> Applications that accept untrusted SQL inputs

Due to the extreme amount of testing involved with SQLite, I wonder if it could be argued that it is safer to allow it to directly validate and attempt untrusted commands than it is to run any verification in your application code.

I feel like you could wind up creating more attack surfaces than you solve by worrying about these things in the wrong way. The moment you reach for crap like regex you have probably lost the game.

Live USB stick, boot, copy everything from the 'broken' install to a second USB stick, reinstall, restore.

Or, if you really want to get into the weeds, try to re-install systemd. As a learning exercise.

This is a great question on a job interview though. "What happens on a Debian machine if you 'apt remove systemd'?"

i'm pretty sure that's only a legit business model in the usa

Let me google that for you

https://forums.linuxmint.com/viewtopic.php?t=377054

There was an article on a new lenovo model that you cannot install linux on, but to lazy to look for it.

Quote from a lonk:

>Lenovo says Microsoft requires they block Linux from booting on such PCs.

... ...

>This has nothing to do with better security. It is simply about restricting consumer choice by making it more difficult to install something other than Microsoft Windows

Before you get all jubilant, note that they have fingerprinting techniques which don't use JS[0]. It was able to identity me. Contrary to popular opinion, disabling JS doesn't protect you from fingerprinting.

They describe their approach[1]. They use HTTP headers and conditional request triggered by CSS conditional media queries to gather data. Something like @media(...) {background: url(/tracking/$clientid)}. But in principle, they could also try and fingerprint the TCP/IP stack or the TLS implementation. I'm not sure it would get them more data than OS+Browser, though.

[0] https://noscriptfingerprint.com/

[1] https://fingerprint.com/blog/disabling-javascript-wont-stop-...

Multi-account-support keeps being the thing that web versions of apps just wont do. It's such a frustratingly petty & shallow limitation.

Firefox's Multi-Account-Containers could concievably be the reagent, the fix, but it lacks so much fit & finish. Getting things opening in the right container has been a struggle. There's been zero positive activity from Firefox in 5+ years.

Thanks! First time using React so it might be a bit messy...

https://github.com/andrewjkuo/playlist-recycle