landr0id

5 ms·

31.
by landr0id 6mo ago
Hi, quick note on "For modern Xbox platforms, public 2024 work exposed SystemOS kernel exploitation on both Xbox One and Xbox Series" I'm a former Xbox hacker, then former Microsoft employee, and (long after) leaving Microsof
32.
by landr0id 7mo ago
For real. Use https://radicle.xyz/ if you want actual takedown resistance.
33.
by landr0id 7mo ago
Looks like your wish was accidentally granted :)
34.
by landr0id 7mo ago
Relevant: https://www.reddit.com/r/ClaudeAI/comments/1s7zgj0/investiga... https://www.reddit.com/r/ClaudeAI/comments/1s7mkn3/psa_claud...
35.
by landr0id 7mo ago
I maintain some tools for the videogame World of Warships. The developer has a file called GameParams.bin which is Python-pickled data (their scripting language is Python). Working with this is pretty painful, so I convert the Pickled struc
36.
by landr0id 7mo ago
They aren’t wrong. They’re literally using scripts on their site in an attempt to DDoS a blog which (partially?) de-anonymized the archive.today operator.
37.
by landr0id 7mo ago
lol. I wish you good health and best of luck Sanad.
38.
by landr0id 7mo ago
lol
39.
by landr0id 7mo ago
And the plaintext stuff by the way was a great effort by some other folks running https://xboxoneresearch.github.io/ I think it was tuxuser, Torus, and Billy(?) who accomplished that. Hopefully not forgetting anyone critica
40.
by landr0id 7mo ago
Thanks for the mention! I helped with the collateral damage exploit (wrote the PE loader). I didn't ask but Emma -- who wrote the kernel-mode exploit -- and I would probably agree that Collat is not really what we would consider a prop
41.
by landr0id 7mo ago
> Thankfully, the game's community narrowed down the issue and eventually found that the fnmsubs CPU instruction was implemented incorrectly in Dolphin's JIT but worked correctly in our interpreter. Sounds like a good opportuni
42.
by landr0id 8mo ago
I've always used GUIs and had to basically break my brain to learn vim keybindings (in Sublime Text) some time ago and the helix bindings are just different enough to throw me off. Sucks because I would prefer an out-of-box solution th
43.
by landr0id 9mo ago
I mean to be fair, there's really no guarantee that something in the phone's hardware is neither sending nor receiving (and processing) signals. I agree though that if you're worried about being tracked or attacked, in most s
44.
by landr0id 9mo ago
>But this app doesn't capture HDR. When you say the Xbox game bar accounts for it, do you mean video or still images? I've had HDR disabled for some time but I remember win+shift+s on Windows 11 capturing over-exposed screensho
45.
by landr0id 10mo ago
Android also allows developers to split up their APK so features can be delivered on-demand: https://developer.android.com/guide/playcore/feature-deliver... AFAIK iOS does not offer anything similar.
46.
by landr0id 10mo ago
If you have a codebase that uses unsafe, I highly recommend running your tests through Miri (cargo miri nextest) and seeing what spills out. I ran tests for a codebase at work through Miri a while ago and found a couple of distinct classes
47.
by landr0id 10mo ago
>so a customer without a smartphone could relay the diagnostic session to a technician Do you mean by mimicking the noises themselves?
48.
by landr0id 10mo ago
Pretty cool for BSH and Miele to hop on a call with the researchers just to make sure there were no issues they were unaware of. Sounded like it was productive and positive for everyone involved. Hopefully they don't start doubling dow
49.
by landr0id 10mo ago
Yeah, instead they have a cargo-cult of self-proclaimed OSS contribution experts who harass anyone that critiques or challenges ffmpeg's twitter account.
50.
by landr0id 10mo ago
They speak about “technique” but rkyv is a Rust-specific format. Could be an editing error or maybe they’re suggesting it’s more difficult in python.
51.
by landr0id 10mo ago
From my experience UB in Rust can manifest a bit differently than in C or C++, but still generally has enough smoke in the right area. I believe their point was that they only needed to audit only the unsafe blocks to find the actual root c
52.
by landr0id 10mo ago
Apple relaxed these rules shortly after the initial Epic vs Apple lawsuit: https://www.cnn.com/2021/09/02/tech/apple-app-store-changes-... Apologies for being unable to find a better source at the moment
53.
by landr0id 10mo ago
I have no problem with their opinions but I don’t think it should have been said in a Foundation post. It may have been updated, but nobody is reading the update.
54.
by landr0id 10mo ago
I'm surprised Firefox didn't warn me when I went to the page. Hostile teleco/MITM waiting for HTTP traffic are a real-world way that nation states deliver exploits.
55.
by landr0id 11mo ago
Hey Andrew, question for you about something the article litely touches on but doesn't really discuss further: > If the programmer uses async() where they should have used asyncConcurrent(), that is a bug. Zig's new model does
56.
by landr0id 11mo ago
I read the same complaint about the language from people I follow who love and actively promote Nix. So it's not just you. Sorry for adding to your frustration of "just follow what someone else did" but I recently went all-in
57.
by landr0id 11mo ago
> Your point about exercising caution with forks of encrypted messaging apps is a great rule of thumb, and in general, social proof should NOT substitute for competent software security specialists reading and evaluating source code Also
58.
by landr0id 11mo ago
>As they say in the Github readme, FCM and Google Maps. Thanks, I didn't notice that. Reading this, I'm kind of surprised that Signal doesn't offer an OpenStreetMaps build as it seems like it'd be more inline with the
59.
by landr0id 11mo ago
> Contains no proprietary blobs, unlike Signal What "proprietary blobs" does Signal have? I'll also just add: it's probably not a good idea to use any modifications to an E2EE messenger unless you are comfortable with
60.
by landr0id 11mo ago
First sentence: >I have been writing production applications in Go for a few years now. I like some aspects of Go. One aspect I do not like is how easy it is to create data races in Go. Their examples don't seem terribly convoluted

More ›