Today in "stop reinventing HTML poorly & stupidly in JavaScript":
Using the Avast Uninstall Tool | Official Avast Support
https://support.avast.com/en-us/article/Uninstall-Antivirus-Utility/
This affects apps built with #Electron.
#Google quietly corrects previously submitted disclosure for critical webp 0-day
Previous CVE submission failed to mention that thousands of apps were affected.
Researchers discover a cross-origin attack exploiting how modern GPUs compress images to let a malicious website in Chrome or Edge read pixels from another site.
Okay, for those tracking CVE-2023-5129, aka the #Libwebp fiasco, here's how to validate if your Electron app is vulnerable.
The patched version of Electron is v26.2.1
. To confirm what version of Electron your app is using, you need to run strings
against the executable. The version is in the app's User-Agent, so:
strings app.exe | grep "Electron/"
Pokemon Sword shield. New pokemon spoiler
I made this cute speedpaint of a Wooloo yesterday!
It was mostly to wind down and it was fun.
(Speedpaint video is up on my patreon for supporters of $5 and up)
"Automated translation of web content is now available to Firefox users! Unlike cloud-based alternatives, translation is done locally in Firefox, so that the text being translated does not leave your machine."
I got to see the early demos of this and it is jaws-on-the-floor bonkers wizard magic. Entirely local - and good - translation with no cloud service and like 6MB of storage per language.
"""
For GPU.zip to work, a malicious page must be loaded into the Chrome or Edge browsers. Under-the-hood differences in the way Firefox and Safari work prevent the attack from succeeding when those browsers process an attack page.
"""
*pats Firefox on the head* "Who's a good browser?"
Check out Starter Kit City Builder for @godotengine! The code is MIT licensed, assets are CC0 so completely free to use even in commercial projects.
vectors were never meant to be rasterized
years of pixels and NOTHING to show for them
this is what they do with all the vector to raster technologies we built for them
??? ??? β¨ ???
yes, please, I'd like the red green blue components of y = sin(x)
statements dreamed by the utterly deranged
they have quantized us for absolute fools
Long time no see, Godot 3!
A maintenance update was long overdue, so here's #GodotEngine 3.5.3, with a number of important bug fixes and platform compatibility improvements.
Worth checking out if you have games in production using 3.5.x!
https://godotengine.org/article/maintenance-release-godot-3-5-3/
Looks like Android just baked the topics API directly into the OS, and the opt-out is written even worse than how they did it in Chrome. Like paying over a grand for a phone isn't enough.