geographomics

8 ms·

31.
by geographomics 11y ago
Jailbreaks address a different type of vulnerability - that of incorrectly written code or poorly designed systems, that can lead to a privilege escalation. The vulnerability that the FBI are using is the ability of Apple to update the iPho
32.
by geographomics 11y ago
I agree - this is the type of vulnerability that, assuming Apple is extremely careful about protecting their signing key, is only exploitable by court order or similar state request. This crypto implementation on iPhones and the like isn&#x
33.
by geographomics 11y ago
The purpose of the non-disclosure sections of this law is to prevent the suspect being wiretapped (or similar) knowing that they're being wiretapped. It's not exactly very useful if someone under active investigation finds out tha
34.
by geographomics 11y ago
I think you are rather downplaying Apple's capabilities here. Apple is the only entity who can reliably alter the firmware to remove the forensics-thwarting restrictions, due to updates requiring a chain of trust all the way up to Appl
35.
by geographomics 11y ago
Even if there's less likelihood of useful evidence on the suspect's work phone, it's still worth checking. The FBI's request isn't too bad really. It's not like they are requesting Apple to build a new mass sur
36.
by geographomics 11y ago
Snowden's analysis is rather lacking. He claims that the FBI already has all of the suspect's communication records as retrieved via service providers, but ignores the important detail that iMessage uses end-to-end encryption, ren
37.
by geographomics 11y ago
On Linux, you can use capabilities to avoid running as root. In the case of binding to ports lower than 1024, this would be by enabling the CAP_NET_BIND_SERVICE capability.
38.
by geographomics 11y ago
Probably means that there is now a restriction on the firmware upload page of the router, so that it won't accept any arbitrary image, most likely implemented via signing. Doesn't necessarily mean you can't load your own firm
39.
by geographomics 11y ago
If Apple can update the firmware of the Secure Enclave, could they not also write one that leaks out all the data contained within it? Presumably this could then be used for offline attacks against the image dumped from the phone's fla
40.
by geographomics 11y ago
It's happened with Bitcoin QR codes, to redirect payment to the attacker's wallet: https://www.reddit.com/r/Bitcoin/comments/1wwzbf/psa_new_sca...
41.
by geographomics 11y ago
In a sense, publishing a research paper is part of an ongoing public discussion, in reply to all the other authors cited in your work. Apart from that, there are talks at conferences which are open to discussion with the audience. I suppose
42.
by geographomics 11y ago
Seems rather impolite to be leaking all this data. Where's the benefit?
43.
by geographomics 11y ago
Ah, sorry for jumping to conclusions then.
44.
by geographomics 11y ago
I find it best to enjoy HN for the technical content and ignore the rather absurd cult-like startup worship.
45.
by geographomics 11y ago
Is it this course - https://www.udemy.com/php-programming-for-affiliate-marketer... ? I can access it just fine. Maybe it was spot checked because affiliate marketing is often so closely associated with spammers and scammers
46.
by geographomics 11y ago
It sounds like you're being manipulated into providing your hard work for free. I suspect your boss is trying to take advantage of you, without providing anything at all in return. Are you really willing to toil away without any income
47.
by geographomics 11y ago
The recovery password doesn't require anything stored in the TPM; if you just had an image of the disk and the recovery password, you could decrypt it. I agree with everything else you stated though.
48.
by geographomics 11y ago
You can add multiple protection methods with BitLocker: https://technet.microsoft.com/en-gb/library/ff829848.aspx This is also how they implement recovery passwords (as 'numerical passwords') by default.
49.
by geographomics 11y ago
Similarly in the UK: http://www.bl.uk/aboutus/legaldeposit/printedpubs/depositpri...
50.
by geographomics 11y ago
Why should your parents pay for your continuing education? Seems rather an unreasonable expectation. After reaching adulthood you should be taking financial responsibility for yourself, rather than demanding to be bankrolled by your family.
51.
by geographomics 11y ago
Seems unlikely that Microsoft would try to slip such a backdoor in, given that this special governmental release would be under additional scrutiny from the Chinese state.
52.
High-Color GIF Images(notes.tweakblogs.net)
2 points by geographomics 11y ago|0 comments
53.
by geographomics 11y ago
Only 256 colours per frame, but they don't have to be the same ones, and can be combined to use a wider palette - for example: http://notes.tweakblogs.net/blog/8712/high-color-gif-images....
54.
by geographomics 11y ago
No, what does it mean?
55.
by geographomics 11y ago
I've come across quite a lot of firmware on embedded Linux devices that uses LZMA (the xz compression algorithm) to compress the kernel, u-boot, and/or filesystems. One memory optimisation for these, as they are typically being de
56.
by geographomics 11y ago
Most wifi networks are NATed, so this would only work if you could also reconfigure the router to forward the necessary ports to the device. You could use it more easily for hosting hidden services though, as those only require an outbound
57.
by geographomics 11y ago
I agree. Resuscitation seems unlikely, given that the freezing process itself damages the tissues, as well as the degradation that has already happened post-mortem.
58.
by geographomics 11y ago
Sounds like a poor implementation. This problem is rare in the UK - the time from card entry to PIN entry, and PIN entry to completion, is typically near-instant on most terminals.
59.
by geographomics 11y ago
I had exactly that problem with a digital photo frame. Company went out of business a few months after purchase, leaving no way to update the displayed photos (at least, not without hacking the device) as they were all pulled from a remote
60.
by geographomics 11y ago
How peculiar. For the "med sangs", I wonder if the blood of other mammals would provide relief for their symptoms.

More ›