luch

12 ms·

61.
by luch 6y ago
Well, sorry to break it for you but private companies have done this for decades. Rupert Murdoch's Pirates is a fantastic book on the subject: https://www.amazon.fr/Murdochs-Pirates-hacking-Ruperts-skull... Basically p
62.
by luch 6y ago
Not exactly, historically days are counted by how long the editor has provided a patch fixing the bug, as in "you[the adminsys] had X many days to apply the bugfix". 0day means no patch is available, whether the vulnerability is k
63.
by luch 6y ago
I don't think this is a thing for two reasons : * firstly, not many people outside the security world knows that bugs are a valuable commodity for attackers. Same thing with internal orgs diagrams which are something you can sell to ec
64.
by luch 6y ago
> The binary TDDP protocol merits further research since it is available on a broad range of TP-Link devices. The tdpServer binary regularly get abused to root TP-link devices for Pwn2Own Tokyo : https://www.thezdi.com/bl
65.
by luch 6y ago
Because if you start to support Linux you actually have to support all the major distribution (Debian, Arch, Ubuntu, Fedora, etc.) with their different idiosyncrasies, package format, libc implementations and/or version, etc. Basically
66.
by luch 6y ago
It's pretty reliable in reality, C compilers are actually quite predictible. The only meaningful changes compilation flags do is add/remove basic blocks. That's also mainly how malware reverse manages to "hunt" APT
67.
by luch 6y ago
I remember as a student seeing an Airbus bigwig explain why they created the A380 using a financial diagram : "short couriers costs X€/seat, transatlantic couriers costs Y€/seat and the new A380 will cost Z€/seat" (
68.
by luch 6y ago
The Sheet #16 about cookies and third-party trackers is quite interesting: ## To benefit from the exemption from consent **Subject to a number of conditions**, cookies used for audience measurement are exempt from consent.
69.
by luch 6y ago
Not sure if that's what you have in mind, but Microsoft now has an ARM-based product line : https://techcrunch.com/2019/10/02/microsoft-launches-the-arm... They even implemented a x86 emulator in order to
70.
by luch 6y ago
I genuinely thought that was a satire post about over-engineering Python projects
71.
by luch 6y ago
Let's not kid ourselves : European ad-tech companies are not substantially more ethical than their American counterparts. GDPR (even with its current clumsy implementation) is a much needed piece of legislation since the data processin
72.
by luch 6y ago
Because they would do it anyway. I've heard "stories" of attackers gaining control of a sat, "flipping it" to prevent it from listening to incoming commands, and then asking for a ransom from the original owners.
73.
by luch 7y ago
In my country the wealthy went ... in their summer house on the islands. You know, the typical location which is usually not self-sufficient and definitively not autonomous when it come to medical care facilities.
74.
by luch 7y ago
No unless you're at risk (old person or with medical issues) you usually don't get the flu shot. The reason is to actually to build the so-called "herd immunity" I think. Same thing with antibiotics (no need to give evol
75.
by luch 7y ago
This is really interesting data ! I for once would like to know why they refuse to hire contractors from Western Europe (is it a legal thing ?) : {"country":"*","contractor_factor":1.17,"entity":&
76.
by luch 7y ago
most insurance companies will play the "force majeure" card in order to exempt themselves from reimbursing clients. No insurance company is solvable against a global pandemic event.
77.
by luch 7y ago
Squid is vastly under-equipped to deal with the security hygiene needed for a project this important. That's the tragedy of the open source world : mission critical for everyone, but no actor willing to maintain it properly. It's
78.
by luch 7y ago
this is paid leave (it's only an allowance, not usually a full salary though). Where I live it's up to a year for a father, but most of them do not take it since we are still entrenched in the "father at work/mother at h
79.
by luch 7y ago
I know a good amount a professionals using it to dig olders builds of software. The Eye is actually better than Microsoft (at least for people without a msdn account) at archiving VS installers, Windows isos, etc.
80.
by luch 7y ago
> One can imagine what the Uber app would look like if the company operated like Airbnb. A rider would enter her location and destination and get a list of drivers with their fare bids and distances from the starting point. Then the ride
81.
by luch 7y ago
it's worse than that : airplane pilots are certified for a particular set of aircraft (and that's why the 737 max came to existence). Even if a company wanted to boycott Boeing, on top of refresh its current fleet it would have to
82.
by luch 7y ago
the current Xbox is running a Windows 10 (one kernel design) while the PS4 run a patched up FreeBSD. Only Nintendo bothers with writing custom kernels, and historically Sony with the PS2 having exotic "Cell" processor units.
83.
by luch 7y ago
iDrac have a default password : https://danblee.com/dell-idrac-default-username-and-password... There also quite a number of sysadmins that connect idrac's to the "regular" network, instead of the sysadmin VL
84.
by luch 7y ago
Sorry but it will take more than a blogpost for me to believe it. When P0 recruits two prominent Chrome hackers (Ned Williamson & Samuel Gross) and make them work directly on iOS, it look like a hit team to me.
85.
by luch 7y ago
Moreover, people are bad at keeping secrets. Social engineering is clearly a thing, even among infosec circles. Sometimes all it takes is being in the right bar and having a good ear.
86.
by luch 7y ago
And how do you qualify "Meltdown" and it's notorious bad fix "Total Meltdown" in that case ? To me, the bug fix introduced a clear regression, allowing an even more powerful vuln in the process.
87.
by luch 7y ago
Yep, nobody buy F-35 planes because it's a superior airplane (it's not) countries buy it in order to have better diplomatic relationships with the USA. It's pretty telling to see Germany refusing to buy F-35 or Hungary buying
88.
by luch 7y ago
The "cloud" as we know it rely heavily on CPU's hardware security and their virtualization technologies to enable untrusted computation from users. CPU security is actually one of the few topic Intel is extremely good at (don
89.
by luch 8y ago
Interesting, in French "retard" is a valid word (it means delay) which could be used as a project's name. Honestly it's a lost battle to try to censor hurtful projects names. At best you can moderate US-centric ones.
90.
by luch 8y ago
Javascript is actually a sane choice for extending a debugger (event-based, async calls builtins, etc.) it's just that I'm not familiar with :p I would have expected Windows to go with Powershell as their scripting engine, that&#x

More ›