There are several ways to exploit LogoFAIL. Remote attacks work by first exploiting an unpatched vulnerability in a browser, media player, or other app and using the administrative control gained to replace the legitimate logo image processed early in the boot process with an identical-looking one that exploits a parser flaw. The other way is to gain brief access to a vulnerable device while it’s unlocked and replace the legitimate image file with a malicious one.

In short, the adversary requires elevated access to replace a file on the EFI partition. In this case, you should consider the machine compromised with or without this flaw.

You weren't hoping that Secure Boot saves your ass, were you?

• Mozilla will take money from Microsoft
• Firefox gets Office 365, Exchange, and Azure AD integration
• Netflix partners with Microsoft for advanced HD and DRM
• Microsoft and Mozilla partner to deliver Microsoft-enhanced Firefox for Windows
• ActiveX 2.0

Every generation has this moment, where they learn to hate Microsoft (or Micro$oft). Then, 4% install Linux, 6% buy a Mac with half the RAM for twice the price; and everyone else to keeps complaining.

They created a department named after a meme coin.

True, but Firefox has a loyal fanbase.

Finally, a question where i can shine. You don't have to do anything specific. Just do things.

Use a headset with your phone or laptop: You are on a call. Most people don't speak much at online meetings.

Take a little nap? Thinking.

Want some time alone? Go to a meeting room. Works even better if the room has glass walls since you can see them and they can see that you are "busy", but no one sees your screen.

Have multiple monitors. There's always something work-related on at least one screen.

Have fields of interest that blend in. If one of your hobbies is vaguely related to work you are golden. You can totally read something unrelated to work during working time if it seems most your attention goes towards work. (See multiple screens and some switching back and force.)

Shift your working hours slightly from the norm, i.e. come 5 min earlier than others.

Don't hide windows with non-work stuff when someone sees them. Too late. Act as if you have nothing to hide.

Do a reasonable work-life blend. Work overtime occasionally at odd hours and make managers know that you solved an emergency in your free time. Gives you an excuse to leave early or slack off the next day and any other day.

React to emails with a resonable delay. Of course, you can help, but not right now. You are busy.

Block your calendar and decline invites.

Lest ihr auch nur noch blabla Migration blabla [...]

Ja. Arbeite in der IT. Viel Legacy-Scheiß.

What a non-story.

They basically asked: In an ad, do you prefer an actor reading out the marketing script or a computer-rendered face?

Also:

Selection process

The department expects a high volume of applications and it will not be possible to provide funding to all eligible applicants.

Selection will be a non-competitive process. Once an applicant satisfies the eligibility criteria they will be included in an anonymised random sampling process to determine the pilot participants from the pool of eligible applicants for the BIA Pilot.

Funding for the scheme will allow for approximately 2,000 eligible applicants to participate in the pilot scheme.

Bulgaria, Hungary, Kosovo are European contries

What? Isn't Haaretz like the main media outlet in Israel?

Dieses Jahr ist so ein krasser Rechtsrutsch. Das wird noch böse.

Die CDU/CSU rückt ja nicht in die Mitte, nur weil es jetzt zwei bis drei noch rechtere Parteien gibt. Im Gegenteil, die massive mediale Präsenz der Rechtsaußen hat ja die Position von CDUSPD schon längst nach Rechts verschoben.

I hope you all freed your 2fa secrets from this un-service.

Und die Begründung für das Nein liefern sie gleich mit:

"Unser Weg in eine wirtschaftlich stärkere und klimaneutrale Zukunft ist innovativ und technologieoffen. Wir wollen ein Land der Erfinder und Ingenieure bleiben. Wir wollen ein starkes Industrieland bleiben."

Genau. Deshalb halten wir nicht am Diesel fest.

Resistent to rust.

Which is exactly why security should be on the executive agenda.

Ach, lieber streiten wir über

• Gendern vs Boomer-Kultur
• "Wirtschaft" vs Bürgergeld
• "Wirtschaft" vs Klima
• Kleine Leute vs Die Grüüüüüünen
• Landbevölkerung vs Die Grüüüüüünen
• Ossis vs Die Grüüüüünen
• Solaranlage vs Ästhetik einer Plattenbausiedlung
• Solaranlage vs DIN-Norm der Steckdose
• Solaranlage vs Netzbetreiber
• Windkraft vs Rotmilan
• Windkraft vs eingebildeter Rotmilan
• Windkraft vs Elektrosmog
• Windkraft vs Bevölkerung
• Windkraft vs Robbe
• Gott vs Allah
• Sekte1 vs Sekte2
• Mac vs Linux
• Windows vs Linux
• Linux vs Linux
• Malle vs Ibiza
• Malle vs Thailand
• Gender-Sternchen vs -Doppelpunkt
• Alle vs AfD
• Alle vs AfD+FW
• Alle vs AfD+FW+CSU+CDU
• Alle vs AfD+FW+CSU+CSU+FDP
• CDU+CSU+FDP+FW+AfD-Inhalte vs linke
• linke vs Die Linke
• Die Linke vs BSW
• Rente vs Kinder
• Rentner vs Bildung
• Rentner vs Rentenkürzung
• Rentner vs Klima
• Flut vs Rentner

Elon Musk: Everyone is insane!

Everyone: No, Elon, you are insane, and now please take your pills.

b) is a recent(*) change. GitHub was independent when it became big

a) GitHub was never open-source, but by combing git and great UI/UX, it was a good choice.

Git is open-source and the distributed nature of git reduces the vendor-lock-in. You need to understand where we came from (svn or git to some ssh server). Coming from self-hosted git, embracing github did not take away your power over your own source code; you still had a copy of all branches on multiple machines. The world is different now, where github has become a single-point of failure.

(*) Update: Okay, maybe 2018 was not recently, but my point stands. GitHub existed long before the Microsoft purchase.

"unverzüglich" nachdem Olaf weg ist, der den Antrag hätte stellen können.

#WerHatUnsVerraten