Aissen

72 ms·

811.
by Aissen 6y ago
Very impressive cross-disciplinary research, combining chip decapping for side-channel probing, reverse engineering, machine learning (albeit unsuccessful?) and a cryptographic attack. Kudos.
812.
by Aissen 6y ago
Yeah, the title is misguided, it is not the whole story : https://news.ycombinator.com/item?id=25671318 (And as much as I hate the Pi's reliability, I'd still take that bet if it was indeed relying on a Pi).
813.
by Aissen 6y ago
Yes, they say they did all this (and much more) in secondary analyses. I'm curious how does one find the eTables supplementary information ? Edit: nevermind, found it: https://www.bmj.com/content/bmj/suppl&#x2
814.
Python Core Team Member Alex Gaynor Asks Travis CI to Remove His Endorsement(twitter.com)
1 points by Aissen 6y ago|0 comments
815.
by Aissen 6y ago
ARM UEFI systems exist. There are now the norm on servers along with ACPI. Even some embedded devices use UEFI. There are other standards to address those various points. This post is so outdated, that ARM servers' companies had the ti
816.
by Aissen 6y ago
If french is one of your language, state of the art has been Druide's Antidote for more than 20 years. And it has had a Linux version available for almost 15 years, too.
817.
by Aissen 6y ago
And yet one of the reason it achieved such great software support is because it had so much success, despite the non-standard hardware (armv6 at launch, broadcom, no EFI boot, broadcom, no GIC, broadcom, no armv8, broadcom, gpu boots before
818.
by Aissen 6y ago
And you forgot Konqueror with the KHTML engine.
819.
Lockdown: The coming war on general-purpose computing (2012)(boingboing.net)
8 points by Aissen 6y ago|0 comments
820.
by Aissen 6y ago
This is a direct effect of a closed platform (iOS) vs an open one (PC).
821.
by Aissen 6y ago
Weird how this is the exact opposite of Valve's strategy: > For all sales between $10 million and $50 million, the split goes to 25 percent. And for every sale after the initial $50 million, Steam will take just a 20 percent cut. h
822.
by Aissen 6y ago
Also: hire people with strong reading skills. No matter how good your writing or your automation (requiring less writing), sometimes the business processes need long explanations. You don't want people asking around without reading t
823.
by Aissen 6y ago
Update: I have received the procedure for reinstating from GitHub Support: https://twitter.com/Aissn/status/1328610884109938690
824.
by Aissen 6y ago
A "classical disassembler" is like the unix tool cat. An reverse-engineering platform is like an IDE. Both have their use, but you wouldn't write code too much code with cat.
825.
by Aissen 6y ago
I even sidestepped the obvious of loading widevine.so, running it, symbolic execution, etc. It's mostly a thought experiment to show how everything is stupid in the end. I'm afraid in a few months/years, we'll see the ha
826.
by Aissen 6y ago
Other browsers have the key, why would this one be different ?
827.
by Aissen 6y ago
If a program had its own implementation of widevine, why wouldn't you also be "effectively a web browser" ?
828.
by Aissen 6y ago
Wondering what will happen to forks ? Mine is still blocked, and I can't push to it to rebase/merge, removing the tests.
829.
by Aissen 6y ago
Of course you can watch the test streams, but try watching a recent movie from a third party studio and see if it reports the same resolution.
830.
by Aissen 6y ago
When you control the client, it's simple, you can do pretty much anything: embed your own HTTP stack, TLS stack, your QUIC stack, or simply your PKI, or subset of the webPKI.
831.
by Aissen 6y ago
This might also concern you if your app is running on older android devices, and you have a backend that uses letsencrypt certificates, while the app is relying on the system root CAs. A fix for this could be to add Let's Encrypt'
832.
by Aissen 6y ago
It will indeed decrease attack surface by removing (long-term, not day one) SCP protocol support. I'm not even sure gp did read the article on the security history (and unfixed bugs!) of said protocol.
833.
by Aissen 6y ago
According to the article, there's an scp patch in the works (proposed upstream) to use the sftp protocol, it might be tested in Fedora: https://lwn.net/ml/fedora-devel/5c5ff586-c5af-2375-d189-b72d...
834.
by Aissen 6y ago
The settlement would be an excellent idea. Big companies often make deals with governments over large amounts of tax they owe. If the hacker can walk with $50M clean and legal (and let the government have the rest), it's a pretty sweet
835.
by Aissen 6y ago
> - Having it in user space means there’a a good chance we’ll end up with 100s of implementations, all with their own quirks. It’s bad enough trying to optimise for the three big TCP stacks. Big QUIC implementors have all used the intero
836.
by Aissen 6y ago
Correction : the 44 Gbps (5.5 GB/s) is the raw bandwidth, without compression. Compressed data bandwidth is higher, but variable.
837.
by Aissen 6y ago
Even the Nintendo Switch supports (some) USB Ethernet adapters.
838.
by Aissen 6y ago
Even if you have the max of SATA3's 6Gbps, the on-board SSD of the PS5 with hardware compression should load at 44Gbps.
839.
by Aissen 6y ago
It should be possible to re-enable the beep in settings, just like for Google Home devices.
840.
by Aissen 6y ago
Ok, I understand it's secure because of the deno-style permission system, but not necessarily because it can be used to run untrusted code safely (sandboxed engine, like in chromium).

More ›