0x0

90 ms·

841.
From Markdown to RCE in Atom(statuscode.ch)
1 points by 0x0 9y ago|1 comments
842.
by 0x0 9y ago
It's been the official position for quite a while that kernel.org releases - even "stable" ones - are to be considered bleeding-edge, and for it to be the responsibility of distros to do the necessary cooking on behalf of use
843.
by 0x0 9y ago
Relative dates are the worst. So many times I'll see screenshots (useless!), or an old browser tab which stops updating, or I need to see which of two items from last month is the most recent (perhaps only minutes separating them, but
844.
by 0x0 9y ago
Nothing wrong with a device like that - put a keyboard and mouse on the iPad and go at it. But please don't take away the option of having a real computer Macbook for the rest of us.
845.
by 0x0 9y ago
I'm sure we'll see ARM CPUs with native performance on par with x86 soon, but not for running x86 binaries at full speed (i.e. windows/linux VMs).
846.
by 0x0 9y ago
Converging the Mac and the i products sounds like a terrible idea, as long as iOS insists on running non-windowed apps. Serious workloads is very inefficient without a proper windowed desktop environment combined with a Finder and a Termina
847.
by 0x0 9y ago
Isn't it more about just loading cs/ds/es segments with 32bit selectors? For example there's the "heaven's gate" trick on windows to sneak through the wow64 layer directly into the other modes - http:&#x2
848.
by 0x0 9y ago
Why?
849.
by 0x0 9y ago
Does this mean they're also looking to rip out 16bit real mode support entirely from their x86/x86_64 CPUs?
850.
by 0x0 9y ago
It's not the secondary, it's a different kind of service. The faq explicitly says to not mix the two in the same configuration.
851.
by 0x0 9y ago
It's also interesting that they have a public "insecure" DNS server on 9.9.9.10 with none of the additional threat protections - https://www.quad9.net/#/faq#is-there-a-service-that-quad9-of...
852.
by 0x0 9y ago
In the beginning you could post a tweet just by doing a http basic-authenticated post containing the tweet body, and there were unauthenticated rss feeds for most data feeds. These days you have to create app ids, tokens, etc etc etc. It re
853.
by 0x0 9y ago
There is also https://libwebsockets.org/ which, despite its name, works well as a regular HTTP server library.
854.
by 0x0 9y ago
While those are all http client libraries, it would appear this project is a http server library.
855.
by 0x0 9y ago
What are the advantages over Civetweb, from which this project was forked? (Civetweb itself was forked from Mongoose when Mongoose changed its license to commercial+GPL)
856.
by 0x0 9y ago
What's the actual technical thing that happened here? Did they manage to trick Thawte into issuing real SSL certificates for Kaspersky's internet domains?
857.
by 0x0 9y ago
Probably a quickfix attempt to get the site working while waiting for engineering to deploy a proper fix. These tweets seem to trigger some crazy 100% cpu javascript edge case for dozens of seconds on every page load at least on desktop web
858.
by 0x0 9y ago
Here's another one that hasn't been banned (yet) - https://twitter.com/xsimemuero/status/926914609776279552
859.
by 0x0 9y ago
Apparently the long "word" there is some sort of URL set up as [long-domainname][.cc][/long-path]
860.
by 0x0 9y ago
Control of DNS is enough to get a domain-validated HTTPS certificate in seconds.
861.
OpenSSL Security Advisory [02 Nov 2017](openssl.org)
1 points by 0x0 9y ago|0 comments
862.
by 0x0 9y ago
What's defective about the 3.5mm jack? It's worked well for all these years for me and many others until Apple started labeling it "legacy"?
863.
by 0x0 9y ago
I've had major trouble with the fact that the new package-lock.json doesn't sufficiently lock versions. In one working copy you can run "nom install" and everything works with no files or package-lock being changed. Yet,
864.
by 0x0 9y ago
Couldn't somebody decompile the android or iOS app and try to find evidence for one way or the other?
865.
by 0x0 9y ago
Can you imagine the damage done to a CDN if the attacker would supply extremely long Expire/Caching/key-pinning headers? All clients visiting the malicious server would be cache poisoned for a loooong time.
866.
by 0x0 9y ago
On an iPhone 6, if you type quickly, AUTOCApitalization lags and doesn't switch off until after 4-5 characters, which is absolutely mindboggling. The system obviously knows you've typed more than one char, is this thing multithrea
867.
by 0x0 9y ago
One worry that is always on my mind when using ssl/ssh implementations outside the beaten path is that it's hard to know if the crypto is done right. For other types of software it's easy to tell if something is broken - thin
868.
ROCA Vulnerability Test Suite for Infineon RSA Flaw(keychest.net)
3 points by 0x0 9y ago|0 comments
869.
Return of Coppersmith’s Attack: Vulnerable RSA Generation(crocs.fi.muni.cz)
142 points by 0x0 9y ago|22 comments
870.
by 0x0 9y ago
Not the first time OpenBSD does not respect embargoes, for example https://lwn.net/Articles/726585/ and https://lwn.net/Articles/726580/

More ›