Sirened

16 ms·

121.
by Sirened 4y ago
> Ublk has a lot of interesting potential, but the current use cases for it are not entirely clear. I wonder how long it'll be before someone merges a cleaner set of APIs for user space drivers to go with this. Android has already
122.
by Sirened 4y ago
eh, I think most of the reason we don't see NV support on most public cloud instances is that nobody has come up with a compelling OSS tool that needs it. afaik most providers disable it because they want to discourage you from sublett
123.
by Sirened 4y ago
Apple Script is a weird but cool feature. There's also another thing called "Remote Apple Events" which essentially lets you use Apple Script over the internet via some weird RPC system. It's super bizarre and I have yet
124.
by Sirened 4y ago
neat :) Love seeing other people building new and weird architectures. I wonder what their actual use case for SMT was, I don't really buy the "one thread for vector, one thread for pulling data into SRAM". I'm also a bi
125.
by Sirened 4y ago
Was Spectre as it's understood today ever enunciated though? Not being combative, legitimately looking for papers here because I've read a lot of ones that talk about using side channels to break kernel security [1] and observing
126.
by Sirened 4y ago
> And never do arithmetic on boundaries definitions like INT_MAX, they are boundaries I'd argue something stronger: if you care about boundaries like INT_MAX, you should never be comparing them using your regular comparison tools. I
127.
by Sirened 4y ago
Sure, scan when definitions change, but as the author notes: > Adload for a period of 8 seconds, once or so each day They're scanning daily irrespective of signature updates, which makes no sense.
128.
by Sirened 4y ago
I'm honestly not convinced any of these vendors are able to do anything about zero days either. They mostly seem to try and catch post exploitation and trying to detect "weird shit" happening post compromise (persistence, exf
129.
by Sirened 4y ago
Right, which is why I'm baffled as to why they'd introduce scanning in 2022
130.
by Sirened 4y ago
this might be dumb, but why do we even use scanning in this day and age? Why not use kernel callbacks which notify when executables and files load for, say, the first time after being modified? Surely that'd be less race-y and waste le
131.
by Sirened 4y ago
It's a CI/CD, not an IDE. If you want to automatically test your code on all devices in a dozen configs on multiple OS versions, you're going to need to buy some fairly expensive hardware and host it yourself, which is not ex
132.
by Sirened 4y ago
not really? It just changes how the compiler emits the x := *(addr + idx) operation where instead of doing something like ldr x, [addr, idx] it just does sub t1, idx, #1 ldr x, [addr, t1] If we're talking about C,
133.
by Sirened 4y ago
There's the clockwork devterm! https://www.clockworkpi.com/ It's a weird product that I can't realistically imagine using but it's cool nonetheless
134.
by Sirened 4y ago
>they'll be able to collect objective evidence that can be verified by 3rd parties. Really? Do you actually think a random person you grab off the street could, on their own, be able to do all the necessary forensic analysis necessa
135.
by Sirened 4y ago
It's just like traditional kernel exploitation. Say you have a classic relative kernel read due to an out of bounds read from a heap object. How do you read secrets that way? Well, you leak the ASLR slide, find a relevant global, and s
136.
by Sirened 4y ago
Depends on the work. I'm always amazed at how long my battery lasts when I'm just doing writing related tasks--I definitely see the two day battery life others mentioned--but anytime I'm touching code or compiling anything I
137.
by Sirened 4y ago
Area-codeless dialing has been dead in many places for ages. My city has had multiple area codes since at least 2000 and so everyone has been providing area codes for well over two decades now. Especially too now that we have people keeping
138.
by Sirened 4y ago
>7yo was making a number guessing game, and to display a two-digit number we had to make two sprites that had 10 "costumes" (0-9) then do modular math to select the costume for each digit This, imo, is what makes Scratch a gre
139.
by Sirened 4y ago
I suspect they are not going to be cheap at all lol, aside from being a very nice hardware package they also have an entire custom hypervisor platform which is intended to be one of the big plusses for the platform.
140.
by Sirened 4y ago
It's not rigorously provable, but to a large extent a "backdoored FPGA" is complete nonsense and not even worth considering. The manufacturer/adversary knows nothing about your core design or where you'll place logi
141.
by Sirened 4y ago
Intel, in a shocking move, has preemptively patched this vulnerability in silicon by deprecating AVX512 months ago :P
142.
by Sirened 4y ago
Yep, it's essentially the same question as the cat vs the lobsters. Most chose to save the cat, and that's not exactly surprising given the western context of cats as companion animals. We just value some lives more than others.
143.
by Sirened 4y ago
> You can swerve onto the sidewalk but I feel like that's not realistic either—when you encounter these sorts of situations in real life, you don't really make a thought out choice because it happens so fast. People swerve and
144.
by Sirened 4y ago
I think a lot of people would also be fully willing to pay not to have to witness five people get hit by a train
145.
by Sirened 4y ago
++, totally. I think a lot of people are linking CPU engineering with SW engineering because they both work with the same product at the end of the day, but the industries are radically different both from a business and culture standpoint.
146.
by Sirened 4y ago
A password manager mitigates other threats that a spreadsheet in iCloud Drive does not, such as a program just directly reading it and ruining your life. And, anyways, password managers give you auto fill which is a significant quality of l
147.
by Sirened 4y ago
fwiw, qemu is not always strictly emulation. On macOS, QEMU supports using Hypervisor.framework as a backend for fast same-arch system virtualization. This is also technically possible on M1 iOS devices (w/ forged entitlements) as you
148.
by Sirened 4y ago
Does it? I remember playing with Codeserver last spring and found the complete lack of basic things like scrolling using the trackpad to be deal breakers. It's neat but mobile safari just was not up to it.
149.
by Sirened 4y ago
It used to be so good five or so years ago, I remember being so excited about it and even writing so nice little scripts in it. It's sad that it's in the state it is now
150.
by Sirened 4y ago
I've just been using iSH. It has regular iOS file providers and you can just use regular ol git. No need for weird software you have to pay for, just permissive open source software all the way down :)

More ›