muricula

45 ms·

211.
by muricula 7y ago
Sorry, I was thinking of the Orion capsule, which is made by Lockheed Martin, one half of ULA.
212.
by muricula 7y ago
Blue origin can't build a moon rocket by 2024, so maybe they can settle for the lander. Here's the vision I bet they're aiming for: a Spacex rocket, a United Launch Alliance capsule, a Blue Origin lander, and a round of pork
213.
by muricula 7y ago
That's a real stretch. Not only are there a number of countries where English is sometimes/often spoken but isn't the dominant cultural heritage (India, S. Africa, Liberia just to name a few) but we're on a programming l
214.
Assessing Unikernel Security [pdf](nccgroup.trust)
2 points by muricula 8y ago|0 comments
215.
by muricula 8y ago
lichess, a chess website, uses them so you can tab away while waiting for a game to start.
216.
by muricula 8y ago
I'm all for attack surface reduction, but little to exploit is not nothing to exploit. Your shell, sshd, and networking stack have probably all been exploited many times.
217.
by muricula 8y ago
Network sockets, files, capabilities, any sort of privilege checked object the kernel supplies. It depends on the OS.
218.
by muricula 8y ago
"You don't have to rebuild your image with Debian patches or anything like that since the kernel is minimal and unique. And exploits have minimal impact in any case." This isn't correct. If there is a bug in the unikerne
219.
by muricula 8y ago
Hold on here, kernels do not run as a separate process. And there is no task switch, just a privilege level switch. A kernel may or may not exist in a separate address space depending on hardware and software features (e.g. the arm split pa
220.
by muricula 8y ago
Microsoft also released a similar powershell module: https://www.windowscentral.com/how-check-if-your-pc-still-vu...
221.
by muricula 8y ago
The authors talk a lot about how fast the compiler is. It doesn't matter if the compiler is fast if the generated code is slow.
222.
by muricula 8y ago
From the post: "The NTSB report recommended that the valve be redesigned, and the Federal Aviation Administration mandated that the changes be implemented by November 2002. Since then, no 737s have crashed due to rudder hardover or rud
223.
by muricula 8y ago
Linux has support for kernel ASAN and I think UBSAN too. User mode linux is a also thing and does roughly what you described, and I think you can run it under valgrind too.
224.
by muricula 8y ago
Nah, you could still e.g. use a use after free to smash the return address or a vtable on a Harvard machine and execute a ROP chain. If it did speculative execution too it would probably be vulnerable to spectre. There's nothing specia
225.
by muricula 8y ago
Overwrite the return address or a function pointer instead. Then when the address/pointer is used you can execute whatever you want. Loop up Return Oriented Programming.
226.
by muricula 8y ago
Also, self modifying code typically requires full pipeline serialization via an instruction like cpuid (x86) or isb (arm). There are comments about this in the architecture optimization manuals, but in general try not to go around munging c
227.
by muricula 8y ago
At the end of the first chunk just ret. When the second chunk is generated, also emit a thunk which calls the first chunk and then calls the second chunk. Should be quite nice and efficient and will leverage the return history buffer. You&#
228.
An optimization guide for assembly programmers and compiler makers (2018) [pdf](agner.org)
271 points by muricula 8y ago|59 comments
229.
by muricula 8y ago
If you can make a truly enormous stack array you can sometimes skip past the end of the stack onto the heap (or another section of memory). Then any writes to the array which the program thinks are going to the stack are actually going to t
230.
by muricula 8y ago
Not storage, networking: https://www.microsoft.com/en-us/research/uploads/prod/2018/0...
231.
by muricula 8y ago
Headers allow you to ship a binary without the full source code. If you want to build a linux kernel module you don't need all of the linux sources, just the headers.
232.
by muricula 8y ago
There was a lot of work done on that in the C11 release with updates to the memory model and thread.h. I have heard some criticisms of thread.h APIs which could be addressed, such as the ability to specify stack size. There are C++2x propos
233.
Vectorized Emulation: fuzzing at 2 trillion instructions per second(gamozolabs.github.io)
181 points by muricula 8y ago|40 comments
234.
by muricula 8y ago
This neuters a bunch of the new spectre and meltdown mitigations which are required if you want ring 0 to be a security boundary.
235.
by muricula 8y ago
It’s called an indirect jump. If you use C++ virtual functions, C function pointers, or Go interfaces it happens all the time.
236.
The Impossibility of a Dictionary(etymonline.com)
1 points by muricula 8y ago|0 comments
237.
by muricula 8y ago
Contrary to other comments, there are responses from Muslim countries. For instance, the situation has not gone unnoticed in Turkey because the Uighurs are Muslims who speak a Turkic language. In the past Turkish nationalist groups have sup
238.
New Intel Speculative Execution Side Channel Vulnerabilities(intel.com)
4 points by muricula 8y ago|1 comments
239.
by muricula 8y ago
Did scores actually get changed, or were they judging by different metrics?
240.
by muricula 8y ago
Why should taxpayers get a say in an individual’s choice to pursue an education or fertility? That’s an incredibly personal decision.

More ›