als0

73 ms·

901.
by als0 8y ago
Beyond even. A while ago Debian dropped support for Alpha, IA64 and PA-RISC. Even SPARC isn't supported anymore. https://www.debian.org/releases/stable/i386/ch02s01.html.en
902.
by als0 8y ago
Can anyone summarise how this is different from Barrelfish?
903.
by als0 8y ago
Indeed. Since Apple controls the full hardware and software stack, it's not surprising that they are making their own security chip without any of the ugly downsides of TPM (TPM has more complex interfaces and logic that try to cover a
904.
by als0 8y ago
> CPUs aren't just beefy microcontrollers and they require some extra onchip hardware, but no one has done that yet for some reason For example, Graphics, Bluetooth, Wi-Fi, modem, are all heavily encumbered with patents. Very comple
905.
by als0 8y ago
To me an interrupt is a signal. They can be as complex or as simple as one desires. I'm unsure that concept can ever be replaced. Interrupt controllers, on the other hand, are very complex, which may warrant different abstractions some
906.
by als0 8y ago
They have ported FreeBSD to CHERI to have a real world system demonstrate all the features. This includes existing applications to show the tradeoffs between hybrid mode and full use of capabilities. Interestingly, there is a section in the
907.
by als0 8y ago
MINIX predates L4 and has evolved independently. Unfortunately, L4 and microkernels in general have (unfairly) gained a bad reputation in some circles, stemming from some projects in the 90s that ended in spectacular failure. Examples inclu
908.
by als0 8y ago
There are two notable projects here: L4Re is a (reasonably) portable L4 userspace environment and has a large collection of ported libraries (e.g. zlib etc). Fiasco is the L4 microkernel they have developed for many years. It is different t
909.
by als0 8y ago
I have this problem too with Chrome on macOS. Refreshing the page makes it appear, but this happens frequently enough to be annoying.
910.
by als0 8y ago
I remember when Pidgin OTR worked fine with the old Facebook Chat, which I believe was based on the XMPP protocol. The move to Facebook Messenger deprecated this API and I don't think it works anymore. In the case of Caprine, it appear
911.
by als0 8y ago
Only SMM drivers run in the proverbial "ring -2". Ordinary UEFI apps run at the same privilege level as the host OS (0), just like any bootloader.
912.
by als0 8y ago
About as safe as other managed languages...the security here is dependent on how well implemented the sandbox is.
913.
by als0 8y ago
And TRR itself is not sufficient. From the paper "The idea of TRR is to refresh adjacent rows if the targeted row is accessed at a high frequency. More specifically, TRR works with a maximum number of activations allowed during one ref
914.
by als0 9y ago
There was a mechanism whereby you could transfer the current web page (or video) on your phone to your tablet, simply by placing the phone on top of the tablet. This was back in 2011. I think the Handoff feature in iOS is similar (although
915.
by als0 9y ago
This flaw only affected generated RSA keys, ECC keys should still be OK. Yubikey provided an excellent service for replacing their products when I went through them. However, I hear the story is quite different if you bought one via Amazon.
916.
by als0 9y ago
Bill Hewlett and Dave Packard's office still exists at the HP headquarters in Palo Alto. It's an absolutely pristine office that looks like you've stepped back in time to the 1960s. It's kept very well and acts like a mu
917.
by als0 9y ago
Your second link says something different. He refuted the phrase "Gitlab is a software product used by 2/3 of all enterprises", which would have been a far bigger claim than "self-hosted Git market".
918.
by als0 9y ago
Does a modern laptop still depend on CMOS battery for anything other than an RTC? I thought all BIOS variables today are stored on SPI flash.
919.
by als0 9y ago
It could be the case that one group found out about the other's work and decided to pursue a similar research direction with the hope of being first to publish.
920.
by als0 9y ago
That doesn't seem completely fair. The ARM Cortex-A75 is affected. Furthermore, the A72 and A57 also suffer from a different variant of Meltdown.
921.
by als0 9y ago
Except that ECC is insufficient because some Rowhammer attacks can flip more than two bits per memory word. The proper mitigation seems to be TRR (target row refresh).
922.
by als0 9y ago
Assuming the compiler knows what it's doing :)
923.
by als0 9y ago
ARM is an option as long as you have control over the TrustZone code, and some manufacturers give that to you. You'd probably have to rule out the large SoC vendors, though.
924.
by als0 9y ago
Personally, don't think it's worth turning off proper signature checking in exchange for shaving off 100MB of proprietary code.
925.
by als0 9y ago
Note that this doesn't seem to be an issue with TrustZone itself, but on the operating limits of the regulators for some vendors.
926.
by als0 10y ago
Yet another example where SELinux could have mitigated this effect.