• 13 Posts
  • 1.23K Comments
Joined 1 year ago
cake
Cake day: July 9th, 2023

help-circle
  • As other articles pointed out, this is only a problem if:

    • You expose port 631 to the internet.
      • Why would anyone do that?
    • You have a malicious actor on your trusted network.
      • If so, you have bigger problems.
    • You hit “Print” on a compromised network, such as a public library, while using CUPS.

    Only the last one is potentially problematic for more people, and even then, the number of people using Linux is still very small. Some libraries don’t allow printing or only printing via their computers.

    It’s good to know this flaw exists, but it doesn’t seem like a particularly concerning attack vector.









    • To exploit this across the internet or LAN, a miscreant needs to reach your CUPS service on UDP port 631. Hopefully none of you have that facing the public internet. The miscreant also has to wait for you to start a print job.
    • If port 631 isn’t directly reachable, an attacker may be able to spoof zeroconf, mDNS, or DNS-SD advertisements to achieve exploitation on a LAN. Details of that path will be disclosed later, we’re promised.

    So don’t expose 631 to the internet (why would you?) and know who’s on your network. Be careful printing things on an untrusted network.

    It’s serious, but seems like a wonky attack vector for most.






  • Telorand@reddthat.comtoTechnology@lemmy.worldOpenAI Voice
    link
    fedilink
    English
    arrow-up
    1
    ·
    4 days ago

    The response is wrong. AI isn’t recognizing people’s emotions, it’s inferring them. It’s not “smart” enough to recognize emotions, and we don’t need the dystopian nightmare of a computer thinking you’re malicious when you’re annoyed or being sarcastic.