0x0

48 ms·

541.
Buypass Go SSL: Free 180 Day ACME Certificates(buypass.com)
1 points by 0x0 8y ago|0 comments
542.
by 0x0 8y ago
Those enterprise code signing certificates and provisioning profiles probably won't have much life left if Apple is awake at the wheel. Seems like a risky game to play, likely staking their appstore developer account at the same time.
543.
by 0x0 8y ago
Curious to hear more about the "bypass Apple's implementation of ARMv8.3 Pointer Authentication (PAC) on A12 devices like the iPhone XS." Is this new ARMv8.3 feature already broken?
544.
by 0x0 8y ago
Do you think they will just ask all their employees to manually disable facetime in the meantime?
545.
by 0x0 8y ago
Even if there is a server side mitigation, it's a big black eye to have devices being remotely tappable with no user interaction. The devices are obviously not trustworthy anymore with the current software, and you are at the mercy of
546.
by 0x0 8y ago
They would probably need to at least blacklist every affected ios version from the facetime servers, there will be a long trail of devices not updating soon
547.
by 0x0 8y ago
That's a pretty huge flaw. Millions if not billions of people can suddenly remotely spy on almost any other ios or mac anywhere in the world, just by knowing their email address or phone number? Perhaps Apple should simply pull the plu
548.
by 0x0 8y ago
Looks like non-root X still requires the equivalent of root access to the raw input /dev devices - https://wiki.gentoo.org/wiki/Non_root_Xorg#Making_necessary_...
549.
by 0x0 8y ago
Because the remote host could be compromised/hacked even when you "trust" it, this could easily be used to jump from a compromised auxiliary external server to owning the internal laptop/desktop of a domain-wide administ
550.
by 0x0 8y ago
> in-browser Javascript can't do SSH, presumably because it lacks the right security code. This makes it sound like you don't exactly have any idea what you're doing, which is worrying for a provider of an ssh client. Java
551.
by 0x0 8y ago
Also, the best part about gitlab CI - it's super easy to install gitlab-runner on your own and enjoy unlimited build minutes, even on the free plan. Plus you get to set up your buildbot environment just the way you like - even with acc
552.
by 0x0 8y ago
If that was true, the 3GS, 4 and 4S should also have gotten iOS 10.
553.
by 0x0 8y ago
But if you had bought the 5 when the 6 was new, you'd be stuck at iOS 10, which is missing several security updates, two iterations of new emojis, and many apps refusing to install or update by now.
554.
by 0x0 8y ago
The fact that the 5s got iOS 12 is more of an exception than the rule. The 5 stopped at iOS 10, and the 4s stopped at iOS 9, so the general trend should have stopped the 5s at 11.
555.
by 0x0 8y ago
Buying iPhone 7 or 8, ie a one or two year old phone, practically guarantees that you'll hit the end of the road with iOS major version update availability one or two years earlier, which means you'll have to buy a new phone one o
556.
by 0x0 8y ago
Hopefully this means there's a chance airplay2 support can make it into shairplay/shairport or Kodi as well sometime soon then.
557.
by 0x0 8y ago
On a low level, the iPhone XS brings some interesting new innovation in that it is a new sub-architecture "arm64e".
558.
by 0x0 8y ago
Thanks, I read the article and I understand all of this. I was just explaining how a kryoflux would not be appropriate for reading a floppy drive "sitting on a lab bench", which I assume is the question that the grand-parent comme
559.
by 0x0 8y ago
Doesn't Kryoflux still require an actual floppy drive to be connected? I think the parent poster was looking for a way to do this without using an actual full floppy drive
560.
by 0x0 8y ago
Sqlite's sqldiff might be an okay replacement for diff in many cases - https://sqlite.org/sqldiff.html
561.
by 0x0 8y ago
That link only shows: "Access Denied You don't have permission to access " http://m.cdw.com/product/oracle-vm-virtualbox-enterprise-lic... on this server."
562.
A confusing dependency(blog.autsoft.hu)
4 points by 0x0 8y ago|0 comments
563.
by 0x0 8y ago
I dunno, having a large address space could be useful if you work with large or lots of memory mapped files?
564.
by 0x0 8y ago
Nitpick: 320x200 in 256colors is a standard VGA mode, but what Abrash came up with was "Mode X" - which added a higher resolution (320x240), 1:1 square pixels(!), and doublebuffering. There were also even higher resolutions availa
565.
by 0x0 8y ago
Meltdown in particular is worse than that, I believe. It would allow user-space programs - even regular sandboxed javascript in a browser - to read memory from the kernel and maybe other processes within the same OS?
566.
by 0x0 8y ago
Did you ever run linux with ext2 (not ext3 or ext4) on a desktop computer in the early days? It used to fail spectacularly on unclean shutdowns. IIRC linux used to delay/buffer writes up to a minute or so. (Maybe it still does?)
567.
Remotely triggerable ICMP buffer underwrite in the FreeBSD kernel(reddit.com)
12 points by 0x0 8y ago|2 comments
568.
by 0x0 8y ago
Missed opportunity for a great domain name - http://Buffalo.buffalo.buffalo.buffalo.buffalo.edu
569.
by 0x0 8y ago
Apparently it was actually already fixed in ios 12.0 and macOS 10.14.0 but retroactively added to the security notes for those releases only just now.
570.
by 0x0 8y ago
Some of us don't use the gmail web interface (opting for IMAP or a different provider instead), and use an ad blocker to take of analytics.

More ›