bri3d

68 ms·

841.
by bri3d 3y ago
This isn't just a "before quartz oscillators" thing; it's still in extremely widespread use today since quartz oscillators still cost some fraction more than $0. And, it's not always mechanical, there are a lot of a
842.
by bri3d 3y ago
It's also worth noting that "microcode" in a modern x86 CPU is not really the same thing as "microcode" in an older, "microcoded" CPU. What do I mean by this? Some older CPUs were truly "microcoded.&q
843.
by bri3d 3y ago
That Bardwell video is about normal motion blur, which is highly desirable in any cinematic content. You'll see in those YouTube comments (and there are a few mentions in the video, as well) complaints about "stutter blur" an
844.
by bri3d 3y ago
Wrong use case. It's a reverse engineering tool to extract firmware, secrets, and code to develop and exploit, not an exploit in and of itself. This would be a horrendous way to recover user credentials but it's a great way to rec
845.
by bri3d 3y ago
Using the OS to do this is unlikely to be effective; the attacker with this access could usually halt the CPU before they remove RAM. As in the article, the best mitigation against this kind of attack is memory encryption, either in hardwar
846.
by bri3d 3y ago
It’s in the article, they’re desoldered and reballed like normal and then socketed: “What makes the attack possible, he said, is something called a conductive elastomer IC test socket.” The cryogenic pick and place robot then moves the now-
847.
by bri3d 3y ago
I can't really see how this is different from a native-code based device, especially one which is actually following good practice by not trusting what's in flash. Every stage of the boot chain still has to validate the next - the
848.
by bri3d 3y ago
This is all available in the Intel AMT documentation. While the implementation is closed-source and opaque, this isn't some magic functionality, it's a product that businesses want and use. If the OS is running, wireless AMT forwa
849.
by bri3d 3y ago
The equivalent of Option 3, send a supported command that tells the runtime capabilities to shut down, has been provided as a user-selectable option by AMD in AGESA (the unified AMD BIOS/EFI package) for several years now. I haven&#x27
850.
by bri3d 3y ago
Yes. There are several ways, depending heavily on the version, and ranging from most trustworthy to least trustworthy: * By patching the ME firmware itself - see the me_cleaner project, and methods documented here: https://puri.s
851.
by bri3d 3y ago
Note that this wasn't so much about figuring out how to disable Intel ME, which is accomplished by sending an HECI (Host Embedded Controller Interface) command in the same way it has been for ages. Rather, this was about fixing a buffe
852.
by bri3d 3y ago
This is has always been an interesting aspect of Reddit. On the one hand, this is fine: Reddit is supposed to be a collection of independently moderated sub-communities with their own rules and administration. On the other hand, you have a
853.
by bri3d 3y ago
They're saying "we contributed the overwhelming majority of the data we collected and corrected, except for that which wasn't eligible for contribution." It really seems like Lyft operated in good faith here, they just d
854.
by bri3d 3y ago
Isn't this the driverless car team, vs. the ride-mapping team? Regardless, it's good to see that they are contributing back to OSM. I agree that overall the use of OSM by anyone "lifts all ships" as long as users continu
855.
by bri3d 3y ago
Using anything that could cause incorrect directions as a trap location / trap street would be a ridiculously bad idea. I strongly suspect the reason is a more standard corporate one; the volume of corrections and signal to noise ratio
856.
by bri3d 3y ago
Does anyone know if Lyft plan to contribute their map corrections back to OSM? They mention other companies doing so in this blog post, but don't make it clear whether or not they, too, intend to. I'm curious to see how good Lyft
857.
by bri3d 3y ago
The Pi engineers claim that at least some aspects of PIO are "patent-pending," [0] so a 1:1 reimplementation in another MCU would probably infringe on some claim or another eventually. Yes, software defined I/O is not uncommo
858.
by bri3d 4y ago
No, egui is an immediate mode framework which draws its own widgets completely using EGL. GTK is only required if you want the GTK WebView, iirc.
859.
by bri3d 4y ago
AGPS refers to a specific set of technologies, MSB where the almanac and time seed is provided over the cellular network, and MSA where the unit sends GPS data to the AGPS server and the server solves for location using whatever data it wou
860.
by bri3d 4y ago
A-GPS can run in Mobile Station Assisted (MSA) mode, where the device sends raw GPS data to the A-GPS network and the assistance server processes it. In this situation, the assistance server can use whatever precise cell site location and i
861.
by bri3d 4y ago
And, especially in European cars, car software modification has been aggressively locked down, mostly for emissions compliance, anti-reversing, and warranty reasons. Just like any other device firmware. The "I can modify my own car, so
862.
by bri3d 4y ago
My understanding is that the current web scraping situation is this: * Web scraping is not a CFAA violation. (EF Travel v. Zefer, LinkedIn v. hiQ). * Scraping in spite of clickthrough / click-in ToS "violation" on public webs
863.
by bri3d 4y ago
Hmm. This gets into the fuzzy definition of "loop in microcode" depending on how you look at the system. I don't think the actual looping happens in microcode, that is, it's not like the ucode unit jumps to earlier ucode
864.
by bri3d 4y ago
Edit: just saw your edit, that's something I'd never really thought about before - 8086 is the "purest" microcoded processor from the x86 series, in that every instruction runs through an actual interpreter rather than s
865.
by bri3d 4y ago
It's way more complex than this on modern CPUs, so it's harder to explain. > is microcode still used for division? Yes, almost everything on a modern CPU uses "microcode" of some kind, although the term gets kind of h
866.
by bri3d 4y ago
The longer and more involved I get in automotive diagnostics and programming as a hobby, the less I believe there is any particular conspiracy against independent shops and owners in the automotive industry (versus in the heavy equipment an
867.
by bri3d 4y ago
In short: Yes. This is a big threat model that manufacturers try to guard against. However, there are a few protections here: * Most manufacturers do fairly aggressive KYC / risk protection for their online programming services. The VW
868.
by bri3d 4y ago
I did find an older VW "emergency start" product that claims to only work with Bosch MED17 and MED9, and I suspect it's using a memory-access primitive (either UDS or CCP) to release the immobilizer. It's trivial to disa
869.
by bri3d 4y ago
Calling something a "CAN bus hack" is like calling something an "Ethernet hack." It's just a bus, it's what's on the bus that matters. European, American, and Japanese cars have completely different immobi
870.
by bri3d 4y ago
I would love to see a story about one! I don't work in automotive RE, it's only a hobby, so I don't have budget to go find and buy "emergency start" tools like these security vendors do. As far as I am aware: there

More ›