@nprofile1q... What I find more interesting than how the exploit works, is the decision to release this post although there is no release of iterm that isn't vulnerable. They argue that the fix commit [1] is public, and that LLMs could write an exploit trivially easily just from that, so it is "okay" to publish their findings, including an updated exploit that works around the fix commit. Not very "responsible" of them.

[1]: https://github.com/gnachman/iTerm2/commit/a9e745993c2e2cbb30b884a16617cd5495899f86

@nprofile1q... @nprofile1q... As common with Jon's travels (and taking trains in europe in general), its fun for adventure-driven people that are able to get fun out of the pain, but absolutely not what you'd use if you value time or sanity, or are with others that value time or sanity.

@nprofile1q... @nprofile1q... Is that a goodwill service from the agents in Brussels, or a written policy? I'm too used to being fooled when I didn't buy connecting trains on a single ticket, and that really ruins my will to try Cologne-(ICE)-> Brussels -(EuroStar)-> London given the unreliability of that trip, esp. compared to flying.

@nprofile1q... I support the initiative, but with TalkBack it seems that some screenreaders are able to decipher the fake text. Why would the others not implement that, too?

@nprofile1q... I don't have a 27.2 here, so I'm not sure :/ thanks for all the efforts <3

@nprofile1q... here you are! 🥰

Tusky Test 27.2-cc79aac4

Device:

Google Pixel 8
Android version: 15
SDK version: 35

Account:

@nprofile1q...
Version: 4.3.3

@nprofile1q... when I open the emoji keyboard of Google Keyboard when composing a toot, the button bar with the Toot button disappears. I have to manually hide the emoji keyboard, and it's back.