0x0

34 ms·

361.
by 0x0 6y ago
This is mildly interesting but not much more than that. Who cares if the set of system libraries are available in a series of separate dylib files, instead of being packed together in one mega archive? Most comments here on HN seem to misun
362.
by 0x0 6y ago
Sounds like you wanted to run office, not windows, which was exactly my point.
363.
by 0x0 6y ago
How strange. I mean, Xcode shows which architectures you build for. They even mention "armv6", "armv7", "arm64" etc in their own tech notes. https://developer.apple.com/support/required-dev
364.
by 0x0 6y ago
But the instruction set (ISA) absolutely matters for the entire software ecosystem!
365.
by 0x0 6y ago
The difference is that the entire (64bit?) iOS App Store back catalogue would likely be available to run as unmodified binaries without developers having to lift a finger.
366.
by 0x0 6y ago
Nobody cares about windows per se. People want to run legacy win32 x86 and x64 binaries.
367.
by 0x0 6y ago
Is that ARM v6/v7 32bit or ARM v8 64bit? Most Raspberrys run a 32bit userland (armhf).
368.
by 0x0 6y ago
My experience is that since about 6 to 12 months ago, Google Play reviews have taken longer than Apple App Store reviews.
369.
by 0x0 6y ago
I mean, you still need to buy a computer to even do a git push... what
370.
by 0x0 6y ago
Free unlimited CI minutes for private repos if you bring your own gitlab-runner is one great benefit I enjoy.
371.
by 0x0 6y ago
I doubt many would find bootcamp on ARM very interesting, especially if that means you need to run Windows-ARM. The great thing about x86 macs is that you can run x86/x64 versions of Windows, at decent speeds, through the likes of Virt
372.
by 0x0 6y ago
Where can I get a free Windows license for my Macbook?
373.
by 0x0 6y ago
That's nice, but they also completely changed the license for java 8 in a minor security update late in the game, making it super easy to accidentally click through and putting yourself or your organization at risk of massive license v
374.
by 0x0 6y ago
Does C really have a memory model for multithreaded applications? I tried googling but could only find references to C++11. Also, failing to adhere to a memory model is one of those tricky things where things seem to work alright on archite
375.
by 0x0 6y ago
Hmm, now I wonder if this could turn into a F00F-like bug? What would LOCK REP RDRAND or just REP CPUID do...
376.
by 0x0 6y ago
Obviously they record arbitrary strings. One of the mains points they made was to make fun of the typo "bulid".
377.
by 0x0 6y ago
PASV is still two connections, it just swaps around who's connecting to who.
378.
by 0x0 6y ago
So you typo and forget the "run" part. Now what? I can't believe I have to argue about how bad it is to have CLI tools send their arguments as telemetry. Even half-arsed lately introduced attempts at redaction doesn't ch
379.
by 0x0 6y ago
When they post full csv files with all kinds of command line arguments including typos, who's to know your "dotnet run fix-aspycts-bankrupcy-account" command, where you forgot the first "run" argument, won't en
380.
by 0x0 6y ago
Microsoft has been known to do things like log all command line arguments in dotnet, for example https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry And then they post the results publicly. htt
381.
by 0x0 6y ago
Because maybe developers in your bank or hospital are using IDEs with nasty telemetry that might expose data on you? Maybe they are editing a branch called "workaround-for-mr-cachestash-bankrupcy-account-bug"?
382.
by 0x0 6y ago
The server would need to hold the unsalted hash then. And if those leak, everything you need to calculate the client salt is right there.
383.
by 0x0 6y ago
If your machine has TLS being intercepted nothing matters anymore. That would be the equivalent of having a keylogger installed. There's no point in trying to protect such a client anymore, it's game over then.
384.
by 0x0 6y ago
No. Other websites on the internet, where the user also registered with the same email and password, contain the single hash.
385.
by 0x0 6y ago
All the other websites where the users registered using the same email will only hash ONCE though!
386.
by 0x0 6y ago
The reason passwords are hashed is to prevent them from being usable to people who gain access to the backend database. If the hash in the backend is the only thing you need to calculate the salt challenge, then it is the equivalent of a pl
387.
by 0x0 6y ago
The only thing I can think of is running out of virtual disk space because the storage JS API quota is filled. But I would assume PKSFX calculates the CRC based on the in-memory decompressed stream, not a read-back copy of what's writt
388.
by 0x0 6y ago
That makes the hash of the user's password equivalent to a plain text password. And that means all those leaked databases, which previously only contained hashes that needed to be bruteforced to be reversed, suddenly function as a so
389.
by 0x0 6y ago
If TLS is broken, the world has bigger problems. And then they could simply intercept the session cookie either way.
390.
by 0x0 6y ago
If you hash in the client, attackers with dumped hashed credentials (from elsewhere, which might only hash plaintext) don't need to try to reverse/"crack" the hashes, they can just use them as-is. With users reusing pass

More ›