0x0

56 ms·

601.
by 0x0 8y ago
So it is possible to get malicious code execution on the fabs that build the next generation of processors for our devices. What are the chances that a sophisticaled stuxnet-like attack inserting backdoors in the CPU design will follow?
602.
by 0x0 8y ago
Didn't BeOS ship bash and a partial POSIX interface? So we would still be in the "unix clone such as linux" land?
603.
by 0x0 8y ago
Mojave only deprecates OpenGL, but it doesn't remove it as far as I understand. It will continue to ship with the (somewhat outdated) OpenGL version that macOS has provided for several years, no? Did they even try running their own pro
604.
by 0x0 8y ago
Yep, sorry they got sherlocked but at least it's built-in to both iOS and macOS now :)
605.
by 0x0 8y ago
As long as the option to use secure booting stays user-configurable (even if it's opt-out), this sounds like a great way to for example do theft deterrent - if you can mark a specific macbook's serial number as stolen, and thus pr
606.
by 0x0 8y ago
Is it not the opposite, though? If you need to store the fact that an important meeting took place in Los Angeles at exactly 4.00pm on a specific date, if you had used utc/offsets, it would look like the meeting took place at 3.59.50pm
607.
by 0x0 8y ago
What if someone runs ads... on a gopher server? :)
608.
by 0x0 8y ago
Don't use push --force, use push --force-with-lease. Then you avoid accidentally undoing unexpected new commits on the remote.
609.
by 0x0 8y ago
If you sign up for a mock microsoft account and break the TOS on purpose, will they leave you alone with the notifications? :O
610.
by 0x0 8y ago
Interestingly, in Dutch, the word is "Appelsien" according to Wikipedia, which seems quite unrelated to any word like "Orange" - this in a country where the royal family is called "House of Orange"?
611.
by 0x0 8y ago
Seems disingenious to only talk about bandwidth (mbps) and not latency (ping in ms) when discussing "faster internet". I believe it is the latency that is the biggest cause for sluggishness when browsing or watching videos over 4G
612.
by 0x0 8y ago
Or is it because being in a #1 market position with a (until now) free price tag attracted thousands of volunteers submitting content and corrections for free?
613.
by 0x0 8y ago
From the article's conclusion: > So maybe this phone isn’t Apple’s iPhone X, but it is an iPhone X. Ridiculous. If the phone can't run iOS apps (arm64 binaries compiled for Darwin+UIKit) it's not even close. What a racket.
614.
by 0x0 8y ago
Absolutely. But in a classic UNIX network, middleboxes aren't a part of the threat model. Unprivileged UNIX user accounts binding on TCP ports were and are. So, ports below 1024 were reserved for the root account and that was a decent
615.
by 0x0 8y ago
The article only briefly mentions port >= 1024 for non-root, but it's probably important to note that it is desirable to have the default port be < 1024. That way, you can be sure you are connecting to an sshd operated by the rem
616.
How to build an NPM worm(jamie.build)
151 points by 0x0 8y ago|95 comments
617.
by 0x0 8y ago
Isn't it scary that this seems to have been discovered only because the backdoor code was buggy?
618.
by 0x0 8y ago
I think you are jumping to conclusions for no good reason here, I think it's absolutely unlikely to happen that browsers remove http support. Worst case they'll add a clickthrough screen similar to the invalid ssl interstitials of
619.
by 0x0 8y ago
ACME has nothing to do with provisioning root certificate trust stores and I hope DHCP never will either. If you need additional local root CAs then deploy them via enterprise workstation management solutions.
620.
by 0x0 8y ago
How is having a "not secure" label showing up on your not secure http html folder an inconvenience? I think it makes more sense to move to secure by default, with a large "not secure" label for the nondefault (non-https)
621.
by 0x0 8y ago
There's an issue for this on the MoltenVK github page: https://github.com/KhronosGroup/MoltenVK/issues/193
622.
by 0x0 8y ago
I thought it was the opposite of the point, that modern BIOSes had evolved to make this possible, but I think a non-modern legacy BIOS would work just as well. :)
623.
by 0x0 8y ago
I don't know about that, I think targeting a legacy non-UEFI BIOS for this application wouldn't be a lot more work?
624.
by 0x0 8y ago
Maybe they expected more compiler bugs than usual when bringing out Swift?
625.
by 0x0 8y ago
Agreed, my impression is that the main benefit of bitcode is that it allows Apple to rebuild apps for the purposes of fixing compiler backend bugs and perhaps introducing improved micro-optimizations for newer CPUs generations within the sa
626.
by 0x0 8y ago
An app can't listen to the mic unless you grant mic permission, unless the app has been bestowed with magic entitlements by Apple. For example, Apple Clips is an app in the app store with magic entitlements that bypass cam&mic perm
627.
by 0x0 8y ago
Since you can also use numbers, shouldn't that read "all permutations (...) 36x36 = 1296 .com domains" ?
628.
by 0x0 8y ago
Works in Chrome for macOS
629.
by 0x0 8y ago
Does not work on iOS.
630.
by 0x0 8y ago
... for debian 8 only, though. Looks like current stable dodged that bullet quite a while ago.

More ›