edelbitter

7 ms·

61.
by edelbitter 4mo ago
I think this one has more to do with excessive dependencies, and lack of splitting into individually installable packages and/or static linking. I have already avoided having to evaluate whether I am affected by some issue because I ad
62.
by edelbitter 4mo ago
This stuff has been brewing for years, but since technically you could fix all instances with minimal StackOverflow downtime [1] and a slightly different pattern, few people worked on either using engines with data structures less prone t
63.
by edelbitter 4mo ago
A German police officer was fatally shot in 2010 after failing to identify himself when his manipulation on the door had alerted the known-armed subject of a planned search. The shooter was (eventually) acquitted. Though the circumstances w
64.
by edelbitter 4mo ago
Ah, the exploit is all done before that!
65.
by edelbitter 4mo ago
Since this can only underflow and some written bits are not attacker-chosen, does this not imply that the patchable part of the software could reliably detect this just in time and panic on suspected USB DMA corruption? Where is the catch
66.
by edelbitter 4mo ago
>The original content doesn’t exactly disappear; it just becomes raw material that most people never touch directly. It does disappear. There is already much less expert knowledge shared after the breakdown of those platforms that used
67.
by edelbitter 4mo ago
Do you have any company in mind (within the subset the argument refers to, so one that achieved >=15% monthly growth with sufficient consistency) without one or more worrying externalities?
68.
by edelbitter 4mo ago
> all these data come from nonhuman lab animals Though what I have see so far is far from everything that could be learned from these surprisingly-humanlike mammals. Still need more research on timing. Maybe protein metabolism is not tha
69.
by edelbitter 5mo ago
>the various ACME clients like acme.sh are run with elevated privileges Its really not that difficult to not grant excessive privileges - at the very least for recurring ("cron") runs, once filesystem structure, cache invalidat
70.
by edelbitter 5mo ago
CT indeed worked out pretty well. At least until bots started hammering crt.sh making it unreliable, and those that want to be alerted to newly issued certificated appeared in the logs need to pay for some purpose-built service instead of j
71.
by edelbitter 5mo ago
The appendix lists what they were collecting, and the amount of samples needed for not just mathematically significant, but also practically useful distinguishing power implies collecting enough for a stable yet unique fingerprint. In that
72.
by edelbitter 5mo ago
But.. the task was never "detect this" but always "detect this within acceptable constraints". Sure, once you collect enough bits, you can tell that its me. And if you know from other sources that I am human, that solves
73.
by edelbitter 5mo ago
Is that not the commonly cited example for commodity trading, whereas meaningful comparison of fundamentals to market capitalization only started much later?
74.
by edelbitter 5mo ago
That particular alias is mildly interesting. The obsession is with finally making progress in understanding the "We kill people based on metadata" threat. Maybe we can please finally stop stuffing PII & timestamps into each
75.
by edelbitter 5mo ago
Should not set it to nonsense , but rather low-entropy . If its unique, someone with access to old (browser, probably) crash reports might be able to cross-reference. Plus, not too long ago browsers did not care to sanitize the path for i
76.
by edelbitter 5mo ago
Also coincides with the time I started seeing Juniors installing "recommended extensions" into GitHub-hosted Visual Studio environments.. because there was a popup that helpfully suggested doing so, based on the programming langua
77.
by edelbitter 5mo ago
I continue to receive phishing via AWS pretending to be Amazon. And not even the Unicode-lookalike shenanigans that my spam filter refuses for excessive mixed scripts, no; literally claiming to be Amazon as in: the company that operates the
78.
by edelbitter 5mo ago
Easier: Do not start with a "allow all" configuration in the first place. Maybe all of those userspace-work-done-in-kernel-because-muh-performance features should be restricted to (the "real") CAP_NET_ADMIN, unless posit
79.
by edelbitter 5mo ago
e.g. for a two keyword search, Google & DDG return results containing a similar (but more at the moment, more popular, so I understand why they do this) keyword as the first one, and no relation whatsoever with the second. Any search
80.
by edelbitter 5mo ago
I wonder if the same coverage as before is now more economically feasible. The internet has gotten .. smaller, lately.
81.
by edelbitter 5mo ago
/proc/cpuinfo shows whatever the hypervisor said, often simply "microcode : 0x1000065" https://github.com/torvalds/linux/commit/518e7b94817abed94be... https://github.com/qe
82.
by edelbitter 5mo ago
What purpose does the "news" of finding another way to break "confidential computing" serve, other than proliferate the incorrect assumption that there even was a working concept beforehand?
83.
by edelbitter 5mo ago
If git in general would enforce pretending to not know about orphans, it would always need to know what you were meaning to consider the boundary, and/or you would end up waiting for useless duplicate network traffic. The fact that on
84.
by edelbitter 5mo ago
Not just shipping features - that part is little more than disk space, for features already neatly isolated into modules. I see potential in improved tooling to express "do not autoload anything below this tree" in a more reliab
85.
by edelbitter 5mo ago
Notoriously difficult to portray correctly in EU money-shuffling statistics. Some money not granted to the grand duchy still filed under "beneficiary country: Luxembourg" due to some program or institution being headquartered ther
86.
by edelbitter 5mo ago
I found that reducing my "Linux" lines from ~21000 (including net-pf-16-proto-21) down to those ~3000 I might actually use (e.g. udp_tunnel) to be a fairly effective method of not having to care about each and every newly discover
87.
by edelbitter 5mo ago
Then you have already have not been very present in the analytical data that these business decisions are based on.
88.
by edelbitter 6mo ago
Ubuntu is not really targeting multi-user any more. Security update installation is deliberately delayed for all users, until at some point all unprivileged users ended all processes launched from the vulnerable snap image. (Firefox RPC bre
89.
by edelbitter 6mo ago
This is much bigger than subsidies. IONOS is already making serious money in selling "we host FOSS for you" to both users and (though generally: small) companies. They can expect to gain substantially greater revenue from acquirin
90.
by edelbitter 7mo ago
Has there ever been a GDPR fine that actually exhausted all applicable legal challenges within a sufficiently short delay from initial violation to actually matter?

More ›