There’s something else going on there. The shape of Nigeria looks correct, but it’s rotated out of place.

I apologize, I mean how do you navigate all the jargon you see in laws to get the answers.

https://www.usconcealedcarry.com/resources/ccw_reciprocity_map/ne-gun-laws/

The laws across the US are a patchwork of random thoughts that are constantly amended poorly. If you have any questions you should ask a local lawyer (this is a recommendation from a Paul Harrell video from youtube) since none of us will be there to bail you out of jail or pay legal fees in the event something goes wrong.

Ah, sorry.

D-Bus has a similar mechanism to the one that got this hacker arrested. I guess I was expanding upon the previous conversation about how much stuff is considered inside the inner security circle for d-bus.

Long story short: Microsoft just helped pop an alleged hacker using some windows device ID. I linked to a post in the hackernews thread about d-bus:

https://lemmy.world/post/49138921

https://news.ycombinator.com/item?id=48815684

Who defines the untrusted applications though?

¯\(ツ)/¯

If GNOME wrote it then they probably trust it. If you’re using GNOME, then you’ve accepted their security model on some level.

At least you know to go look for it. Attackers will only get more sophisticated:

https://ioctl.fail/preliminary-analysis-of-aur-malware/

according to their stated security model, untrusted applications must not be allowed to communicate with the secret service.

That won’t be a popular stance to take when someone eventually steals a bunch of cached, unlocked credentials off of D-BUS because of an oversight somewhere in the npm/aur/pip/cargo/whatever ecosystem.

More rabbit hole:

• https://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html
• https://gpg.fail/ (including the presentation)
• https://github.com/FiloSottile/age
• https://jedisct1.github.io/minisign/
• https://github.com/jedisct1/encpipe