0x0

13 ms·

181.
by 0x0 5y ago
If you create a custom SSL CA, you can add that CA to your ios devices and simulators, and they will trust your backend served with an SSL certificate issued by your custom CA, no app modifications needed. (On modern Android, this does not
182.
by 0x0 5y ago
That you (and many others apparently) had the impression that docker was cross platform says a lot about docker's markering, considering docker as far as I know it is a wrapper for a series of extremely linux-kernel-specific APIs. :-&#
183.
by 0x0 5y ago
Interesting concept but seems to require custom android-specific kernel modules (ashmem, binderfs), which means the android containers aren't very containerized but leak into the host kernel.
184.
by 0x0 5y ago
Java is terrible in this regard, as most file APIs use "java.lang.String" to identify the filename, which most of the time depends on the system property "file.encoding". With the result that there will be files that you
185.
by 0x0 5y ago
... whose hex representation is 00 Also, "JAM". Really.
186.
by 0x0 5y ago
Does the assembly listing look sensible to anyone? It's been a long time but to me it looks like the disassembly of random bytes. "Jam rts"? "Nop $60"? "Brk brk sta Routine_0c86"? And a ton of raw un-assem
187.
by 0x0 5y ago
The "5 commits ahead" are literally only replacing the license and the readmes.
188.
by 0x0 5y ago
Even with TLS, that is usually handled by issuing STARTTLS on TCP port 25. I can't find anything in the RFCs mentioning server-to-server smtp delivery happening on anything but port 25? Do you have a reference for that? In fact, even t
189.
by 0x0 5y ago
If you want to deliver email to other domains then you need to connect to port 25 on the destination domain MX server. As far as I know, best practice for the other ports (465, 587) is to require authentication and to reject anonymous submi
190.
by 0x0 5y ago
Doesn't self-modifying code cause massive cache flushes and stalls on modern x86 archs?
191.
by 0x0 5y ago
Yeah nmap can often be used to fingerprint OS versions for those reasons. Way back in the days around y2k many network stacks had poor or no randomization of some parameters that produced some neat looking plots: https://lcamtuf.
192.
by 0x0 5y ago
Isn't that a little rich, considering a lot of GNU software itself started as a reimplementation of proprietary UNIX applications under a different license.
193.
by 0x0 5y ago
Experienced something similar here. NodeJS node-sass would crash with "rdrand failed". Super weird experience to have to apply a BIOS update to fix a node_modules build failure, but that's 2021.
194.
by 0x0 5y ago
Well they seem to add vnc and netcat shell listeners to the startup scripts so it is kind of backdoored on purpose already outside of what's in the iso
195.
by 0x0 5y ago
The kernel memory usage would only show up with ever-increasing numbers in "sudo zprint", it wasn't visible in activity monitor
196.
by 0x0 5y ago
Sounds very similar to the macOS 10.15.6 release, which had a horrible kernel memory leak. It was especially visible when running virtual machines. After a few hours the kernel memory pressure was so high that it would oom kill every usermo
197.
by 0x0 5y ago
Well back in the days of java applets, running un-sandboxed was considered a "feature" of code-signed applets... and you could then do a loadLibrary of a bundled native .dll and go wild
198.
by 0x0 5y ago
Interesting, thanks for running it. And yes I guess I got confused with the hour wildcard. So I guess the takeaway is to avoid non-wildcarded hours such as 0-23 or 0,1,2,3,4,5,6,7
199.
by 0x0 5y ago
Huh, it's quite surprising to see the concurrent runs at 02:00 for multiple instances. I guess this can cause quite a bit of weirdness if you use a spec like "5,17,32,47 * * * *" (to avoid the "thundering herd" of c
200.
by 0x0 5y ago
There used to be a secret url param to only show friends posts, no pages or groups. It was heavenly.
201.
by 0x0 5y ago
There are other options. For example, a full e2e encryption system where only the user owns the keys and nothing is scanned. This is already possible today with any general purpose computer.
202.
by 0x0 5y ago
Scary choice of freedoms and liberties for citizens you are willing to give up there.
203.
by 0x0 5y ago
So you want to just throw out the whole separation of powers concept?
204.
by 0x0 5y ago
2048-bit AES encryption? Considering AES usually is 128bit and sometimes 256bit, that's a tall order. In fact, can you even call it AES with a straight face if you are dealing with 2048bit keys? AFAIK the AES standard only covers 128&#
205.
by 0x0 5y ago
- it's a great way to be sure binaries aren't backdoored or built from unofficial sources - in general if you want to do additional development on a piece of software, it's useful to validate that your build environment is se
206.
by 0x0 5y ago
Because otherwise you can come and build me a website and I can gift you $10k and wow nobody needs to pay income tax anymore?
207.
by 0x0 5y ago
If you keep 10% and return 90% you still need to report the 10% to the IRS.
208.
by 0x0 5y ago
True but it is complicated by the fact that code signing is generally enforced for executable segments. (JIT compilation entitlements are generally not available to apps beyond Apple's own MobileSafari builds)
209.
by 0x0 5y ago
There is no way they could prove that an app HASN'T exploited this. They don't get source code, only compiled binaries, and with objective-c's extremely dynamic nature, any app could technically receive a HTTP response contai
210.
by 0x0 5y ago
If you're watching a live stream, there won't be all that many seconds you can buffer.

More ›