luch

8 ms·

31.
by luch 4y ago
Word on the grapevine is saying that Google is doing similar. One of the "perk" of being a well-known DNS resolver (8.8.8.8) is getting an early notification whenever a server goes "online" on the internet.
32.
by luch 4y ago
fascinating answer from someone who chose the nickname "beltalowda"
33.
by luch 4y ago
Exactly, I am at a job where we have decades of cumulative experience using IDA and even we are wondering if we should not cut ourselves free of Hex-Rays's lock in and begrudgingly learn Ghidra. For a "new" professional/
34.
by luch 4y ago
to get 4K resoltution with Edge on Windows, you need to activate VBS (Virtualization-based Security) and Secure Boot. In that config, DRM keys are stored in a trusted application in secure world, and Edge from normal world ask the TA to dec
35.
by luch 4y ago
You're absolutely right, it's still supported security wise. You just don't get the new versions of iOS
36.
by luch 4y ago
Because people like free stuff. More seriously, it's a way to build a "clique" organically, same as for sports teams. It's a non mandatory uniform in a way.
37.
by luch 5y ago
If you missed the news, the Log4Shell RCE vulnerability in Log4j impacts a memory-safe language (Java). It's too early to tell -it dropped last friday - but it will probably be marked as one of the most egregious vulnerability to date
38.
by luch 5y ago
I know several security professionals who do incident response and therefore see a lot of IT setup across multiple domains since ransomwares are endemic nowadays, and according to them 99% of the shops they intervene run Office or Outlook(3
39.
by luch 5y ago
Or better : outlaw ski lifts. You can still do some skiing or snowboarding, but you have to get to the summit yourself like alpine hunters.
40.
by luch 5y ago
now you do : https://github.com/Cisco-Talos/vboxhardening
41.
by luch 5y ago
now I think they can't be built less than 350 m from any house, and if they are in the 350 m to 500 m range they must be an impact study before approving the construction. However there wasn't such rules when the first wind turbin
42.
by luch 5y ago
Yep, the good ol' "if this feature annoys the hell out of me it should probably also annoy the hell out of the attacker" (Which is not even remotely true)
43.
by luch 5y ago
It's actually pretty standard to fork QEMU when you want to emulate a custom kernel/board. QEMU is a good common emulation platform, but in no way it can emulate correctly every quirks of a custom pci or even PIC device expected b
44.
by luch 5y ago
Air France, Lufthansa, airBaltic & SAS already said they would not fly over belarus anymore
45.
by luch 5y ago
we won't get a CPU Renaissance, but we are seeing a new era of "hybrid processors", aka dedicated processors running a custom ISA. For example, Huawei's Kirin NPU.
46.
by luch 5y ago
faking being irrational about your position unfortunately may be quite successful when negotiating against a rational actor : https://www.ismanundpartner.com/blog/irrational-negotiator However, I'm not sure it is
47.
by luch 5y ago
Depends on the situation, which is why CVE also have a CVSS score explaining the context and potential for abuse, e.g. : https://msrc.microsoft.com/update-guide/vulnerability/CVE-20... For example an arbitrary com
48.
by luch 5y ago
Don't be so sure it will never change. Until last year the EU had zero involvement in healthcare and public safety, that was every nation's own private garden.
49.
by luch 5y ago
I agree, it's better to differentiate based on revenues rather than just age. In my country, if you're poor and if it's the first house you buy, you can ask a 0% tax loan from the government and use it to pay your stamp duty
50.
by luch 5y ago
Not even underdeveloped countries, I live in a G8 country and there is hardly any significant FAANG shop here. For example if you want to work for Google in Europe it's either UK or Switzerland, which are interestingly the two develope
51.
by luch 6y ago
there are always workarounds, but they are becoming less "generic" (i.e. more context-aware). Here's a recent example : https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-c...
52.
by luch 6y ago
Google forensic team also maintain an Docker introspection tool : https://github.com/google/Docker-Explorer
53.
by luch 6y ago
Ursula Van der Leyen actually tried that and it's considered its biggest political mistake : https://industryeurope.com/sectors/politics-economics/ec-pre... Basically by doing so the EU would take Ireland &qu
54.
by luch 6y ago
Holy shit, I knew from anecdotal evidences that young people from Spain and Italy were "fleeing" their country but the demographics are frankly scary ! I don't know how what the retirement scheme is implemented over there, bu
55.
by luch 6y ago
I also own a reMarkable 2 since last December and the fact it is not a light source makes it valuable when you spend almost all your waking hours staring at screens. For me, the most useful trait is that it gathers all my note in a "ph
56.
by luch 6y ago
or even western Europe. There are some world class developers in Spain, Italy or France that are paid ~30K€ to 50K€ per year. Even when factoring in the tax levels and COL, there is still a huge potential for social dumping from the EU
57.
by luch 6y ago
Several epidemiologist are trying to warn the developed nations that the current battle for covid vaccines provisioning is doing the world a disservice since it allows the virus to mutate in parts of the world that can't compete econom
58.
by luch 6y ago
I think the better hack would be to run it into a speech-to-text transcoder, and then use a vocoder to play it back. You lose the "voice" in the process, but in some situations it might actually be fine
59.
by luch 6y ago
This is the magic of "offensive" security, where you don't really bother with your own security posture :D you know what they say, the cobbler's children are the worst shod ...
60.
by luch 6y ago
A a side-note I'm interested in the PDF diffing tool the author is using, seems pretty well made

More ›