scandinavian

12 ms·

61.
by scandinavian 5y ago
2. TOR browser is built without webrtc support. There is no other way afaik, as firefox doesn't have a socket API for extensions anymore.
62.
by scandinavian 5y ago
It's not referring to having sudo ALL permissions, but to users having sudo permissions for individual applications. So if you are trying to privilege escalate a linux box and sudo -l returns: (root) /usr/sbin/tcpdump Yo
63.
by scandinavian 5y ago
Correct we have netflix, google and akamai caches in our datacenter. A very large chunk of our total traffic goes through these racks.
64.
by scandinavian 5y ago
You don't think it's important to make the distinction between chip design and manufacturing? Intel has clearly failed with regards to manufacturing new nodes, but is the chip design really that bad when they could compete for a l
65.
by scandinavian 5y ago
> Simplistically: Intel's chips aren't as good as AMDs so it has to drop prices. Shouldn't you replace AMD with TSMC in that sentence, unless you meant design instead of chips? AMD doesn't manufacture chips.
66.
by scandinavian 5y ago
>But I mean come on, they're Microsoft. If they really wanted filesystem access to be efficient across systems, we'd have it by now. Here's one of the developers saying it is hard back in the WSL days. https://g
67.
by scandinavian 5y ago
Accessing the WSL filesystem from WSL is indeed a lot faster on WSL2. Accessing the Windows filesystem from WSL or vise versa is even slower in WSL2 compared to WSL1. https://docs.microsoft.com/en-us/windows/wsl&#x
68.
by scandinavian 5y ago
Accessing the Windows filesystem from WSL and vice versa is extremely slow, so running for example your IDE in WSL and having your code etc. stored in WSL is useful. I think that is one of the big usecases. It's already kinda supported
69.
by scandinavian 5y ago
You can run docker on Windows without Docker Desktop. I think the only thing that requires Docker Desktop on windows is if you want windows containers, but I don't really think that's a common usecase.
70.
by scandinavian 5y ago
>There aren't many solutions around for automatically pulling and running new images. Isn't that exactly what watchtower does? https://github.com/containrrr/watchtower It works great on my mediacenter serv
71.
by scandinavian 5y ago
It is hidden for the user. Obfuscation doesn't work. They probably just called the private API to generate a hash on a jailbroken phone. There's even a link to another piece of software that can do just that, only on macOS. https
72.
by scandinavian 5y ago
That's news to me. Wikipedia also notes that Aspartame which is the sweetener used in most diet soda, has not been found to be carcinogenic with a bunch of citations. Or are you talking about other ingredients?
73.
by scandinavian 5y ago
What's wrong with diet soda?
74.
by scandinavian 5y ago
I would be very surprised if you could even break 2.5 gbps towards google drive. Saturating 25 gbps to anything the peer out of country would be basically impossible most places.
75.
by scandinavian 5y ago
Specifically using another font for the code tag then the rest of the blog to hide the difference between ⁄⁄ and // seems weird. I get that it wouldn't be interesting if not doing that, but doesn't that just show that it
76.
by scandinavian 5y ago
His questions have 444 upvotes, so he should actually have 4400 rep. He lost some to users being deleted. Looking at the reputation log he actually has less than he should have, but I'm not an expert.
77.
by scandinavian 5y ago
According to google ID cards are deleted after age has been proven, but for some reason they might keep credit card information. >Important: If you enter your credit card info for age verification, Google will retain this data as necessa
78.
by scandinavian 6y ago
I'm getting a steady 144 fps. I don't think the delay is performance related, at least on my PC.
79.
by scandinavian 6y ago
Not sure why. A torrent client is at least general purpose. The only use for sonarr is automate piracy of TV shows.
80.
by scandinavian 6y ago
It's also completely unnecessary. You can just create a repo and backdate commits to do it instantly. Like this for example: https://github.com/gelstudios/gitfiti
81.
by scandinavian 7y ago
https://3v4l.org/saHj2 However you could just catch Exception. Not sure why a parse error is a "Fatal error".
82.
by scandinavian 7y ago
Sure, I was just kinda confused that this was the example they presented. I guess for highly targeted attacks, it might be somewhat useful. >Leaking KASLR/stack canary just mean you get 90s level triviality of attacking any stack-ov
83.
by scandinavian 7y ago
Okay, we have differing definitions of what a rootkit is it seems.
84.
by scandinavian 7y ago
>CacheOut violates the operating system's privacy by extracting information from it that facilitates other attacks, such as buffer overflow attacks. >More specifically, modern operating systems employ Kernel Address Space Layout
85.
by scandinavian 7y ago
>but the instant it's in a rootkit everybody will be able to do it. This makes no sense. If you have the privileges to install a rootkit, there is no need to use any speculative execution exploit.
86.
by scandinavian 7y ago
The three IP's they return when you do a DNS lookup originate form Rumania, Switzerland and the island country Saint Kitts and Nevis. The site was created by Russians though, just not sure it is hosted there anymore.
87.
by scandinavian 7y ago
As is said in the PoC, it does not bypass index masking and site-isolation. They read data already available to the code they are executing. They did show that the timer resolution mitigation is not 100% effective, which is well known and w
88.
by scandinavian 7y ago
> We leak a string from another process using Javascript and WebAssembly in the SpiderMonkey engine. They leak in flight data, using a detached spidermonkey engine, patched to make performance.now() return rdtscp at a rate of 1B/s w
89.
by scandinavian 7y ago
You have misunderstood how the browser attacks work. They are limited to the memory assigned to the browser process. If site-isolation and the other browser mitigations were somehow bypassed, an ad-network would potentially be able to read
90.
by scandinavian 7y ago
Chrome: CVE-2019-13720, CVE-2019-5786 Firefox: CVE-2019-11707/CVE-2019-11708 Your turn. Link the speculative execution 0days.

More ›