• 15 Posts
  • 968 Comments
Joined 1 year ago
cake
Cake day: June 6th, 2023

help-circle
  • Our physics department used KDE managed over network shares implemented by one professor in his free time, in complete defiance of the rest of the university which used windows.

    Even now they’re still holding out strong, whilst Microsoft eats the rest of the university alive.
    (sidenote: I get it, tech support in Linux is vritually non-existent, whilst tech-support in Windows is everywhere)







  • The questionable commit:

        {
          // Add the first line of localized text...
          cupsFilePrintf(fp, "*%s.%s %s/", lang->language, ppd_option, ppd_choice);
          while (*text && *text != '\n')
          {
            // Escape ":" and "<"...
            if (*text == ':' || *text == '<')
              cupsFilePrintf(fp, "<%02X>", *text);
            else
              cupsFilePutChar(fp, *text);
            text ++;
          }
          cupsFilePuts(fp, ": \"\"\n");
        }
    

    Can someone explain to me how this allows arbitrary code execution? As far as I can see, all it does iterate through a string and markup some special characters.

    Edit: Okay, after reading the blog post, and this fantastic bug report, it sounds like to print to a CUPS server, you send it a message on port 631 using an IPP (some print protocol) server. CUPS then requests attributes of the IPP server, one of which being the print filter command to run (“Foomatic-rip”) to use to convert a PS or PDF into native print code. By requesting attributes, an exploit involving string escaping through the use of unexpected spaces or quotes can override the Foomatic print command. Arbitrary text can be supplanted, which will then be executed by the CUPS server.









  • Finally!

    Do have any idea how hard it is to make shitty joke, and then for people to take you seriously, and so you commit more to it and dig deeper with wilder and more outlandish statements, hoping that someone - anyone - would realise the farce… only for time to tick on, and it dawns on you that people took you at face value, and that you will forever be labeled as an idiot and not as a joker.

    You have redeemed my faith in others good sir, and I wholeheartedly concede that this was all nothing but a fools gambit contrived by a bored giggling moron one lazy afternoon.



  • It did use to be when rent was low and tenants had stronger rights. When things broke, you’d have to fix it yourself or hire someone to do it. When a tenant was making everyone else in the building feel unsafe it was up to you to drag them out.

    When rent went up and tenants rights were thrown out of the window, it became easy street. You hire someone to take care of it all, and sip your coffee in the morning.

    It genuinely used to be a high risk, low reward venture. The shortage of housing skyrocketed it into an occupation for rich dullards to sit on their ass all day.