social.noyu.me

lmao, the Storage Access Framework is not only good at making apps sluggish and app development suck, it introduces security vulnerabilities too. what an API

https://twitter.com/itssimontime/status/1636857478263750656

(context: https://issuetracker.google.com/issues/180526528)

woe betide you who dare underestimate fopen(…, “w”)

it may have a cute face “w”

but it can hurt you “w”

@hikari i once had the weirdest fucking bug and it took me 2 hours to figure out i had opened as "w" and not "wb"

@eniko @hikari At least you didn’t cause a security bug with that. (Scroll to the bottom) https://www.da.vidbuchanan.co.uk/blog/exploiting-acropalypse.html

@noop_noob @hikari wait i thought the truncation was a breaking change to 'w' mode on android. its *supposed* to work like that??

@eniko @hikari In my understanding, it’s an intentional breaking change.

@noop_noob @eniko @hikari I don't think there's any indication it was intentional, it's just... impossible to tell. Don't combine refactoring with rewrites, people!!

@eniko @hikari @demize Someone linked me this as evidence that it’s intentional. The only issue is that the link doesn’t work for me… https://android.googlesource.com/platform/frameworks/base/+/63280e06fc64672ab36d14f852b13df2274cc328

@noop_noob @eniko @hikari I think that "someone" was me, lol

my initial thoughts were that it was intentional, but looking at the actual changes more it's just "we completely rewrote this logic while refactoring and that's how this change happened"

@eniko @hikari @demize ………. Oops lol

@eniko @hikari I made the same mistake just this week, with "r"/"rb", and I was even thinking while writing the code "this should be binary, don't forget about that!"... but I did

@hikari
Here you go.

http://9front.org/