0x0

85 ms·

931.
by 0x0 9y ago
They could offer 32bit app support as an optional download, just like how 32bit Windows 10 still offers the 16bit NTVDM and MS-DOS support as an optional install on demand. Really sucks to lose 32bit support for legacy apps that used to wor
932.
by 0x0 9y ago
Wait what, would they expose the raw SSD pci device to your vm? What's stopping you from scraping all the leftover data from the previous customer?
933.
by 0x0 9y ago
Browsers won't let javascript that's running on a webpage access random TCP ports, at the very least you'd need a server component that could act as an IP proxy for you, perhaps tunneling over websockets.
934.
Optionsbleed bug in Apache HTTPD(openwall.com)
3 points by 0x0 9y ago|0 comments
935.
by 0x0 9y ago
With all the hacks that people have put in place for using .dev locally, who in their right mind would want to even register and use a .dev domain? :P
936.
by 0x0 9y ago
Ouch. To be fair, fonts really do pave the way for malware into your kernel - https://googleprojectzero.blogspot.no/2015/07/one-font-vulne...
937.
by 0x0 9y ago
Interestingly, Facebook did remove its PATENTS clause on another project they have recently - zstd - https://github.com/facebook/zstd/pull/801
938.
by 0x0 9y ago
You can set a separate pin code on the SIM and if everything works as designed, the SIM should be useless without the PIN after losing power.
939.
by 0x0 9y ago
How did you manage to convince yourself it's theirs? Why couldn't they just put it on lite.cnn.com? If you try to look up the whois for cnn.io, you only get: Registrar: CSC Corporate Domains, Inc. Registrar IANA ID: 299 Re
940.
by 0x0 9y ago
Then why is it not on a subdomain of cnn.com? Anyone could copy their logo and their content.
941.
by 0x0 9y ago
ah yes the file that caused apache to kick react out https://news.ycombinator.com/item?id=14779881
942.
by 0x0 9y ago
This is only going to get worse as newer iOS versions drop support for older hardware, especially iPads. It is doubly concerning since Apple bans browsers from the app store unless they just use the iOS-provided webkit engine for, so these
943.
by 0x0 9y ago
It can't possibly be pure coincidence that a major llvm release is timed about one week off from the annual major apple macOS/iOS/toolchain + iPhone hardware release, with their history of employing big llvm contributors?
944.
by 0x0 9y ago
Good point haha. It's basically "The problem with reducing a movie to a single price of admission is different people like different things."
945.
by 0x0 9y ago
No modern browser lets you know the state of a:visited and will lie to you if you query for colors etc. In fact if you can find a way for js to determine if a link has been visited you are likely qualified for $$$ bug rewards (which has hap
946.
by 0x0 9y ago
Just in time for Xcode 9? :)
947.
by 0x0 9y ago
The bigger question is why does a trackpad driver helper need a foolproof way of tracking all process create events? If it is for per-process trackpad preferences, couldn't it just query for the current foreground process at the time o
948.
by 0x0 9y ago
I wonder what the bug is. Could it be a timing or electrical/power-usage side channel attack on the chip making it possible to extract its private/secret key? The linked page near the bottom of the article seems to hint on that: &
949.
by 0x0 9y ago
WebUSB? USB access from JavaScript? What could possibly go wrong. https://googleprojectzero.blogspot.no/2016/02/racing-midi-me...
950.
by 0x0 9y ago
This is interesting. I know that some TLDs have very antiquated, 100% manual management of registrations and transfers, although I wasn't aware that .uk was one of them. So to be fair it might not be eNoms fault. The timeline with over
951.
by 0x0 9y ago
This reflects extremely poorly on eNom and NameCheap. I might consider moving the domains I have with them now...
952.
by 0x0 9y ago
I think it was an interesting article, and if I ever will have to deal with HSBC I'll be sure to think twice and twice over. Bad customer service shouldn't get a free pass.
953.
by 0x0 9y ago
Well, they already have the "-XX:+UnlockCommercialFeatures" command line switch which apparently costs money to use. They might move more stuff behind that flag?
954.
by 0x0 9y ago
It is true that Javascript, like many other languages (Java, Win32 wide chars, etc) has to deal with the problem that they assumed unicode code points could not exceed the integer value 65535, so you have to deal with the surrogate pairs. S
955.
by 0x0 9y ago
I don't think this article is very good. It seems to make the "newbie unicode error" of assuming that strings "have" an encoding (or that strings "are" UTF-8) and thinking of bytes in string. For example i
956.
by 0x0 9y ago
To be honest I am surprised WeChat is even allowed in the iOS app store with its all-in-one multi app experience, since app experiences of that type are explicitly called out as disallowed in the app store guidelines section 2.5.8 - https:
957.
by 0x0 9y ago
You can install gitlab-ci-multi-runner on a machine you control, and you will have unlimited CI minutes. I actually prefer this method because this lets me also write pipelines that depend on internal infrastructure and weird software (or n
958.
by 0x0 9y ago
Not all the time, many airlines even offer on-board wifi with internet connectivity.
959.
by 0x0 9y ago
On almost any system, if you use a compiler to build a binary from source code twice in a row, you will get two different binaries. Simple things like using "__DATE__" and "__TIME__" macros in C, or the linker embedding
960.
by 0x0 9y ago
Note the difference between testflight internal and testflight external.

More ›