0x0

47 ms·

511.
by 0x0 8y ago
If I remember correctly, an MS-DOS formatted 1.44mb 3.5" floppy usually has 1,457,664 free bytes for user files?
512.
by 0x0 8y ago
This exploit lets an unprivileged child worker (for example running mod_php on regular shared hosting clients' .php files) hack back into the root parent process and thus escalate from unprivileged to root.
513.
by 0x0 8y ago
The fuse thing about "deterministic random number generation" is spooky... does it mean it's possible to compromise RDRAND? At least it looks like linux has a "random.trust_cpu=0" option... https://securi
514.
by 0x0 8y ago
The number scheme changed around 2014 when the numbers started getting close to -9999 https://cve.mitre.org/cve/identifiers/syntaxchange.html Might as well add a massive 1000 prefix when upping the number of digit
515.
by 0x0 8y ago
There's a nice and free secondary DNS service available at https://freedns.afraid.org - so if you trust that service, you can get away with running just one master DNS yourself.
516.
by 0x0 8y ago
Gotcha, at first I assumed we were talking emails :)
517.
by 0x0 8y ago
How are they losing money on each of your domains?
518.
by 0x0 8y ago
So much for "Android One"....
519.
by 0x0 8y ago
Doesn't XQuartz come with xterm?
520.
by 0x0 8y ago
It's expected that iOS 12.2 is coming with Swift5, and ABI stability for the first time, as well as os-bundled libswift for the first time. Sounds like a semi major sdk update to me.
521.
by 0x0 8y ago
Are LLVM releases always timed to align with Xcode releases these days? I guess most people expect new Xcode and iOS/Mac SDKs on Monday.
522.
by 0x0 8y ago
Does AWS have to pay a license fee to maintain a pool of Windows instances? Who foots the cost of the license if a prepared/pooled instance is never allocated to a customer?
523.
by 0x0 8y ago
Previous discussion: https://news.ycombinator.com/item?id=19284934
524.
by 0x0 8y ago
Did it though? At least microsoft usually managed to parse ftp and html dirindexes. The bugs they had in their webdav clients (see link in parent post) was something else... incorrect/lacking xml entity handling that almost indicates s
525.
by 0x0 8y ago
I remember playing with WebDAV in the early 2000s. Microsoft Windows and/or Office and/or Sharepoint Client had (two!) implementations which supposedly would be able to present a WebDAV share as something that would look and behav
526.
by 0x0 8y ago
You could boot into pure DOS in win9x even on fat32, and pure DOS does not support long file names. Perhaps they kept that hack to be compatible with the fat32 "light" implementation of the DOS that shipped with win9x.
527.
by 0x0 8y ago
If you click your own link, you'll quickly notice that the Hypervisor.framework API is incredibly x86-specific, for example one of the methods listed take parameters of type "hv_x86_reg_t". Hypervisor.framework in its current
528.
by 0x0 8y ago
Everything is vulnerable apparently: https://security-tracker.debian.org/tracker/CVE-2019-8912
529.
by 0x0 8y ago
Maybe it's shorthand for "arbitrary code execution in the kernel mode context".
530.
by 0x0 8y ago
Well if you are root then you can usually load random kernel modules and in general do whatever you want on the system.
531.
by 0x0 8y ago
Maybe it can be used to write a "0" into a useful kernel structure such as a forked process' effective uid (thus escalating to uid0)
532.
by 0x0 8y ago
So Spectrum is now owned by Microsoft? How long until they are assimilated into Skype for Business or MS Teams (which is a poor carbon copy of Slack in my experience)?
533.
by 0x0 8y ago
As an iOS developer, I sometimes receive emails from some brazen enterprising person with poor spelling and grammar inquiring about the possibility to "borrow" our company creds for registering an iOS enterprise developer certific
534.
by 0x0 8y ago
Disagree, it is a kernel error if it cannot gracefully deal with removable media being, you know, removed.
535.
by 0x0 8y ago
If someone quickly pulls an usb drive, plugs it in another system, and then plugs it back in to the original system, then flushing writes could cause massive data corruption if those writes are relative to an outdated idea of what's on
536.
by 0x0 8y ago
That chown looks super suspect. Usually you wouldn't want the webserver to have write access to the web application it is executing; that's how you get backdoored.
537.
by 0x0 8y ago
Maybe. I'm not advocating this technique, merely explaining the possible gaps. Also pretty sure JavaScriptCore doesn't have a blanket ban on evaluating a remote NSString (not that it matters for a blackhat type app), and also, thi
538.
by 0x0 8y ago
Sure it is. So a flag could hide that.
539.
by 0x0 8y ago
Because the app review team only evaluates a compiled binary, it is fairly easy to obfuscate nefarious activity. It could be as simple as serving different javascript from your backend to a [JSContext evaluateScript] call based on a flag yo
540.
by 0x0 8y ago
I have published several apps on the App Store and none of them make use of any analytics or screen recording or any telemetry, really. So your statement "every app" is categorically wrong as far as I can understand it.

More ›