Retr0id

27 ms·

781.
by Retr0id 6mo ago
It's relevant because connection-level fingerprinting is directly visible to intermediaries like cloudflare.
782.
by Retr0id 6mo ago
> Your screen is 1512 by 982 pixels, rendered at 2x density — which means it is almost certainly a recent, high-end display. Your device volunteered all of this in the first milliseconds of the connection. No it didn't. It was queri
783.
by Retr0id 6mo ago
Comparing the hashes would be one way
784.
by Retr0id 6mo ago
Huh why is this getting downvoted?
785.
by Retr0id 6mo ago
Testing the rxrpc vuln on aarch64, I get a kernel data abort, which is interesting. Not looked into the root cause yet!
786.
by Retr0id 6mo ago
/proc/pid/exe is also easily forged, without root. For example you can do LD_PRELOAD=evil.so /bin/foo on any dynamic executable, or spawn /bin/foo unmodified and inject code via ptrace or /proc/p
787.
by Retr0id 6mo ago
Don't worry, the future will be worse and you'll be nostalgic for the good ol' 20s.
788.
by Retr0id 6mo ago
This reminds me of https://news.ycombinator.com/item?id=47897647 , where a quantum computing demo worked equally well if you replaced the QC with an entropy source.
789.
by Retr0id 6mo ago
I know how the reference exploit works, but that's not the only way to exploit the bug.
790.
by Retr0id 6mo ago
The article does not prove that you can't get root on the host via page cache corruption, just that the specific exploit strategy they tried didn't work.
791.
by Retr0id 6mo ago
In golf, lower scores are better.
792.
by Retr0id 6mo ago
iiuc the AF_ALG interface only offers real performance wins if you have specialized hardware that the kernel can offload computations to. If you're not using that hardware, there's little reason not to do the crypto in userspace.
793.
by Retr0id 6mo ago
That rootless containers mitigate kernel exploits.
794.
by Retr0id 6mo ago
It is, although real ELF golfers consider that a little naive.
795.
by Retr0id 6mo ago
It's a not-fail in the sense that it's working as designed, but there is certainly a failure somewhere - perhaps on the branding/marketing level, since there are multiple products called "SGX" with substantially dif
796.
by Retr0id 6mo ago
I, for one, am not paying them enough money to expect any better.
797.
by Retr0id 6mo ago
fwiw this should work the same for just about all chromium forks - protocol is documented here: https://github.com/chromium/chromium/blob/6eb6252d5671bca378...
798.
by Retr0id 6mo ago
How does comet update itself? Edit: approximately like so: curl -sS -X POST -H 'Content-Type: application/json' -d '{"request":{"protocol":"4.0","updater":"CometUpdater&
799.
by Retr0id 6mo ago
Is "uptodown" really the canonical download page for Comet? A point-in-time view is interesting but it's less useful than a graph over time. Would be fun to add the version shipped in LG smart TVs (hint: it's ancient)
800.
by Retr0id 6mo ago
I recently un-denylisted AI crawler UAs from my blog's robots.txt, for several reasons: - My blog is static content and it costs me ~nothing to serve the requests. - The bots were ignoring robots.txt anyway. - If there's ultimatel
801.
by Retr0id 6mo ago
"non-profit" does not mean it has to run off unicorn farts
802.
by Retr0id 6mo ago
> Intel were able to repeatedly patch and reseal SGX in the wild without needing hardware replacements I take it you haven't caught up on https://tee.fail/ ? (Which has been known as a hypothetical ever since Intel
803.
by Retr0id 6mo ago
It took me a while to grok why this made any sense, I think the context is that this is for hosting many agents as a service.
804.
by Retr0id 6mo ago
Seems cleaned up already?
805.
sRGB profile comparison(ninedegreesbelow.com)
62 points by Retr0id 6mo ago|28 comments
806.
by Retr0id 6mo ago
The whole service might fit in a context window but the details of the system around it will still be relevant.
807.
by Retr0id 6mo ago
With the file-watch APIs is that you don't need to poll at all - free is better than cheap.
808.
by Retr0id 6mo ago
I find it fulfilling to enrich the commons.
809.
by Retr0id 6mo ago
I just fed it my latest blog post draft (475 words), and it got it in one. Even knowing what to expect, I was very surprised!
810.
by Retr0id 6mo ago
One "solution" would be to have an AI rewrite your posts into a neutral style (I hate the idea of this though...)

More ›