akyuu

30 ms·

631.
Tsffs – A fuzzer for UEFI, Kernel, firmware and BIOS(github.com)
3 points by akyuu 3y ago|0 comments
632.
Sandboxing ImageIO media parsing in macOS(rtx.meta.security)
2 points by akyuu 3y ago|0 comments
633.
iOS 17: New Version, New Acronyms(df-f.com)
3 points by akyuu 3y ago|0 comments
634.
by akyuu 3y ago
I have serious doubts about how comprehensive this support will actually be, especially regarding firmware updates and non-Google vendor commitment. There is a wide variety of Chromebook hardware manufacturers, and most of them don't h
635.
Fuzzing image parsers on macOS with Jackalope(github.com)
2 points by akyuu 3y ago|0 comments
636.
by akyuu 3y ago
There is plenty of software written in memory-unsafe languages that interacts with untrusted input: browsers are the most prominent example, but also email clients, media players, PDF viewers, archivers, IRC clients, torrent clients... not
637.
by akyuu 3y ago
There are several existing options: - Windows: Simplewall (uses native WPF for filtering), Portmaster (interactive firewall, uses custom kernel extension). - macOS: LuLu or Little Snitch (they all use a native filtering API, which unfortuna
638.
by akyuu 3y ago
Do you have a source for that? AFAIK Pixel 7 uses an ARM v8.2 CPU, which doesn't support MTE. The upcoming Pixel 8 might support it, but Google hasn't announced anything yet.
639.
by akyuu 3y ago
Not really. Even with modern technologies, the Linux desktop technology stack is very, very far behind when it comes to security. The Linux kernel itself is a very weak foundation security-wise, the only way Android and ChromeOS get away wi
640.
by akyuu 3y ago
The business model is simply selling the game (typically in a $10-60 range), and sometimes additional DLC (downloadable content). There are many games by independent developers on consoles, too. For example, Nintendo regularly releases &quo
641.
by akyuu 3y ago
Nintendo consoles seem to provide the experience you're looking for. Clean and curated games with no ads or subscriptions. And the games tend to be of higher quality, focused on actual gameplay as opposed to the dark patterns common on
642.
Why Not Matrix?(telegra.ph)
4 points by akyuu 3y ago|0 comments
643.
Code Vulnerabilities Put Proton Mails at Risk(sonarsource.com)
1 points by akyuu 3y ago|0 comments
644.
by akyuu 3y ago
> I haven’t noticed any difference with web content either, but I also use Firefox / Chrome instead of Safari Lockdown mode only affects Safari. If you use another browser, it doesn't make any difference. Here are some features
645.
by akyuu 3y ago
I'm not sure, but I think CFI also requires building Chromium as a single binary with LTO, and this has extremely high memory requirements that their build infrastructure might not be able to handle. Also, I think some distros use GCC
646.
by akyuu 3y ago
IMO the browser is far too important to use third-party builds containing patches that don't receive serious audit. For example, the Chromium packages provided by the vast majority of Linux distros disable security features like CFI (c
647.
A tool for checking the security hardening options of the Linux kernel(github.com)
2 points by akyuu 3y ago|0 comments
648.
RSoC: Virtio Drivers(redox-os.org)
3 points by akyuu 3y ago|1 comments
649.
Memory Tagging: A Memory Efficient Design(arxiv.org)
1 points by akyuu 3y ago|0 comments
650.
Enhancing Chromium’s Memory Safety with Armv9(community.arm.com)
1 points by akyuu 3y ago|0 comments
651.
Star Labs StarFighter Overview: 16 inch 4K Coreboot/Ryzen Linux laptop [video](youtube.com)
3 points by akyuu 3y ago|0 comments
652.
Boom, bust and adjust: offensive cybersecurity industry trends and updates(medium.com)
2 points by akyuu 3y ago|0 comments
653.
Safari Un-Intelligent Tracking Prevention: Data Loss by Design(lapcatsoftware.com)
4 points by akyuu 3y ago|0 comments
654.
by akyuu 3y ago
NextDNS and AdGuard DNS are just DNS providers that return filtered results for ad-related DNS queries. Their filter lists are public: https://github.com/orgs/nextdns/repositories?type=all https://githu
655.
by akyuu 3y ago
You can also use a declarative adblocker like uBlock Origin Lite [1], which only provides the browser with a list of elements to filter, but doesn't have any permissions to read content or perform requests. Or simply use your hosts fil
656.
by akyuu 3y ago
You might find this interesting: https://www.memorysafety.org/blog/sudo-first-stable-release/
657.
The First Stable Release of a Memory Safe Sudo Implementation(memorysafety.org)
4 points by akyuu 3y ago|0 comments
658.
Understanding the Web Security Model, Part VI: Browser Architecture(educatedguesswork.org)
1 points by akyuu 3y ago|0 comments
659.
NoFilter – Abusing Windows Filtering Platform for Privilege Escalation(deepinstinct.com)
2 points by akyuu 3y ago|0 comments
660.
Pake: Turn any webpage into a desktop app with Rust(github.com)
2 points by akyuu 3y ago|0 comments

More ›