bri3d

224 ms·

2191.
by bri3d 15y ago
When you don't have the privilege level to connect a debugger to the process or the secrets are in kernel space, it's probably easier to just reboot with a cold-boot kit attached via USB than to attempt some form of escalation exploit. Inve
2192.
by bri3d 15y ago
A cold-boot attack as detailed in [0] makes it vastly easier to extract secrets from physical memory than to wiretap the AES process, especially if you're not in possession of a privileged user account or a route into kernel space. [0]:
2193.
by bri3d 15y ago
On most platforms, mlock(2) and mlockall "lock" data in memory, theoretically preventing it from being paged to disk. OpenSSL provides hooks for adding a custom allocator which uses mlock, and some of its interfaces allow for the app to all
2194.
by bri3d 15y ago
Drivers aren't the issue, though. There are only a few OEM-provided SoCs used in name-brand, major-carrier Android devices, and OEMs already tend to end up supporting a few future Android versions with drivers for each SoC. Most Android pho
2195.
by bri3d 15y ago
In my experience, many Craigslist buyers (especially of high-value / high-margin items) tend to be rather afraid of buying things on Craigslist, and would be unlikely to swipe their credit card with the seller's phone. Naturally this tenden
2196.
by bri3d 15y ago
A better link would have been http://openindiana.org/pipermail/openindiana-discuss/2011-De... (OpenSolaris mailing list thread) or even http://news.softpedia.com/news/Oracle-Solaris-11-Kernel-Sour... , which is at least a somewhat-resea
2197.
by bri3d 15y ago
Avdi Grimm responded [0] to this (relatively old) article with what I think is a salient point: traditional design patterns are good, but Java makes expressing these design patterns very obtuse and heavy-handed. Nick Kallen conflates using
2198.
by bri3d 15y ago
LiPo/Li-Ion batteries on airplanes have been an issue for years - see, for example, this article from 2010: http://travelsentry.blogspot.com/2010/08/future-of-flying-wi... At this point rechargeable lithium-based batteries are a more effe
2199.
by bri3d 15y ago
There's a timing game being played here that YouTube already won, and which I think GrooveShark are about to lose. Both YouTube and GrooveShark bet that they'd be able to (quasi-illegally) host major production content without the owners' c
2200.
by bri3d 15y ago
How were your cache control headers set up? Most browsers cache CSS files very aggressively (not even requesting a HEAD for them) once they've been loaded once - hence the common use of query strings or asset paths for CSS to ensure users g
2201.
by bri3d 15y ago
It seems that movement hasn't been as rapid in hobby CNC machines as in 3D printers, probably because CNC machines are a lot more expensive. Good CNC usually requires two tool-tilt axes in addition to the standard X, Y, and Z - for a total
2202.
by bri3d 15y ago
There have been a lot of crowd-funded and startup attempts to commercialize RepRap designs lately - here's a sample of a few: eMaker Huxley: http://www.indiegogo.com/eMAKER-Huxley-3D-printer-kits SeeMeCNC - uses software to drive stepper
2203.
by bri3d 15y ago
Why don't they just tag all of Honeycomb? If the reason is that there's no combination of project commits that can create a building Honeycomb, they should just admit to it and explain why. The current approach seems like a weird attempt to
2204.
by bri3d 15y ago
NickServ and "IRC services" in general are shoehorned extensions to IRC. Most clients support them in some automated fashion now, but there's no guarantee, and usage differs depending on "IRC services" package. At any rate, my original comm
2205.
by bri3d 15y ago
What's the advantage of an IRC-backed chat vs. a Jabber-backed chat? Sure, IRC's protocol is simpler, but it's also not designed to support authentication or security natively, or to be federated in a "cross-network" way like XMPP is. It se
2206.
by bri3d 15y ago
I believe one of the major issues will be Doom 3's use of the "zfail" algorithm, which Creative claim a patent on. Generally, Creative license this patent to game developers in exchange for the game supporting OpenAL (a net win for Creative
2207.
by bri3d 15y ago
I think your nervousness is well founded, and that's why Microsoft won't implement WebGL [1], but Chrome's developers seem to think they can make things secure [2]. [1]: http://blogs.technet.com/b/srd/archive/2011/06/16/webgl-cons... [2]
2208.
by bri3d 15y ago
So Anonymous: - Downloaded a bunch of child porn. - Released a useless list of psudonyms extracted from the forum's DB. - Claim to have used a timing attack against Tor to find the physical location of the machine hosting the CP, without pr
2209.
by bri3d 15y ago
No; it links Skype Accounts to IPs, which then can be correlated with BitTorrent swarm peers. IPs are not people - this is a fundamental misunderstanding that both MPAA/RIAA lawyers, and, for a long time, misinformed courts liked to propa
2210.
by bri3d 15y ago
They could easily have added a grip system, and based on the linked hands-on, which states that shake-induced blur is an issue, they should have. I think the design is novel to prevent mental comparison with a "real" camera, which presumabl
2211.
by bri3d 15y ago
I think the idea behind the signed bootloader is that the kernel that the bootloader loads will then be trusted as well. In this way the chain of trust moves up the boot stack and the risk of an early-boot / kernel rootkit can be minimized,