qweqwe14

7 ms·

61.
by qweqwe14 2y ago
In case you're interested, it's usually done via ptrace by attaching to every process and modifiying the syscall arguments every time it makes one. There are performance issues associated with that (ptracing is rather expensive) a
62.
by qweqwe14 2y ago
I'm of the opinion that all systems should at least have a static busybox, it's useful for more than just rootkit hunting, for example if you somehow break your installation because of glibc shenanigans (rare but happens)
63.
Userland rootkits are lame (2022)(grugq.substack.com)
45 points by qweqwe14 2y ago|45 comments
64.
by qweqwe14 2y ago
lmao so true
65.
by qweqwe14 2y ago
Well, if there's an arbitrary file read, shouldn't the attacker be able to just read /proc/PID/environ anyway? It behaves like a regular file in that regard, unlike /proc/PID/mem, which requires seek
66.
by qweqwe14 2y ago
Sorry but it is largely all-or-nothing in this case, if someone has access to the user the app runs as, you are screwed. It doesn't matter whether you use env vars or files. I'm assuming the parent intended to say "if someo
67.
by qweqwe14 2y ago
There isn't a right answer. It's just that people don't understand that one doesn't provide any meaningful benefit over the other (in the context of storing secrets), but the security "experts" are always eager
68.
by qweqwe14 2y ago
> Preferring screens over real humans is objectively not good. Wow, this is just blatant misinformation! Wait till Snopes debunks this obviously false claim. I trust the "science"! Imagine actually interacting with real human b
69.
by qweqwe14 2y ago
There's also the good old trick of measuring duration between two instants and using that as a (crude) randomness source. Also on Linux there's the AT_RANDOM entry in the aux vector, which provides any program with 16 random bytes
70.
by qweqwe14 2y ago
AFAIK you should only need 16-byte stack alignment if you use vector instructions, so Linux/x86-64 doesn't mandate it in all cases
71.
by qweqwe14 2y ago
The answer is basically you don't. It's impossible to make a sane, stable FFI for a language unless you put it behind a C ABI, which is relatively basic, but this is exactly why it's most suitable for FFI: implementing suppor
72.
by qweqwe14 2y ago
It's not clear if it's a joke specifically because of the addition of "ill-adjusted"
73.
by qweqwe14 2y ago
> Those companies employ ill-adjusted individuals that do nothing else than look for the most recent techniques to fingerprint browsers [...] When normal people are out drinking beers in the pub on Friday night, these individuals invent
74.
by qweqwe14 2y ago
In other words, "shipping a product" is incompatible with decent code. This is why virtually all proprietary codebases aimed at "shipping a product" are a clusterfuck.
75.
by qweqwe14 2y ago
You do need memory safety for multiplayer games, though. Either that or you should use a GC language, which frankly is good enough for most indie games.
76.
by qweqwe14 2y ago
Some software (other than games) can actually be fully finished, provided that it's scope is narrow enough. It's really a question of differentiating between "finished" and "abandoned". Finished usually means t
77.
by qweqwe14 2y ago
By "care about programming" I basically mean writing maintainable code. By "inadequate code" I mean code that does what the author wants at this point in time, but is completely unmaintainable and just bad. Sloppy practi
78.
by qweqwe14 2y ago
This is a decent article, but although the points themselves are valid, I think there's a core "issue" with (indie) gamedev itself. The vibe that I'm getting is that it's filled with people that don't particula
79.
by qweqwe14 2y ago
Yeah, it's an unfortunate name collision. From Chimera Linux FAQ[1]: The system also has no relation to ChimeraOS, besides the unfortunate name similarity. ChimeraOS used to be called GamerOS and renamed itself to ChimeraOS later; how
80.
by qweqwe14 2y ago
BSD users might also like Void Linux, which was developed by xtraeme (a NetBSD developer). It has glibc and musl versions and uses runit as an init system. You can also build packages from source using xbps-src. https://voidlinux
81.
by qweqwe14 2y ago
There's an interesting piece of trivia regarding the title "War and Peace". The title in Russian is "Война и Мир", where "Мир" can mean both "peace" and "world", depending on context. H
82.
by qweqwe14 3y ago
HFT is also harmful, and so are the majority of startups that don't do anything actually useful and just take VC money. Those are just a few examples off the top of my head. What I'm saying is that there are a lot more technically
83.
by qweqwe14 3y ago
Yeah, they add vast amounts of "value", including (accidentally) reinforcing the status-quo. It would definitely be interesting to see what would happen if the attack wasn't noticed, but instead people focus their interest on
84.
"Bush hid the facts" bug(en.wikipedia.org)
4 points by qweqwe14 3y ago|0 comments
85.
by qweqwe14 3y ago
KernelEx isn't available for Windows 95, unfortunately. It's mentioned in the video
86.
by qweqwe14 3y ago
Personally I just disable history in everything I use, including the shell and the browser. If something is potentially worth remembering, just save it into a script/make a bookmark. Not having (persistent) history in a shell actually
87.
by qweqwe14 3y ago
To achieve the smallest size, you have to ditch main entirely and use _start, along with passing certain linker flags not to align sections. See https://darkcoding.net/software/a-very-small-rust-binary-ind... You can e
88.
by qweqwe14 3y ago
Also see this blog post, which compares "Hello World" programs in different languages by overhead: https://drewdevault.com/2020/01/04/Slow.html Follow-up: https://drewdevault.com/202
89.
by qweqwe14 3y ago
You clearly don't know what you are talking about. SQLite is a file on disk, the security of who can access it is managed by the OS via filesystem permissions, users and other mechanisms. It's not rocket science, and you would kno
90.
by qweqwe14 3y ago
"SQLite is likely used more than all other database engines combined. Billions and billions of copies of SQLite exist in the wild." https://sqlite.org/mostdeployed.html Although this isn't what most people us

More ›