Sponsored Content
« Wednesday Overnight Open Thread (11/10/21) | Main | The Morning Report - 11/11/21 »
November 11, 2021

Daily Tech News 11 November 2021

Top Story

  • Unicode considered harmful: Hiding backdoors in plain sight by, um, making them invisible. (Bleeping Computer)

    The script in question uses an invisible Unicode character as a JavaScript variable parsed from a URL parameter, and passes it, still invisible, to the command line, where it can do whatever the hell it wants.

    PyCharm flags this as a warning, and Rust quite properly won't compile. In Notepad++ though, it looks absolutely normal; the only sign of anything odd is a redundant trailing comma in a couple of places.

    Given how frequently Node.js packages are caught misbehaving in obvious ways, it's discomforting to consider that this invisible attack could already be in the wild.
    "It might therefore be a good idea to disallow any non-ASCII characters," advises the researcher.

  • This researcher, if you want to go to the source. (Certitude)

Tech News

Party Like It's 1979 Video of the Day

When Second Best Is Better Video of the Day

The 12700K backs off a little on clock speeds and removes four of the low power cores. That brings its power consumption way down compared to the 12900K. It still runs hotter than the AMD competition but on single-threaded benchmarks it is also noticeably faster. Plus it's substantially cheaper than the 12900K and - hang on - yes, actually available.

On the other hand, it's priced uncomfortably close to the current retail price of AMD's 5900X, a 12 core part that is 30% faster on multi-threaded workloads. So for a dedicated workstation I'd probably still recommend AMD. For mixed work and gaming, the 12700K has the edge.

Disclaimer: It's got edge, and it knows how to use it.
digg this
posted by Pixy Misa at 03:12 AM

| Access Comments

Recent Comments
Jim[/i][/b][/s][/u]: ":) Ben Had! @ Washington Nearsider. Admirat ..."

Alberta Oil Peon: "They would set up a bottle about 100 ft away, and ..."

AZ deplorable moron: "Along with AOP's report I can report there is one ..."

That Deplorable SOB Van Owen: "I hope that one day some enterprising shooting equ ..."

Thesokorus: "I doubt we could suffer the casualties of a meanin ..."

Davod: "Lyudmila Pavlichenko (Lady Death), the WWII Russia ..."

Pillage Idiot: "[i]I'm trying to improve that euphemism into a jok ..."

GWB: "BTW, is the info up about the PRE-MoMe? When, wher ..."

Ben Had: "nurse, I am fan of the John Wick method. Hard to ..."

AZ deplorable moron: "We probably could, but it would take the best that ..."

Pillage Idiot: "[i]95 I wonder if this country could field a milit ..."

Nevada Dave: "Pre Kestrel we used DOPE, Data On Previous Engagem ..."

Recent Entries

Polls! Polls! Polls!
Frequently Asked Questions
The (Almost) Complete Paul Anka Integrity Kick
Top Top Tens
Greatest Hitjobs

The Ace of Spades HQ Sex-for-Money Skankathon
A D&D Guide to the Democratic Candidates
Margaret Cho: Just Not Funny
More Margaret Cho Abuse
Margaret Cho: Still Not Funny
Iraqi Prisoner Claims He Was Raped... By Woman
Wonkette Announces "Morning Zoo" Format
John Kerry's "Plan" Causes Surrender of Moqtada al-Sadr's Militia
World Muslim Leaders Apologize for Nick Berg's Beheading
Michael Moore Goes on Lunchtime Manhattan Death-Spree
Milestone: Oliver Willis Posts 400th "Fake News Article" Referencing Britney Spears
Liberal Economists Rue a "New Decade of Greed"
Artificial Insouciance: Maureen Dowd's Word Processor Revolts Against Her Numbing Imbecility
Intelligence Officials Eye Blogs for Tips
They Done Found Us Out, Cletus: Intrepid Internet Detective Figures Out Our Master Plan
Shock: Josh Marshall Almost Mentions Sarin Discovery in Iraq
Leather-Clad Biker Freaks Terrorize Australian Town
When Clinton Was President, Torture Was Cool
What Wonkette Means When She Explains What Tina Brown Means
Wonkette's Stand-Up Act
Wankette HQ Gay-Rumors Du Jour
Here's What's Bugging Me: Goose and Slider
My Own Micah Wright Style Confession of Dishonesty
Outraged "Conservatives" React to the FMA
An On-Line Impression of Dennis Miller Having Sex with a Kodiak Bear
The Story the Rightwing Media Refuses to Report!
Our Lunch with David "Glengarry Glen Ross" Mamet
The House of Love: Paul Krugman
A Michael Moore Mystery (TM)
The Dowd-O-Matic!
Liberal Consistency and Other Myths
Kepler's Laws of Liberal Media Bias
John Kerry-- The Splunge! Candidate
"Divisive" Politics & "Attacks on Patriotism" (very long)
The Donkey ("The Raven" parody)
Powered by
Movable Type 2.64