0x0

40 ms·

481.
by 0x0 7y ago
NSObject as a Service?
482.
by 0x0 7y ago
The first call to delay() might request a delay shorter than the time it takes to calibrate, so that's not really workable.
483.
by 0x0 7y ago
Not at all. But many programs "Uses crt" (only) for other functions and might not even care about delay().
484.
by 0x0 7y ago
MS-DOS kinda expects the timer interrupt to only fire at around 18.2hz I think so it's too coarse for millisecond delays.
485.
by 0x0 7y ago
I remember this issue after upgrading to a ~350MHz machine way back when. A quick fix, with no software or patching needed, was to hit the return key and then the pause key at almost the same time after typing "program.exe". About
486.
by 0x0 7y ago
But it's been 3 months since the vendor first issued a patch!
487.
by 0x0 7y ago
It's happened before, and it's probably not super easy for Apple to do static binary analysis to determine if an app is going to make exactly the bad syscalls necessary for the jailbreak gated behind an undisclosed trigger functio
488.
by 0x0 7y ago
Sounds like rubygems and other registries like npm should try to get ahold of those password dumps and check them against their own account databases somewhat frequently!
489.
by 0x0 7y ago
xmlstarlet is a useful CLI XML manipulation tool
490.
by 0x0 7y ago
They list the wrong RFC number "8261", but the linked RFC is actually "8621".
491.
by 0x0 7y ago
Using snapshots to roll back and lose 89 days of work/system changes is quite an inconvenience though. Circumventing the need for snapshots/rollbacks is still not ok
492.
by 0x0 7y ago
The effective interest seems to be above 0% though. The linked FAQ shows calculations where the total amount paid back is more than the total loan amount. Plus some talk about some kind of exchange rate(?) seems like this could be even risk
493.
by 0x0 7y ago
In many/most places this would trigger a loss of a significant amount of money to sales tax, income/revenue tax etc.
494.
by 0x0 7y ago
But dir does support UNC paths in cmd on windows, doesn't it?
495.
by 0x0 7y ago
Apple's changelogs are often incomplete at time of release and updated with additional CVEs later. A gps fix sounds like a convenient cover story for an emergency 0day patch for imessage, for example.
496.
by 0x0 7y ago
Is this why Apple also quietly released updates for older devices as iOS 9.3.6 and 10.3.4? IIRC Apple has only patched EOL'd iOS releases once before - in 6.1.6 for the ssl gotofail?
497.
by 0x0 7y ago
This was also noted in 2013 - https://panic.com/blog/the-lightning-digital-av-adapter-surp... The anonymous comment is very interesting: https://www.panic.com/blog/2013/03/the-lightning-d
498.
by 0x0 7y ago
If you install Oversight, you can get persistent notification center alerts for most mic and cam activations (of course, it likely won't help if you have targeted malware that knows how to disable/uninstall Oversight) - https:&#
499.
by 0x0 7y ago
That's not unique to iOS, though. It seems a lot of display drivers on a lot of platforms were developed without ever considering hostile shaders coming in over the network, in an era where mostly only game developers would catch crash
500.
by 0x0 7y ago
Didn't debian change to the AGPL version of ghostscript in a patch security update? If you use imagemagick or other pdf related libraries that maks use of ghostscript, this could happen easier than you think.
501.
by 0x0 7y ago
I'm having a hard time believing Apple hasn't considered the lock-in effect of Sign In With Apple to be just like the lock-in effect of iMessages.
502.
by 0x0 7y ago
Only for local administrator user accounts I believe
503.
by 0x0 8y ago
It's not as much a matter of "still not rendering them properly", but more that they are doing it on purpose to avoid homoglyph attacks. Earlier browsers more OFTEN used to render them "properly", I believe.
504.
by 0x0 8y ago
The linked paper contains a quote and a reference to Microsoft Singularity that really is an interesting thought experiment. Imagine we were all running next-gen systems designed like Singularity by now, which relies on type safety and mana
505.
Dragonblood: Analysing WPA3's Dragonfly Handshake(wpa3.mathyvanhoef.com)
42 points by 0x0 8y ago|2 comments
506.
by 0x0 8y ago
Is this the end of websites being available 24 hours a day? Just switch off the web server every evening when leaving the office?
507.
by 0x0 8y ago
Seems unlikely to ever render identically. At the very least I believe chrome uses the platform specific font shapers (coretext on mac, cleartype on win). So in the end, a mac version of edgeium just adds yet another browser to the test mat
508.
by 0x0 8y ago
That has UX implications, with the mouseover statusbar link target popup and the right/middle mouse click to copy-url/open-in-new-tab features making it much more obvious.
509.
by 0x0 8y ago
document.cookie is also already controlled by the website, but due to everyone <script src>'ing 3rd party trackers like GA it looks like they felt the need to limit this api. So why remove the possibility for blocking the same sc
510.
by 0x0 8y ago
All this talk about tracking prevention, but it also seems like safari 12.1 REMOVES link tracking (<a ping>) prevention: https://lapcatsoftware.com/articles/Safari-link-tracking.htm...

More ›