0x0

71 ms·

781.
by 0x0 9y ago
Huh, that's odd. I thought I seached for the CVE number on the page before posting this. Maybe the page has been quietly updated already. Or maybe I was confused. Actually, I was probably confusing the macOS and iOS announcements.
782.
by 0x0 9y ago
There may yet be more security fixes included than the article currently lists. It seems that for the last few releases, Apple has been quietly adding and updating CVEs to the release notes days and weeks after the initial publication, not
783.
by 0x0 9y ago
It's probably more that they don't want to deal with people showing up after a product/feature launch claiming compensation or threatening to sue, and to not have to avoid doing something just because someone might have submi
784.
by 0x0 9y ago
I don't think it's possible to be energy efficient in a proof-of-work blockchain? Whatever energy saving you come up with will be negated by having to match competing miners' increasing throughput. If you are not running on 1
785.
by 0x0 9y ago
It could also be an attempt at actually integrating with a regular web browser on regular web pages. Perhaps for things like launching a locally installed game to join a multiplayer match by clicking a start button on a match-making website
786.
by 0x0 9y ago
So not an architectural paradigm shift, then - a mostly "invisible" incremental CPU improvement instead?
787.
by 0x0 9y ago
When you say "MCM is as revolutionary as AMD64", does that mean Debian and RedHat and Windows and macOS, and all 3rd party applications, have to be recompiled for a new architecture? Or is it simply an incremental speed-up of exis
788.
by 0x0 9y ago
Similar tool for native macOS: http://grandperspectiv.sourceforge.net/
789.
by 0x0 9y ago
But with ROP, there's usually no need to write into the text-segment to execute arbitrary code.
790.
by 0x0 9y ago
Ah, yes, just like how linux and windows are remotely the same thing: a way to run software on cpus. ;)
791.
by 0x0 9y ago
Especially in the Linux world, you can't expect upstream to supply binaries for all possible architectures and configuration options. For example, you might be running on armv5 with libressl. Or you may be running on sparc64 with opens
792.
by 0x0 9y ago
Sounds similar to some ideas explored in the experimental OS "Singularity" - https://en.wikipedia.org/wiki/Singularity_(operating_system)
793.
by 0x0 9y ago
Is WPA3 going to require new hardware (wifi client cards/chips, wifi routers) or will it be possible to add WPA3 support via a software update in common operating systems?
794.
by 0x0 9y ago
CPUs will only accept uploads of microcode if they can verify the digital signature, of which the private keys are only known to the CPU manufacturer (i.e. Intel or AMD). Probably it will also only allow upgrades, not downgrades, on a runni
795.
by 0x0 9y ago
Android and the Google Play store works pretty well. The systems "locks on to" a public key signature so further updates for a given app must be signed with the same key. That would fix the problem with reproducible builds here. O
796.
by 0x0 9y ago
How can they claim no malicious actors were involved when packages such as duplexer3 were apparently replaced with undesirable code as reported in https://news.ycombinator.com/item?id=16087126 ?
797.
by 0x0 9y ago
The status page at https://status.npmjs.org/incidents/41zfb8qpvrdj says that "We apologize for the temporary unavailability of some packages.". If this was only a matter of missing packages, this would "
798.
by 0x0 9y ago
"npm install packagename" could record the public key in package.json (or package-lock.json) on first save, and only accept installs (or upgrades) matching the same public key. Just like how android app code signing works, or simi
799.
by 0x0 9y ago
But it's published by "puradox", not by "floatdrop"!
800.
by 0x0 9y ago
iOS refuses to run executable at all if unsigned. In fact, iOS restricts regular apps from calling fork() and exec() so you won't even have a chance to try.
801.
by 0x0 9y ago
You can silence the error by running "brew pin htop". Remember to "brew unpin htop" when/if the bug is finally fixed.
802.
by 0x0 9y ago
So I guess the interesting thing here is that if you visit http://webcache.googleusercontent.com/search?q=cache%3Ahttps... you'll see that yesterday's version of this document claimed that the fix for CVE-2017-575
803.
by 0x0 9y ago
On https://support.apple.com/en-us/HT208331 there is a reference to CVE-2017-5754 with a footnote saying "Entry added January 4, 2018" (interesting to see this "changelog" being revised as the embar
804.
by 0x0 9y ago
Where do you see updates for 10.6 and 10.5? According to https://support.apple.com/en-us/HT208331 - there was a 2017-002 for 10.12 and a 2017-005 for 10.11.
805.
by 0x0 9y ago
If this is "the intel bug" that is about to be announced right now, then I think it's remarkable that it's been sitting around in this blog post from July 2017?
806.
Critical flaws revealed to affect most Intel chips since 1995(zdnet.com)
46 points by 0x0 9y ago|3 comments
807.
by 0x0 9y ago
Or maybe random javascript in the browser can stroll upon your ssh private key in the kernel's file cache... and so on.
808.
by 0x0 9y ago
It's not just about malware. It's also really annoying if you need to uninstall a benevolent but buggy kext. And it's quite surprising that SIP+kext is a one way street (you can install while SIP is active, but you can't
809.
by 0x0 9y ago
The point of the article is that there's no documented way to do the SIP procedure in reverse.
810.
The ‘app’ you can’t trash: how SIP is broken in High Sierra(eclecticlight.co)
294 points by 0x0 9y ago|96 comments

More ›