arsome

13 ms·

121.
by arsome 3y ago
So the opening of the dialog happens when user association hash verification fails if I recall correctly. Shell32.dll has the code for it under QueryUserAssocAndVerifyHash I believe. Perhaps they've interfered with the hash interpretat
122.
by arsome 3y ago
Wow that article that completely misses the point, yes, Chrome has better sandboxing, which offers it marginally better security, but that has nothing to do with Firefox's far better privacy features. For people who are not spies or ho
123.
by arsome 3y ago
> no code can be art. For instance, videogames. I feel like this is probably a pretty bad example, generally the "art" in video games comes from things like dialogue, storytelling, level design, graphical art, not the physics
124.
by arsome 3y ago
> What is all this wealth and automation and productivity growth for, then? Why, more wealth and automation and productivity growth to no end of course.
125.
by arsome 3y ago
I just did this the other day and fairly quickly confirmed the crack patch replaced only the RSA key, then they keygen'd the rest. The higher risk thing tends to be downloading cracks from torrents or usenet where there's 3rd part
126.
by arsome 4y ago
Absolutely, but like I mentioned in the prior post, these are local privescs. You basically need to go out and install malicious apps. If you can use Windows without it getting full of malware, you can handle unpatched Android LPEs too. Kee
127.
by arsome 4y ago
The threat was arguably exponentially worse during the XP era - Windows boxes with a huge default attack surface were directly connected with public facing IPs to a 32-bit IP space that could be trivially brute-forced by worms. There's
128.
by arsome 4y ago
To fully patch, yes, but the point is that Play Protect is detecting them before installation before they can be exploited, ie: on submission to Play Store or on installation on devices. Yes, this is still a risk - if you tend to install ra
129.
by arsome 4y ago
A bit silly to link a page about malware that Play Protect prevents, largely local privescs that are being detected by the OS or Google Play beforehand. An average user installing apps from Play Store has nothing to worry about for those. T
130.
by arsome 4y ago
Most code that interacts with the internet is updated via other mechanisms. For example, web browsers are kept up to date via Play Store: Firefox for Android, Chrome and even the embedded WebView are all updated there.
131.
by arsome 4y ago
Yes, it exists, but is it actively exploitable? A cursory search turns up no working exploit code. Given modern exploit mitigations many theoretical vulnerabilities turn out to be nothing-burgers, as far as I can see there's certainly
132.
by arsome 4y ago
Not really - Android has for many versions now been updating the embedded webview component via play services.
133.
by arsome 4y ago
Honestly, unless it's a remote, worm-grade exploit or you're a high value target, you can probably just stop caring about software updates. Your threat model might be different but I don't get out of bed for anything but RCE
134.
by arsome 4y ago
Pixel 2 is not impacted by this vulnerability as it doesn't have a Samsung modem.
135.
by arsome 4y ago
Yeah that was a huge mistake on their part and may have cost them an otherwise excellent cause.
136.
by arsome 4y ago
Too many things in Gitlab feel half-baked, like their requirements feature which is essentially just their issue tracker, no document management, just toss some issues in the bin. And they expect enterprises to pay for it because they check
137.
by arsome 4y ago
Low-level programming is definitely more meaningful, the problem is it fails the HR speak test - they tend to think it means just not very strong programming. Basically, don't put that on your CV unless you know the company doesn'
138.
by arsome 4y ago
Does this actually get 1080p? I thought L3 was limited to 720? L3 is weak enough that you can dump it by just hooking the decoders.
139.
by arsome 4y ago
Tea under Economics and coffee under Technology > Home and family management... some... interesting decisions in here.
140.
by arsome 4y ago
I've barely touched the App Store in the past few years while I used to peruse it regularly. Now instead of browsing for top selling games like I used to, I'm back to using a search engine or reading reddit threads for suggestions
141.
by arsome 4y ago
They have no jurisdiction outside the EU, you can let EU IPs in all you want. I'm sick of people acting like they're some world police. Treat them like the children they are, ignore them.
142.
by arsome 4y ago
Is that a straight period of a day or so or do you do 3.5 hrs/day? How does this work?
143.
by arsome 4y ago
Hydrocarbons work quite well and are (comparatively) minimal impact on climate change. There's been some paranoia about fires, particularly in automotive applications but it's actually a quite small amount needed to do the job.
144.
by arsome 4y ago
That's certainly not a development new since 2010.
145.
by arsome 4y ago
Weird, I've lived with dogs my whole life but have never heard of anyone doing that. Must be cultural.
146.
by arsome 4y ago
IDA's decompiler is only cloud dependent if you have the crappy version, if you have the full Pro version with the add on its entirely local. While it's true that malware could hide well theoretically, I'll also add that in m
147.
by arsome 4y ago
If you're pirating IDA Pro, you're probably the type of person who can figure out which cracks are real and which aren't pretty quick.
148.
by arsome 4y ago
Ah, on the client side not the server, makes sense. I was doing the math as the full IP + port, which would offer 48 bits, but with only one client IP you really only have a client port to play with and you must bind as long as the connecti
149.
by arsome 4y ago
"The theoretical limit is 65k connections per IP address" What's the driving factor for that limitation?
150.
by arsome 4y ago
Learning dozens specific cloud services and shelling out money everywhere I go is way less appealing to me than buying a cheap dedicated server and firing up exactly what I need. It'll take me far longer to figure out what FarGate and

More ›