bri3d

44 ms·

661.
by bri3d 2y ago
The Bloomberg SuperMicro implant in its various forms is an exceptionally poor example here: it's been widely criticized, never corroborated, and, Apple's Private Compute architecture has extensive mitigation against every type of
662.
by bri3d 2y ago
For what it’s worth, this is a Smart TV (ie, a streaming box) that happens to also be monitor sized. I have no idea why anyone would buy one of these for primary use as a computer monitor, and the marketing and messaging is clear and up-fro
663.
by bri3d 2y ago
For DMA, DMA endpoint buffers will generally be unencrypted and live in the "host domain," outside of the secure enclave running trusted code. This has been used to construct exploits against AMD's Secure Virtualization (whic
664.
by bri3d 2y ago
And Google, in ChromeOS, Android, and purportedly, Google production servers, for around a year and a half, as well. For this reason it's also disabled in several of the kernelCTF configurations and in the ones where it remains (GKE),
665.
by bri3d 2y ago
This must be new as of ~9 months ago; it definitely didn’t used to work on retail dishes (directly purchased dishes came pre activated anyway). Thanks for the correction!
666.
by bri3d 2y ago
For the base subscription types, your account needs to be "activated" with the dish associated, and the address on your account has to match the rough location of the Starlink. This gives you a giant chicken-and-egg problem where
667.
by bri3d 2y ago
Not explicitly; they're a black box with a stated security model where you trust the hypervisor (vs SEV-SNP where you can get some guarantees against it), and attestation in Nitro is built around PCRs rather than the SEV-SNP launch mea
668.
by bri3d 2y ago
This is a weird Easter Egg that's been compiled into real, genuine, uncracked Winamp release builds for a very long time. The actual compiled binary ends up with the same text you see linked there scrambled using XOR (you can see that
669.
by bri3d 2y ago
> PSP was basically a mobile PSOne No? PSOne was a semi-mobile PlayStation 1, but PSP was its own architecture, which was much closer to PS2 than PS1 if anything. It was good at running PS1 games because it used the same vague CPU archit
670.
by bri3d 2y ago
For background on some of the cool stuff here: This isn’t a new PCB with Wii components transplanted, it’s something even weirder - OMEGA refers to a strategy for physically cutting the original Wii PCB in a way that allows it to still work
671.
by bri3d 2y ago
Presumably that's all CDNed and therefore a lot cheaper to serve.
672.
by bri3d 2y ago
They're going from 2+MB (for some reason) to 300KB - even if decompression is "slow," that's going to be a win for their bandwidth costs and for perceived speed for _most_ users. I was surprised to see little server-side
673.
by bri3d 2y ago
Interesting way to approach this (dictionary based compression over JSON and Erlang ETF) vs. moving to a schema-based system like Cap'n Proto or Protobufs where the repeated keys and enumeration values would be encoded in the schema ex
674.
by bri3d 2y ago
A few notes: * Most of these crate engines aren't emissions legal. See: https://www.chevrolet.com/performance-parts/emissions * Some crate engines are emissions legal as "service replacements," if instal
675.
by bri3d 2y ago
No? Any modern disk encryption system with a strong passphrase (basically, anything but default-BitLocker) is very effective against "they have your physical machine and it's off" for any known, current adversary. And, the ba
676.
by bri3d 2y ago
Being able to sniff a key as it transits a local bus is a very different kind of compromise of "trust" than believing that something is preemptively backdoored by a threat actor. It is deeply mysterious that Microsoft don't s
677.
by bri3d 2y ago
> 81k tuners which can each flash any number of trucks Cobb hardware has a 1:1 "marriage" system with a given vehicle. > a full emissions delete on a diesel pickup emits ~300x the pollution of an unmodified vehicle This is g
678.
by bri3d 2y ago
> Why do people install these parts? Do they improve performance somehow? Yes. Most turbocharged cars come from the manufacturer with an enormous amount of left-over power. Many "Stage 1" (no hardware, only software) calibratio
679.
by bri3d 2y ago
The EPA maintain that converting an on-road vehicle to off-road use is illegal, however, by decree rather than legislation. The EPA's interpretation of the Clean Air Act is that any alteration to an emissions control system is illegal
680.
by bri3d 2y ago
Yes. This was already implemented quite a long time ago by Cobb (2022 - they called it Project Green Speed), the settlement is just now becoming public. Many tuners air-gapped their tuning computers and hoarded old AccessPorts. However, in
681.
by bri3d 2y ago
ASML make fancy printers. TSMC and other ASML customers build the designs that let those fancy printers create transistors and then logic gates, as well as a basic library of arrangements for those logic gates (PDK). They also provide all o
682.
by bri3d 2y ago
They've made a statement, however weak: https://archive.is/Rl7Ue “Due to the regulatory uncertainties brought about by the Digital Markets Act, we do not believe that we will be able to roll out three of these [new] fe
683.
by bri3d 2y ago
It's DMA. Certainly part of it is punitive, but it makes sense, too - building and especially supporting interoperability for these protocols is a burden that they can avoid by not shipping features to the EU. They're free to chan
684.
by bri3d 2y ago
See also: https://phyphox.org/wiki/index.php/Smartphones_as_ammeters - I've heard of some physics instructors using this in teaching settings. I'm quite surprised that nobody has made an app which can do
685.
by bri3d 2y ago
This "check the block signature and then read another one" bug is incredibly common. I'd say it's one of the top 5 bugs I see in Validating Things. Other examples of places I've seen this recently include some varia
686.
by bri3d 2y ago
I might just buy one now because I find your wall-power results extremely surprising. My results with basically any mini-PC have been similar between Linux and Windows at minimum idle power; the Windows installs jump up off idle more often
687.
by bri3d 2y ago
A few notes (as someone who is pretty staunchly anti-Pi-as-a-server, I end up having this debate often, and I do think there are reasons to do both): * A Pi will sit much lower in total power consumption than almost any used PCs if both are
688.
by bri3d 2y ago
> Mono has no reason to live anymore This isn't really true. Mono functions as a complete replacement for the ".NET Framework" - something that can be used to run any .NET app, including "legacy" apps targeting o
689.
by bri3d 2y ago
Creating "burner" Facebook accounts is trivial and most public Facebook group discussions are absolutely chock-full of them.
690.
by bri3d 2y ago
> You need to replace your UV-C bulbs every 1,000 hours or so I don't think this should need to be the case. Low pressure mercury arc lamps (253.7nm) last 10,000 hours in water treatment applications - a much more palatable replacem

More ›