iOS 26.4 Jailbreak-Status: Keine öffentlichen Exploits verfügbar

Aktueller Jailbreak-Status: Die neueste iPhone-Software von Apple bleibt vollständig gesperrt. Derzeit ist dafür keine Möglichkeit in Sicht.

TARNKAPPE.INFO

The command line version is here:

https://github.com/villares/sketch-a-day/blob/main/admin_scripts/pngs_to_gif.py

I should add a "public domain dedication" to both scripts...

#Python #imageio #GIFAnimation

sketch-a-day/admin_scripts/pngs_to_gif.py at main · villares/sketch-a-day

One visual idea a day. Contribute to villares/sketch-a-day development by creating an account on GitHub.

GitHub

I have this very simple #Python script that uses #imageio to convert all PNG files on a folder into a #GIFAnimation, and this is a #FreeSimpleGUI version of it (I usually run a command line version).

As I usually run #gifsicle on the command line after creating a GIF, I decided to update it to add #pygifsicle to do it for me and save a step.

https://github.com/villares/sketch-a-day/blob/main/admin_scripts/make-gif.py

Imageio is a Python library that allows users to read and write images, videos, and other data. It is cross-platform and can run on Python 3.9 and later.

Website
https://pypi.org/project/imageio/

Documentation
https://imageio.readthedocs.io/en/stable/

GitHub
https://github.com/imageio/imageio

#Python #imageio

Essentially, distro developers are firefighters, putting out fires made by careless upstreams.

What I've wasted time on, today:

- making the non-standalone test suite of #Hatchling (sigh) work without #UV again, so that a critical build dependency of a growing number of #Python packages could be tested everywhere

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc6e54e1df5e0802198c793f39107a9028b8698f
https://bugs.gentoo.org/930662

- fixing effectively dead (but with a promise of revival) #PassLib not to break random stuff via printing warnings when using newer #BCrypt versions

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1e015b65b74283a51893672739c5e4784b95273
https://bugs.gentoo.org/925289

- hacking the test suite of #ImageIO work using an offline copy of test data, rather than cloning its git repository at the beginning of tests

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=77ff4bc09d68067f2c635d43d446f308990e0873

I really wish people would consider donating to distro developers more often, rather than to projects that create this thankless work for us.

#Gentoo

repo/gentoo.git - Official Gentoo ebuild repository

Browse the Gentoo Git repositories

W gruncie rzeczy, devowie distro są jak strażacy, walczący z pożarami wywołanymi przez nieostrożnych twórców oprogramowania.

Dzisiaj zmarnowałem czas na:

- naprawienie testów systemu budowania #Hatchling (które nie są wyodrębnione od testów Hatcha, wzdych), by działały znów bez #UV, abyśmy powtórnie mogli wszędzie testować tę krytyczną zależność rosnącej liczby paczek Pythona

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc6e54e1df5e0802198c793f39107a9028b8698f
https://bugs.gentoo.org/930662

- naprawianie praktycznie martwej (ale z obietnicą resuscytacji) biblioteki #PassLib, by nie psuła przypadkowych paczek, wypisując ostrzeżenia z nowszymi wersjami biblioteki #BCrypt

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1e015b65b74283a51893672739c5e4784b95273
https://bugs.gentoo.org/925289

- obchodzenie upierdliwości w #ImageIO tak, by dało się tę bibliotekę testować offline, z pobranymi wcześniej danymi, zamiast przy każdym uruchomieniu testów klonować repozytorium git

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=77ff4bc09d68067f2c635d43d446f308990e0873

Naprawdę chciałbym, by ludzie częściej rozważali wsparcie devów distro, a nie tylko projektów, które tworzą im tę niewdzięczną pracę.

#Gentoo

repo/gentoo.git - Official Gentoo ebuild repository

Browse the Gentoo Git repositories

and, if needed, modify it.

there are many python libraries out there:

#OpenCV
#SciPy
#imageio
#scikit-image (skimage)
#matplotlib
#Wand
#Pillow (PIL Fork)

Anyone else using #imageio instead of #Pillow for #gif export?
I had some issues with Pillow, but now I'm unhappy with the imagio palette treatment :(
https://github.com/imageio/imageio/issues/1060 #Python #GIF
[request] more color/palette control on GIF writing · Issue #1060 · imageio/imageio

Using the example code from the documentation, the number of colors seems inadequate. Is there already another way of adjusting output color reduction/quality? from pathlib import Path import image...

GitHub

#Apple #iOS 17.1 terrifyingly spooky vulns... please patch ASAP!

#FindMy: An app may be able to read sensitive location information

#ImageIO: Processing an image may result in disclosure of process memory

#IOTextEncryptionFamily: An app may be able to execute arbitrary code with kernel privileges

#Kernel: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations

#mDNSResponder: A device may be passively tracked by its Wi-Fi MAC address

#Passkeys: An attacker may be able to access passkeys without authentication

#Photos: Photos in the Hidden Photos Album may be viewed without authentication

#WebKit: Processing web content may lead to arbitrary code execution (x3)

https://support.apple.com/en-us/HT213982

About the security content of iOS 17.1 and iPadOS 17.1

This document describes the security content of iOS 17.1 and iPadOS 17.1.

Apple Support

The #WebP bug (identified by @citizenlab) that underlies both the #Apple #ImageIO and the #Chrome + #Firefox hotfixes, is a very complex beast.
For efficiency purposes, the WebP implementation used everwhere ("libwebp") is extremely complex and relied on assumptions the (resourceful!) attackers were able to break.
"The problem, we now know, is that this format is incredibly complex and fragile, and the preconditions to trigger this issue are immense." https://blog.isosceles.com/the-webp-0day/

@FeilnerIT

The WebP 0day

Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar warning attached: "Google

Isosceles Blog