ryao

43 ms·

721.
by ryao 2y ago
Their documentation suggests that is only needed by contacts only mode and they wrote some code to get the needed certificates from macOS: https://github.com/seemoo-lab/airdrop-keychain-extractor
722.
by ryao 2y ago
The AWDL part is in C: https://github.com/seemoo-lab/owl
723.
by ryao 2y ago
What stops you from using it today? A wiki claims it is just 3 commands and IP configuration: https://wiki.archlinux.org/title/Ad-hoc_networking#Manual_me...
724.
by ryao 2y ago
Our dishwasher is at least 10 years old.
725.
by ryao 2y ago
I thought delivery only took a few days. Where are you that it is a month?
726.
by ryao 2y ago
As I read this, I imagined an xkcd comic where the black hat guy builds a generator that works by capturing lightning strikes attracted by sulfur he emits. An ask xkcd might be appropriate, where the question is asked whether the energy cap
727.
by ryao 2y ago
I will say this. The seL4 developers made the strong claim. Evidence that it is not as strong as people who heard about it thought is not a strong claim. It is just being realistic. The seL4 developers themselves say that the properties the
728.
by ryao 2y ago
OpenSSH is full of clever ideas.
729.
by ryao 2y ago
Do you have a Home Depot or Costco near buy that offers free installation and haul away? Most people who get these appliances have the store do all of the work you did.
730.
by ryao 2y ago
My mother has been thrilled ever since I gave her a set of matching units. Repairing it to keep things that way was far cheaper than replacing both of them, or even one of them.
731.
by ryao 2y ago
We have had more luck with our appliances: * The clothes dryer only needed a new circuit board that cost half of a replacement. * The microwave only needed a new magnetron that cost the price of a new microwave oven. - Some would fin
732.
by ryao 2y ago
I could see a remote notification that it finished being useful. That said, the manufacturers would never go for this, but a dry contact for a GPO that is asserted on the machine finishing is likely all a number of people here would ever ne
733.
by ryao 2y ago
They have had software for decades. They were run by microcontrollers. The only difference is that it was an embedded system with no network capabilities.
734.
by ryao 2y ago
I was in a similar situation with a clothes dryer dying where the repair required a board that was half the price of a new one. A key difference is that I had a professional appliance repair guy look at it and he determined it needed a new
735.
by ryao 2y ago
A lack of process isolation does not allow your SQL server security to be bypassed when the adversary is not on the machine in the first place. The adversary would usually fill out a field on a form, which is where SQL injection attacks usu
736.
by ryao 2y ago
I provided citations. Use them and do your own research. I think you will find the answers in what the seL4 developers published, but I have no interest in spending days or even weeks pointing to things until you are satisfied.
737.
by ryao 2y ago
"process isolation is the bedrock of all other security guarantees" means process isolation is a necessary (in practice) condition, not a sufficient condition The attack surface of networked machines is unaffected by proce
738.
by ryao 2y ago
See the FAQ entry on seL4 having zero bugs: https://docs.sel4.systems/projects/sel4/frequently-asked-que... Most who read that would expect the bug fixed in the linked GitHub PR to be impossible. The loophole was
739.
by ryao 2y ago
No, that's not true. The framing was always that it surpassed an incredibly high safety bar that no other kernel had surmounted, far beyond even security certifications needed for protecting national secrets. This is still true.
740.
by ryao 2y ago
The “that would previously have run Linux on bare metal” part of that sentence was important. Try reading it again. It never compared seL4 as a hypervisor to another hypervisor. It compared using seL4 as a hypervisor to not using a hypervis
741.
by ryao 2y ago
When seL4’s proof was published, people regarded seL4 to be flawless software and the fact that a problem in the specification would lead to issues was largely disregarded. Now that it is clear that the specification has had problems, seL4
742.
by ryao 2y ago
Does it even matter when the attack surface is in userspace? Formally verifying seL4 against a potentially buggy specification does not provide any assurances about the user space code that must run on top to produce a working system. If yo
743.
by ryao 2y ago
The systems we're talking about don't use SQL to communicate. They use data structures in a wire format of some sort because they are embedded systems. Don't pretend like we're talking about web development here, be
744.
by ryao 2y ago
I thought OSF/1 was more of a kernel organ donor to macOS rather than the basis for it.
745.
by ryao 2y ago
This site might be helpful to you: https://www.aaatoner.com/ I plan to use them when my printers run out of toner, although I use them so infrequently these days that I suspect I might never need to replace the toner cartri
746.
by ryao 2y ago
When my first HP printer died after a few years, I had assumed it was bad luck since a relative with an identical model had no problems with his and he thought mine dying was somehow my fault. It continued to be used by him for something li
747.
by ryao 2y ago
I suspect that lawyers that fish for clients to represent in class action lawsuits intend to settle for a quick payout (to themselves) rather than actually represent the interests of those they represent. If that is not the case, HP’s lawye
748.
by ryao 2y ago
I said that a memory corruption flaw was found in seL4. This is a fact. If you read the patch, you will see that a message that was just created had been being overwritten (which is explained in a code comment). This occurs inside the seL4
749.
by ryao 2y ago
I did not suggest giving up, but I did suggest that seL4 is not immune to the bugs it’s advertising claims to avoid.
750.
by ryao 2y ago
Tell me how process isolation prevents SQL injection. I could ask about any of a great variety of security issues, but I think SQL injection is a great choice for debunking “process isolation is the bedrock of all other security guarantees”

More ›