nneonneo

42 ms·

481.
by nneonneo 3y ago
I’ve played CTF challenges where the latency to the host was a key factor in determining if you could get a flag or not. For those, I’ve often found it useful to spin up a cloud machine in a datacenter near the target (or, better yet, in
482.
by nneonneo 3y ago
If I read this correctly, the money wasn’t meant for the artist, but was rather meant to be put into the artwork itself as banknotes (which would then presumably be owned by the museum). It seems to be a pretty clear case of fraud masquerad
483.
by nneonneo 3y ago
There are, but it used to take actual time and effort to produce a book (good or bad), meaning that the small pool of experts in the world could help distinguish good from bad. Now that it’s possible to produce mediocrity at scale, that pro
484.
by nneonneo 3y ago
Aka, hacker or ‘hacker’. I feel like with enough photos of just about anyone, you’ll eventually get one that makes them look sinister…
485.
by nneonneo 3y ago
The problem isn’t that the injected thread is racing explorer - indeed, pausing the entirety of explorer to run your uninstaller would probably be strictly more dangerous than what they’re doing - the problem is that the injected thread is
486.
by nneonneo 3y ago
Words aren't so bad :) "The SHA256 hash of this message begins with f, b, six, two, zero, b, one, six and e." "The SHA256 hash of this message begins with f, zero, two, d, four, seven, one, zero, nine and b."
487.
by nneonneo 3y ago
Well, I got bored too, so here's some results with CUDA (on an RTX 3090): The SHA256 hash of this message begins with 534d765 The SHA256 hash of this message begins with c18b2de The SHA256 hash of this message begins with
488.
by nneonneo 3y ago
I bet you could hack hashcat (or just use CUDA) to find these quickly for larger prefixes. Might make a fun (silly) challenge. Hashcat can do 21B SHA256 hashes per second on an RTX 4090; this translates into bruteforcing a 9-digit prefix in
489.
by nneonneo 3y ago
The emulator in Ghidra is really cool. I’ve been improving my Wasm processor module to support better emulation, and I’ve made use of their comprehensive specification tests to validate the implementation. One thing that I run into a fair b
490.
by nneonneo 3y ago
Yeah that’s what I’m referring to. IIRC it requires clicking/confirming a dialog to actually run the “update”, although I didn’t look that carefully before it got taken down.
491.
by nneonneo 3y ago
The source code itself looks relatively clean; there's autoupdate functionality but it looks like it's gated behind a confirmatory dialog box. It's much more likely that the binary releases and/or autoupdate binaries are
492.
by nneonneo 3y ago
If you're using a reasonably recent Firefox, it may use separate renderer processes, in which case you'll need to find the PID corresponding to the renderer process that was responsible for that website (and hope it hasn't di
493.
by nneonneo 3y ago
If I understand correctly, the labeling will be voluntary. So, I would guess that one of the challenges here is balancing the strictness of the requirements vs. the burden to manufacturers, i.e., it can’t be too hard to implement the commit
494.
by nneonneo 3y ago
The irony is that botnets often function as an automatic update: they break in through a vulnerability, often include a patch for said vulnerability, and then stay somewhat updated via their C&C server. Of course, this is all to prevent
495.
by nneonneo 3y ago
They seem to have confirmed it: https://www.techinsights.com/blog/techinsights-finds-smic-7n...
496.
by nneonneo 3y ago
There are nearly 100,000 ASNs. Some are very small. An ASN is enough to identify a user's ISP - enough for someone significantly more malicious than you to, say, social engineer an ISP, report players to their ISP for "hacking&qu
497.
by nneonneo 3y ago
Check the whois on the site (appykidsco.com): it's registered to someone in Jiangsu, China, and they seem to own a lot of other domains: https://website.informer.com/email/muskseo1971@gmail.com Seems like one of
498.
by nneonneo 3y ago
The domain is available again; I wonder if anyone is still using those scripts?
499.
by nneonneo 3y ago
I’ve used a VMWare Fusion shared folder between a Mac host and Linux/Windows guests for several years with zero issues. Performance has generally been very good, basic permissions work (haven’t needed anything beyond rwx), and I gain t
500.
by nneonneo 3y ago
Yep, it's a wrapper around some cryptographic primitives that is fairly misuse-resistant. It's not hard to screw up using the individual primitives in such a way that you lose the desirable cryptographic properties (for example, n
501.
by nneonneo 3y ago
I wonder if this feature might be “infectious”: if a handful of servers wind up with the wrong time, and start propagating that wrong time in their server handshakes, it might cause a cascade of other servers to reset their times too. In an
502.
by nneonneo 3y ago
fwiw, yescrypt uses a salt so it will not be vulnerable to rainbow tables, and it is a slow hash so it won’t be that easy to bruteforce. A good strong password with a good hash function should remain secure even if the hash leaks.
503.
by nneonneo 3y ago
Trivia: the package with the longest version number is uselesscapitalquiz ( https://pypi.org/project/uselesscapitalquiz ), version 3.141592653589793238462643383279502884197169399375105820974944592307816406286208998628034
504.
Professor Gino Sues Harvard and Data Colada, Alleging a 'Smear Campaign'(chronicle.com)
2 points by nneonneo 3y ago|0 comments
505.
A room-temperature superconductor? New developments(science.org)
1215 points by nneonneo 3y ago|774 comments
506.
by nneonneo 3y ago
Looks like a simple case of an overzealous rich text editor adding smart quotes. All the quote characters should be straight double quotes (").
507.
by nneonneo 3y ago
I don’t think a general purpose scripting language is simpler than this variables feature. As you rightly point out, sh already exists for more complex use-cases, and really complicated stuff can be handled by a helper program. For me, the
508.
by nneonneo 3y ago
Probably because they tried submitting a paper to Nature and were rebuffed, but they’re still fully convinced they have something that works. They may have been wanting to find someone to collaborate on the validation so they could get th
509.
by nneonneo 3y ago
I think you’ve misunderstood both posts. SafetyNet is deprecated, but it’s just been rolled into Play Integrity which does all the same things. All the same concerns still apply to Play Integrity. GrapheneOS is asking developers not to use
510.
by nneonneo 3y ago
Fleischmann and Pons' famous cold fusion result was announced on March 23 1989 and a spate of replication attempts followed in the ensuing weeks; by April 30 1989, the NYT ran an article calling cold fusion dead due to the large number

More ›