hacknat

25 ms·

391.
by hacknat 9y ago
I racked my brain in disagreement at first with her claim (I took a fair amount of ancient literature classes in college and continue to read ancient literature when I can), only to find I couldn’t come up with many examples that contradict
392.
by hacknat 9y ago
Posts on creating a successful startup seem to all suffer from a lack of 2nd order thinking. Even some of the posts from PG. I’m sorry, but it is blindingly obvious, IMO, that startups should focus on surviving, whereas someone like Jeff Be
393.
by hacknat 9y ago
I think the death of net neutrality is an act of desperation (clearly someone is behind it, because...why now, why the spam comments, why so fast, etc), because cable was a medium of control, but broadband is a utility with little opportuni
394.
by hacknat 9y ago
Yeah. I was about to say don’t get mad at the West, because we don’t trust you, get mad at your own government. If China was a free and open society to the point where I could simply understand the relationship their businesses have with th
395.
by hacknat 9y ago
Everyone is assuming the author is giving up on Langsec. Read carefully, he called Spectre/Meltdown a setback. I think he’s making a subtler point that the fundamentals of programming have become more of a pragmatic activity than a mat
396.
by hacknat 9y ago
Can anyone point me to the ethnic breakdown of the opioid epidemic? Does it cut across ethnicity/race evenly or does one group suffer more (my guess would be white men).
397.
by hacknat 9y ago
Because Intel writes almost all of the x86 arch code for Linux, so AMD gets stuck footing the bill for hardware bugs like this, even if AMD isn’t affected. From Linus’s perspective it’s the same arch, because, well, it is.
398.
by hacknat 9y ago
Not to mention mood disorders are still not well understood. Anxiety and Depression actually manifest different symptoms in other cultures.
399.
by hacknat 9y ago
Also seems like Magenta doesn’t have users and groups as a first class construct. It looks like there are primitives to create them in user space, but the kernel only has one construct (Jobs) by which security is administered, rather than
400.
by hacknat 9y ago
Yeah and I’m wrong about that part anyways. You can’t cap out or block getuid without breaking glibc. I meant setuid, but that call isn’t used in this exploit. I got confused.
401.
by hacknat 9y ago
Oops good call. I meant setuid, but either way I was wrong.
402.
by hacknat 9y ago
It’s not a full kernel memory CVE, you have +-255 bytes access to kernel memor from the cred pointer. I have no idea if that extends to userns or not. Also I think your confusing Java threads for system threads they are not the same. I thin
403.
by hacknat 9y ago
You don’t need to use containerd. Other runtimes make it possible (per container offsets have been possible in runc for over year).
404.
by hacknat 9y ago
You knew old Bolsheviks? Or did you know some Western sympathesizers? Big difference, but either way you’d have to be north of 80 years old. Chomsky on Leninism: https://youtu.be/Nz11K1wUbrc Hint: he’s not a fan
405.
by hacknat 9y ago
The most scathing analyses of Bolshevism I have heard have come from the likes of Chomsky and Zinn, who are/were hardly neo-liberals. For all of its faults at least capital aggregation doesn’t have a moral prerogative behind it.
406.
by hacknat 9y ago
No it doesn’t matter. If they have waituid and getuid then they are off to the races.
407.
by hacknat 9y ago
Because the Docker project doesn’t make money off of security. It is actually quite infuriating, because they have become the de facto container image standard. Most of their security has actually come from Twistlock (I am not a Twistlock e
408.
by hacknat 9y ago
Sure. User namespace-ing is a feature of container security that allows you to grant a process root access to a filesystem that itself is not root. To the running process it appears that it is or can run as root, but on the host it actually
409.
by hacknat 9y ago
Randomized pids wouldn’t nexessarily help that much in this situation, especially if the getuid syscall is available. However, I agree with your general sentiment that there are basic security features that Linux could implement to make a l
410.
by hacknat 9y ago
This exploit is interesting, but if you are doing container security correctly it’s actually not a big deal. In particular if you are setting per-container usernamespaces, like you ought to be, then this exploit doesn’t do anything. In fact
411.
by hacknat 9y ago
Okay. He spent more time on his argument than you did countering it. Care to elaborate? It’s not self-evident to me that you’re right.
412.
by hacknat 9y ago
I think your view is a little biased by your work. Much of biological research still relies on statistical methods. The Higgs boson, most of patho-biology, drug research, are just a few fields/discoveries I know for sure rely heavily o
413.
by hacknat 9y ago
Seattle solves the problem by having separate car and bike lights. Bikes get a preemptive green for about 15 seconds then cars have the right of way.
414.
Show HN: Golang-only eBPF library(github.com)
1 points by hacknat 9y ago|0 comments
415.
by hacknat 9y ago
Interesting. @icebraining, do you know where this list exists?
416.
by hacknat 9y ago
Firmware can be closed source, but I’m fairly certain you have to open source the drivers too.
417.
by hacknat 9y ago
Not my decision sorry. If you are using them for some kind of server side tech then you’re probably in the clear, but if you are distributing any eBPF code you write to a consumer (think IoT) then you’ll have to think about it.
418.
by hacknat 9y ago
He’s specifically calling out the goal of reducing tunneling costs by accelerating the TBM. The other projects that have reduced costs have done so through boring old sound construction management practices (the article pointing out the lab
419.
by hacknat 9y ago
Because it’s an absurd idea. He’a trying to solve an already solved problem with an inferior consumer solution. When you look at the commuter trains of the major metro areas you’ll notice some very well off people that could afford to drive
420.
by hacknat 9y ago
If anybody is interested I wrote a go-only library to interact and create ebpf programs. It even parses the compiled elf binary for you and maps it to your variable names: https://github.com/nathanjsweet/ebpf

More ›