nneonneo

20 ms·

301.
by nneonneo 2y ago
Usefully, the speed of light is extremely close to one foot per nanosecond. This makes reasoning about things like light propagation delays in circuits much easier.
302.
by nneonneo 2y ago
The mind-boggling thing (to me) about this algorithm is that it also works to find small solutions modulo unknown factors of N. This makes it really useful for finding factors of N given knowledge of some of the bits (for example, if part
303.
by nneonneo 2y ago
Tip: “nic.TLD” should always exist and will often be the first domain registered. It is operated by the domain’s registry. For example, see https://nic.zip .
304.
by nneonneo 2y ago
The article title does not end in a question mark. The guidelines say not to editorialize titles - and adding a question mark surely counts as editorializing?
305.
by nneonneo 2y ago
I suspect that if the operators of such facilities obeyed all of the terms of use for every product they wanted to use, they’d be using pen and paper for everything…
306.
by nneonneo 2y ago
It says in the article me that the spies would decrypt and verify a header before moving on to the main message. Presumably the fill messages would simply not have a valid header, or it would have a special header that indicated it was a fi
307.
by nneonneo 2y ago
> If you only have 64K of RAM, you had better make it work! Hah, this brings back fun memories. I worked for a spell at a large company producing smartphone components. One of their primary products was a do-it-all embedded chip that han
308.
by nneonneo 2y ago
Java was not. It was originally designed to be interpreted, and is still interpreted in many implementations (especially before any JIT kicks in). In any case, those were just the examples I could think of OTOH. MSIL/CIL is another goo
309.
by nneonneo 2y ago
Java, Wasm and BPF demonstrate that it is possible to have statically-verifiable bytecode for JIT-compiled languages. Lua’s problem is that the bytecode doesn’t provide the information necessary to fully verify its safety.
310.
by nneonneo 2y ago
Chargeback! Dispute the charges with your credit card issuer; the merchant will stop charging you real quick.
311.
by nneonneo 2y ago
You can even ablate the refusal direction out of an offline model so you don’t even need to “jailbreak” them. They become even more usable in that case!
312.
by nneonneo 2y ago
I think we’d be better served if we stopped thinking of jailbreaks as “attacks” on LLMs. If a user decides they want to go and subvert the guardrails, they really should be able to. The attacks aren’t really going to go away any time soon,
313.
by nneonneo 2y ago
Hex Fiend does data structures and file formats now too, using parsers written in TCL. I’d probably rate Hex Fiend as being in the middle too, especially if you’re going to put xxd at the low end :) Personally, for file format parsing I lik
314.
by nneonneo 2y ago
No, hadn’t heard about it. Seems interesting, sort of “vim for hex” like. I might give it a spin.
315.
by nneonneo 2y ago
What do you need Ghidra for? Ghidra is, for the most part, not a hex editor. It’s meant for reverse engineering - mainly decompilation, but it’s useful for patching as well. The debugger is new and takes some getting used to (I’m still usin
316.
by nneonneo 2y ago
I tried ImHex…found it way too complex for most of what I wanted to do. I’m still a huge fan of Hex Fiend on macOS - simple, fast, does what I want. I still haven’t found the perfect “simple” hex editor on Windows.
317.
by nneonneo 2y ago
And on GitHub issues: https://github.com/polyfillpolyfill/polyfill-service/issues/...
318.
by nneonneo 2y ago
The problem is that they have a CDN that can serve up custom JS depending on the headers and IP of the visitor, which enables remarkably precise targeting. No reason why they couldn’t, for example, send a targeted payload to people in a spe
319.
by nneonneo 2y ago
Yes. It's possible to get `argc` to equal zero, though by invoking the program using `execve(prog, {NULL}, {NULL})` on Linux. This has, rather famously, caused at least one out-of-bounds error in a security-critical program (CVE-2021-4
320.
by nneonneo 2y ago
Oh hey, I was the one who cracked the encryption scheme on Agrippa. A fun afternoon diversion! My writeup is here: https://www.robertxiao.ca/hacking/agrippa/
321.
by nneonneo 2y ago
There’s nothing remotely nuanced nor truthful about this comment: https://news.ycombinator.com/item?id=40696242 He’s saying that with a compiler flag you can get the same kind of safety as in Ada or Rust. Later downthread h
322.
by nneonneo 2y ago
Weird, the following program compiles and runs without complaint under `-fsanitize=bounds-strict,address,undefined` and outputs the rather fetching output `��1�I��^H��H��PTE1�1�H�Ǧ@`: #include <stdio.h> int main(int arg
323.
by nneonneo 2y ago
Some examples from 1 minute with Algolia: https://news.ycombinator.com/item?id=37479651 “All decent C compilers have compilation options so that at run-time any undefined actions, including integer overflow and out-of-bound
324.
by nneonneo 2y ago
Pray tell: what magic C/C++ compiler options do I add to enable deterministic OOB checks that never produce any false positives or negatives?
325.
by nneonneo 2y ago
One of the tweets ( https://x.com/obtusatum/status/1755182704809635980?s=46&t=Gx... ) suggests one way this can happen: a fraudster sets up a server which returns a 302 for the Twitterbot user agent to an innoce
326.
by nneonneo 2y ago
If you ever find yourself needing to tunnel via DNS, try iodine: https://github.com/yarrick/iodine
327.
PcTattletale leaks victims' screen recordings to entire Internet(ericdaigle.ca)
195 points by nneonneo 2y ago|79 comments
328.
by nneonneo 2y ago
It’s not always buggy software; ransomware affiliates have been known to bribe company insiders to install malicious software on the network. The insider gets some cut of the eventual ransom. Works great on disgruntled employees or entry-le
329.
by nneonneo 2y ago
There’s a whole library (pwntools.fmtstr) to help automate the (tedious) process of building format string exploits: https://docs.pwntools.com/en/stable/fmtstr.html There’s a bunch of nice features in glibc that m
330.
by nneonneo 2y ago
There’s a big difference between developing something and announcing loudly that you have something cool; the developers have done the latter here.

More ›