Trolloscope Who is the best ? - Page 136

Pocket is Saying Goodbye: What You Need to Know
Mozilla will shut down Pocket’s services on July 8, 2025. At that time users will no longer be able to access the Pocket website, apps and API. You can export your saved items and API data until October 8, 2025 before they are permanently removed.

Arc frozen as The Browser Company pivots to AI-powered Diawww.theregister.com: No more features for the design darling - now it’s all about chatting with your tabs like they’re sentient

Sorry, Arc fans: the project is now effectively in maintenance mode with no new features planned. It won't be getting anything outside of Chromium engine upgrades, security fixes, and other as-needed patches.

Instead, the company is going all-in on AI, Miller wrote in a Substack post yesterday - the outfit's first public update in nearly two years.

"Five years from now, the most-used AI interfaces on desktop will replace the default browsers of yesteryear," Miller predicted. That's not to say web pages are vanishing, just that we'll increasingly access them through AI-driven interfaces that blend traditional browsing with natural language prompts, designed to "abstract away the tedium of old computing paradigms."

Enter Dia. In place of Arc, The Browser Company is now focused on this so-called "AI browser" designed as a context-aware hybrid of chatbot and web browser. Rather than layering new features onto aging browser architecture, Dia aims to usher in a new era where web content "become[s] tool calls with AI chat interfaces."

Security hole slams Chromium browsers - no fix yetwww.theregister.comExclusive: Edge, Atlas, Brave among those affected

Brash exploits an architectural flaw in Blink, the rendering engine used by Chromium-based browsers. After testing the PoC on 11 major browsers on Android, macOS, Windows, and Linux, Pino found it works on nine of them, causing those browsers to collapse in 15 to 60 seconds. It affects Chromium versions 143.0.7483.0 and later.

"The attack vector originates from the complete absence of rate limiting on document.title API updates," Pino said in research published on GitHub. "This allows injecting millions of DOM mutations per second, and during this injection attempt, it saturates the main thread, disrupting the event loop and causing the interface to collapse."

The Register tested the code on Edge, and not only did it crash the browser, but it also locked up the Windows-based machine after about 30 seconds, and sucked down 18 GB of RAM into one tab.

Uther (./4071) :
De ce que je comprend c'est juste un DOS, il y a vraiment pire comme faille sur un navigateur. Je serais surpris qu'il n'existe pas des dizaine d'autres méthodes de faire ça.

Godzil (./4072) :
Va savoir, si ca permet aussi un Gla, je trouve va plutôt dangereux.

Uther (./4071) :
De ce que je comprend c'est juste un DOS, il y a vraiment pire comme faille sur un navigateur. Je serais surpris qu'il n'existe pas des dizaine d'autres méthodes de faire ça.