bri3d

57 ms·

901.
by bri3d 4y ago
In the kernel: https://security.apple.com/blog/towards-the-next-generation-... In bootloaders: https://support.apple.com/guide/security/memory-safe-iboot-i...
902.
by bri3d 4y ago
Yes, this is the concept, and the NCC report correctly identifies a lot of deltas with reality, which also I outlined in my comment above: * Google or a privileged attacker sitting at either end of the VPN could exfiltrate the user's i
903.
by bri3d 4y ago
The search term you want is just "Replica." RWI, RWG, RepTime on Reddit, and other private forums will analyze the quality and details of these clones in ridiculous detail. They also have reviews of each reseller and each factory.
904.
by bri3d 4y ago
These reports usually start from a baseline template/checklist. I'm sure the "unobfuscated binary" and "admin" findings that everyone on this thread is making fun of are part of the SOP for NCC Group audits of
905.
by bri3d 4y ago
I agree with this - VPNs protect you from only the ends of the chain, while centralizing the middle, and it's rather foolish to think that any VPN construct will reliably blind traffic and identity from the VPN provider. Depending on
906.
by bri3d 4y ago
The actual pentest findings here are pretty boring, but the architecture details are quite interesting, as are the identified risk models for the attempt at "anonymity." The fundamental anonymity model Google have employed is that
907.
by bri3d 4y ago
The best public kernel debugger for Apple Silicon is m1n1 from the Asahi project.
908.
by bri3d 4y ago
This is acknowledged by the author: https://twitter.com/johnmcelhone8/status/1600683636029652993 Which I think is also why the thread is so X-marks-the-spot / parallel-reconstruction-y. I think it's more
909.
by bri3d 4y ago
Oh sure, I didn't expect it to be a from-scratch emulator, but it's way beyond the usual low-effort "type make and send it" type stuff.
910.
by bri3d 4y ago
I couldn't find an off the shelf Flipper module, but the Lego Powered Up BLE protocol is fully documented by Lego: https://lego.github.io/lego-ble-wireless-protocol-docs/ So it shouldn't be too hard to add on
911.
by bri3d 4y ago
This is really impressive and goes way above and beyond the normal "emscripten an emulator into a browser" shenanigans. There's seamless file copy in/out, and a really clever setup where accessing the same subdomain as s
912.
by bri3d 4y ago
100% agree with the buyer not being the end-user. As long as the product supports the needs of the buyer (administration and reporting, rules engine for product selection, etc.), the needs of the end-user can be neglected. HRIS software (Pe
913.
by bri3d 4y ago
I think that most conversations about where cars are designed or made aren't very clear cut with the _exception_ of a lot of Chinese brand cars, which is an interesting commentary in and of itself. For example, Polestar cars are design
914.
by bri3d 4y ago
Polestar is a joint venture between Volvo (majority owned by Geely anyway) and Geely themselves. Their cars so far are indeed made in China, with a US manufacturing facility coming online soon.
915.
by bri3d 4y ago
The linked vulnerabilities don't even have anything to do with firmware (although it is certainly littered with issues too), but rather just basic web/application security issues on the "cloud" side of "cloud"
916.
by bri3d 4y ago
According to 10-K filings, Doordash went from 3,886 to over 8,600 employees in calendar year 2021 (!!!). While the global macroeconomic situation is certainly fragile right now, the current trend towards corporate-tech layoffs needs to be v
917.
by bri3d 4y ago
Even before true CPU-supported "hypervisors," there was shim software like SoftICE that worked similarly to m1n1 in that you would run an OS underneath and then use a supervisor tool to trace and debug the OS under inspection. Mor
918.
by bri3d 4y ago
Not to defend the Twitter situation, which is foolhardy by almost any measure, but it's extremely uncommon for any company's main landing page to relate in any way to their software engineering team. Usually these marketing sites
919.
by bri3d 4y ago
Layoffs can be horizontal (cut departments or divisions) or vertical (rank and cut the bottom). In horizontal layoffs, usually a lot of talented people and even turn-key teams are available on the market. Sometimes companies try to turn hor
920.
by bri3d 4y ago
Every cloud provider will have these issues with specific instance types in specific regions, although the Azure Germany situation sounds perhaps a bit more dire. At my past (much larger) employers we’ve always run into hardware capacity is
921.
by bri3d 4y ago
For me, it's about having a goal which is concrete enough to achieve and deliver satisfaction, but unrelated to daily life enough to not be a stressor. And one major key for me is to never, ever develop a timeline. When I was a kid&#x2
922.
by bri3d 4y ago
Prior discussion: https://news.ycombinator.com/item?id=32434606
923.
by bri3d 4y ago
Pretty much every modern IDE with a plugin system could be repurposed into a message router, since they all have underlying code execution in their respective runtime environment (just as how in this case, Emacs was really just a Lisp runti
924.
by bri3d 4y ago
For what it's worth, PhysX 4.0 (2018) was also Open Source (3-clause BSD license). Previous discussion here: https://news.ycombinator.com/item?id=18589494
925.
by bri3d 4y ago
Do Datadog really see returns on this? They are absolutely head and shoulders worse than the rest of the industry when it comes to aggressive "business development" / cold calling behavior. My experience with Datadog has been
926.
by bri3d 4y ago
I'm curious as to why no vendor has yet tried to push a 24V or 48V PSU rail standard to reduce the amperage pushed over these crappy pins. Of course then the board itself needs to be able to handle the higher voltage for down-conversio
927.
by bri3d 4y ago
I disagree with this for a non-direct sales reason: before, you learned IDA, cracked or not. If you learned to reverse software of any kind, you acquired IDA. Now, more and more tutorials and introductions use Ghidra. Is it better than IDA?
928.
by bri3d 4y ago
This week, as most weeks, I split my time outside of the day job and my other hobbies and obligations between a few projects: https://github.com/bri3d/VW_Flash - Flashing tools for select control modules in VW MQB and
929.
by bri3d 4y ago
What's bizarre about Remote ID by the "airspace safety" line of thought is that there's no real plan for aircraft or even ATC to have Remote ID-in receivers, and some of the approved MOC are _very_ short range and probab
930.
by bri3d 4y ago
Ardupilot have an add-on transponder solution that should be compliant in some configurations, although the whole thing is a complete mess in terms of certification and the MOC documentation as there's a lot of uncertainty around the t

More ›