gcp

57 ms·

601.
by gcp 10y ago
Do you realize this is a build-time, not run-time dependency?
602.
by gcp 10y ago
This is ironically something that rust (and cargo) solve, isn't it? That said, what you describe isn't really an issue with Firefox. Unless you're running a very odd distro, apt-get build-dep or mach bootstrap will set you up
603.
by gcp 10y ago
You are confusing AV1 with VC1. Re-read the post you're replying to.
604.
by gcp 10y ago
Also from a practical perspective, its very rare to see an AV compromised If by very rare, you mean, constantly, then yes. You're hearing less about this because the AV industry is fragmented, so targeting AVs is not interesting beca
605.
by gcp 10y ago
The bug is generic, the exploit is Windows specific. It should be possible to construct Mac and Linux exploits.
606.
by gcp 10y ago
I specifically pointed out H264 support (and you ignored it) because it's an annoyance when using Chromium. And yes, that's due to licensing reasons as well.
607.
by gcp 10y ago
It's very useful for any kind of signal that can be analyzed with filters.
608.
by gcp 10y ago
They've had similar problems with Windows 10 updates and other security measures. Yes, it's a headache.
609.
by gcp 10y ago
Fann doesn't do DCNN, arguably the most important right now.
610.
by gcp 10y ago
You still need to intercept a users' connection and redirect them to malicious JS with a regular Firefox. For the attack to work on a large scale you'd typically you do this by compromising an ad network and hoping you get enough
611.
by gcp 10y ago
In Chrome, yes. They happen rather often with Firefox. Shrug, I disagree. The fuss made here illustrates it: 0-days are rare enough that "rather often" is a serious mischaracterisation. Their security features are identical. It
612.
by gcp 10y ago
win32k lockdown is part of the sandbox. On Linux you do this with seccomp filtering for example.
613.
by gcp 10y ago
There's no questioning that Chrome's sandbox implementation is ahead of Firefox: they've been shipping it for several years, whereas Firefox only got its first one out in Firefox 50 (for content! They had a Flash sandbox and
614.
by gcp 10y ago
Not just e10s, they also need to enable the sandboxing, i.e. it requires Firefox 50 at least. It should actually be easier for Tor to enable stricter sandboxing than in the default Firefox, though, as presumably they have to care less about
615.
by gcp 10y ago
VMs are all nice and that but if the exploit can compromise the TBB it's too late already, sandboxing needs to happen in the browser on Linux you can use namespaces + strict seccomp rules but don't know what one would use for Win
616.
by gcp 10y ago
The bug yes. The exploitability, unclear. Current release Firefox has some minimal content sandboxing protections enabled but TBB is based on older ESR.
617.
by gcp 10y ago
Just google for Project Zero.
618.
by gcp 10y ago
Last time I checked, it was just for process separation and did not provide any security guarantees. It's a separate project from e10s (though it depends on it): https://wiki.mozilla.org/Security/Sandbox Chromi
619.
by gcp 10y ago
There's nothing in here. No idea why it's getting upvoted. Closest real thing is this: https://github.com/tiny-dnn/tiny-dnn
620.
by gcp 10y ago
Try running a VM and compiling inside that...
621.
by gcp 10y ago
when they don't even ship with the best in class GPUs from Nvidia. Bah, when heavily constrained by TDP and being able to (being required to) lower voltage and clock speed accordingly, it's far from clear NVIDIA would have any a
622.
by gcp 10y ago
What would the upsides of such a match be for AlphaGo? How many matches with other computers did Deep Blue play after its victory over Kasparov? (zero) How many world championships did Deep Blue win? (zero, it played one in 1995 and lost to
623.
by gcp 10y ago
A rating based on 3 games has a pretty high (read: enormous) error margin.
624.
by gcp 10y ago
Not just plausible, it's pretty damn sure. Your certainty is based on what data?
625.
by gcp 10y ago
we don't really know how strong its opponent is today He's not exactly retired, you know: https://www.goratings.org/players/98.html
626.
by gcp 10y ago
Reading a Wikipedia article on a subject you're actually very knowledgeable about can be extremely painful.
627.
by gcp 10y ago
The news flies under the radar because for most people Go is now solved (compare to what happened after Deep Blue's win). There's a small blemish in that Ke Jie is still rated higher than AlphaGo. Perhaps they will rectify that, p
628.
by gcp 10y ago
It's hard to compare, as even Deep Zen runs on much more...modest...hardware than the match version of AlphaGo did. It's conceivable that AlphaGo would get clobbered on Zen's hardware, or that Zen would clobber AlphaGo if tha
629.
by gcp 10y ago
Yes. Slow CPUs.
630.
by gcp 10y ago
webp can do lossless with alpha channel So can PNG. WebP doesn't add anything new here. It also improves on jpeg Debunked in the post you're replying to. The difference disappears when the JPEG encoder is updated (in a backwar

More ›