madars

8 ms·

121.
by madars 2y ago
Running or virtualizing DOS-era software can be non-trivial: see, for example, Windows 98 vs TLB cache invalidation behavior in modern CPUs https://blog.stuffedcow.net/2015/08/win9x-tlb-invalidation-b... requiring
122.
by madars 2y ago
Ledger uses STMicroelectronics secure elements and should not be affected by this. Trezor Safe uses Infineon OPTIGA though. See https://bitcointalk.org/index.php?topic=5304483.0 for a table with wallets and their respective
123.
by madars 2y ago
PDF of the EUCLEAK writeup: https://ninjalab.io/wp-content/uploads/2024/09/20240903_eucl... Yubico blogpost: https://www.yubico.com/support/security-advisories/ysa-2024-...
124.
by madars 2y ago
Apple's great AAC encoder was (is?) also available as part of iTunes for Windows. One can extract the DDLs from the installer and use them with qaac to encode AACs. Apparently even works in Wine: https://www.andrews-corner.o
125.
by madars 2y ago
>why do you think there's no anti-anaesthetics movement? for one, I've never been required to get anesthesia as a condition of employment. lumping all vaccines together is not productive and we don't do that when discussin
126.
by madars 2y ago
Traditionally, Cuba libre also has lime juice while a plain "rum and Coke" order leaves it out. https://iba-world.com/cuba-libre/
127.
The Dark World of Doxing for Profit(wired.com)
2 points by madars 2y ago|1 comments
128.
by madars 2y ago
The article does not say but I'd bet $20 that breed-specific legislation would help. Most people can't handle a pet tiger ("it's just how you train them!" yeah right) and when 6% of dogs (pit bulls and pit bull bre
129.
by madars 2y ago
It's worse: Pr[correct output | hard input] = 0, even though they estimate that Pr[correct output | random input] ~ 1. This means that you can't, for example, amplify your success probability by repeating the algorithm a bunch of
130.
by madars 2y ago
Amazing naming choice - doggos like to dig!
131.
by madars 2y ago
Slack lets free plans to turn on 90 day retention (i.e. content auto-deletes after 90 days). Free workspace users might want to consider this as a risk reduction measure: free users don't have meaningful access to beyond-90-day content
132.
by madars 2y ago
If you like dogs, one can recommend https://en.wikipedia.org/wiki/Wishbone_(TV_series) which got praise for "refusing to bowdlerize many of the sadder or more unpleasant aspects of the source works." Not sure
133.
Cloudflare acquires BastionZero to extend Zero Trust access to IT infrastructure(blog.cloudflare.com)
4 points by madars 2y ago|0 comments
134.
by madars 2y ago
This is already happening: Microsoft's opt-out is _optout (can appear anywhere in SSID), Google/Apple's _nomap has to be at the end so prepare for YourAPName_optout_nomap! https://superuser.com/questions/
135.
by madars 2y ago
Something related is part of Android 15 Beta 2 released today -- "Private space lets users create a separate space on their device where they can keep sensitive apps away from prying eyes, under an additional layer of authentication. T
136.
My four-year-old son came up with a theory(old.reddit.com)
1 points by madars 2y ago|0 comments
137.
by madars 2y ago
https://kiljan.org/2021/12/14/vpn-as-wan-for-guest-network-o... is a great start for how to set up a WiFi network with an always-on VPN
138.
by madars 3y ago
Yes, it also disables WASM, MP3 decoding, gamepad API, JPEG 2000, SVG fonts, PDF previews, WebGL, Speech Recognition API, Web Audio API. Pretty much web as it was meant to be ;-) https://9to5mac.com/2022/07/25&#x2F
139.
by madars 3y ago
Might be http://witch.valdikss.org.ru/ , e.g., using number of flows and MTU (and maybe other techniques)
140.
Njalla: Suspended .TV Domains Could Soon Return to Life(torrentfreak.com)
3 points by madars 3y ago|0 comments
141.
by madars 3y ago
100%. Another underappreciated point is that factoring connection is very misleading. That is, we don't know if factoring is equivalent to breaking RSA (in particular, the algorithms breaking low-exponent RSA (which one shouldn't
142.
by madars 3y ago
Hetzner has a reputation for locking accounts for "identity verification" (Google "hetzner kyc" or "hetzner identity verification"). Might be worthwhile to go through a reseller just to avoid downtime like that
143.
by madars 3y ago
At least in the past some SAT solvers were vastly better on certain kinds of problems. E.g. cryptominisat had native handling of XOR clauses which no other solver did. By referencing pertinent details of your experimental setup you could sa
144.
by madars 3y ago
That says less about crypto and more about default permissions for new accounts. E.g. if your CI let you open connections to tcp/25, got abused by spammers, and then added extra registration steps, would you blame existence of email?
145.
by madars 3y ago
Somewhat off-topic but does anyone have a bookmarklet that would remove annoying scrolling behavior on sites like Quanta? I.e. pressing space bar should immediately scroll down a page, not do it slowly with awkward mechanics. In exchange I&
146.
by madars 3y ago
Another place where non-transitive comparison frequently results in correctness errors/crashes is balanced tree-based STL containers like std::set or std::map. It's interesting to know whether those are similarly exploitable.
147.
Certificate of Need(en.wikipedia.org)
3 points by madars 3y ago|0 comments
148.
by madars 3y ago
CDL != regular driver's license. Does an average driver know how to operate air brakes or prevent jack-knifing or what to do with a runaway engine? Trucking is a highly specialized job and requires more aptitude than ordinary driving.
149.
by madars 3y ago
WebKit does not support blocking Web Request, which is what uBlock Origin uses (See compatibility matrix at the bottom of https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... ) In fact, it is a
150.
Google News searches ranked AI-generated ripoffs above real articles(nypost.com)
63 points by madars 3y ago|24 comments

More ›