photon12

14 ms·

91.
by photon12 6y ago
Fair point. Though I feel like in any modern app deployment scenario that isn't going to be a meaningful defensible boundary. The answer is to use neither, especially given the number of times I've used a path traversal vulnerabil
92.
by photon12 6y ago
Aren't these equivalent, given that the /proc/x/environ file exists?
93.
by photon12 6y ago
Also this pattern makes path traversal vulnerabilities (a thing not uncommon in web frameworks) have the potential to allow for privilege escalation on Linux via the /proc/self/environ file. I've been on a pentest where
94.
by photon12 6y ago
You might be thinking of the Surveillance Saver. I have a buddy who did a revival a few years back, don't know how bit rotted it is but here's a link: https://www.awgh.org/archives/295
95.
by photon12 6y ago
I feel like the idea that society has accepted software bugs for some other benefit is questionable, given that software has only had an impact on most people's lives for a relatively small period of time in relation to the amount of t
96.
by photon12 6y ago
This is also true for software production: we have made writing and deploying software so easy to do that the rate at which training of software developers to produce PRs has outpaced the ability for systems either human or automated to han
97.
by photon12 6y ago
The thing is the kernel is kinda hurting for maintainers and opening up the path for the next generation of systems programmers (most of whom don't want to touch C any more than they have to) has to be something Linus is more likely to
98.
by photon12 6y ago
I imagine that's a more tractable problem to solve but as it stands this is definitely the bigger issue.
99.
by photon12 6y ago
Reading through the FAQ, looks like the kernel can run on 1 physical core and SMT/hyperthreading isn't enabled (maybe that's changed). Seems cute but the WSL has the full support of the Windows scheduler which is gonna make t
100.
by photon12 6y ago
There's a meta-issue with pushing regulatory requirements that are trivial to bypass: you effectively normalize bypassing regulations and effectively create a culture where regulatory bypass is seen as "not a big deal" even i
101.
by photon12 6y ago
Running multiple parallel VMs with Xen or KVM is a plausible example.
102.
by photon12 6y ago
Lots of comments so far about using Linux From Scratch to learn about the userspace/kernelspace interaction, and while that's all feasible you can do this on basically any distro. This week I've been iteratively rebuilding th
103.
Making Every Cycle Count in the Fight Against Covid(symbolcrash.com)
1 points by photon12 6y ago|0 comments