

So now ot becomes Russian puppet ?


So now ot becomes Russian puppet ?


In order to use this exploit you need a program that has UID bit set and the file owned by the user you want to use itheir privilages.
For example su (among other commands) has that UID bit set and because the owner of the file is root then when you execute it, it always runs with root privileges
Most Android devices use SELinux (Security Enhanced Linux) which is configured in such way that you couldn’t have root access even if you could run a program owned by root and has the UID bit set.
What you could do - in theory - is finding a process already running with root privileges and happened to be executing certain command periodically. you could then override that certain program in cache using this exploit to do what you want.


I can at least tell you what it does because I tested it:
It override your /usr/bin/su so that it now let you run as root with no password.
My guess is that the payload is an su command that was modified to run without requiring password but it’s also possible - though unlikely - that it just patch your existing su.
either way if you will run the script, you need to backup your existing su command first.
Correction: The script doesn’t permanently modify the su file instead it modifies a cached copy of the file in memory. restarting your device or doing echo 3 > /proc/sys/vm/drop_caches to flush the cache restore the su file to its original state


Here it is after improving readability a little


there is no su binary in most android devices sadly


I think Trump afraid if he negotiate directly they might trick him into accepting a deal that would anger bibi


will see.
This one loaded gas from Emirates as the article says so no reason to stop it.
Looking forward to seeing Chinese tankers filling up oil from Iran


I just wish if the article had less fluff and more facts
These kind of information give more credibility to the report instead of just throwing accusations and insults with little facts beyond “a journalist was shot”


would be a shame if he dies before going to a trial for all his past and present crimes


say: “it wasn’t me”
I have started with Mandrake (later renamed to Mandriva) then went through few other distros before settling on Gentoo.
Gentoo installation is one of the most complicated because there is no installer, you do everything yourself.
This is like buying car parts and assembling them together into a car using a manufacturer’s manual. its painful but once the car is assembled you almost never have to take it to a repair shop. Not because it doesn’t breakdown but because you know well how it function and thus how to fix it yourself.


everywhere is ruled by bots now


I’d choose the side that didn’t deliberately mass kill civilians, didn’t force women from occupied territories into prostitution, didn’t perform forced lethal medical experiments on civilians, …


Russia also committed war crimes. both Natanyahu and Valadmir are officially war criminals so what’s your point?
Israel is committing Genocide yes. Iran killed thousands of Syrians opposing Asad regime and even killed thousands of Iranians opposing khumeni.
The discussion of “who is more criminal” or which killing is Genocide and which is just “mass killing” is pointless to me.


Its a really confusing world we’re living in.
I don’t super US/Israel so I am happy Iran with Russia’s help is able to inflict pain on them. Happy to see US getting weaker.
But I also don’t support Russia/Iran both have horrible regime so I don’t want to see them victorious.
I supported Ukraine initially because Russia is a bully but Ukraine supports Israel which is a worse bully.
I don’t know who to support and who to be against any more


according to the news article, they were not destroyed but just damaged and are being repaired


This is a law that companies are required to implement or stop making business in the states enforcing that law.
You probably feel that companies should just stop doing business in those states “to show them”. Sadly a lot of profitable Linux companies that fund Linux development disagree with your high morals. They want to continue doing business there.
Adding that field help those company comply with the law and doesn’t hurt you in anyway except maybe taking few bytes in your disk drive.
Even if the field is not added, those companies would come up with another place to store date of birth or even use systemd fork.
Its not like they will say since we can’t store date of birth in systemd’s user model then we’ll have to abandon this project and close our branches in those states instead.


I have read the git thread related to the merge request.
I don’t see what’s the big deal. You have a user model that already contain fields like user’s full name, location, … among others and all this developer did was adding yet another optional field called date of birth.
This does nothing to verify user’s age and enforce nothing. They’ve stressed that repeatedly in the comments.
What that does is making it easy for a Linux distro to store user’s birthday - should they wish to do so - and making that bit of info accessible to running apps so that each app can do what it wants with it.
User’s fullname and location are already there which are also optional so what’s the big deal?


I didn’t like Nvidia products even before hearing that.
Guess that another reason to avoid it.
Link to original video (Odysee)
https://odysee.com/@rossmanngroup:a/hey-bambu-lab-come-sue-us.:4