●● IRC: #techbytes @ Techrights IRC Network: Thursday, August 25, 2022 ●● ● Aug 25 [02:29] *techrights_guest|75 (~ac3a9349@54n9xgft8g6u2.irc) has joined #techbytes [02:37] *techrights_guest|75 has quit (Ping timeout: 2m30s) ● Aug 25 [03:05] *Techrights-sec has quit (Ping timeout: 120 seconds) [03:07] *Techrights-sec (~quassel@freenode-j7a7ih.am6e.nqgd.t29qgt.IP) has joined #techbytes [03:44] schestowitz__[TR] https://mastodon.ar.al/@aral/108848981116449944 [03:44] -TechBytesBot/#techbytes-mastodon.ar.al | ar.al: "@tuxmachines@mastodon.technology Heads up, gettin" - Arals Mastodon [03:44] schestowitz__[TR] " Heads up, getting a self-signed certificate error on your TLS URL." [03:44] schestowitz__[TR] It's OK, it is intentional, the Web browsers are trying to impose a "trust" monopoly that's fake trust [03:44] schestowitz__[TR] https://social.linux.pizza/@redstarfish/108865622293607075 [03:44] -TechBytesBot/#techbytes-social.linux.pizza | Abhiseck Paira :gnu: :gnuhurd:: "@tuxmachines@mastodon.technology Nice! I'll giv" - Linux.Pizza [03:44] schestowitz__[TR] "Nice! I'll give it a try. Currently gnome would go to sleep while mpv is playing a video. Hopefully celluloid fixes that." [03:45] schestowitz__[TR] https://mastodon.uno/@paoloredaelli/108822591452475874 [03:45] -TechBytesBot/#techbytes-mastodon.uno | Paolo Redaelli: "@tuxmachines@mastodon.technology #enlightenment h" - Mastodon Italia Social [03:45] schestowitz__[TR] "#enlightenment had #LCARS theme since forever, I tried it in 1999 or the like" [03:45] schestowitz__[TR] https://mastodon.social/@hobson/108821163647361436 [03:45] -TechBytesBot/#techbytes-mastodon.social | hobs: "@tuxmachines@mastodon.technology Russian company" - Mastodon [03:45] schestowitz__[TR] " [03:45] schestowitz__[TR] Russian company Prombit announced [03:45] schestowitz__[TR] BITBLAZE Titan BM15 Linux Laptop with a "Baikal-M1" or just "Baikal-M" Arm CPU: [03:45] schestowitz__[TR] - octa-core Arm Cortex-A57 by TSMC (wikipedia.org/wiki/ARM_Cortex-A57) [03:45] schestowitz__[TR] - 4-8 cores [03:45] schestowitz__[TR] - up to 128GB RAM [03:45] schestowitz__[TR] - SSD storage [03:45] schestowitz__[TR] - 15.6-inch HD display driver [03:45] schestowitz__[TR] "Baikal-M1" or "Baikal-M" was already found in Russian gov and biz desktop PCs last year, but Bitblaze makes it available in laptops. [03:46] schestowitz__[TR] " [03:46] schestowitz__[TR] https://mstdn.io/@sjb/108806724521637619 [03:46] -TechBytesBot/#techbytes-mstdn.io | Stephen Brooks : "@tuxmachines@mastodon.technology Although it's be" - Mastodon [03:46] schestowitz__[TR] "Although it's being replaced by Android which presumably means they've just swapped one big tech master (Microsoft) for another (Google)" [03:46] schestowitz__[TR] https://mamot.fr/@Nabis/108749867150818558 [03:46] -TechBytesBot/#techbytes-mamot.fr | Libre Chat: "@tuxmachines@mastodon.technology Pkoi tant de n" - La Quadrature du Net - Mastodon - Media Fdr [03:46] schestowitz__[TR] " [03:46] schestowitz__[TR] Pkoi tant de news sur Linux mint 21 ?! [03:46] schestowitz__[TR] Depuis peut tre 10j c'est une propagande de ouf pour cette distrib base sur Ubuntu, alors qu'elle a une dition debian, a mon sens bien plus honorable, mais dont la version 2022 LMDE 5, n'a pas bnfici d'une telle promotion ! [03:46] schestowitz__[TR] Du coup, pour quilibrer : https://blog.linuxmint.com/?p=4287 [03:46] -TechBytesBot/#techbytes-blog.linuxmint.com | LMDE 5 Elsie released! The Linux Mint Blog [03:46] schestowitz__[TR] #lmde5 #Linuxmint [03:46] schestowitz__[TR] " [03:47] schestowitz__[TR] " I'm tempted to use the good ol' SeaMonkey again." [03:47] schestowitz__[TR] https://mstdn.io/@neglesaks/108699104489994301 [03:47] -TechBytesBot/#techbytes-mstdn.io | Peter Bjrn : "@tuxmachines@mastodon.technology I'm tempted to u" - Mastodon ● Aug 25 [07:58] *psydruid (~psydruid@jevhxkzmtrbww.irc) has left #techbytes ● Aug 25 [08:55] *psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #techbytes ● Aug 25 [10:23] *psydruid (~psydruid@jevhxkzmtrbww.irc) has left #techbytes [10:24] *psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #techbytes [10:45] *psydruid (~psydruid@jevhxkzmtrbww.irc) has left #techbytes [10:46] *psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #techbytes ● Aug 25 [13:06] schestowitz__[TR]
  • [13:06] schestowitz__[TR]
    Attack surface of extension pages
    [13:06] -TechBytesBot/#techbytes-palant.info | Attack surface of extension pages | Almost Secure [13:06] schestowitz__[TR]
    [13:06] schestowitz__[TR]

    In the previous article we discussed extension privileges. And as we know from another article, extension pages are the extension context with full access to these privileges. So if someone were to attack a browser extension, attempting Remote Code Execution (RCE) in an extension page would be the obvious thing to do.

    [13:06] schestowitz__[TR]

    In this article well make some changes to the example extension to make such an attack against it feasible. But dont be mistaken: rendering our extension vulnerable requires actual work, thanks to the security measures implemented by the browsers.

    [13:06] schestowitz__[TR]
    [13:06] schestowitz__[TR]
    • ● Aug 25 [16:15] *GNUmoon2 has quit (Ping timeout: 2m30s) [16:17] *GNUmoon2 (~GNUmoon@prjzhryurypj4.irc) has joined #techbytes ● Aug 25 [17:22] *psydruid (~psydruid@jevhxkzmtrbww.irc) has left #techbytes [17:22] *psydruid (~psydruid@jevhxkzmtrbww.irc) has joined #techbytes [17:51] *psydroid2 (~psydroid@h635kpe3hju7k.irc) has joined #techbytes ● Aug 25 [19:17] *Noisytoot has quit (Ping timeout: 2m30s) [19:25] *Noisytoot (~noisytoot@tkbibjhmbkvb8.irc) has joined #techbytes ● Aug 25 [23:23] *schestowitz[TR2] has quit (*.net *.split) [23:23] *schestowitz__ has quit (*.net *.split)