0x0

38 ms·

421.
by 0x0 6y ago
If you're looking for 0day kernel exploits that might be popped from say MobileSafari, having an unrestricted, unsandboxed non-root shell is a much better starting point compared to a regular sandboxed app launched from xcode. Or even
422.
by 0x0 6y ago
Testflight builds expire after 90 days, appstore apps live forever.
423.
by 0x0 7y ago
For integers, x86 has had mul and div all the way back to at least the 8086. If you are looking for a cpu with no mul or div then look at the classic 6502/6510 as known from c64, nes, and many more contemporary machines.
424.
by 0x0 7y ago
And in userspace, you can only do what the APIs allow. Unless there is an API for directly manipulating the CPU Turbo Boost system, you're S.O.L. when kextload is dead
425.
by 0x0 7y ago
"mode,50" would set 80x50 in ms-dos
426.
by 0x0 7y ago
Is it just me or does the article just link to broken yahoo pages? I can't find a proper link to the project but the article contains nonsense irrelevant embedded videos about cloud-versus-onpremise hosting? Is this spam? Flagged.
427.
by 0x0 7y ago
The verbose output didn't seem to point out the exact system call or libc call that got stuck. A lldb/gdb bt stacktrace could pinpoint what's hanging (for example, some people mentioned parsing /etc/services). I don
428.
by 0x0 7y ago
Have you tried running ssh in lldb/gdb and dumping a stacktrace when it hangs? Might have to copy the ssh binary to a temp dir to avoid SIP denying ptrace.
429.
by 0x0 7y ago
Maybe there is something funny in /etc/services on this machine that throws the call into an infinite loop? Perhaps near the bottom beyond port 8192?
430.
by 0x0 7y ago
It reduces the amount of endless bruteforce attempts somewhat, so log files are slightly more readable. Although recently this seems to be significantly less effective compared to the previous 20 years...
431.
by 0x0 7y ago
I can't reproduce this. macOS 10.15.4, ssh'ing to a very high (5digit) port with a hostname no problems.
432.
by 0x0 7y ago
I thought they announced no new Chrome major releases planned for quite a while?
433.
by 0x0 7y ago
Does this pihole admin interface perform any kind of CSRF protection, or can this be exploites by any random website as long as the victim has a browser tab with a valid session?
434.
by 0x0 7y ago
Lots of tempting 3rd party iOS frameworks are binary only without source, such as Google Maps for iOS. Who knows what kind of telemetry and event listeners these frameworks install.
435.
by 0x0 7y ago
But, the software that performs the transfer runs on the PC, and it is the one receiving data. Even Wikipedia defines "downloading" as "receiving data"...
436.
by 0x0 7y ago
It feels like the project uses "download" and "upload" the wrong way. Surely transferring files from the disc drive to the pc using a piece of software on the pc should be considered "downloading"?
437.
by 0x0 7y ago
So does this mean that Windows 7 will forever be stuck with an easily(?) exploitable font engine vulnerability?
438.
by 0x0 7y ago
This was quite obvious for a short while after Apple introduced cross-device pasteboards (handoff/continuity) - if your mac had recently copied something into its pasteboard, and you opened the facebook app on your iphone, the system w
439.
JPEG-1 standard 25 years: past, present, and future reasons for a success(spiedigitallibrary.org)
1 points by 0x0 7y ago|0 comments
440.
by 0x0 7y ago
Certificate Transparency means SSL certs must have been logged to public CT log databases to be considered valid. This ensures that any monkey business MITMing with rogue certificates will be detected quickly, either by site owners seeing u
441.
by 0x0 7y ago
HSTS has nothing to do with pinning, you're probably thinking of the deprecated HPKP
442.
by 0x0 7y ago
3.5" or 5.25" :)
443.
by 0x0 7y ago
Last time I did a backup/restore between iphones using encrypted itunes usb, GA came up empty. Had to go through painful account recovery / lost 2fa procedures on a dozen accounts. Now I use "OTPAuth" instead. Even comes
444.
by 0x0 7y ago
That's just the precertificate
445.
by 0x0 7y ago
Your script doesn't seem to assign any of the printed IPs to ASNs registered to you, so your joke kind of misses the mark a bit.
446.
by 0x0 7y ago
If you are just checking availability, just cut out the middle-men and do a whois query directly.
447.
by 0x0 7y ago
Even in an operating system that supports 32bit binaries, there shouldn't be any runtime overhead if you stick to 64bit apps only, except maybe a few megabytes of wasted disk space. (which could even have been made into an on-demand co
448.
by 0x0 7y ago
Really hope this won't kill osxfuse, virtualbox or vmware. Will it?
449.
by 0x0 7y ago
Also, browser exploits. Blocking ads make sense as a decent antivirus strategy.
450.
by 0x0 7y ago
Tell that again to someone who lived under German occupation in ww2?

More ›