The XP-Pen hardware reports HID "Eraser" usage (some digitizers with accompanying HID "Invert" usage, others without) for the top button. Linux' generic driver does here nothing more than forwarding the corresponding events from hardware to the userspace.
The missing Invert usage caused Linux to report Eraser as regular tip touch to the userspace, which was not intended but caused by an oversight in the kernel code. This, together with a bunch of hacks (Digimend and X11 tweaks), allowed OP to map that button to a right click.
Now, with the kernel logic fixed, these hacks do not work anymore. This is a case of xkcd://1172. The userspace solution is to remap BTN_TOOL_RUBBER to a right click for the weird stylus instead.
Yes, barrel switches should ideally be reported as "Barrel Switch" and "Secondary Barrel Switch". I have a Huion tablet[-1] that reports the second barrel switch as Eraser. The secondary barrel switch was not in HID originally[0], and I guess some devices were designed to follow an earlier spec -- that, or avoiding Wacom patents.
[-1] I don't remember if it's also a uclogic controller?
> I personally prefer ripgrep as it is much faster than grep, but usually that is not available on CI machines.
I recommend git grep, which is comparable in speed to ripgrep, since it ignores non-tracked files and searches the object storage directly. It is also able to run in parallel.
> For Volyn, for OUN UPA, for Galicia, for Polesia, and for historical lands
Which are sensitive subjects in Polish-Ukrainian relations. The message was published in Ukrainian, Russian and Polish, which according to several polish acquaintances of mine looks like something Google Translate would produce.
I don't have any illusions about the cyberattack, my (mild) issue is specifically with Reuters reporting, or their upstream source. Who selectively filtered out the bit they deemed unimportant or harmful or whatever there was on their mind. Reuters' release will be reposted by virtually every English-speaking media unchanged, and they will have no way, time, or desire to verify it, neither will their readers.
Makes me wonder what else they are omitting for my convenience in unrelated topics I don't happen to know anything about.
Such provocations are standard modus operandi of Russians since at least 80's. They use sensitive subjects to sour relations between allies (divide and conquer).
Minister of Digital Transformation of Ukraine Mykhailo Fedorov believes that the role of cybersecurity in today's world is exaggerated.
He said this in an interview with LB.ua [1].
"I think the role of cybersecurity is a bit exaggerated. There is a lot of talk about it, but in fact few can name any real cases of cyber threats. Let me give a simple example. When we came to the President's Office, the IT team showed dashboards with a thousand attacks a day, overloaded servers, etc. Two weeks later, we fired them, and nothing happened for several months while we were assembling a new team." - Fedorov said.
To all the ones making fun, yes his point about firing and it being fine is a problem. However, any IT team that shows me a dashboard that can actually measure attacks I’m going to be skeptical of. At best you’re seeing probes and you don’t know the intent until it’s too late and then you comb through the logs and find breadcrumbs that no monitoring tool told you about. A port scan is not an attack.
The more likely story is the IT team used this as a way to try to get more budget because politicians don’t respond to anything else (whether or not the budget is justified, impossible to say from the outside). Or they were incompetent and truly believed their firewall was measuring attacks and they stopped them all.
Overloaded servers likely is just bad engineering because there’s many tools (many/most free or incredibly cheap) to help with that. Heck, SO, one of the most trafficked sites on Earth, ran on a number of Xeon machines. I suspect their IT infrastructure was poorly optimized.
Firing IT is the worst you can do for IT security. I would still check if maybe they gave out the means to deface the site though...
Honestly there is merit to the claim in my opinion. The security industry is full of scam, now even formerly reputable providers begin to sell very flawed solutions. But internal IT is not part of that.
It is also a care about doing a sensible risk analysis. Your web server should maybe be isolated from critical systems as any other system the public can interact with.
