Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
muricula
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
22 ms
·
241.
▲
2018 Pwnie Security Award Nominations
(pwnies.com)
3 points
by
muricula
8y ago
|
0 comments
242.
▲
by
muricula
8y ago
Wait what? Do you have a link with more info?
243.
▲
by
muricula
8y ago
They tried to rewrite the OS in a C# derivative and could never meet the perf needed while still fighting backwards compatibility issues[0]. At this point mobile OS's are a lost cause, but the PC market is stable. Windows server has ne
244.
▲
by
muricula
8y ago
This is a classic use case for carbon 14 dating, so they probably used that. A quick glance at Wikipedia says that it’s pretty reliable for organic substances up to 50k years ago. Dating older rocks will often require lead uranium dating or
245.
▲
by
muricula
8y ago
Does anyone know if a CVE number has been issued for these?
246.
▲
by
muricula
8y ago
^^ This looks like spam.
247.
▲
by
muricula
8y ago
Unfortunately, this is not correct. Intel and AMD exposed MSRs for the Indirect Branch Prediction Buffer (variant 2), Indirect Branch Restricted Speculation (variant 2), and Memory Disambiguation Disable (variant 4). Variant 1 is unfixed. V
248.
▲
by
muricula
9y ago
Parts of the memory management code were rewritten for windows 10 to do fun things like randomize the location of the page tables. This fairly significant change wasn't backported to Windows 7. Then when they went to backport the meltd
249.
▲
by
muricula
9y ago
https://github.com/Lerc/userserv/blob/master/authenticationt... This looks like something right out of a CTF. I'm pretty sure you can overflow that buffer and smash the stack. It's also vulnera
250.
▲
by
muricula
9y ago
Is it public? Can I take a look?
251.
▲
by
muricula
9y ago
Peacetime? The US is still in Iraq and Afghanistan. The Air Force bombed Russian military contractors in Syria last week.
252.
▲
The ‘Killer Robots’ Are Us, NYTimes Opinion
(nytimes.com)
1 points
by
muricula
9y ago
|
0 comments
253.
▲
by
muricula
9y ago
I was thinking of the Lathe of Heaven, sorry!
254.
▲
by
muricula
9y ago
Her most well known sci-fi novels are probably the Left Hand of Darkness, Winter, and The Dispossessed. They are well summarized in the obituary. If you prefer fantasy, she wrote The Wizards of Earthsea series as well. Le Guinn explores soc
255.
▲
by
muricula
9y ago
A bit ironic that MobileCoin is targeting x86_64 and SGX seeing that the vast majority of mobile devices run ARM. I wonder how easy this would be to port to the ARM trustzone?
256.
▲
by
muricula
9y ago
It's not about maintaining control -- downloading any one of those files is as easy as running `touch` on them. It's about only checking out which pieces you actually need to build the component you care about. That way I don'
257.
▲
by
muricula
9y ago
I don’t believe Rust is ready for OS kernels yet. People have written OS kernels but they really stretch the language to do it. For instance, the default heap allocation API panics on failure, which isn’t something I want my kernel to do. T
258.
▲
by
muricula
9y ago
Unless I'm mistaken, the little-b `box` keyword panics on failure. Isn't that required to construct a type in place in heap memory?
259.
▲
by
muricula
9y ago
Is anyone else concerned about Rust’s handling of heap allocation failures? Right now the existing APIs for heap allocation are built pretty deep into the language and they all panic on failure. It’s one thing for Firefox to crash when my c
260.
▲
by
muricula
9y ago
void * is part of it, but you can also implicitly cast from between integer types, and also between integers and enums. Think of passing an enum or an int into a function which takes a long as an argument.
261.
▲
by
muricula
9y ago
Since Go makes concurrency easier and encourages its use, there’s going to be a lot more concurrency bugs. By contrast languages like Python don’t even have proper parallel threads, so fewer people will write concurrent python programs and
262.
▲
by
muricula
9y ago
Processors have "traps" or "exceptions" which work kind of like interrupts. They are utterly unlike exceptions in say C++. They transfer control to another location you specify in an interrupt table. The most well known
263.
▲
by
muricula
9y ago
A micro kernel runs drivers in userland and has a "micro" ring 0 footprint. A unikernal bundles only the necessary drivers into an OS which runs only one process and basically pushes multiprocess support into the hypervisor. His i
264.
▲
by
muricula
9y ago
Or maybe C is uniquely suited to the task of writing a kernel, after all that's what it was designed for.
265.
▲
by
muricula
9y ago
A lot of code in the windows ecosystem uses UPX unpackers. The code extracts itself before executing the actual application. This is common for certain installers. Windows does a pretty good job of enforcing Data Execution Prevention for co
266.
▲
by
muricula
9y ago
That basically means forcing everyone to sign their code and offer it through the App Store. You'll see developers complaining about that upthread. Windows 10 does make code signing mandatory for new drivers, and the drivers must pass
267.
▲
by
muricula
9y ago
You don't need administrator privilege. You just need to double click an exe.
268.
▲
by
muricula
9y ago
Yes, you're right. The silicon giants decided it was cheaper to fund that testing and verification work than to break backwards compatibility.
269.
▲
by
muricula
9y ago
This is entirely anecdotal, but a coworker of mine worked at amd, and he once told me that amd did a study and found that instructions needed for backwards compatibility accounted for less than 1% of CPU die space. Big silicon manufacturers
270.
▲
by
muricula
9y ago
The first RISC should have read CISC. It's a typo
More ›