The whole thing is fascinating, but this part just blows my mind. Very smart and really terrifying.

JBIG2 doesn’t have scripting capabilities, but when combined with a vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary memory. So why not just use that to build your own computer architecture and script that!? That’s exactly what this exploit does. Using over 70,000 segment commands defining logical bit operations, they define a small computer architecture with features such as registers and a full 64-bit adder and comparator which they use to search memory and perform arithmetic operations. It’s not as fast as Javascript, but it’s fundamentally computationally equivalent.

The bootstrapping operations for the sandbox escape exploit are written to run on this logic circuit and the whole thing runs in this weird, emulated environment created out of a single decompression pass through a JBIG2 stream. It’s pretty incredible, and at the same time, pretty terrifying.

The new “platform” is styled like a generic version of Twitter but hosted as a running blog of commentary from Trump. People can sign up for post alerts on the platform through their email and phone numbers and are allegedly able to like them, although that function doesn’t appear to work as of publication. Users are also allowed to share Trump’s posts on Facebook and Twitter. The Twitter sharing option doesn’t currently work, but Facebook’s does allow people to share Trump’s posts.

I don’t like Trump, but the good thing is that everybody can have a blog.

There is a topic on DEVONthink forums about how people use the app’s rating feature. I shared how and why I rate my food log in DEVONthink.

I have occasional bowel (IBD) problems, so I have to keep temporary food logs when I have flares. Logging what I ate is one thing, but getting health trends out of that log is where I use ratings on my food log entries.

This way, I can export the stuff I collected in DT and create graphs of how well I’m eating via Numbers or using the Shortcut integration in DTTG and Charty to create a widget of daily rating averages.

I’ve never seen HyperCard in action until now. It would definitely be useful to have something like this today.

Egy írás arról, hogy miért egy lassú szemét ma a weblapok nagy része.

When I read blog posts from ‘traditional web developers’ who are mad that HTML & CSS aren’t enough anymore and that everything is complicated – I think this is largely that the application stack for building websites has replaced the document stack in a lot of places. Where we would use Jekyll or server-side rendering, we now use React or Vue.js. There are advantages to that, but for a lot of minimally-interactive websites, it’s throwing away decades worth of knowledge in exchange for certain performance perks that might not even matter.

Azon kellene némelyik JavaScript junkie-nak elgondolkodnia, hogy nem a technológiát választjuk előbb, hanem a célhoz választunk technológiát. A React és a Vue.js nagyszerű cuccok, de az esetek 90%-ban teljesen feleslegesek. Egy fejlesztőnek nem egy technológiába kellene belesűríteni mindent, hanem kiterjedt eszközkészlettel rendelkezve kiválasztani az adott megoldáshoz a megfelelőt, függetlenül attól, hogy trendi vagy nem.

Szuper gyors OCR/screenshot app:

TextSniper is a super useful app to quickly capture unselectable text. Use it to capture and recognize text from presentations, trainings, screencasts,images, pictures, webpages, video tutorials, photos, PDFs etc. Literally from anywhere on your mac’s screen. TextSniper makes it super easy with a single keyboard shortcut convert text from screenshot into editable text. Incredibly fast and useful app.

Én a Prizmót használom erre, de az egy drágább cucc. Akinek gyors és olcsóbb megoldás kell, annak a TextSniper hasznos lesz.

Nagyon ismerős jelenség.

/via @ern0plus4

A MacStories összeszedte azokat információkat amiket a Mac Catalyst 2.0-ról tudunk:

WWDC 2020 was different. Apple introduced what was effectively Mac Catalyst 2.0 with its Optimized for Mac initiative, a separate Mac Catalyst path that follows Mac conventions more closely but requires more work. The company also built Messages and Maps, two of its flagship apps, using Mac Catalyst, demonstrating a deeper commitment to the technology than ever before. The result is a brighter future for Mac Catalyst that clearly has a role to play alongside SwiftUI and Apple’s other frameworks.

A lényeg nagyjából az, hogy idén kapott egy új opciót minden iPad alkalmazás arra, hogy tényleges natív macOS UI-t használjon a 77%-os skálázás nélkül. Így a Maps és a Messages, mint két nagy rendszeralkalmazás, tökéletes példája lesz az új Catalyst API-k tudásának.

Sajnos a Mapsből eltűnt közben a letéphető popover funkció, a Messagesből pedig az AppleScript támogatás, ami az előző AppKit alapú, iChatből lefaragott kliens még tartalmazott. Nem tudom mennyire van ilyen funkciókra manapság igény, viszont visszanézve azt a rendszerintegrációt, amit annakidején az iChat tudott, sajnos a Messages közelében sincs jelenleg ennek – igaz az app is kevesebbet tud.

Nem szeretném, ha az új többplatformos, natív alkalmazásokból eltűnnének azok a Mac-only apróságok, amik 2006 végén az Apple platformokra csábítottak.