bri3d

44 ms·

631.
by bri3d 2y ago
> I have to assume the traffic over the SPI bus is encrypted so the key can't just be dumped like that It's not. For some reason, Microsoft don't use TPM parameter encryption, even though every year or two some security re
632.
by bri3d 2y ago
I don't think you're talking about the same thing as this talk when you discuss "documented." For example, NimBLE (the Apache BLE implementation for Nordic) interfaces with the radio using a high-level, documented regist
633.
by bri3d 2y ago
As I post every time this question gets asked: no. ASML build fancy printers. Buy an ASML machine and you can now etch nanometer-scale features into something. That’s a great party trick. You still need to know what features to print and ho
634.
by bri3d 2y ago
The tooling and infrastructure in this project are pretty interesting as these things go. It's always cool to see how each decompilation project springs up with different ideas and goals - this one seems very focused on 1:1 accuracy, w
635.
by bri3d 2y ago
Maybe the Fire? It looks like a Storm. I don't think they made any resistive Android devices though, even the original Droid was capacitive. I think there might have been one or two OMX devices in this era with locked bootloaders that
636.
by bri3d 2y ago
There are two kinds of thing that are both called eFuse: current-limiting devices which are almost always resettable, and one-time programmed bits which are intentionally one-time programmable (some are implemented as physical fuses which a
637.
by bri3d 2y ago
I am indeed well aware of how firmware validation works. Finding a vulnerability in firmware validation is however much more likely than reversing OTP for almost all varieties of OTP, even NVidia’s firmware validation which is generally reg
638.
by bri3d 2y ago
> You can't lol. How do you wanna restore a blown fuse on nanometer level INSIDE the GPU die. Its simply not possible. I wouldn't dismiss this so aggressively. Frequently (more frequently than not), efuses are simply used as co
639.
by bri3d 2y ago
> exploits in DSPs, not basebands For what it's worth, the DSP this driver talks to is the same type of DSP used in Qualcomm basebands. However, there's actually no strong relevance to DSPs at all here; it's just a broken
640.
by bri3d 2y ago
> - patents, so many patents, because of course it's a global standard that a) isn't open and b) everyone and their dog wants to profit off of This is the only real problem. The other problems are challenging but surmountable e
641.
by bri3d 2y ago
The cameras in your small town are probably https://www.flocksafety.com/ , which are definitely ALPRs. The NYC traffic cameras are to a great extent an anomaly from a bygone era; cameras installed at an exact point in time
642.
by bri3d 2y ago
> SLAM is likely exactly what they were doing on Mars I think the system on Ingenuity just used feature detection based 2D optical flow rather than a more full-scale 3D environment-reconstruction type SLAM setup. Which is fine since neit
643.
by bri3d 2y ago
The latest UAVs also use ToF LIDAR and SLAM for GPS-rejected navigation / inertial dead reckoning correction. I'm not sure that would work well on Mars either, though, as the environment might be too featureless for that approach
644.
by bri3d 2y ago
Besides Silverlight (which was supported all the way until the end of 2021!), you can still not only run but _write new applications_ using all of the listed technologies.
645.
by bri3d 2y ago
What? I agree the move to UEFI added a huge new attack surface and that most UEFI implementations (notably, even the open source ones) are teeming with horrible bugs. And yes, then linking the trust architecture for Secure Boot so deeply wi
646.
by bri3d 2y ago
My experience with very large scale B2B SaaS and PaaS has been that customers like to get money, if allowed by contract, by complaining about outages, but that overall, B2B SaaS is actually very forgiving. Most B2B SaaS solutions have very
647.
by bri3d 2y ago
In 2G/3G networks, IMSI is unencrypted in the initial handshake process while the handset gets a TMSI, so it can very trivially be passively observed, but only at specific points in time. In 5G this is somewhat fixed - the handset use
648.
by bri3d 2y ago
In the US traffic laws are state-by-state. In most states, unlike most European countries, "undertaking" _is_ legal, but, additionally most states still have a "slower traffic must keep right" rule. That's what the
649.
by bri3d 2y ago
Triton ATMs very prominently ran Windows CE and then Windows Embedded Compact, the RTOS one that was also under Windows Mobile, not “full” Windows NT.
650.
by bri3d 2y ago
> It’s pretty shocking how secure those early systems are I generally don't think this is true; most early immobilizer systems were DST80 or Hitag2 based and are broken both cryptographically and practically. The reason enthusiasts
651.
by bri3d 2y ago
Here's some basics about older systems: https://www.researchgate.net/publication/346706377_Dismantli... https://www.researchgate.net/publication/235916472_Gone_in_3... https://blog
652.
by bri3d 2y ago
They just believe that ECU = Electronic Control Unit rather than ECU = Engine Control Unit. Both are accepted terminology in different parts of the industry, although I'd have just used the word "module" instead.
653.
by bri3d 2y ago
Previous discussion: https://news.ycombinator.com/item?id=35452963 I’d say this rates as “midrange” in terms of car theft difficulty. Some cars (very new American and nearly all European cars) use some form of cryptography
654.
by bri3d 2y ago
I think the issue with compression is that they're scraping the online meeting services rather than actually reverse engineering them, so the compressed video stream is hidden inside some kind of black box. I'm pretty sure that fe
655.
by bri3d 2y ago
> If Valve pull up a witch-crafted way to run AAA games on Mac without Apple support that would be an interesting landscape. And maybe would force Apple to re-consider their approach if they don't want to be cornered on their own pl
656.
by bri3d 2y ago
Yes, this is the exact trade from Dieselgate, as well - higher combustion temperatures increase efficiency, reducing CO2 output, but at the expense of much higher NOx production. It’s easily 15% or more.
657.
by bri3d 2y ago
Why Dosbox/Dosbox-X instead of qemu or VirtualBox in general? Dosbox and Dosbox-X focus much more heavily on accurate emulation, rather than fast virtualization. Peripherals are implemented to match the original period-correct hardware
658.
by bri3d 2y ago
No, you’re right, ART now (I think they started using Dalvik, actually, but switched, just like Android itself). I guess I forgot what year it was for a minute there :)
659.
by bri3d 2y ago
Yes, the implementation looks philosophically similar and seems to cleave at the same layer (the interface between app code and platform libraries). Basically, an implementation of everything Dalvik calls out to via JNI and a bionic <-&g
660.
by bri3d 2y ago
You're probably thinking of the Element. There were a lot of reasons it ended up with a rabid fan-base: Honda reliability, available manual transmission, available all-wheel drive. It was overall a really practical vehicle for those wh

More ›