• 17 Posts
  • 1.47K Comments
Joined 1 year ago
cake
Cake day: June 6th, 2023

help-circle
  • tetris11@lemmy.mltoComics@lemmy.mlOWLTURD apathy
    link
    fedilink
    arrow-up
    3
    ·
    48 minutes ago

    I realize a lot of people don’t like to be alone with their thoughts. I’m fine. Usually there’s a song playing if I’m not distracted, or I’m looking to the future to make plans.

    Others, I tend to find, are far more in tune with their subconscious which appears to be saying nasty things to them the moment they’re alone.

    I had a bad childhood (like many), but I think my coping mechanism was to escape to fantasy (later books, games, art), and as a result I think I trained myself to not spend too long listening to my feelings. It probably is disassociation, but I don’t see it as a bad baseline to have.







  • tetris11@lemmy.mltoScience Memes@mander.xyzWhat?
    link
    fedilink
    English
    arrow-up
    24
    ·
    edit-2
    14 hours ago

    I remember when I was a kid and was waiting for the holidays to come. I couldn’t read a calendar and could barely tell the time, so I just went through this bored/depressive period every single day for what seemed like an eternity until suddenly the holidays came.

    I knew it existed, just had no concept of time.





  • The questionable commit:

        {
          // Add the first line of localized text...
          cupsFilePrintf(fp, "*%s.%s %s/", lang->language, ppd_option, ppd_choice);
          while (*text && *text != '\n')
          {
            // Escape ":" and "<"...
            if (*text == ':' || *text == '<')
              cupsFilePrintf(fp, "<%02X>", *text);
            else
              cupsFilePutChar(fp, *text);
            text ++;
          }
          cupsFilePuts(fp, ": \"\"\n");
        }
    

    Can someone explain to me how this allows arbitrary code execution? As far as I can see, all it does iterate through a string and markup some special characters.

    Edit: Okay, after reading the blog post, and this fantastic bug report, it sounds like to print to a CUPS server, you send it a message on port 631 using an IPP (some print protocol) server. CUPS then requests attributes of the IPP server, one of which being the print filter command to run (“Foomatic-rip”) to use to convert a PS or PDF into native print code. By requesting attributes, an exploit involving string escaping through the use of unexpected spaces or quotes can override the Foomatic print command. Arbitrary text can be supplanted, which will then be executed by the CUPS server.