V8 also has its own sandbox, which I believe exists in that sandbox. I assume that's the one this exploit has RCE in, but its unclear.

https://chromium.googlesource.com/v8/v8.git/+/refs/heads/mai...

I would assume in this case that there's full renderer control, not just a bypass of the in-process isolation.

I wonder how true this is now. I believe the functionality in MV3 has increased since it was released. There's still filters that can't be supported, but it seems like most are.

https://github.com/uBlockOrigin/uBOL-home/wiki/Frequently-as...

https://github.com/uBlockOrigin/uBOL-home/blob/main/chromium...

From "ublock-filters" only 1 filter was unsupported and 90 had unsupported domains dropped out of 10436. From "easylist" 18 out of 56109 filters are unsupported, no unsupported domains.

I'm sticking with uBlock-Origin, but not sure how much of a difference it makes these days.

Do you mean you disable pipewire-pulse? Why? Or does audio not work for you with pipewire-pulse? I've never had issues with firefox and pipewire-pulse on my system.

The API just returns coordinates to the website and it's fairly easy to spoof on major browsers. You'd just need to know where the classroom is.

Context: https://news.ycombinator.com/item?id=38768909 I thought it was pretty funny.

Yeah, I didn't even see that original comment but I've been on HN and Reddit long enough to know this must have been a referencing the style/format of some other sw dev related advice comment.

Thanks, I missed that thread the first time around.

:-)

Both are true. There is more significant DRM on most streaming services than DVD, but also pirates are still consistently beating it. Hard to say if that had much of an impact on this decision though.

I don't understand this all or nothing rebuttal. You can avoid supporting an individual that you don't like without doing background checks on everyone involved with everything you use.

Also, not supporting the Russian invasion of Ukraine is not about not supporting communism.

As someone who followed this scene pretty closely for a while, they absolutely are not seen as heroes by most. The primary controversies being their use of Atmosphere components and promotion of piracy. Atmosphere being a free open source gplv2 project that does much of the same thing as Team Xecuter's SXOS. They benefited greatly from this existing project while violating its license by keeping SXOS closed source and profiting off of it. Their main addition being tools to support piracy. Additionally, at one point SXOS contained anti reverse engineering code that attempted to brick or at least temporarily disable the console of those investigating their cfw. https://twitter.com/hexkyz/status/1012363017957380096 Definitely not a group to idolize imo.