mjg59

43 ms·

631.
by mjg59 4y ago
The setup app is typically embedded in the firmware, so you need a copy of the firmware. The post you reference in your reply shows how you can potentially use flashrom to get that, but in some cases you can also download firmware updates f
632.
by mjg59 4y ago
When referring to Peter Todd, it's worth remembering that he's accused of rape and may not be a reliable source: https://storage.courtlistener.com/recap/gov.uscourts.cand.34...
633.
by mjg59 4y ago
People have described the concern about memory not being zeroed in a predictable way, but not why that's a security concern. And, honestly, for most people I don't think it is. If an attacker is in a position to read arbitrary mem
634.
by mjg59 4y ago
There's no technical mechanism to prevent someone operating an AP inappropriately. That's more an opportunity to discover how effective your local enforcement agency is.
635.
by mjg59 4y ago
APs are normally programmed based on the market they're sold into. Client devices receive information about which regulatory domain they're in from the AP they're connecting to.
636.
by mjg59 4y ago
Parallel shipping of the various versions of the proprietary stack is definitely more tedious than it should be, but the PCI IDs that they support are declared in the module metadata and only the appropriate version will be bound to the har
637.
by mjg59 4y ago
Some part of the boot stack expected to be able to make VBE calls to set the inital screen mode before loading actual drivers, which means hardware that wants to support Windows 7 needs to provide a CSM layer to support that even if it&#x27
638.
by mjg59 4y ago
What KMS driver will attempt to bind to unsupported hardware, and which other KMS driver would you be attempting to replace it with in that scenario?
639.
by mjg59 4y ago
fbdev would only work on BIOS systems if you were using vesafb or had a hardware-specific framebuffer driver loaded. Vesafb would tend to cause problems with suspend/resume and needed to be configured with bootloader arguments (the ker
640.
by mjg59 4y ago
Some degree of VBE is required for Windows to boot in BIOS mode (and even in EFI mode before Windows 8 for really tedious reasons). I'd expect it to be fine for basic mode setting, but you're still stuck with the modes the card fi
641.
by mjg59 4y ago
Historically you wanted the -vesa Xorg driver, today -modesetting should work fine on the firmware-provided framebuffer using simpledrm. But the EFI spec provides no way to change screenmode at runtime, so you're going to need a native
642.
by mjg59 4y ago
There's typically a "real[1]" 8042, but with an optional chipset configuration register that diverts accesses to it to SMM instead, even on modern chipsets [1] Obviously not actually an 8042, but some hardware that would deco
643.
by mjg59 4y ago
There seems to be a bunch of code in the Twitter app that's licensed from other third parties, so unless they're fine with their code being re-licensed under AGPL it's not possible to release the app under those terms.
644.
by mjg59 4y ago
First, it's not clear that the failure to fall back to losing forward security in the event of one-time prekey exhaustion is a decision - if you simply error in your client code when you try to get a prekey and there aren't any, t
645.
by mjg59 4y ago
Of those aircraft, the upper lobe of the 707, 727, 737 and 757 is the same. There's a lot of history still being carried over into aircraft manufactured today.
646.
by mjg59 4y ago
The https://en.wikipedia.org/wiki/General_Electric_GE9X used in the 777x (assuming it eventually gets certified) is significantly larger than the 747 engines. Even the engines used on the original 777 from the 90s outs
647.
by mjg59 4y ago
Firmware builds may be outsourced to the ODM in some scenarios.
648.
by mjg59 4y ago
These aren't the secure boot signing certificates. If your bootloader is locked this isn't going to let you replace the vendor firmware.
649.
by mjg59 4y ago
Given what we know so far, there's no indication that Google is associated with this at all.
650.
by mjg59 4y ago
UEFI Secure Boot signing keys can be updated at runtime, and old keys can be explicitly marked as untrusted. Validation of key updates is performed by the firmware, not the OS, so this can't be trivially subverted.
651.
by mjg59 4y ago
Why would Google have these keys?
652.
by mjg59 4y ago
The public evidence doesn't seem to suggest that any Google-owned keys are affected. Platform certificates are owned by the vendor.
653.
by mjg59 4y ago
My understanding is that these certs are vendor-specific (and potentially more finely grained than that - I think it'd be fine to have a separate cert per model, for instance) and are rooted in the firmware, not the hardware - that is,
654.
by mjg59 4y ago
Twitter would need to approve the evil.com app.
655.
by mjg59 4y ago
No. You're given a URL that redirects to your ID Provider, and you're not given any indication who you're granting permission to.
656.
by mjg59 4y ago
This is correct.
657.
by mjg59 4y ago
I think the only MacBook Pros with real TPMs were the 1, and 2, series from 2006/2007. Right now Apple don't allow you to do device identity attestation with the secure element. But in the world where you take this approach you do
658.
by mjg59 4y ago
Okta actually supports this with their device identity policy, but in this scenario the IdP doesn't necessarily have insight into who's issuing the token (The AWS case involves AWS getting a valid auth from Okta and then issuing t
659.
by mjg59 4y ago
You could avoid the crash in this specific case. But this crash was triggered by an assertion failure. The same code could be corrupting XMM7 in other situations, which could result in much more subtle bugs.
660.
by mjg59 4y ago
Running the CPU constantly at 400MHz is likely to consume more power than bursty workloads at full speed. There are various linked clock domains, and if the CPU cores can't get into low power states then neither can other bits of hardw

More ›