The crying "History" button at the top right sends its regards. Yes, the World Jewish Congress has published a report that demands Wikipedia add a feature to view the history of articles, see what actions were performed by whom, and "host forums and discussions within the Wikipedia community to address concerns about neutrality and gather feedback for policy improvements". It also wants to force all admins and above to reveal their real names.

I have a screen where I want a lazy-loading card of various items below some necessary information, all of which will scroll down. My initial approach was to nest the lazycolumn under the card which is nested under a Column with a calculated nested height based on the size of the calls list. However, I can't do that, and neither can I do the following.

@Composable
@Preview
fun mockup() {
    val calls = mutableStateListOf(Pair(1..418, 418 downTo 1))
    MaterialTheme {
        LazyColumn(Modifier.verticalScroll(rememberScrollState())) {
            item {
                Text("Text and some necessary UI elements")
                Slider(value = .418f, onValueChange = {})
            }
            Card(Modifier.fillMaxWidth()) {
                items(calls.asReversed()) {
                    Row {
                        Text(it.first.toString(), Modifier.fillMaxWidth(0.5f), fontWeight = FontWeight.Black)
                        Text(it.second.toString(), Modifier.fillMaxWidth(0.5f))
                    }
                }
            }
        }
    }
}

I found https://stackoverflow.com/questions/68182413/compose-lazylist-section-background, for which the only viable solution found was to hack a special composable widget so that when combined, it looks like a continuous card. Still, I want to see if there's a "proper way" of doing this...

The convictions of the two paramedics shook the world of emergency workers who have typically been shielded from criminal prosecution — and it forced questions about the dynamic between the police and paramedics at a scene.

Though Mr. McClain was visibly distressed and in handcuffs, paramedics never spoke to him, touched him or checked his vital signs before diagnosing him with excited delirium, a controversial condition characterized by agitation and exceptional physical strength. Paramedics then injected him with what authorities later said was a dose of ketamine inappropriate for Mr. McClain’s body weight.

The convictions of the two paramedics shook the world of emergency workers who have typically been shielded from criminal prosecution — and it forced questions about the dynamic between the police and paramedics at a scene.

Though Mr. McClain was visibly distressed and in handcuffs, paramedics never spoke to him, touched him or checked his vital signs before diagnosing him with excited delirium, a controversial condition characterized by agitation and exceptional physical strength. Paramedics then injected him with what authorities later said was a dose of ketamine inappropriate for Mr. McClain’s body weight.

Why was Hollywood so obsessed with sky beams? I mean they cared more about making sky beams evil than making sure we knew how evil their producers were.

The heightened state of unease over the possibility of a 'Con Air' sequel resulted in an influx of security personnel. It just goes to show, when it comes to Nic Cage, the need for increased security is always 'Raising Arizona.'

The intelligence was made public, in part, in a cryptic announcement on Wednesday by Representative Michael R. Turner, Republican of Ohio and the chairman of the House Intelligence Committee. He called on the Biden administration to declassify the information without saying specifically what it was.

His committee took the unorthodox move of voting on Monday to make the information available to all members of Congress — a step that alarmed some officials because it is not clear in what context, if any, the intelligence in the panel’s possession was presented. In a note to lawmakers, the House Intelligence Committee said the intelligence was about a “destabilizing foreign military capability.”

Representative Jim Himes, Democrat of Connecticut and the ranking member of the House Intelligence Committee, said that the issue was “serious” and that Mr. Turner was right to focus on it. But he added that the threat was “not going to ruin your Thursday.”

Mark Meckler is the president of the Convention of States Foundation and a leading proponent of the right-wing movement to get state legislatures to call for a dangerous Article V convention that will consider constitutional amendments to radically alter American government and society by making much of what the federal government now does unconstitutional.

“I don’t think there’s any way to solve this permanently without military action,” Meckler declared. “[We need a buffer zone] like the DMZ between the Koreas. It needs to be a kilometer of cleared territory that is a no man zone; you come in here and we believe you have hostile intent, we’re going to clear you out.”

“We need to exterminate the cartels and that means going into Mexico,” Meckler asserted. “Now people would say, ‘You’re violating a sovereign country’s territory.’ Well, Mexico is not a sovereign country any longer. Mexico is a failed narco state. The federal government is not in control of their military. The federal government is not in control of their police Their state governments are not, their local governments are not in control of their police forces. That is a failed narco-terrorist state and so we have to treat it as such.”

“To me, this is like Gaza. They’re invading our country. They’re invading our country every day. They’re killing our people, and we have to go in and use maximum force to oust them and create a buffer zone along the border. If we do that, we’ll have border security. It’s that simple.”

Shipped in Windows 11 Insider Preview Build 26052. https://www.tiraniddo.dev/2024/02/sudo-on-windows-quick-rundown.html claims it has a big security problem that makes the program accept calls to elevate from anywhere once first run

Edit:

1. The security problem has been internally fixed and will be available in the next release
2. It's not just an alias for 'runas'. It seems to be able to configurably block user input for sudo'd commands, retain the existing environment, ditch it and open a new window, and remember that you've sudo'd in the last minute or so.
3. It brings up UAC instead of having you input the password

As humanity continues to live underground, nature begins to heal itself. The surface becomes more habitable and the humans decide it’s time to rebuild. Luckily there’s a large collective of Fallout 4 fans who know just what to do. Using the knowledge they gained from building their settlements and following their own true God Preston Garvey, they’re able to get to work rebuilding the world for human repopulation. They’ll build towns, they’re build farms, they’ll build New Vegas. It was Joever but with their help, it is so back. Metroid fans will be hoping that Metroid Prime 4 will be revealed at the end of the rebuilding process. It won’t be.

Hey @modrinth, any chance you guys could apply your Adrinth ads to the Acceptable Ads program? I'd love to add it to my patched exclusion filterlist!

This news is from almost exactly 8 years ago. Softpedia reported 13 days later that eBay partially patched it, but the patch was insufficient. I could not find further updates, but I do know that eBay has since removed more advanced JavaScript (incl. JSFuck) from all listings in 2017.

"An attacker could target eBay users by sending them a legitimate page that contains malicious code," Check Point researcher Oded Vanunu wrote in a blog post published Tuesday. "Customers can be tricked into opening the page, and the code will then be executed by the user's browser or mobile app, leading to multiple ominous scenarios that range from phishing to binary download."

To exploit this vulnerability, all an attacker needs to do is create an online eBay store. In his store details, he posts a maliciously crafted item description. eBay prevents users from including scripts or iFrames by filtering out those HTML tags. However, by using JSF**k, the attacker is able to create a code that will load an additional JS code from his server. This allows the attacker to insert a remote controllable JavaScript that he can adjust to, for example, create multiple payloads for a different user agent.

eBay performs simple verification but only strips alpha-numeric characters from inside the script tags. The JSF**k technique allows the attackers to get around this protection by using a very limited and reduced number of characters.

eBay has no plans to fix a "severe" vulnerability that allows attackers to use the company's trusted website to distribute malicious code and phishing pages, researchers from security firm Check Point Software said.

In an e-mail sent to Ars after [their article] went live, eBay officials wrote: " "eBay is committed to providing a safe and secure marketplace for our millions of customers around the world. We take reported security issues very seriously, and work quickly to evaluate them within the context of our entire security infrastructure. We have not found any fraudulent activity stemming from this incident.”

The e-mail added:

Also, it's important to understand that we have been in touch with the researcher and have implemented various security filters based on his findings to detect this exploit. Since we allow active content on our site it's important to understand that malicious content on our marketplace is extraordinarily uncommon, which we estimate to be less than two listings per million that use active content on the eBay marketplace.

I remember there being a post here that I've boosted/saved that highlights a pretty *top tool. I also had a minor argument with someone about how this might be useful. Now, I can't find it. Any ideas?

Edit: It's btop.

In other news, URLs are now delimited by a space rather than a comma when updating manifests. Komac uses a very small amount amount of memory and has been heavily optimised to minimise memory usage (especially heap allocations). Updating Android Studio (a 1GB+ binary) consistently took just ~3.5mb memory. Komac now has a significantly more accurate way of checking if an installer was created with Inno/NSIS instead of just checking for some magic bytes. As of this release, the uncompressed x64 portable binary stands at just ~7.5mb and doesn't require runtimes like the JVM. The Windows installers add Komac to path (allowing you to just run komac in a terminal) and stand at less than 3.5mb.

In other news, URLs are now delimited by a space rather than a comma when updating manifests. Komac uses a very small amount amount of memory and has been heavily optimised to minimise memory usage (especially heap allocations). Updating Android Studio (a 1GB+ binary) consistently took just ~3.5mb memory. Komac now has a significantly more accurate way of checking if an installer was created with Inno/NSIS instead of just checking for some magic bytes. As of this release, the uncompressed x64 portable binary stands at just ~7.5mb and doesn't require runtimes like the JVM. The Windows installers add Komac to path (allowing you to just run komac in a terminal) and stand at less than 3.5mb.

The incorrect book. Note that his father only died in 1909 of liver issues. Jughashvili was upset when he learned that Keke had enrolled Ioseb in school, instead hoping his son would follow his path and become a cobbler. This led to a major incident in January 1890. Ioseb had been struck by a phaeton, severely injuring him. Ioseb is the former name of Stalin.