All a game, with liabilities abstracted away to customer service and two factor texts.

We have to know how long it took.

Maybe there’s a connection.

Memory safety, and a number of other glaring holes in common stacks, are ignored by the general public for the same psychological and effort-related reasons that people secure their whole lives with easily-picked Schlage locks, or windows/doors that can be defeated in under 5 seconds, often silently.

Most genuinely do not or can not believe tragedy can find them - until it has.

It’s an Apple Vision Pro.

They’ll do fine over the decade.

Also: why?

What’s this have to do with the people you don’t hear talking about him being mostly totally ignorant about the person and subject?

Yes.

https://web.archive.org/web/20260830111206/https://www.inven...

(Sarcasm, if anyone needs that.)

That’s as much as your mom knows.

and they’re just as troublesome as they were before,

to the degree they’re provably being used to decide who to send malicious payloads to…

Zero-click simply highlights if the user needs to actively interact with an element to get a malicious payload - or not.

This did get me interested in the specifics of the payload, though:

“It maintains persistence via COM hijacking by overwriting a legitimate COM class registry key’s DLL path with a first-stage DLL dropped in C:\Windows\system32\IME\, and it stores encrypted second-stage payloads in the configuration directory. A signed third-party driver (physmem.sys) enables kernel-level memory access and API call proxying to avoid detection. To preserve system stability, DevilsTongue reinjects the original COM DLL during hijacking, disguising this action through shellcode manipulation of the LoadLibraryExW return value. All additional payloads are decrypted and executed only in memory, allowing the malware to steal credentials from LSASS and browsers, access Signal messages, and use browser cookies to impersonate victims on platforms like Facebook, Gmail, and VK. The malware’s use of scrubbed metadata, encryption, and unique hashes for each file further complicates detection and analysis.”

from https://www.recordedfuture.com/research/tracking-candirus-de...

Sure it did. The content coming from elsewhere doesn’t change their decision to include it when the user loads their page.

It just makes the decision wildly important.

This is no different than the “I’m too big, can’t tell what my subsidiaries are doing!” wink

Pay attention, do due diligence to do things correctly, or don’t do them.

Everybody you know runs Linux on their router, set-top box, etc.

Big tech has moved on from amalgamating OS and UI features to copying entire distros.

and didn’t feel like talking about it.