Aloraman

4 ms·

1.
by Aloraman 7y ago
Well, there is a difference. First, that certain argument (malformed certificate) was not randomly encountered, it was specifically constructed to trigger the vulnerability (Was reverse-engineering involved? I don't know). Second, this
2.
by Aloraman 7y ago
Yes, this is not simple description of a vulnerability, this is almost ready-to-use exploit. Ethics aside, what does it mean for Microsoft and ProjectZero from the legal standpoint? Does publishing of an active exploit make either ProjectZe
3.
by Aloraman 9y ago
I kinda guess this has something to do with System.__Canon type, which is a substitute type for open generic parameter type - there is no benefit in having different canon types per appdomain
4.
by Aloraman 9y ago
Oh crap... yeah. I meant O(N^3) and O(6^M). If both are varied - O(N^M), if both are increasing with same order of magnitude, then complexity can be written as O(N^N) which is O(N! * e^N / sqrt(N))
5.
by Aloraman 9y ago
This is CoreCLR, much younger version of CLR that does not support multiple AppDomains In different open-sourced CLR implementation aka SSCLI20 (aka Rotor) there are similar interactions for type's domain discovery and DynamicClassTabl
6.
by Aloraman 9y ago
Well, if you variate generic arity N, you are going to get N^3 which is exponential. If you variate nest level M, you are indeed going to get 6 ^ N which is 'just' polynomial. However, if you just look upon the code sample, in mos
7.
by Aloraman 9y ago
I've got three results (rover.ebay.*) from DuckDuckGo when I turned on region search. In every region, except "All Regions" and "United States". Yes, even in "United States (es)" there are 3 english result
8.
by Aloraman 9y ago
You cannot forcibly hire someone who would prefer to work elsewhere (if that someone can really work elsewhere, e.g. not be worried with matters of survival and quality of life). This is probably a reason that in a lot of developing countri