0x0

79 ms·

871.
Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 [pdf](papers.mathyvanhoef.com)
65 points by 0x0 9y ago|1 comments
872.
by 0x0 9y ago
I don't know about that, I think getting an early warning that something might affect "all" SSH keys or PGP keys or SSL certificates is quite useful even though no specifics are out yet. It makes it easier to plan for an even
873.
by 0x0 9y ago
So do we have to rotate all SSH keys today as well?
874.
by 0x0 9y ago
Agreeing on 100% of that. Just wanted to point out taking screenshots in windows isn't "harder". (You can also alt-prtscr for just the active window, or use the snipping tool to screenshot a region).
875.
by 0x0 9y ago
You can hit printscreen in windows to take screenshots (1 key instead of 3, even easier than mac). I could imagine it would be useful in remote debugging sessions (such as when inspecting android webviews over USB).
876.
by 0x0 9y ago
I'm guessing there must be other jailbreaks involved to be able to observe and experiment on the ios kernel side of things while developing the wifi chip exploit; going in all blind from the wifi side only sounds impossible. The questi
877.
Privilege Escalation with Kill(-1, SIGKILL) in XNU Kernel of MacOS High Sierra(openwall.com)
17 points by 0x0 9y ago|2 comments
878.
by 0x0 9y ago
Assembly source code is vastly better for modifications compared to a assembled binary? It's not like it's written in a hex editor?
879.
by 0x0 9y ago
Right, I was hoping this new Xcode 9.1 feature could improve upon that for Objective-C as well. Perhaps capturing a copy of the stack when the exception is raised, so it open the main editor window on the appropriate source line where that
880.
by 0x0 9y ago
Oh, I was talking about uncaught exceptions where no breakpoint has been set.
881.
by 0x0 9y ago
Thanks for the tip. It's usually not a problem to figure out what's wrong (the exception is dumped to the debugger), but it's a bit useless that the main editor in xcode switches to an irrelevant disassembly view at the same
882.
by 0x0 9y ago
Right, I feel like I've seen exceptions for a lot of errors ending up with xcode hanging on an exc_bad_whatever disassembly of some sort of main() routine, things like putting nil values in arrays, inconsistent uitableview datasource i
883.
by 0x0 9y ago
Is this the first time a feature is exclusive to swift, and not available for Objective-C? I wish they would offer this for regular Objective-C apps as well. UIApplication is an objc class after all!
884.
by 0x0 9y ago
If you are using /usr/sbin/sendmail style delivery, for example via the built-in postfix implementation on macOS and many linux-like systems, it's fairly easy to configure postfix to rewrite absolutely everything to go t
885.
If macOS High Sierra shows your password instead of the password hint(support.apple.com)
627 points by 0x0 9y ago|354 comments
886.
Uber for iOS granted secret screen recording entitlement(twitter.com)
17 points by 0x0 9y ago|0 comments
887.
by 0x0 9y ago
Ha, I was just going to post that. Launching a DRM platform with the name "PlaysForSure" and then repeatedly making content not play for sure isn't really building trust in your company and branding. https://en.wik
888.
by 0x0 9y ago
Agreeing on those points :)
889.
by 0x0 9y ago
I think it is unreasonable to expect every semi-public coffeeshop style wifi to be operated by someone manually compiling and curating patches for the router firmware every time a vulnerability surfaces. An embargo would have kept a lot of
890.
by 0x0 9y ago
All I know is that I'll have to wait for the various *wrt distros to release updates, because setting up a cross compilation toolchain to build a patched firmware would take me longer than just waiting out for official updates. In the
891.
by 0x0 9y ago
Sometimes, the oss community is able to coordinate patches through an embargo where the commits are hidden until major players have packages ready and staged. I wouldn't mind a 12-24 hour long embargo if that meant conveniently deploya
892.
by 0x0 9y ago
Yeah ok. In case you're still wondering why people use dnsmasq and dhcp, your regime wouldn't work well in most places where visitors expect to just connect and go online.
893.
by 0x0 9y ago
So if you have a wifi network that other people are to use, do you ask them to punch in a manual IP address on their phone's wifi config every time?
894.
by 0x0 9y ago
Currently listed as vulnerable, I'm sure they'll get on it as soon as possible. https://security-tracker.debian.org/tracker/CVE-2017-14491 https://security-tracker.debian.org/tracker/CVE-
895.
by 0x0 9y ago
The big news here is the inclusion of arm and arm64 specific files, which used to be excluded in source drops previously.
896.
by 0x0 9y ago
Bold (nay, courageous!) move to launch a JPEG replacement and not follow up with desktop support. What happens if you edit a HEIF in Photos.app, and perhaps try to share a flattened version via imessage, email or upload to wordpress? Do you
897.
by 0x0 9y ago
I was of the impression that APFS would still default to case insensitive. And if it does change the default to case sensitive, wouldn't it still break apps like Adobe and Steam etc? I mean, if their problem is that they refer to inter
898.
by 0x0 9y ago
Oh, that's great to hear - just the type of data point I was interested in. Might consider this sooner or later then :)
899.
by 0x0 9y ago
With the news of major windowserver glitches causing crazy flickering in Finder, as well as kernel panics for macs with nvidia cards, I think I'll wait this one out.
900.
by 0x0 9y ago
So.. is this specific to macOS 10.13? Or is 10.12.6 also vulnerable?

More ›