pxx

11 ms·

121.
by pxx 3y ago
Baffling. This really is like buying a billboard with your phone number on it, along with text that reads "contact me!!" and then getting upset that you're getting phone calls. The whole point of associating an encryption key
122.
by pxx 3y ago
They might not even be using their own efforts to "port". Here's an article suggesting that they just downloaded a pirated ROM off the Internet to resell to users: https://www.eurogamer.net/did-nintendo-downlo
123.
by pxx 3y ago
Encryption in the 70s resists today's attacks just fine. DES was weakened on purpose (short key length, but the idea for 3DES dates from 1978). In the asymmetric realm you still can't break a full length RSA key. Maybe it's n
124.
by pxx 3y ago
Yes, the speed of sound (through the earth, so faster than the speed of sound in air); yes. In California, typically usgs has earthquakes posted before I can feel them. They didn't have this one a few minutes after I felt it, so I feel
125.
by pxx 3y ago
Where `rm`, or more technically unlink(2), fails due to ENOSPC, like in the article... Hilariously this failure case doesn't seem to be listed in the docs. https://developer.apple.com/library/archive/documenta
126.
by pxx 3y ago
Yeah I had mistakenly thought the exploit string was transmitted during key exchange (read too quickly on "pre-auth"), which is incorrect; see sibling comment. I'm unfortunately past the edit window now.
127.
by pxx 3y ago
Huh, I had erroneously thought the exploit string was sent earlier in the connection, before the handshaking completed (note the "handshake failed" error in xzbot on successful exploit, and also the fact that no logging is done).
128.
by pxx 3y ago
That's (a) not exploitable without the existence of a much higher-severity exploit -- sure you can clear the screen, but that's low impact (b) possible to trigger on other extant paths; see https://github.com/libar
129.
by pxx 3y ago
The libarchive diff didn't create any vulnerability. The fprintf calls were consistent with others in the same repository.
130.
by pxx 3y ago
This stuff is pre-auth. You can just treat the entire thing as opaque and proxy everything to the host you're trying to compromise; as soon as you have an exploit string for a given host you can just replay it.
131.
by pxx 3y ago
As soon as you've lost the db, with low-entropy inputs like these, you should assume that the plaintext has been compromised and should treat it as such, especially if your "security" corresponds to under a billion hash compu
132.
by pxx 3y ago
Hashing is more or less pointless with such a small input space. Salts wouldn't help much.
133.
by pxx 3y ago
What was even the game here? Eventually even more backdoors, ones that would have more plausible deniability? Afaict neither the oss-fuzz nor this change would actually discover the found backdoor. But why put your backdoor eggs into one ba
134.
by pxx 3y ago
You should probably not be running your own publicly-accessible ssh servers if this email is not sufficient to at least start figuring out what your next actions are. The email itself comes with an evaluation script to figure out if anythin
135.
by pxx 3y ago
You can't induct for this problem because induction will only show a property for all finite strings. Arbitrary-length finite strings, but still finite.
136.
by pxx 3y ago
There's not even a one-year cliff anymore at Meta or Google.
137.
by pxx 3y ago
Facebook removes two bits of entropy on login: it tries the entire passphrase with case reversed and just the first letter with case reversed. There's also some fanciness with username correction if you have old cookies.
138.
by pxx 3y ago
1900 was not a leap year... It's 0 mod 4, yes, but it's 0 mod 100 and not 0 mod 400
139.
by pxx 3y ago
It's well-known the total environmental impact is much less for plastic than glass. Just the weight alone should allow you to understand this [0] [1] [2]. Glass is not recyclable widely. It is a contaminant in single-stream recycling b
140.
by pxx 3y ago
Nope. Write the simulation for 2. Or look at this case analysis for the three element case. https://news.ycombinator.com/item?id=24714612 You can get intuition by understanding that the cases where the game is ruined are on
141.
by pxx 3y ago
Hash? Why would you do any hashing? The domain is only so large so it's meaningless even if you cared about keeping the original bytes in RAM (which you don't). This is the same concept behind the fact that it typically makes lit
142.
by pxx 3y ago
Airalo is nowhere near competitive anymore. Check http://esimdb.com , which includes airalo, to do a true price comparison.
143.
by pxx 3y ago
Cash logistics cost much more than 2%. The only reason you see substantial cash discounts is when people are trying to avoid taxation.
144.
by pxx 3y ago
Ah with gambling the business model is very different. You just need to be fishing for whales. Somebody can't be a 1000x or even 100x customer on Uber compared to the median. Somebody can easily be a 1000x gambler
145.
by pxx 3y ago
Yeah so you get consumer surplus if you pay 2.5% to a credit card processor instead of paying more than 3% to physical cash logistics. Everybody's happy besides your weird sense of "insane." Furthermore you get a lot more tha
146.
by pxx 3y ago
If you're going to be pedantic, you need to at least be correct. There is no such thing as an "NP class algorithm". There are, instead, languages that are NP-complete, for which we hypothesize that there are no polynomial-t
147.
by pxx 3y ago
zero is `true`
148.
by pxx 3y ago
Thank you for playing Wing Commander!
149.
by pxx 3y ago
This is a myth invented by some food delivery startups. As mentioned in sibling comments, this produce is often used in alternative streams. https://www.vox.com/the-goods/2019/2/26/18240399/food-wast
150.
by pxx 3y ago
This is a myth. The causal effect does not go that way. There is little evidence that artificial banana flavors were developed in a way to mimic older cultivars of banana. https://www.bbc.com/future/article/2014082

More ›