Just came here to say that this also affects any applications that use the libwebp library.

That includes many apps that most people don’t think of as “browsers”.

Electron based applications all use chromium under the hood, and are quite common/prolific these days.

https://www.electronjs.org/apps

Expect updates to a lot of things in the near future.

Pretty sure the internet would collapse in a matter of hours.

(Cloud Infrastructure and Security Engineer)

I hope everyone reading this knows that you can just not connect a “Smart” TV to the internet. Leave it as a “dumb” TV.

Get a separate device like a Roku or AppleTV or Amazon Fire or whatever. The garbage hardware that TV manufacturers slap inside a TV so they can advertise its “smart” features will always be inferior to a purpose built external device.

To say nothing of the security implications of having an unpatched probably unsupported IoT device running on your network for years.

Ever notice that this movie is basically the same story as The Three Amigos?

Ha! Came here to say this. Ya beat me to it.

BetterTouchTool (which isn’t free but is worth every penny) lets you do everything rectangle does. Also lets you configure your mouse buttons to do whatever you want. Also infinite custom hot keys and shortcuts.

Also Raycast as a replacement for Spotlight.

ah, damn. thanks for the info!

Basically max out everything you can afford to max out. GPU is more important lately than CPU for most things, get as much of that and as much RAM as you can afford.

Trying it again… (actually posting from it right now) – you’re right, whatever it was that I encountered last time seems to be gone. yay!

I recall downloading Arc — being interested in a fresh take on browser UX, but then being very put-off by the fact that it wanted me to give it my credentials to numerous services.

Maybe I should try it again, but I’m very cautious about signing into Google, Slack, Discord, etc. via a 3rd party app…

(full disclosure, I used to work at HQ in Cupertino) … it’s not generally Apple’s M.O. to respond to things like this with, at most, “we received your message”.

Apple’s infosec team is almost certainly looking into this, assuming the report made it’s way to them. I’ll reach out to some of my contacts there n’ make sure they’re at least aware of the exploit.

Given how guarded Apple is about revealing anything, I wouldn’t expect much of a response though, even from a friend.

The video takes a long time to say this:

There’s a new (and concerning) service known as “Plist FMI off” which appears to be able to unlock an iPhone that would otherwise be locked and useless to thieves.

Disabling iCloud lock / Find My iPhone lock should be something only possible by someone working from inside Apple – thus implying that there’s likely an insider involved in this. Or at the very least, a security flaw in Apple’s network that’s allowing this to happen.

The Youtuber seems to think that Apple should be forthcoming about declaring this vulnerability exists. IMHO, he is wrong to think that. Declaring the flaw before it’s been patched would only create a rash of iPhone thefts.

Ideally, Apple is now aware of this situation, and is doing internal investigations to correct it.

Mona is great on mobile!

I use https://elk.zone on desktop though.

Wow. Thanks for mentioning this.

I wish there were some sort of bonus thank you points on Lemmy. I guess I’ll just give you a 🍟

oh! that’s a good idea… I guess I just figured it would be awkward to clutter up a single community with multiple languages? maybe that’s the whole point though. 🤷