amenghra

32 ms·

391.
TPM Sniffing(blog.scrt.ch)
104 points by amenghra 5y ago|64 comments
392.
by amenghra 5y ago
I believe this will fix a ~14 year old bug. Browsers have been punting on dns rebinding forever. Initially documented by Collin, here are two threads: Paper: https://crypto.stanford.edu/dns/dns-rebinding.pdf Chrome: h
393.
ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough(wiz.io)
3 points by amenghra 5y ago|0 comments
394.
by amenghra 5y ago
Both players had already qualified for the next round. It’s also a rapid tournament. The stakes weren’t high which allowed them to goof around a bit. It was probably good publicity for chess & both players.
395.
by amenghra 5y ago
Would be interesting to compare it to siphash.
396.
by amenghra 5y ago
Related to Japanese time keeping, https://en.m.wikipedia.org/wiki/Japanese_clock is a fun read!
397.
by amenghra 5y ago
https://www.terraformation.com/blog/trees-are-a-faster-solut...
398.
by amenghra 5y ago
Onshape is a good combination of visual + you can set exact values for things. I’m always happy to try new tools, but I tend to fallback to Blender for artsy stuff and Onshape for more precise parts. I suck at 3d modeling, so I evaluate too
399.
by amenghra 5y ago
The last page is a little amusing. Whitfield Diffie did quite a bit more than just being Sun’s CSO. Same for most other co-authors.
400.
by amenghra 5y ago
Doesn’t look as cool as Tesla’s Semi, but it’s going to be on the roads starting next week. They seem to use a 30% larger battery?
401.
Four Swiss pioneers present electric trucks with unique battery capacity(designwerk.com)
2 points by amenghra 5y ago|1 comments
402.
by amenghra 5y ago
Meccano might work too? Not much cheaper than Lego but they have their pros and cons. The pieces are flexible for one.
403.
by amenghra 5y ago
> X stars on Github If the runtime gets embedded in other pieces of software, the impact is a lot more than X stars on Github. You'd need to recursively count all the dependent repos. (Ignoring the fact that you can’t simply measure
404.
by amenghra 5y ago
Imho their reputation is burned. People don’t pay attention to ownership changes or the fact that they stopped that practice (especially since they haven’t redesigned the site much, still looks and feels like the old crap).
405.
by amenghra 5y ago
Fun to see a bunch of VM/JIT security articles and then a string format thing…
406.
by amenghra 5y ago
(Partial) cached copy: https://web.archive.org/web/20211005123424/http://phrack.org...
407.
by amenghra 5y ago
Square’s past CTFs puzzles are all available as Docker images. I believe all the puzzles have published solutions. Start here: https://squarectf.com/ If you want to submit fixes to the above site ping me or open a PR here:
408.
by amenghra 5y ago
Just harvest the hurrican’s windpower /s
409.
by amenghra 5y ago
Facebook’s csrf cookie and token are named dtsg. I hope that’s not the only reason you would also consider working for them.
410.
by amenghra 5y ago
Original graphical program from 1976 running in your browser: https://www.quaxio.com/kaleidoscope_part1/ Granted way less cool than Empire since it’s only a handful of bytes.
411.
by amenghra 5y ago
Cricket can be turned into powder which then becomes flour for baking protein-rich goods. Doesn’t have to look like a hot dog.
412.
by amenghra 5y ago
https://en.wikipedia.org/wiki/Fantastic_Voyage
413.
by amenghra 5y ago
Correct. You want to set Content-Type and X-Content-Type-Options. The story is that in some cases, Internet Explorer could be tricked to ignore the Content-Type header. Instead of fixing the core bug, Microsoft decided to add a header (pres
414.
by amenghra 5y ago
menu bar application built with Electron No, thank you!
415.
by amenghra 5y ago
I have come across devices which would only work on specific slots. There’s clearly a gap between theory and practice…
416.
by amenghra 5y ago
https://en.wikipedia.org/wiki/Survivorship_bias
417.
by amenghra 5y ago
I'd rather have them row, run, play soccer, surf, and so many other options This. While all sports can lead to injuries, there are so many enjoyable sports with lower injury risks out there. I'd rather teach my kids activities t
418.
by amenghra 5y ago
Reminds me of the good old “imagine a beowulf cluster of these” jokes. For those who don’t remember, the origin of the joke came about shortly after the first beowulf clusters were announced - thereafter every time a new computer was announ
419.
by amenghra 5y ago
Historically, it would have been weak since Java/Flash gave you more control over sockets than what’s available with js. In today’s world, it might be ok. I would personally build defense in depth and not just rely on one weak property
420.
by amenghra 5y ago
With modern browsers, there are almost a dozen ways to defend against csrf. You can use sessionStorage and force all requests to be XHR. Set the “new” flag on session cookies to not transmit cross origin. Check the origin header for all POS

More ›