs. This time it’s barrels, vintages and terroirs.
Casey reviewed Google Glass too. He generally liked it but it wasn’t the same kind of experience he showed here.
Unlike some Apple enthusiasts, I really liked the Glass concept. The technology was there, but the experience was not.
In addition to being an Apple enthusiast I am also a tech nerd. To us, the tech seems like the hard part; the experience can be figured out later. What I’ve learned is that getting the experience right is actually much harder than getting the tech right.
This happened in the Netherlands and the authority didn’t seem to think the 27% “commission” was a problem. Hopefully Brussels has a better-designed regulation.
Remember when Apple had to allow 3rd party payment systems and still legally imposed a 27% fee on 3rd party payments, along with reporting requirements, even though those payments had nothing to do with Apple?
Is it possible that Apple will “allow” 3rd party app stores but still require apps on those stores to pass Apple’s App Review? And will try to impose that 27% fee or something similar on both app sales and in-app purchases through 3rd party app stores.
Apps can’t run on iOS unless they are code signed by Apple and 3rd party app stores won’t change that.
“I implemented the FizzBuzz algorithm in only 10 million lines of code!”
Cute.
So these appear to be actual Lego sets, not a game like Lego Star Wars, Lego Marvel or whatever. I’d love to see a Nintendo-platform Lego Animal Crossing game.
Software fix to block the Instagram bug that was causing the overheating.
deleted by creator
deleted by creator
I can’t read the article because of the paywall, but why are there a bunch of Android screens in the background behind “Steve”?
It would be interesting to see what the difference is. The slim image doesn’t even have vi installed, although it does have bash. And of course, git, etc. are not present. Much of the difference could be the size difference between musl and libc, and the size difference between apk and apt metadata.
I don’t think OP is going to find a non-musl distro as small as Alpine. These stripped-down Debians are a lot bigger, but among the smallest non-Alpine that you’ll find.
Standard node images are around 1 GB. node:lts-alpine is about 176 MB. So it’s fairly close to alpine in this case.
What runtime do you need? If it’s Node.js, the “slim” Docker images are lightweight and based on Debian. (for example node:lts-slim)
The satellite SOS feature is only on the iPhone 14 which has a starting price of $800.
The one that’s not shown: Standalone Passwords app