H8crilA

32 ms·

481.
by H8crilA 3y ago
Remember when Win95 could be crashed or even rooted just by pinging it the right way? We really have come a long way. https://en.wikipedia.org/wiki/Ping_of_death I also remember SMB vulnerabilities that stayed unpatche
482.
by H8crilA 3y ago
Well, once the bug is identified, yes. I wonder how do you find a bug like that, I guess you keep reading the disassembly of the trapping code until you find the problem. I don't think he could have used QEMU or some other form of debu
483.
by H8crilA 3y ago
It's not meant to be 100% reliable. Also they clearly state that variable length instruction architectures (like x86) are harder to protect. And if you can use something better then great, use it. You can then disable this mechanism.
484.
by H8crilA 3y ago
Wait, it's not about addressability, but essentially about type confusion - typically data that is not actually a code pointer suddenly gets used as such by `ret`. If you are running on a machine that can push an integer but pop it as
485.
by H8crilA 3y ago
Since we're on HN I should also add that the most delay producing part of the plane was, by far, the software. Also, both of my points are important. The very long expected lifespan may be even more important.
486.
by H8crilA 3y ago
The savings are due to the production scale and expected operation time. F-35 is so cheap (amortized) because it is a) bought by everyone and their mother, b) expected to operate for many, many decades.
487.
by H8crilA 3y ago
Omg, finally, waypoints in an entry level drone! Shooting smooth footage by hand is hard, especially if you're planning to speed it up in editing. The camera improvements look nice too.
488.
by H8crilA 3y ago
Soldiers typically use tablets, to have larger screens. With Google Meet or Discord for real time streaming to battalion/brigade command.
489.
by H8crilA 3y ago
How do you achieve actual multiplication? I remember there was some polynomial that you had to divide by, and then every non-zero element becomes invertible? Such pseudo-multiplication doesn't seem to be invertible, as 0b00000010 multi
490.
by H8crilA 3y ago
The ambushed vehicles will run for max a few weeks without maintenance. Then there is ammo of which they use kilotons (thousands of tons), and you obviously can't really capture such a quantity of ammo. Though you can capture some ammo
491.
by H8crilA 3y ago
Yes you can wage guerilla warfare for extended periods of time if the conditions are right - i.e. if you have local support of the population, and someone outside is getting you the guns to harass the official administration / occupant
492.
by H8crilA 3y ago
Your rights do not depend on you being "in character" or not. The only state of mind that affects your rights is insanity. Insert the meme about "finding out".
493.
by H8crilA 3y ago
Luckily individual soldiers without heavy equipment (at least some artillery) are more or less useless in a proper military showdown. Has been the case at least since WW2. ISIS was a good example, they were being quickly defeated by pretty
494.
by H8crilA 3y ago
> So, the physical knots you might think of being useful in various situations have only somewhat of a relationship to mathematical knot theory. No, you can map real world knots to mathematical knots. It is explained in the video, with c
495.
by H8crilA 3y ago
Also, green/virtual threads are overrated, IMHO. Just make system threads, it's not nearly as bad as people think, and it is a lot easier. You will likely want to cap max stack size (so that unintentional large stacks cause crashe
496.
by H8crilA 3y ago
And the upside can be enormous. There's a huge amount of very poor people in India. For example only a few years ago everyone finally got a toilet in their house. Stealing $500 from a slightly demented grandma that is afraid about her
497.
by H8crilA 3y ago
There are different types of creativity. Working in security actually requires a lot of a specific type of imagination/creativity that pretty much isn't used anywhere else.
498.
by H8crilA 3y ago
Completely normal? I don't see how you could expect anything else in a competitive market for any commodity.
499.
by H8crilA 3y ago
Do you know what's the original vulnerability that allowed ROP?
500.
by H8crilA 3y ago
Cool, but this is a technology discussion website, not a personality discussion website.
501.
by H8crilA 3y ago
You can also wait, someone will probably go through the pain of reading this website and write about it in normal English.
502.
by H8crilA 3y ago
Ah yes, the good old 3-way split of organizational hierarchy, and the posturing speech/behavior of the middle layer: https://www.ribbonfarm.com/2009/10/07/the-gervais-principle-...
503.
by H8crilA 3y ago
Fraud is a crime, what good is "insurance" here?
504.
by H8crilA 3y ago
Not just re-uploaded, but also modernized. The old code was over 15 years old and didn't run any more. It's in the first paragraph of the description.
505.
by H8crilA 3y ago
Thanks. Does "coding" also go through the same OBD cable?
506.
by H8crilA 3y ago
Newb question, can I use this to change something in the configuration of the car? I have parking sensors that are absolute garbage (overtriggering all the time), and I would like to permanently turn them off. The turn off button works only
507.
by H8crilA 3y ago
Don't they need an extremely accurate clock though? GPSDO or even a small atomic clock. The phase/frequency differences must be tiny.
508.
by H8crilA 3y ago
0-click 0-day costs more like $2M (from other comments and links in this thread).
509.
by H8crilA 3y ago
It is mostly quite primitive, but it also works amazingly well. For example ILS or VOR or ATC audio comms can all be received and read correctly using hardware built from entry level ham radio knowledge. Altimeters still require a manual in
510.
by H8crilA 3y ago
Ugh, you are right. That was a bit embarrassing :)

More ›