mjg59

13 ms·

211.
by mjg59 1y ago
Which vendors?
212.
by mjg59 1y ago
Key derivation from a PIN? Although that's an implementation detail of the key backup rather than anything inherent in the actual messaging so who knows.
213.
by mjg59 1y ago
The Android build is reproducible, iOS is (to the best of my knowledge) hard work for a number of reasons.
214.
by mjg59 1y ago
Oh, yeah, with no infrastructure to actually attest to the website (or the app) being trustworthy you're inherently placing trust in Twitter. Use Signal.
215.
by mjg59 1y ago
https://news.ycombinator.com/item?id=44178544
216.
by mjg59 1y ago
Sure we do - the client code is already out there.
217.
by mjg59 1y ago
The implementation seems to be libsodium sealed boxes, with the key material sequestered using the juicebox.xyz protocol. In itself this seems broadly fine, with the significant proviso as mentioned in https://help.x.com/en&
218.
by mjg59 1y ago
Huh. I had a conversation with a Tor developer on this topic about a decade ago, when network namespaces were still kind of a new hotness - the feedback I got was that it would be an easy way for people to think they were being secure while
219.
by mjg59 1y ago
It's actually pretty much the same as the project to get Windows running on Intel Macs before Apple released Boot Camp
220.
by mjg59 1y ago
And in response to your edit: do you think putting this code in hardware is more or less secure than having it in the OS because if it were in hardware all operating systems would be fucked while having it at the OS level means that only Wi
221.
by mjg59 1y ago
For most of the past 20 years, brightness control has been ring 0 mechanism, ring 3 policy. ACPI provides a mechanism for the OS to interface with the EC in a way that aligns with any SMM that's going on, and where we are now is just f
222.
by mjg59 1y ago
It's easier to use in Windows, but in some cases vendors expose WMI interfaces that allow you to overwrite arbitrary RAM and so Linux doesn't give that to you because it's kind of a huge security violation.
223.
by mjg59 1y ago
The ACPI code largely lives separately in Linux because it was contributed by Intel and is (as far as possible) intended to be dual-licensed GPL/BSD to ensure non-Linux OSes benefit from core improvements.
224.
by mjg59 1y ago
Eh other than the Thinkvantage button not working, and various other failings. We ended up with various reverse engineered patches to enable those again.
225.
by mjg59 1y ago
The UI is a payload issue, not a Coreboot issue - various vendors ship Coreboot based firmware with a configuration interface, usually based on the Tiano payload. But for my EC issues I simply took the approach of reverse engineering the EC
226.
by mjg59 1y ago
Yeah, no drivers required, merely the ability for userland code to smash hardware by hand. That's a terrible situation. You want to adjust screen brightness on a Thinkpad right now? Write to the appropriate control registers in the GPU
227.
by mjg59 1y ago
Windows makes it much easier for userland policy agents to plug into WMI than to call raw ACPI methods, so WMI became much more popular as Microsoft made it more difficult for vendors to ship random kernel drivers. I didn't write the f
228.
by mjg59 2y ago
Why? Vram has to be powered as long as you're scanning out of it, any competent design is going to support powering down most of the GPU while keeping RAM alive otherwise an idle desktop is going to suck way more power than necessary
229.
by mjg59 2y ago
Live images are Linux distributions that can be run directly from removable media instead of having to be installed to local storage.
230.
by mjg59 2y ago
The 500 Plus had ECS and supported up to 2MB chip RAM without soldering (and shipped with Kickstart 2.04)
231.
by mjg59 2y ago
> So I wrote a piece of code that drew all the components of each icon image in a programmatic way I was fortunate enough to spend a bunch of time hanging out with Simon in the 2000s and learned a great deal about a bewildering array of
232.
by mjg59 2y ago
PSP firmware is in system flash, but is verified by the PSP with its own signing key. PSP firmware is loaded before x86 comes up, and as long as the SEV firmware measures itself and as long as it patches the microcode loader before allowing
233.
by mjg59 2y ago
> enforces its own firmware security instead of delegating to an independent coprocessor That depends on how we define "independent" - AMD's firmware validation is carried out by the Platform Security Processor, which is a
234.
by mjg59 2y ago
The US Telco Sprint was spun off from the Southern Pacific railroad - train lines are convenient places to lay fibre trunks
235.
by mjg59 2y ago
Compositing into the framebuffer is done by the OS, the compositing of the DRMed video stream into the output is done in hardware. The OS literally has no visibility into the decoded content. You suspect incorrectly.
236.
by mjg59 2y ago
There's nothing stopping hardware accelerated decode being in the same framebuffer as everything else, the only reason for this is DRM - you get just the same acceleration with VLC, but can still screenshot. The XP era is when we depen
237.
by mjg59 2y ago
I wrote about some of this earlier this year: https://mjg59.dreamwidth.org/70954.html?thread=2203178 - the short version is that it has nothing to do with screenshotting, screenshotting is just a victim of it. If you have d
238.
by mjg59 2y ago
Video RAM is accessible to the OS, if you render into it it can be read back. In this case it's deliberately rendered into a separate protected area of RAM the OS can't read, and composited at scanout time.
239.
by mjg59 2y ago
Upstart's CLA definitely had an impact (Ubuntu even shipped an additional patch in the Ubuntu Upstart source package, because the author hadn't signed the CLA, so it couldn't be incorporated into the upstream), but Upstart ha
240.
by mjg59 2y ago
It's probably preferable to have the wing break off than for it to apply sufficient stress to the fuselage that the fuselage disintegrates - you're going to lose the wing either way and if you're in the air that's going

More ›