dhx

18 ms·

121.
by dhx 2y ago
Have you seen Tony Chen's (development lead for Xbox One security) description of the Xbox 360 reset glitch hack at [1] and the effect this (and other console exploits of that time) had on Xbox One development? This is one of my go-to
122.
by dhx 2y ago
For anyone wanting to look at traffic cameras across the US states, almost all are now available in a readily consumable GeoJSON format (with webcam URLs as properties) at [1]. There are two "Intelligent Transport Systems" softwar
123.
by dhx 2y ago
In Australia, meteorologists used to be deployed across the country to local offices and would receive computer-generated forecast models (and other raw data) whenever the supercomputer at headquarters had finished running a job. The local
124.
by dhx 2y ago
It's easy to defeat right now because very few are currently thinking about secure build systems. As an example, systemd's latest source tarball has two Web Open Font Format (WOFF) files in a documentation folder, a favicon.png, t
125.
by dhx 2y ago
A vulnerability not mentioned in the article is the normalisation of executing code that has been especially targeted to a specific user or specific device with no validation of reproducibility and no ability for anyone to verify this custo
126.
by dhx 2y ago
Is this ruling effectively that it's irrelevant whether or not a warrant existed to modify the iPhone 6 because in this case, there is no loss to the claimant from that modification having been made? How much would an old second hand b
127.
by dhx 2y ago
In the spirit of "Falsehoods programmers believe in"[1] for human ages: * Not all people know their age.[2] * Even if people do know their age they may not have any means to prove their age.[2] * Even if people know their age, the
128.
by dhx 2y ago
Here in Australia we teach kids real bicycling skills like how to socially share bets with their friends on the Sportsbet app for Tour de France 2025.[1][2] Thankfully this bill doesn't restrict Australian kids from learning these impo
129.
by dhx 2y ago
For those not familiar with Australian parliamentary processes, the original bill was introduced on the 21st of November 2024 and today the 27th of November 2024 was endorsed by the House of Representatives with no amendments agreed to. The
130.
by dhx 2y ago
This account was spamming Python repositories with the same type of low value obvious backdoor spam.[1] Full list of attempted pull requests (all deleted seemingly by GitHub): 1 https://www.github.com/KurtBestor/Hito
131.
by dhx 2y ago
What's the point of this block on English Wikipedia (language spoken by 11% of Indians) when the following alleged "defamatory information" is still available on Hindi Wikipedia (language spoken by 40% of Indians): "ANI
132.
by dhx 2y ago
Software sandboxing has a relatively good cost-to-benefit ratio at reducing the consequences of software bugs, which is why it's already implemented in a lot of software we all use every day. For example, it exists in Android apps, iOS
133.
by dhx 2y ago
Professional engineers have been stamping and signing off on safety-critical software for decades, particularly in aviation, space, rail and medical instrumentation sectors. Whilst less likely to be regulated under a "professional asso
134.
by dhx 2y ago
There have long been multiple forms of professional software engineering in aerospace, rail, medical instrumentation and national security industries such as ISO 26262, DO-178B/DO-178C/ED-12C, IEC-61508, EN-50128, FDA-1997-D-0029
135.
by dhx 2y ago
Where does CISA/NIST recommend (for software developers) or require (for government agencies integrating software) specific software/operating system hardening controls? * Where do they require software developers to provide and e
136.
by dhx 2y ago
Correction after more information has become available: The Gold Apollo AR-924 model pager is reported to have been manufactured under license by Budapest-based company "BAC Consulting KFT", but the head of this company denies man
137.
by dhx 2y ago
Possibly because the illicit drug trade is using and abusing software developers that got caught up in it and are then threatened with violence if they don't continue to operate encrypted phone and chat services? Or the scenario of sub
138.
by dhx 2y ago
I added a lot more in the previous thread from yesterday (didn't get on the front page but would be good to merge into this thread)[1]. In summary: Australia has laws such as [2][3] (in the state of NSW) which prohibit possession of en
139.
by dhx 2y ago
There is a lot more detail provided at [1] and [2]. The app developer/administrator is stated to have sold the app to resellers who then sold "dedicated encrypted criminal communication devices"[3][4] with the "Ghost&quo
140.
by dhx 2y ago
It was reported in Turkish news (allegedly via IRGC on X) that pagers are all Motorola branded, and supposedly at least include the Motorola LX-2 model.[1][2] However, the provided image of a Motorola LX-2 is also the first image on the Wik
141.
by dhx 2y ago
On the accused * The article states the accused launched the app 9 years ago at the age of 23. The app previously had the domain ghostecc.com whose historical WHOIS records indicate creation on 2016-04-13, so the dates approximately line up
142.
by dhx 2y ago
As an example, the Amazon implementation doesn't refer to gcc's[1] and clang's[2] "zero_call_used_regs" to zeroise CPU registers upon return or exception of functions working on crypto secrets. OpenSSL doesn't
143.
by dhx 2y ago
It's much more than just performance they've thought about. Here are some of the secure programming practices that have been implemented: /* All the functions in this file are considered "secure", specifically:
144.
by dhx 2y ago
Why does KCM still need to exist? It doesn't help airlines nor air crew: Pilot: "Years ago we’d get a random enhanced check (which just means go to TSA precheck) now and then. These days it’s 60% of the time, so it’s not possible
145.
by dhx 2y ago
Yes to 90cm being used for identifying the class of a ship. But probably no for 90cm being used for identifying a particular hull, which may only be determinable with higher resolution imagery to confirm a hull-specific feature such as an u
146.
by dhx 2y ago
"It's designed to capture 5km-wide spot scenes on the ground and have a best resolution of 90cm."[1] Some sample ~90cm-ish imagery from Airbus Vision-1 (20km swath 87cm resolution) is available at [2]. It looks like it'd
147.
by dhx 2y ago
How many frustrated everyday UK citizens are going to get scammed into using malicious VPN/proxy services or malicious software to access UK government services from abroad?
148.
by dhx 2y ago
The article doesn't read to me to be an argument about whether sharing a kernel is better or worse (multiple virtual machines each with their own kernel versus multiple containers isolated by a single kernel). The article instead reads
149.
by dhx 2y ago
If you're going to the effort of extracting detailed audit information from a system and then having to decide whether each audit event is relevant or not, why not just write seccomp-bpf filters and landlock rulesets to restrict what e
150.
by dhx 2y ago
For Linux, one has to build and enable the "mei" kernel driver[1] and then install the user-mode daemon "Intel Local Manageability Service"[2]. [1] https://git.kernel.org/pub/scm/linux/kern

More ›