indolering

7 ms·

91.
by indolering 11mo ago
I mean, they do all the time. The value is generally in keeping access, however, and operational security and access control is helpful. You can knock a system out but then you just get kicked out and have to start over.
92.
by indolering 11mo ago
It's in a proto state due to anemic academic funding. We need to throw cash at the problem.
93.
by indolering 11mo ago
I was agreeing with you! It's a drinking game because the infosec field is laughable. Who needs a zero day RCE when the president is using an EOL Samsung?
94.
by indolering 11mo ago
seL4 has the lowest IPC overhead of any kernel and it's an order of magnitude faster than Linux [1]. But you are correct: switching cost amounts of noise when architectured correctly. LionsOS [2] (which is based on seL4) has some benc
95.
by indolering 11mo ago
Everything thinks of Defcon et al a a gathering of elite hackers. But it's more of a fucking drinking game. The depressing fact is that you don't need an RCE to accomplish most goals.
96.
by indolering 11mo ago
We do see it! Do you not remember the Snowden leaks? Shit hasn't changed much. We still have monolithic kernels written in portable assembly. Linus still doesn't tag bug fixes with potential security impacts as such because he
97.
by indolering 11mo ago
Militaries have billion dollar budgets.
98.
by indolering 11mo ago
I was not being hyperbolic: a couple million dollars is very cheap for virtually any military. Both exploit broker bounties and corporate bug bounties are in that range. What is your objection?
99.
by indolering 11mo ago
There is power in restricting access and air gapping helps a lot. A drone (for example) can fall back to basic cryptography to limit access. Air gapping is a baseline requirement in most safety critical systems. Nuclear power plants in pa
100.
by indolering 11mo ago
These prices are consistent (actually more costly) than public bounties by (now defunct) western based exploit brokers and manufacturer bounties. > Those are (mostly) not RCE, and are for consumer devices configured in a default way. I&#
101.
by indolering 11mo ago
The publicly available exploit prices put a browser zero day at $200k-$500k. That's the same cost as firing a few Javalin missiles. OS RCE runs into $1-$2 million. Much less than a cheap Russian tank. [1] The cost of internally deve
102.
by indolering 11mo ago
You need a different kernel for firmware verification. But it should be regulated at this point.
103.
by indolering 11mo ago
Any government can get RCE on any OS with the change in their couch. Formal verification of process isolation is REALLY important when lives depend on it. That's a huge value add! My main concern is speed and the lack of capability b
104.
by indolering 11mo ago
> You focus on a very specific type of soil that Technology Connection didn't even mention, and isn't even relevant for a typical wash. But that's a primary issue with TC's tests: it doesn't consider corner cases
105.
by indolering 11mo ago
Consumer Reports has the objective metrics you are looking for.
106.
by indolering 11mo ago
Then why don't manufacturers recommend this? Why don't dishwashers in Europe (which have access to higher voltages) run the prewash hotter? It's because, as outlined in the linked article, hot water makes the problem of stai
107.
by indolering 11mo ago
I am loving this level of petty nerd fighting over detergents! My co-workers thought I was joking when I told them I have HOURS of high quality dishwasher content on YouTube. Claiming that a leading brand was being beaten by a random formu
108.
by indolering 11mo ago
It started with Mozilla, Apple, and Opera jumping ship and forming WHATWG. That stopped new XML related technologies from being adopted in browsers twenty years ago. Google is just closing the casket and burying the body.
109.
by indolering 11mo ago
God I hope the AI bubble bursting takes out a chunk of Ellison's wealth!
110.
by indolering 11mo ago
Yeah, they definitely stopped investing in the APIs themselves. If someone can make a polyfill to shoe-horn in the functionality, then they don't really see a need. Which is sad, as we have outsourced our future to TypeScript, React,
111.
by indolering 1y ago
What has stalled with IndexedDB and BigInt?
112.
by indolering 1y ago
I would support taxes based on long term health effects. The sugar tax in Mexico had measurable impacts IIRC.
113.
by indolering 1y ago
> “21% of sports bettors say they’ve verbally abused an athlete, either in person or online, after losing money on a bet.” This is exactly what it felt like to work in crypto.
114.
by indolering 1y ago
Yeah, just because browser vendors put XML tech in maintenance mode doesn't mean that it wouldn't be nice to have. We might see real world usage of these technologies had browser vendors not frozen them out.
115.
by indolering 1y ago
Mozilla and others fell out of love with XML a long time ago. Deprecation of these technologies was probably inevitable after the WHATWG pivot and when they stopped adopting new XML tech. XML and related technologies got frozen in time an
116.
by indolering 1y ago
My understanding is that it met some government requirements that Android did not. Niche for sure but useful in some contexts.
117.
by indolering 1y ago
This is a "why not both" strategy: ARM has the market share whereas the RISC-V ecosystem is still being built up. Once you have a RISC based chip, it's not nearly as much work to change to another RISC ISA.
118.
by indolering 1y ago
I guess the "build it and they will come" fab investment policy was faith based all along!
119.
by indolering 1y ago
Probably best to not mention "Porsche" and "tank" in the same headline.
120.
by indolering 1y ago
Note that the tweaks to Blake2 and Blake3 weakened the cryptanalysis done for the SHA3 hashing contest such that it is not directly applicable. That doesn't mean they are not well respected and probably fine, it's just that we ha

More ›