lolsowrong

6 ms·

1.
by lolsowrong 26d ago
https://security.apple.com/blog/pcc-security-research/
2.
by lolsowrong 1mo ago
侍
3.
by lolsowrong 2mo ago
Why didn’t they?
4.
by lolsowrong 4mo ago
Do you have any evidence this is actually happening to good faith security researchers? There are many examples of Microsoft and other large corporations treating security researchers well. Microsoft hosts BlueHat, where they invite externa
5.
by lolsowrong 6mo ago
Can’t find the pdf, but it’s all related to the zentool stuff: https://github.com/google/security-research/blob/master/pocs... Tavis spells it out there pretty quickly: “ The simplest instructions (add,
6.
by lolsowrong 6mo ago
I saw the paper from Google last year and thought something in it aligned with not everything running through the microcode engine, though I could be wrong.
7.
by lolsowrong 6mo ago
I believe only some parts of Jazelle are handled in hardware, though I don’t know if anybody has got their hands on any of the bits of the software side. I do know there’s documentation on handling unimplemented instructions. I don’t know h
8.
by lolsowrong 6mo ago
Most of the time. But sometimes, no. See ATL thunk emulation (last I checked, still alive in the windows kernel) and ntvdm handling of the BOP pseudoinstruction. See also: Jazelle DBX. Hell, on modern x86 processors, many “native” instructi
9.
by lolsowrong 7mo ago
I agree there’s a big divide. I think I’m also team “let people do things they enjoy.” I like using computers to solve problems. I’m more interested in the problem being solved than the journey most of the time, though I’ve also been on som
10.
by lolsowrong 7mo ago
Can you look at code today and predict what assembly a compiler will output to some high degree of accuracy? Do you avoid certain classes of compiler optimization so you can more accurately predict compiler output? I recall a time where man
11.
by lolsowrong 7mo ago
I agree with this, but I’m also curious: what would have to change before that advice is as sound as “write a little bit of assembly by hand” or the even more ridiculous “just write the raw bytes for the program in a hex editor?”
12.
by lolsowrong 10mo ago
Yea, but Galen’s a beast so it might actually happen.
13.
by lolsowrong 1y ago
If I asked a human assistant to do this and it came back with that level of research, I’d be pretty disappointed.
14.
by lolsowrong 2y ago
This doesn’t seem true. Doesn’t LSASS cache credentials for 30 days?
15.
by lolsowrong 2y ago
Did you try making small changes to your phd proposal to see if it opened up new paths? </fuzzingjoke>
16.
by lolsowrong 2y ago
I was quite impressed as well.
17.
by lolsowrong 2y ago
https://chatgpt.com/share/66fd5ca8-1810-8005-a9b5-70ee11bdb8...
18.
by lolsowrong 3y ago
Trail of Bits if you want it done right.
19.
by lolsowrong 3y ago
Explain why it’s a huge mistake, please.
20.
by lolsowrong 3y ago
Did you learn to write or draw without studying the samples of artists and authors before you?
21.
by lolsowrong 3y ago
gnunits*
22.
by lolsowrong 3y ago
That’s DARPA’s bread and butter. They’re a research org, not a productization org.
23.
by lolsowrong 3y ago
Yes. Most of the work is not done in the DARPA building. Generally federal contractor sites. The daily work in the building is phone calls, reviewing papers, email, building powerpoint slides, and trying to come up with the next program. In
24.
by lolsowrong 3y ago
Program Managers are fixed term - up to 3 2 year terms (though Director Tompkins generally doesn’t like PMs to be around longer than 4 years - see section 1101 of the Strom Thurmond NDAA for more details about the hiring authority). I don’t
25.
by lolsowrong 3y ago
Yes. https://developer.apple.com/documentation/virtualization/run...
26.
by lolsowrong 3y ago
Google’s implementation allows multiple passkeys. I have a passkey for my iPhone, one from Windows Hello, and 3 from different yubikeys I’ve picked up over the years. The yubikey implementation requires setting a PIN, so I’m not even really
27.
by lolsowrong 4y ago
That mix up must be the human touch you’ve spoken so highly of.
28.
by lolsowrong 4y ago
“In this theoretical world, shorter people have bigger feet. Given the information provided, we can deduce the following height order: Ben (tallest) Paul Andrew Steve (shortest) Since shorter people have bigger feet in this world, we can al
29.
by lolsowrong 4y ago
Are both useful in some context?
30.
by lolsowrong 4y ago
Go type .1*.2 into any JavaScript console. Edit: slapping a few more in here: https://learn.microsoft.com/en-us/office/troubleshoot/excel/... https://daviddeley.com/pentbug/index.htm

More ›