keyme

19 ms·

151.
by keyme 8y ago
When security is only an afterthought, the product (and in this case, the entire discipline) will remain insecure for decades. Just like security was an afterthought in the software world up to the late 90's. Software today is still wr
152.
by keyme 8y ago
I actually looked at the widevine DLL at some point out of curiosity. It didn't seem obfuscated in any way. Honestly I think getting the keys to the encrypted streams out of there is at the difficulty level of an average CTF challenge.
153.
by keyme 8y ago
L3 is the only thing used on desktops. L1 on desktops requires Intel SGX, however, I haven't ever seen this implemented in reality. If anyone has seen it, please share. Otherwise, L1 exists only on Android and iOS, AFAIK. The article c
154.
by keyme 8y ago
It's patchable, but requires each implementor to recompile the FW with an up to date stack. The patched stack is available on TI's site for months now.
155.
BleedingBit: The hidden attack surface within BLE chips [pdf](go.armis.com)
70 points by keyme 8y ago|14 comments
156.
by keyme 8y ago
Yup. The current minister of interior has already been in jail once, for offenses committed as the minister of interior (10 years or so ago).
157.
by keyme 8y ago
I think a cyber 9/11 is just about the only thing that'll make us get our shit together in this industry. Hopefully it happens before cyber WWI.
158.
by keyme 8y ago
Kaspersky is an arm of Russian intelligence.
159.
by keyme 8y ago
No you don't... It's just another agent. Granted, this one sees very little traffic each day, so probably less inclined to annoy you out of spite. Perhaps if you carry a diplomatic passport, that's a different story altogethe
160.
by keyme 8y ago
Who's the ruling group? AFAIK, everyone passes through the same border agents...
161.
by keyme 8y ago
There was no Jewish enslavement by the Egyptians. Back then there were no Jews. The enslaved people were called Israelites.
162.
by keyme 8y ago
"which side are you on" == exactly what the guy above said about people like you reviving the cold war. What sides?
163.
by keyme 8y ago
Meanwhile the people you're mockingly referring to here are running your country. Just this fact must be enough for you to tolerate what they have to say. If not, you're demonstrating exactly the problem this article is talking ab
164.
by keyme 8y ago
"... only from the same subnet" What about DNS rebinding (decade old unpached vuln)? It allows websites to issue requests onto your local subnet. Actually... Issuing a request doesn't even require any vuln, it's not a SO
165.
by keyme 8y ago
No signature? No Satoshi.
166.
by keyme 9y ago
Let me ask you this: when you think about our future in 100-200 years, what do you see? Do you really see us sitting around here and just being? Just stagnating? Waiting for the real-estate and resources to finally run out? If you don'
167.
by keyme 9y ago
IIRC the movie The Congress (2013) is about this (before it transitions into a full on acid trip)
168.
by keyme 9y ago
They do apply to WASM. However, these mitigations are hardly air tight. I'd expect new exploits anyways.
169.
by keyme 9y ago
It's the same with any such "mystical" organisation. There are no Hollywood super-humans anywhere. It's regular people cooperating and doing their jobs all the way down.
170.
by keyme 9y ago
From the WP: "... Extended Flow Specification (EFS) [is a] feature of L2CAP ..."
171.
by keyme 9y ago
I'll add that extending the range of a Bluetooth transmitter significantly (hundreds of meters) is possible using a directional antenna and a power amplifier. This means that sitting in a building next door, or just having a direct lin
172.
by keyme 9y ago
Why bruteforce when you can just passively listen for a working code (once someone else uses their card)? 40 bits of bruteforce at 125khz, with every code being 40 bits long, results in 3125 codes/sec at best, thus it will take roughly
173.
by keyme 9y ago
Is it though? Who knows what kind of "soft center" is around the "hard shells" of these organisations? For starters, the "uname -a" he ran shows the server's kernel to be from Jan 2016. Right from the top
174.
by keyme 9y ago
My guess is that a split of any initial ratio (even 50-50) will quickly converge to 90%+ of all users on one side. Quickly, as in minutes to hours. Also, by "users", I don't mean holders. I mean entities that actually transac
175.
by keyme 9y ago
If all the data on the phone is in the cloud (as it is for most users), unlocking would just be a factory reset of the device. Also, while it is indeed a powerful networked computer, it does a lot less stuff in the background than a PC (and
176.
by keyme 9y ago
Hacking shipping route info, then sending pirate boarding parties would be pretty cyberpunk (and too easy for these drone ships to actually catch on).
177.
by keyme 10y ago
You'd have to train yourself to "think privately" now... Most people don't even know how to text privately. This may truly be a dystopian nightmare.
178.
by keyme 10y ago
Here's an idea: There exists an FCC ID for every device that uses the RF spectrum. Similarly, there should be a similar required license for any device/product that operates on the Internet. The license should be easy to get initi
179.
by keyme 10y ago
This is interoperability. At the very least this is a gray area.
180.
by keyme 10y ago
I actually have Ubuntu 16.4 on the previous (non Dev Edition) generation of this laptop (HW almost identical), and it works almost out of the box for the things you mentioned (needed to solve a problem with touchpad palm detection, and touc

More ›