informatique et high-tech (les meilleures news) %) - Page 1244

Humane does not plan to provide the majority of customers with a refund, even though the Ai Pin worked for under 12 months. Refunds are only available to customers who are within their 90-day return period. Customers who purchased an Ai Pin on or after November 15, 2024 will get a refund, but other users are out the full $700. Note that all refunds must be submitted by February 27.

Yes, the main differentiating feature of the Fragrance Mouse is a "refillable vial" in its underside, next to the place where you put the battery and store its 2.4 GHz USB wireless receiver when not in use. The vial stores "aromatic oils" that "can be washed and refilled with different scents." Asus doesn't make any specific recommendations about the scents that you can put in the vial, so you have a lot of latitude as to what, exactly, you can make your mouse smell like.

Wallbleed bug reveals secrets of China's Great Firewallwww.theregister.comBoffins poked around inside censorship engines – here's what they found

The vulnerability itself is triggered by a bug in China's DNS query parser that, under specific conditions, unintentionally returns to the client up to 125 bytes of additional memory data in the forged response. To be more specific, the data is leaked from whatever machine is inspecting the DNS request to potentially block. By carefully crafting a DNS query, you can grab 125 bytes of memory from the censorship middlebox inspecting that query.

Zerosquare (./37299) :

Developer convicted for “kill switch” code activated upon his terminationArs TechnicaSoftware developer plans to appeal after admitting to planting malicious code.

Everything you say to your Echo will be sent to Amazon starting on March 28Ars TechnicaAmazon is killing a privacy feature to bolster Alexa+, the new subscription assistant.

In an email sent to customers today, Amazon said that Echo users will no longer be able to set their devices to process Alexa requests locally and, therefore, avoid sending voice recordings to Amazon’s cloud. Amazon apparently sent the email to users with “Do Not Send Voice Recordings” enabled on their Echo. Starting on March 28, recordings of everything spoken to the Alexa living in Echo speakers and smart displays will automatically be sent to Amazon and processed in the cloud.

CVE-2025-29927 - Understanding the Next.js Middleware VulnerabilityStrobes SecurityA critical Next.js Vulnerability (CVE-2025-29927) lets attackers bypass authentication. Learn how it works and protect your application now.

How The Bug Actually Works

The problem stems from a mechanism designed to prevent infinite loops. Next.js needed a way to stop middleware from calling itself endlessly, so developers added a counter.

Here’s what happens:
1. Every time middleware runs, Next.js checks a special header called x-middleware-subrequest
2. This header contains a count of how many times middleware has run
3. If it has run too many times (5 by default), Next.js skips the middleware entirely
4. The critical flaw: anyone can set this header themselves

Zerosquare (./37316) :
D'après ce que j'ai lu, c'est une solution (bancale) pour éviter les récursions infinies.

Uther (./37319) :
De ce que je comprend, la récursivité n’est pas un besoin mais au contraire un cas d’erreur qui pourrait menner a un crash, et le header est la solution bancale qui leur permettait justement d’éviter ça en stoppant le traitement des midleware si le niveau d’imbrication est trop élevé.