mjg59

29 ms·

421.
by mjg59 3y ago
Eh kind of? Coreboot effectively provides the hardware initialisation layer - if you want runtime firmware you're going to need a payload like SeaBIOS (which is GPLed, but which isn't really intended to bring up real hardware from
422.
by mjg59 3y ago
Very small nit: there's a reference to the Apple T2 chip. The Apple Silicon devices don't have a T2 - the functionality is integrated directly into the SoC. If it had been a T2 device then it would be possible to "simply&qu
423.
by mjg59 3y ago
By the time HiMD rolled round, Sony seemed to have figured this out - the 1GB MDs store data, and the players can reformat the older discs into a data storage format, so there exist players that you can boot from. Far too late, of course.
424.
by mjg59 3y ago
A high school friend bought a Minidisc recorder (pretty sure it was a Sharp) with his summer job earnings, and at the time (1997ish) it was an incredible object - battery technology more advanced than NiCad, LCD display of track titles, eas
425.
by mjg59 3y ago
https://news.ycombinator.com/item?id=37703041
426.
by mjg59 3y ago
Only if the top bit is set to zero, and there exist 8-bit representations of ASCII where that isn't true.
427.
by mjg59 3y ago
Elsewhere in the thread is an example of a system setting the top bit when storing ASCII in 8-bit files. But storing it as an 8-bit encoding is also a convention rather than a requirement, and any file with an alternative encoding would not
428.
by mjg59 3y ago
Yes, the AT command set is used in modern modems. But they didn't choose to use it because of the line speed synchronisation properties. (Edit: and while the AT command set is supported, modern systems tend to use custom command sets i
429.
by mjg59 3y ago
My apologies, you're right (and I say this as someone who has REed devices with an LTE modem connected over serial, so I really should have known better). But I would certainly still assert that the choice of the AT prefix was for comp
430.
by mjg59 3y ago
I'd argue that the need to provide a specification for ASCII as an 8-bit format is pretty strong evidence of the existence of ASCII in other formats :) Edit: to clarify, there's a spec for ASCII-as-8-bit-with-top-bit-clear, but it
431.
by mjg59 3y ago
ASCII defines a 7-bit character set. It's modern convention to encode that with each character as an 8-bit value with the top bit clear, but there's no inherent reason for ASCII to be represented that way, and a single counterexam
432.
by mjg59 3y ago
What specification defines ASCII encoding as an 8-bit format?
433.
by mjg59 3y ago
What's interesting about this is just how bad it is at tying this to the modern world. For instance, just after discussing how the "AT" Hayes command prefix has useful properties for automatic synchronisation of line speed: &
434.
by mjg59 3y ago
Not just Amazon, Google at least will send you something similar: https://cloud.google.com/transfer-appliance/docs/4.0/overvie... (I helped with the design for the attestation that gives you more confidence t
435.
by mjg59 3y ago
Oh, it can - the issue I hit here was one that's very similar to an issue I'd hit where the Boot Guard PCR 0 measurement simply wasn't logged at all. The vendor fixed it. I don't want to argue that that's the common
436.
by mjg59 3y ago
If you're talking about the T2 vulnerability - no, PD negotiation is not sufficient, you need arbitrary data communication.
437.
by mjg59 3y ago
The use of "piracy" to describe unauthorised publication of a copyrighted work dates back to the 18th century, it's not something the MPAA came up with.
438.
by mjg59 3y ago
Whether or not a collection of facts can be subject to copyright varies across jurisdiction - in the US you can't copyright the phone book, while the EU has a specific concept of database rights. What's critical in the US case is
439.
by mjg59 3y ago
Proving your identity to an onion service in a way that can be tied to your use of other onion services feels like it might have bad outcomes?
440.
by mjg59 3y ago
Pluton rather than Proton, but yes.
441.
by mjg59 3y ago
That vulnerability allowed unauthenticated access to AMT, not arbitrary code execution on the ME. I agree that an ME-based fTPM has a larger attack surface than a dTPM, but we haven't seen many cases where that's had real-world po
442.
by mjg59 3y ago
"Authentication" here is something of a misnomer - it's setting up an encrypted session without any proof of identity. In that form it's sufficient to block passive sniffing and require an active MITM instead. The TPM&#x
443.
by mjg59 3y ago
One option is that it's not Google protecting you against Google, it's Google attempting to drive other Android vendors towards the same infrastructure in order to protect users against vendors being compelled to produce targeted
444.
by mjg59 3y ago
Z80 does seem to be on borrowed time, but the real sea change is going to be displacing 8051
445.
by mjg59 3y ago
For the most part, the bugs we've seen in recent history can be handled at the kernel level - there's largely no need for applications to care about them (browsers to an extent being a counterexample, but even then if you disable
446.
by mjg59 3y ago
Disabling 2G has been supported in Android since 12 - this is talking about the additional features on top of that.
447.
by mjg59 3y ago
The GPL actually derives from the EMACS Public License
448.
by mjg59 3y ago
Kayak may offer it, but if you try to book that on the Korean Air website you get: "This is based on the regulations of the U.S. Department of Transportation and you cannot make a reservation for an itinerary from the mainland U.S. to
449.
by mjg59 3y ago
Yes, if you change the security state of your system, its security state is changed. This is, uh, unsurprising?
450.
by mjg59 3y ago
Heads makes use of a root of trust, it doesn't provide one

More ›