rcxdude

24 ms·

691.
by rcxdude 6mo ago
A proof of concept is a very standard thing to include in a disclosure, almost table stakes nowadays because of the amount of bad reports. Once there's any disclosure there will be exploits developed and published anyway, it's not
692.
by rcxdude 6mo ago
The issue is, if you don't have swap, then it's not matter of prioritisation: there are some things in RAM that can't be pushed out, regardless of how unimportant they are (so the only recourse is to terminate some processe
693.
by rcxdude 6mo ago
The underlying exploit allows writing arbitrary values to the page cache, independent of any namespacing, so it should be assumed to allow container escapes even if the given PoC code doesn't do that.
694.
by rcxdude 6mo ago
The concern is that there's a large enough chance that it might to be worth planning for the outcome. That chance doesn't need to be high for that to be the case. And there's good reason to believe that the size of number tha
695.
by rcxdude 6mo ago
HN has 'user-submitted content' which tends to be one of the categories that these laws target. Newspapers can also run stories on disturbing events that can also fall under these laws. They are often incredibly broadly defined su
696.
by rcxdude 6mo ago
> Social media has been found to do both harm and good for kids, and for some kids the good outweighs the harms Indeed. For example, the strongest evidence for harm shows that negative mental health is correlated with increasing social m
697.
by rcxdude 6mo ago
They would almost certainly be paying publishers , not creators .
698.
by rcxdude 6mo ago
distros might also apply patches to their own packages, so this isn't a perfect signal (i.e. if you have one of those versions, you almost certainly have the fix, but if you don't, it might still be fixed but you'll need to c
699.
by rcxdude 6mo ago
If you can get to real UID 0 from a rootless container, you can escape it, but you do need to take extra steps. Same with it working on Alpine: the underlying vulnerability probably still exists, but the script might need some adjusting. It
700.
by rcxdude 6mo ago
The two mitigations are to: - (somewhat counterintuitively) have swap enabled - run something like earlyoom to stop the system from reaching a low-RAM situation in the first place.
701.
by rcxdude 6mo ago
This issue is much worse if you don't have swap. What happens, I think, is that as memory allocated by processes grows to fill the available RAM, it starts to push out memory that doesn't technically need to be in RAM, like cached
702.
by rcxdude 6mo ago
Anything like this is going to have a very heavy selection bias, don't take any of this kind of content as a reflection of the average person.
703.
by rcxdude 6mo ago
Are you confident this would be easier to do in space? It's not entirely obvious to me that the tradeoffs would be worth it.
704.
by rcxdude 6mo ago
Facebook's real name policy did nothing to stop it being a cesspool. I don't expect that this will have a positive effect on public discourse.
705.
by rcxdude 6mo ago
The openness of Android also acts as a check of sorts on how restrictive the walled garden can get. If google were to clamp down on useful functionality in the play store, then you could always install apks yourself. But if the latter is no
706.
by rcxdude 6mo ago
I'm aware I lack power here, but you seem to be trying to convince me it's a good thing.
707.
by rcxdude 6mo ago
I can't trust Google will keep to that, sorry. Nor can I accept harms being twisted into a further centralised accumulation of power (especially when Google, with all their resources, could likely do much more to prevent these scams th
708.
by rcxdude 6mo ago
I'm aware of the way the scams work. I'm also aware that scammers tend to be much more motivated to jump through hoops that are put in front them (more so than legitimate users!). Scammers can also talk people through many, many w
709.
by rcxdude 6mo ago
Unless they do something google doesn't like, or trip one of their many automated systems that ban them without recourse. Or they are compelled to revoke a key by a government.
710.
by rcxdude 6mo ago
It's not obvious to me that this will help much with scamming. Especially when it affects safer app repositories like F-droid more than the cesspit that is the official Play store.
711.
by rcxdude 6mo ago
You are thinking about it from the point of view of an enthusiast/hacker who wants to put their homebrew stuff on it. But this is also tightening around developers who may want to distribute their applications to lay users.
712.
by rcxdude 6mo ago
Maybe, but also a lot of satellites rotate and so their brightness changes over time.
713.
by rcxdude 6mo ago
This is an article about an academic paper investigating a mechanism behind this effect, it doesn't say anything about the relative viability of the technology in practice.
714.
by rcxdude 6mo ago
There are a large number of IT departments that don't know how to manage anything else. (And a shocking number of windows-only ones that don't really know how to manage windows)
715.
by rcxdude 6mo ago
This basically makes civil/structural engineers the only real engineers. Maybe people working on medical devices or military kit. 'Stable external constraints' still disqualifies most of those, though. Every single kind of
716.
by rcxdude 6mo ago
I think it feels naive, to me. It's a fun project in terms of experimenting with techniques and materials, but it's very far from relevant in terms of the more abstract goals and ideas they discuss.
717.
by rcxdude 6mo ago
They talk about conflict materials but this is replacing FR4, which is pretty cheap. It's basically glass and glue.
718.
by rcxdude 6mo ago
The reason the power grid exists is because enough people want to do enough of this kind of activity that if we were still burning wood to do it there would be no trees left. Scale does matter, and this kind of 'sustainability' ca
719.
by rcxdude 6mo ago
I would also say that if your backup is controlled by the same third party as the primary, it's not a backup.
720.
by rcxdude 6mo ago
I would turn around the same request to you. I would ask that you look at how scientific research and hypotheses are actually created and the messy nature of evidence for anything that isn't particle physics and not just repeat cliches

More ›