bri3d

49 ms·

811.
by bri3d 3y ago
One CVE is in Wallet and Citizen Lab mention PassKit. My guess is that BlastDoor deserializes the PassKit payload successfully, then sends it to PassKit which subsequently decodes a malicious image outside of BlastDoor.
812.
by bri3d 3y ago
While your points are all valid theoretically, keeping stuff off of developer filesystems can still help a lot practically. This attacker probably (it's unclear, since the write-up doesn't tell us) scanned compromised machines for
813.
by bri3d 3y ago
If the patch is distributed on its own, without the original binary, is it still a derivative work? Is the unique, creative work of writing "perform XYZ instruction at XYZ address," in lieu of the original executable, still deriva
814.
by bri3d 3y ago
Yes, this was a common copy protection in old games! There's a big list on mobygames here: https://www.mobygames.com/group/9360/games-with-manual-looku...
815.
by bri3d 3y ago
Garmin watches have an SDK with their own entire goofy "Monkey C" language and an entire bytecode VM to run it. It's not "hidden" I guess (there's an app store), but neither was this Timex one. https:/&#x
816.
by bri3d 3y ago
There wasn't a password necessary, the TPM was an unlocking mechanism. Secure Boot with TPM-backed disk encryption works off of a series of numbered hashes. The idea of TPM based FDE is that the machine will use Secure Boot to boot onl
817.
by bri3d 3y ago
I always love these articles. I hadn't read this one yet even though it looks like it came out in early 2020. I think it might be worth a paragraph or two about the innovative use of MEMS gyros and accelerometers in the Wiimote, Motion
818.
by bri3d 3y ago
Right. DJI's FPV video link has around 60mbit capacity, 50mbit used for video in stock form. I think Walksnail is similar. For FPV/"freestyle" cinema and even FPV YouTube videos, the onboard cinema camera will be totally
819.
by bri3d 3y ago
Good high-resolution specialized video-codec based (H.264 / H.265) digital FPV video systems like Walksnail or DJI hover at around 30ms of latency glass-to-glass. Analog systems used in racing are at around 15ms glass-to-glass, with mo
820.
by bri3d 3y ago
I'd say it's a combination of both. Just like in auto racing, some people are really good at flying "seat of the pants" or "reading the course" and adapting to a new layout gate-to-gate, while other pilots are
821.
by bri3d 3y ago
I think that the idea of using the residual model (trained on high-resolution outside-in pose estimation) to correct the inside-out model is particularly interesting because it might actually be possible to generalize; if the kinematics res
822.
by bri3d 3y ago
I'd probably choose a much more compute/graphics focused SoC for a games console, like almost any smartphone SoC or even an APU. These STM32MP parts are designed for devices with realtime needs and real-world interface requirement
823.
by bri3d 3y ago
A set of Python scripts... more like a set of 6502 assembler routines integrated into a disk imaging app with a highly cursed build process! 4am is ridiculously prolific. The sheer number of bizarre disk-copy protection schemes applied on t
824.
by bri3d 3y ago
I'm curious the actual mechanics of this operation. The main primary-source I found is a Telegram post of an Aeroflot pilot memo [0], but this only discusses the side-effects of reverser only braking, not the mechanics of "disabli
825.
by bri3d 3y ago
I think software iLok used to work if it were licensed to the yabridge environment; whatever device identity parameters it read were implemented in WINE. For hardware iLok and other stuff, yeah, you're pretty stuck, they usually use go
826.
by bri3d 3y ago
Conceptually the idea of a "VST" works on either platform, because VST is an API. However, VSTs are distributed as executables targeting a specific platform, and almost no VSTs are compiled natively for Linux. If you're alrea
827.
by bri3d 3y ago
Additives labeled P-21-0152 and P-21-0158 are the specific substances with the extreme cancer risk as modeled, I think? These appear to be complex hydrocarbon byproducts of plastic, so it's extremely difficult to model what they are or
828.
by bri3d 3y ago
All of the tools needed to do this are already there. However, maintaining this kind of project would be a thankless task riddled with bad users, regulatory/legal issues, and isn't likely to build a strong community for various re
829.
by bri3d 3y ago
Kinda, sorta? This is like saying "a computer is not enough, you need a binary." What's here is the source code in Verilog. Once this is compiled by a Verilog toolchain, this produces a netlist (set of gates) which is synthes
830.
by bri3d 3y ago
This has already been the case on European navigation systems (Audi and VW MMI/MIB) for many years now. VW Audi Group developed an entire infrastructure called SWaP (Software as a Product) and FEC (Feature Enable Codes) many years ago,
831.
by bri3d 3y ago
That's the point of this framing - it's pitching the device manufacturer as an attacker and Secure Enclave as their sinister fortress inside your device. This is an age-old argument against these systems, but to your point the con
832.
by bri3d 3y ago
I have never seen firmware from any vendor in any industry that doesn't use these patterns. There's a lot to unpack culturally around "hardware company engineers" vs "software company engineers," but I don&#x27
833.
by bri3d 3y ago
In a bizarre plot twist, there is an actual project which tries to recompile Xbox 360 XEXes to run on x86 Windows: https://github.com/rexdex/recompiler
834.
by bri3d 3y ago
There are other SFF PCs available which were more competitively priced than NUCs to start with: Minisforum and Geekom are two popular brands I've used. There are also various SFF desktop PCs from major manufacturers like HP EliteDesk M
835.
by bri3d 3y ago
My take: Oxide is for companies who want to buy compute, not computers. They take the idea of "hyperconvergence" - building a software platform that's tightly integrated and abstracts away the Hard Parts of building a big vir
836.
by bri3d 3y ago
Pretty much everything that uses AMap does this - any popular Chinese-developed application with mapping functionality will exhibit the same behavior. I have trouble seeing this as being quite as sinister in motivation as it first appears;
837.
by bri3d 3y ago
Loryta 5442. There are whole forums for this topic - check out the ipcamtalk site.
838.
by bri3d 3y ago
I've had mixed luck with Reolink cameras. The RTSP streams have always been really unreliable for me, although the HTTP streams are pretty good. They also do the classic hardware-manufacturer thing where they send random beta firmwares
839.
by bri3d 3y ago
It's very popular for laptops. The reason Magnesium is popular is a combination of favorable physical properties like light weight, but especially, the specific injection molding process mentioned in the article, Thixomolding. https:&
840.
by bri3d 3y ago
> If OpenGL is maintained as a fallback, then how does adding Vulkan and keeping OpenGL simplify the code? I think the idea here is that Vulkan will be the "modern" renderer and OpenGL will become the "legacy" rendere

More ›