Deregibus

9 ms·

31.
by Deregibus 11y ago
You would use techniques that are conceptually similar to responsive web design to deliver a UI that is appropriate for each of the supported devices. I assume this kind of thing has already been done for years for phone/tablet apps,
32.
by Deregibus 11y ago
In addition, AFAIK this affects both the ARM and x86 firmware, so a patched binary would imply two separate modifications. Though that would still leave open the possibility that the toolchain was exploited before compilation occurred.
33.
by Deregibus 11y ago
It would have been something that already existed in the string table for the binary, so you would have just been referencing an address and not inserting a string inline.
34.
by Deregibus 11y ago
It'll be interesting to see a more in-depth look at the code surrounding this and some theories on how it could have been implemented in a way that avoided obvious detection. The naive assumption is that someone just added to the code
35.
by Deregibus 11y ago
It's not dereferencing NULL that causes the segfault, its the actual reading or writing of the memory at the invalid address. So, ignoring undefined behavior etc, "* ptr;" doesn't actually generate a load or store since
36.
by Deregibus 11y ago
> Which means the NFL is going to have to find someone else (there is no one else) Except NBC, CBS, FOX, Yahoo (hah), and the NFL itself via NFL Network, all of which already have contracts with the NFL which are worth more combined than
37.
by Deregibus 11y ago
Agreed, this seems to conflate sports in general with the specific issues faced by sports-entertainment complex that is ESPN. The dramatic increase in the valuation of sports is largely due to it being one of the few remaining forms of ente
38.
by Deregibus 11y ago
You're referring to something like? objA.funcA().funcB().funcC() I believe the issue is that it cannot easily be extended with new functionality since all of the methods must be members, whereas operator| can be defined as a f
39.
by Deregibus 11y ago
No, I don't think you can extrapolate that, those seem like entirely unrelated issues. Neither of those points imply an overly broad law that only works based on the trust and restraint of the government.
40.
by Deregibus 11y ago
Even assuming the insecure "choose 1 of 3" was for example, I don't really understand how this is better than e.g. a 4-digit numeric code? It seems like this kind of authentication could be provided by the OS. I'm prett
41.
by Deregibus 11y ago
A change pulled into the main codebase is a change that you don't have to merge every time you upgrade. Given the speed and scale of these releases the time saved adds up quick.
42.
by Deregibus 11y ago
FWIW, as part of trying to get some crap Sony laptop drivers working with Windows 10 I installed a clean copy of Windows 8.0, didn't install any updates, then upgraded to Windows 10 via an iso loaded on a USB stick. I didn't even
43.
by Deregibus 12y ago
For security purposes, it would probably be best to have something that hashes the key and displays it in a more human-parsable format like an identicon for verification. For a terminal, a generated phrase or sentence might be the best way
44.
by Deregibus 12y ago
Wouldn't this just enforce the existing ad preferences? Say the ad networks determined that you're looking for a car. They then start showing you car ads, this software clicks on them, and now they think that you must really, re
45.
This App Teaches Millennials About the World Before They Try to Change It(wired.com)
2 points by Deregibus 12y ago|0 comments
46.
by Deregibus 12y ago
So don't bother trying to make it better because it can never be perfect? There are multiple orders of magnitude difference in the effort needed to completely rewrite an entire API implementation in this other language vs. adding some
47.
by Deregibus 12y ago
Very cool. Anonymous types can be really handy in C#, especially when dealing with LINQ to objects code. This looks like it could be a similar fit.
48.
by Deregibus 13y ago
Cool idea, a couple notes after trying it out. - Despite the save and delete buttons being big and obvious I looked right past them the first time I entered data and lost all of my entries. I expected that it would just save automatically
49.
by Deregibus 13y ago
I think the implication is that since void output(std::string const &msg); takes a const reference, that function cannot change the value of msg. What the function does not know is whether or not anyone else outside of the function cou
50.
by Deregibus 13y ago
It's a career limiting move in the same sense that my career as a doctor is limited by the fact that I didn't choose to go to medical school. There's no evidence that any of his opportunities outside of making violent shooters have been li
51.
by Deregibus 13y ago
He originally wrote it back in December: http://www.charlesncox.com/blog/2012/12/why-ill-never-work-o...
52.
by Deregibus 14y ago
He appears to be referring to the writing of benchmarks. Specifically for those in which functional programming excels over imperative (for example undo support), it becomes a significant undertaking to write the C version so it just doesn
53.
by Deregibus 14y ago
That puts the onus on the user to immediately log in after receiving the temporary password. Until they do (which could be months later), they have their password to the site stored in email. The DoS issue that was mentioned in the next p
54.
by Deregibus 14y ago
It's really a question of how time factors into your accounting. If you're spending 10 hours to make $50, then it's tough to claim that as a $50 profit unless your time is worth less than $5 an hour. Of course there are cases in which your
55.
by Deregibus 14y ago
Not at all. When learning any new programming language there's going to be a period where you're working by trial and error. Removing compile-time typing generally means less syntax to learn which makes the feedback loop tighter which I w
56.
by Deregibus 14y ago
49 undergraduate students working independently on a small project over the course of a single week using a previously unseen language with no consideration of the performance or maintainability of the resulting code. I can't see how there
57.
by Deregibus 14y ago
The Xbox 360 and PS3 processors are very similar, one main difference is the PS3 (ignoring SPUs) is single-core with two hardware threads while the 360 is triple-core with two hardware threads per core. I would imagine that if you locked t
58.
by Deregibus 14y ago
The key argument here is the same as Microsoft's previous issues with undocumented APIs. I think it's fairly clear that Microsoft wants Windows RT to be an iOS and Android competitor, not "Windows 8 on ARM". If you subtract the Classic mo