dcow

28 ms·

541.
by dcow 2y ago
That’s not hardware memory separation.
542.
by dcow 2y ago
If you can’t modify kernel memory then how do you overwrite function pointers? (I understand how rop works.) At some level you have to get privileged execution and doing so would be incredibly difficult if you can’t trick the kernel at some
543.
by dcow 2y ago
I know. My question is rhetorical. In a world where the only way to secure a VN machine is to reboot it every X seconds, at what point is reboot frequency so high that you might as well accept slower interpreters if it means you don’t have
544.
by dcow 2y ago
No it’s not.
545.
by dcow 2y ago
Why not just go all the way and separate the program instruction memory from the data memory, physically? I know there’s an approximation of this at the page level, but why even let the kernel modify its own memory in the first place? Memor
546.
by dcow 2y ago
Why not?
547.
by dcow 2y ago
[flagged]
548.
by dcow 2y ago
[flagged]
549.
by dcow 2y ago
[flagged]
550.
by dcow 2y ago
I am a low information voter. I am far too busy working to support my family to spend my spare time doing psychedelics and reciting the names of my favorite politicians (and other high society pass-times) for fun. The fact that democrats
551.
by dcow 2y ago
I used to be a normal person. Then I became a parent. It changed my view on reproductive health entirely. I am not religious or conservative. I simply believe, based on lived experience, that life begins at conception. The tone with which t
552.
by dcow 2y ago
Re: “look out for your wife”: I’m going to say the unpopular but perhaps true thing… there are limits even to the amount of reproductive freedom society can grant women while being able to sustain a replacement rate that keeps it alive, and
553.
by dcow 2y ago
I think it was even more simple: Democrats put a senile man up for office.
554.
by dcow 2y ago
And some may already be taking advantage. This is a perfect example where users are empowered to self mitigate. You’re relatively okay on private networks but definitely not on public networks. If I know when the bad actors know then I can
555.
by dcow 2y ago
100% It’s unethical to users who are at risk to withhold critical information. If McDonalds had an e-coli outbreak and a keen doctor picked up on it you wouldn't withhold that information from the public while McD developed a nice pr-s
556.
by dcow 2y ago
Honestly I think full disclosure with a courtesy heads-up to the project maintainers/company is the most ethical strategy for everyone involved. “I found a thing. I will disclose it on Monday. No hard feelings.” With ridiculous 45-90 d
557.
by dcow 2y ago
I’m pretty sure the researchers aren’t _that_ stupid. It’s about whether you _can_ provide more details consistently when prompted. Not whether you’re terse in nature.
558.
by dcow 2y ago
I may be arguing for (3) but then I’m not letting the perfect be the enemy of the good. I don’t fancy the security types that do that.
559.
by dcow 2y ago
I’m speaking to how things are practically implemented, not making a statement about ideals.
560.
by dcow 2y ago
No I’m specifically not. Did you read my 2nd paragraph? It’s essentially your argument here. The person I was responding to was arguing that totp in pw manager is no good. Maybe you meant to reply to them and not me?
561.
by dcow 2y ago
I think you misunderstood me. I agree that biometric plus password or device key would constitute two factors. I perhaps believe that you can’t really trust the device to have performed biometric verification without some sort of software a
562.
by dcow 2y ago
I well understand the security apologist’s approach to corporate device management and network security etc. I lead citing your response as being something I don’t understand at a social-political level. From where does a company derive its
563.
by dcow 2y ago
Ah! Threat to the wallet I see. That Dropbox referral credit must still be paying dividends.
564.
by dcow 2y ago
The only true 2nd factor is a setup where your totp codes live on a separate piece of physical hardware. If your totp codes are in an app on your phone, and your password is in a different app on your phone, you're not pure 2nd factor
565.
by dcow 2y ago
I responded to someone who was having trouble grokking the idea that a relatively simple ruleset could give rise to arbitrarily complex universe-like constructs with coherent physics by pointing out that there is in fact a credible research
566.
by dcow 2y ago
Both videos come to the same conclusion so your comment betrays the fact you didn't even watch the one I linked. That or you misunderstood the physicist. You need to watch both videos to understand what's happening here. The speed
567.
by dcow 2y ago
100% serious question: how is using dropbox (one cloud) to sync passwords any better or more secure than using a password manager that syncs your vault for you (another cloud)? I see so many "I don't trust <insert pw manager&gt
568.
by dcow 2y ago
Password management is like exercise. Even when people say they understand the value and want to do it, they don't. Even if you implement it for them, if it's not something that slots perfectly into their existing routine, they&#x
569.
by dcow 2y ago
Often when discussing civil liberties, and protections thereof, the argument is "it's a choice you don't have to work for them and they're not the government they're a private entity so they can do whatever they wan
570.
by dcow 2y ago
No. It propagates slower. https://youtu.be/KTzGBJPuJwM?si=Pab2F0EFsB4oGhUo

More ›