Peertube is probably the closest. I don’t really use either, but I’ve understood that peertube is a bit lacking in content.
As you’re here on lemmy.ml, I doubt it, but if you happen to be a “cryptocurrency enthusiast”, then odysee might also be an option, though I’m not sure hiw much of it is open-source.
I’m not sure if this specifically is used, as it requires the browser to be already running. If not, the new browser instance is spawned as a child process to the malicious program, inheriting all of its restrictions.
In general, if you don’t have permission to do something yourself, it’s common to find someone who does and ask nicely (or maliciously) for them to do it on your behalf. This is called the confused deputy problem.
See also the security problems related to the setuid bit.
For example, sudo should be owned by root and have the setuid bit set. This means that every time you run sudo, it runs with the permissions of the root user. Now, sudo is typically strict about checking if you’re really allowed to run commands with elevated permissions, and only executes the command you give if it’s sure that ypu’re allowed to.
But, suppose that you could replace the call to the password cheking function with a call to exec. Now, your password is interpreted as a file path and the file it points to is run with the sudo process’ peemissions (root). Authentication has now been bypassed.
It was a made-up example, but I hope that it illustrates the point.
In the real world, buffer overflows can potentially write user-supplied data over something important, essentially giving you a chance of achieving something similar. (Incidentally, the Rust programming language practically eliminates this class of memory-related bugs.)
It will show up as coming from firefox. When you run the command with the browser already running, it tells the original browser process to open the tab, then exits. The restricted process never does any network I/O by itself.
and try to block it.
You would have to know in advance all the domains the malicious program would access and block them, so realistically, no, at least not pre-emptively.
I’m not really sure if it’s a problem on mobile, but even if network access is disabled for a process & its children, it may have access to processes that do have access.
As an example, open a firefox-based browser (not sure about chromium). Then, in a new terminal window, run the following command: firefox lemmy.ml, substituting firefox for the name of the open browser. Lemmy.ml should now be open in a new tab in the original browser window.
It doesn’t really matter if a program opens lemmy, but it can open any URL, like for example: https://example.com/data_vacuum/upload?user=ferric_carcinization&password=password123&pronouns=they-them&favorite-language=rust
Doesn’t Google require a phone number for account creation now?
To their credit, they do a bit more than just that. They also sync your personal information with their cloud, and often, the clouds of third parties as well.
By reading this comment, you (“the reader”) agree to relinquish all of your past, future & present assets, property, capital & souls to me (“the commenter”).
This policy supersedes any applicable federal, state, and local laws, regulations and ordinances, international treaties, and legal agreements that would otherwise apply.
If any provision of this contract is found by a court to be unenforceable, it nevertheless remains in force.
Any dispute arising out of or in connection with this contract, including any question regarding its existence, validity or termination, shall be referred to and finally resolved by the lemmy user ferric_carcinization from the lemmy instance lemmy.ml.
It can’t in a lot of jurisdictions.
major upgrade like from kernel 6 to 7
What do you mean? The Linux kernel doesn’t follow SemVer.
The 6.19 -> 7.0 version bump didn’t have any more inherent meaning than 7.0 -> 7.1 or 7.1 -> 7.2.
Don’t forget “intelligence”-as-a-service™®©!
Hi ChatGPT, I can’t find a job due to the AI bubble. What should I do?
Don’t forget the young’uns at DOGE. They wouldn’t use something so lame & gay like Viagra. They only use Swedish-made penis enlarger pumps.
Doesn’t the office suite still have web versions available? I had to use Windows & Office a few years back. I strongly disliked the weird animated cursor and didn’t bother to dive into the settings, so I switched to the web version. It should apparently have been “worse than the app”, but it didn’t have the horrible cursor and it worked on Linux with Firefox as well.
Just to be clear, do you mean that the user’s user agent (lemmy client) should be capable of filtering out posts about vibecoded slop, perhaps by having lemmy communities require such posts to be tagged? Or do you mean that a LLM should curate what users see here?