cjbprime

54 ms·

661.
by cjbprime 6y ago
There was a difference, but it was smaller than the job satisfaction increase from better tooling for me.
662.
by cjbprime 6y ago
Most of the time I worked on drivers with kernel modules, so the fast path is just build && rmmod foo && modprobe foo && test. That's fine. But I was working for a hardware manufacturer too (One Laptop Per Chil
663.
by cjbprime 6y ago
I went from being a kernel engineer to a JavaScript application engineer, and JS was more satisfying to do over a long period of time for me -- the "recompile, reboot, retest" loop taking several minutes each time for testing kern
664.
by cjbprime 6y ago
While that's plausible, I'd still agree with the parent comment in general -- it's true that it's not cost-effective to mine using fossil fuels (you would lose money doing it), and this alone requires a different way of
665.
by cjbprime 6y ago
This should have a (2018) in the title. As I understand it, Bitcoin mining rewards are now so low that it's unprofitable to use fossil fuels to mine -- you will pay more for the electricity than you receive through the reward. Hence a
666.
by cjbprime 6y ago
If it's a vuln in the latest available version, was it reported to the vendor before the blog post?
667.
by cjbprime 6y ago
Wow, it's quite rare to see someone explicitly optimize for their own marginal impact, rather than total impact. I would probably go look at areas which typically struggle to attract extremely competent developers on account of not b
668.
by cjbprime 6y ago
I expect you're overstating how unlikely it is: there are not that many better explanations for a plane suddenly falling out of the sky.
669.
by cjbprime 6y ago
In case anyone gets the wrong impression: there is mechanical control of trim too, and "runaway trim" has a checklist item set of responses that every pilot trains for. You can lose electric trim without crashing.
670.
by cjbprime 6y ago
That sounds like it would cause engine failure. If your engine fails at a reasonable altitude soon after takeoff, you don't suddenly nose-dive, you glide back in to land at the nearest airport as every pilot regularly trains for.
671.
by cjbprime 6y ago
Yes, the accident rates do vary by country and airline, with factors like how experienced (in hours) the pilots are required to be, how well-trained they are, how old the aircraft are, how well-maintained they are, whether there is a robust
672.
by cjbprime 6y ago
And to explain the severity: if you control a subdomain, you're potentially getting trusted access to cookies, cross-origin requests, and so on.
673.
by cjbprime 6y ago
Hiding a backdoor requires hiding it from every user who might publicize it, not some users. Your issue (which is barely a vulnerability at all, in my personal opinion) demonstrates a failure to hide a vulnerability, if you think it was
674.
by cjbprime 6y ago
People who use Ghidra know that backdoors from TLAs don't look like backdoors.
675.
by cjbprime 6y ago
An open source project used by people capable of analyzing the network and disk I/O of binaries they run doesn't sound like a good target -- if something was found it would have massive consequences.
676.
by cjbprime 6y ago
These mostly seem to have been solved in modern SC2 already -- swarm hosts are no longer a lategame unit, high templars and ghosts are extremely vulnerable to units like speed banelings, viper abducts are powerful against motherships, it&#x
677.
by cjbprime 6y ago
The funny thing is that this (bad) take is correct as written -- it is heavily scrutinized. It's incorrect in the unsaid implication, that extreme scrutiny implies extreme safety.
678.
by cjbprime 6y ago
Sure, I'm not defending the situation, just offering a solution to your problem.
679.
by cjbprime 6y ago
ippsec has some videos on it too: https://youtu.be/hBjksyVmspY
680.
by cjbprime 6y ago
Looks like brew install gettext works.
681.
by cjbprime 6y ago
With the massive increase in fuzzing, especially around core projects like OpenSSL, I'm surprised that there was still a crash reachable from an x509 cert in the x509 parser. Anyone have any insight on why it wasn't found sooner?
682.
by cjbprime 6y ago
That's fine, but signing off on it just means that they were convinced that it's airworthy. Your own [1] link even says: > “While the software upgrades and changes are enough to get the plane back in the air, the agency is sti
683.
by cjbprime 6y ago
I argued that it is untrue that aviation experts and pilots now consider it to be much safer than other models as a result of the scrutiny. You asked if any of those people have publicly refused to fly it, presumably because they think it&
684.
by cjbprime 6y ago
FWIW, I don't see any pilots or aviation experts saying this. I think it's actually still poorly designed -- I don't think they added a third AoA sensor and used a quorum on them, as Airbus does given their own link of AoA t
685.
by cjbprime 6y ago
This is my understanding too, though Boeing hasn't really come out and said it definitively. Specifically: > MCAS was devised to fulfill an airworthiness certification condition in 14 CFR 25.173 and 14 CFR 25.175. In high angle-of-
686.
by cjbprime 6y ago
Seems like a 17" laptop with some iPads attached to the sides for extending screens onto would work fine too.
687.
by cjbprime 6y ago
I love the idea of cutter + ghidra-dec + debugger, but couldn't get the x64 debugging to work on even basic crackmes. Anyone know how it is lately?
688.
by cjbprime 6y ago
I think it's a good idea to see a doctor/therapist any time something changes in a way that interferes with your ability to be functional in daily life, for more than a brief amount of time. It sounds like that's the case fo
689.
by cjbprime 6y ago
Yeah, sadly the clients I care about never seem to support that.
690.
by cjbprime 6y ago
Wireshark doesn't natively decrypt TLS traffic, though. And SSLKEYLOGFILE is not supported by many network apps.

More ›