mjg59

55 ms·

961.
by mjg59 6y ago
Windows can be booted into test keys mode, which allows the loading of unsigned drivers. We don't consider that a security issue because the privileges you need in order to switch to that mode are equivalent to the privileges you get b
962.
by mjg59 6y ago
Sure, which is why this is useful to researchers. But the access someone needs to your system in order to exploit the ME vulnerabilities is sufficiently extreme that if someone achieves it you probably have other things to worry about.
963.
by mjg59 6y ago
Remotely? I think Intel would need to produce a backdoored ME firmware, get the system vendor to incorporate that into a system update and then convince the target to flash that. In that sense I don't know that they'd technically
964.
by mjg59 6y ago
The followup tweet indicates that the CPU has to be in an unlocked state before this is possible, which on a typical system requires there to be a Management Engine vulnerability first. Given what we currently know, this is going to be inte
965.
by mjg59 6y ago
There's three things we really want here: 1) Prevent people gaining inappropriate privileges 2) Detect if people have gained inappropriate privileges 3) Prevent those inappropriate privileges form being persisted If we can achieve (1)
966.
by mjg59 6y ago
At this point I suspect that firmware-based TPMs are way more common than discrete ones.
967.
by mjg59 6y ago
You're going to have trouble "simply tapping" the TPM if it's implemented in the ME or the PSP.
968.
by mjg59 6y ago
Once you're in the secure boot world, you enforce module signatures.
969.
by mjg59 6y ago
Thanks - this isn't a case of not implementing APIs, this is a broken implementation. I'll look into it.
970.
by mjg59 6y ago
Which APIs? I've never seen a motherboard where SetVariable() is sufficiently broken that mokutil won't work.
971.
by mjg59 6y ago
> There isn't even a hardware override for this! You can always use mokutil to disable this.
972.
by mjg59 6y ago
It's considered an uncontained failure if debris leaves the engine through a hole that didn't previously exist - if it falls out the back (or manages to bounce off the containment structure and exit the front), that still classifi
973.
by mjg59 6y ago
That's a composite fairing that just smooths out the join between the wing and the fuselage. It wouldn't take a lot to do damage to it, so a chunk of the cowling is pretty plausible here.
974.
by mjg59 6y ago
There's an existing inspection period of every 6,500 takeoffs and landings[1]. The expectation is that it would take sufficiently long for a detectable flaw to turn into a dangerous fracture that this would be sufficient to notice it.
975.
by mjg59 6y ago
There's a more detailed background on this here: https://mjg59.dreamwidth.org/55845.html
976.
by mjg59 6y ago
They release plenty of open code, but then you also end up with situations like them not documenting DPTF and so laptops running slower under Linux than under Windows ( https://mjg59.dreamwidth.org/54923.html has more on thi
977.
by mjg59 6y ago
Intel refuse to document significant portions of their technology, and Linux works less well on their platforms as a result. They definitely do a better job of documenting things than Apple, but I'd really frame this as a difference in
978.
by mjg59 6y ago
That indicates that csrutil would be able to do /something/ with secure boot policy, but I really don't interpret that as a commitment to being able to boot arbitrary operating systems - if we were still unable to do so today
979.
by mjg59 6y ago
WWDC included discussion of "Reduced security" mode, which allows downgrading to old signed versions of MacOS, but I don't remember any disclosure of plans to permit arbitrary operating systems at that point - do you have a p
980.
by mjg59 6y ago
Yes, but not attached via PCIe.
981.
by mjg59 6y ago
At the point the hardware shipped, it was impossible to boot non-Apple operating systems on M1 systems. Post-release updates added this, but Apple had not publicly committed to doing so before that.
982.
by mjg59 6y ago
Not an expert, but: if there had still been fuel supplied to that engine, the fire would have been a lot worse. If you watch the video the fire clearly becomes less intense over time, and the footage of the landing suggests it's out by
983.
by mjg59 6y ago
http://web.archive.org/web/20010331112908/http://www.tribalw... seems to have a lot of the original images.
984.
by mjg59 6y ago
Please explain the difference.
985.
by mjg59 6y ago
And bear in mind that this is s390, not s390x. s390 is a 31-bit architecture that was superseded in 2000 by the 64-bit Z series, and support in the Linux kernel was dropped in 2015.
986.
by mjg59 6y ago
People love bringing up E. coli whenever this sort of thing comes up, but it's not a compelling argument. It generally refers to the observation that if you have a bacterium swimming towards something that's bad (ie, an increasing
987.
by mjg59 6y ago
It suspends/resumes just fine as long as your OS supports it. The issue is that you need much better runtime power management since it's now up to the OS to put parts in a low power state rather than relying on the firmware to do
988.
by mjg59 6y ago
There's a bunch more discussion of this in Brian Bagnall's "Commodore: The Amiga Years".
989.
by mjg59 6y ago
Signal is signed with a key that's held by Signal, not Google. Android won't install app updates unless they're signed with the same key as the currently installed version. (I work at Google, but not on Android)
990.
by mjg59 6y ago
https://github.com/systemd/systemd/blob/bcac754d66374782a85a...

More ›