0x0

12 ms·

91.
by 0x0 3y ago
So the person claiming to be the founder of "QuantumCA" does not possess the private key corresponding to https://crt.sh/?caid=200960 - can we be sure the private key is only accessible by ssl.com's CA system
92.
by 0x0 3y ago
Someone posted a comment on github claiming they are the founder of Quantum (the sub CA of ssl.com - see https://crt.sh/?caid=200960 ) and that they are the provider of the HiCA service. So it does sound like there is a clo
93.
by 0x0 3y ago
Looks like they are issuing under a sub-CA of "ssl.com" according to https://github.com/acmesh-official/acme.sh/issues/4659#issue... Interestingly, the mozilla dev-security-policy group seems to con
94.
by 0x0 3y ago
They're not that rare. Also, there are a lot of other updates that in practice should be followed up with a reboot. For example, any library consumed by systemd (such as openssl) usually requires pid1 to relaunch. For example, debian r
95.
by 0x0 4y ago
You don't HAVE to use fork() + exec() in Linux as far as I know. There is for example posix_swawn() which does the double whammy combo for you. Also, if you DO use fork() without immediately doing an exec(), and start writing all over
96.
by 0x0 4y ago
It talks about "Internet of Things", in a BBS from 1987, but some quick googling seem to hint that this phrase was invented in 1999 at the earliest.
97.
by 0x0 4y ago
Actually, until a few years ago, browsers did support a rarely used feature for client TLS authentication and the <keygen> html tag.
98.
by 0x0 4y ago
macos 13.3 introduced another dot, a blue dot for location services. Unfortunately it seems to severely interfere with games. For example, playing Asphalt9 from the mac app store, on macOS 13.3, whenever the blue dot appears, which seems to
99.
by 0x0 4y ago
The whole point of a HSM is to never reveal the private key, but instead to have the HSM perform the necessary crypto operation for each request. This wouldn't scale to the amount of ssh traffic I would imagine github sees. I think it&
100.
by 0x0 4y ago
Imagine the amount of ssh connections that github must handle every second, I don't think it's so easy to hold the private key in a HSM while maintaining the necessary performance and availability.
101.
by 0x0 4y ago
What? No. A 60 watt appliance will consume 60 watts for however long it is on. If it is on for 1 hour then it will have consumed 60 watthours!
102.
by 0x0 4y ago
"...a brand new power generation facility that could generate 770,000 kilowatt-hours" - what does this even mean? Did the facility produce a certain amount of electricity and then it had to be shut down, after it had produced 770M
103.
by 0x0 4y ago
Have you checked settings > cellular to see if you might have accidentally denied mobile data usage for that particular app?
104.
by 0x0 4y ago
Another example - where OpenSSH itself was not to blame, but rather PAM - was the old https://www.debian.org/security/2002/dsa-177 Where locked accounts were treated as password-less accounts, and would allow dire
105.
by 0x0 4y ago
That's because direct i/o and device access for VGA card manipulation requires root access, it's not directly relates to file permissions. Same with X11 servers for the longest time (until the kernel started providing APIs fo
106.
by 0x0 4y ago
Well of course it snakes back, and likely beyond debian's inception, your initial c compiler has to come from somewhere.
107.
by 0x0 4y ago
This blog post probably makes more sense if you read the earlier blog post first, about the 32bit time_t doomsday coming in year 2038. http://rachelbythebay.com/w/2023/01/19/time/
108.
by 0x0 4y ago
I remember looking at a few of these cheapo "androidtv" boxes. My instant reaction was that the entire build seemed super shady and I wouldn't be surprised if they were full of keyloggers and malware. Fortunately I never sign
109.
by 0x0 4y ago
I wonder if they kept the ODBC driver installer window with the win3.x-style file tree unchanged, just so they could be compatible with random old legacy odbc driver installer program that might try to programatically automate interactions
110.
by 0x0 4y ago
And then people are going to complain about not getting JIT access is unfair advantage to safari, but then if they do get a JIT entitlement they are going to slack on patching vulnerabilities...
111.
by 0x0 4y ago
Looks like this app is only available in the US and Canada app stores. This link is leading to nowhere: https://apps.apple.com/cn/app/radius-report-news/id152474203...
112.
by 0x0 4y ago
Tesla's acceleration boost upgrade is a one-time fee though!
113.
by 0x0 4y ago
Image Capture.app, which is built in to macOS, is very no-nonsense and works great.
114.
by 0x0 4y ago
Microsoft also changes the kernel syscalls between releases. It's not unusual for operating systems to specify ABI at the libc level, in fact I believe Linux is the odd one out to specify ABI at the syscall level. https://j0
115.
by 0x0 4y ago
Bitcode could never really help with big architecture changes, there's too many #ifdef / #define'd integers and enums that have different values on different platforms, which would cause platform-specific integer values to be
116.
by 0x0 4y ago
Why not link the better final version? https://web.archive.org/web/20210615125241/https://modarchiv...
117.
by 0x0 4y ago
What if a cron.monthly or cron.weekly script calls egrep? Congrats now you get a lot of noise from cron stderr emails in the distant future.
118.
by 0x0 4y ago
Wasn't amd64 windows available since around xp/vista? While windows 10 ships a 32bit version that still contains ntvdm and win16 support...
119.
by 0x0 4y ago
Not on Apple Silicon arm64 macs
120.
by 0x0 4y ago
With UTM, I can already run GUI Linux arm64 on an M1 mac - on macOS 12.x. Works fine at least for 2d desktop stuff. I think UTM's arm64-macos guest support on arm64-macos12 hosts already use the macOS virtualization framework? Or is it

More ›