scandinavian

14 ms·

91.
by scandinavian 7y ago
>Except that the Spectre paper already takes degraded timers into account and suggests to use a Web Worker thread that increments a value in a loop as a replacement. Yeah, which was why SharedArrayBuffer was disabled when spectrev1 was r
92.
by scandinavian 7y ago
>The timing precision thing by itself doesn't twarte anything, it just makes the attacks harder or take more time. Oh, so it just takes more time, so you have knowledge of an exploit? Fine, show me any PoC or similar bypassing the l
93.
by scandinavian 7y ago
>The browser mitigation’s only work with the kernel mitigation’s. That's just not true. The timer precision doesn't have anything to do with the kernel mitigations.
94.
by scandinavian 7y ago
From the comment in your link: > It's missing the entire actual implementation of the Spectre attack, which requires analysis of read times to see if you're hitting the processor cache or not. "analysis of read times"
95.
by scandinavian 7y ago
There have been more Chrome/Firefox 0-days than speculative execution vulnerabilities exploitable in Javascript (0). Sure, there is a chance that the Chrome/Firefox teams missed something, but there have been sighted no exploits s
96.
by scandinavian 7y ago
From reading the source court document, he is to appear in court tomorrow, otherwise: > Failure to appear as directed will subject Mr. Liebowitz to arrest by the United States Marshals Service without further notice.
97.
by scandinavian 7y ago
No, that's not a working exploit, as is said in the paper: > Chrome intentionally degrades the accuracy of its high-resolution timer to dissuade timing attacks using performance.now() [62]. However, the Web Workers feature of HTML5
98.
by scandinavian 7y ago
It just scrapes public trackers. If you don't use public trackers, you wont show up.
99.
by scandinavian 7y ago
Facebook forked PHP (Hack) and slack transitioned to hack (or is still in the process of). Mailchimp seems to be looking for Go programmers for backend work, so not sure that PHP is the major language of their stack anymore. So not the best
100.
by scandinavian 7y ago
It shouldn't, unless you base64 decode the header, then parse it with a library that causes the order to change, encode it again, and then use your own re-encoding to calculate the signature: HMAC-SHA256( b64(reencoded_header)
101.
by scandinavian 7y ago
https://i.imgur.com/2iCJllW.png Here is the graph for multistorey apartment buildings. I'm not smart enough to interpret what this means. In the big city I live in in Denmark, most new apartment buildings are luxury ap
102.
by scandinavian 7y ago
Seems pretty steady: https://i.imgur.com/wF6PCnU.png 2019 is not over yet, so maybe it's a little higher this year. This is only for "parcelhuse", which wikipedia defines as: "Single-family detached home
103.
by scandinavian 7y ago
What system is this? Isn't the built in package system still just pulling from github URL's?
104.
by scandinavian 7y ago
"Bleed" is normally just used for communicating that the exploit leaks data. See Optionsbleed, Heartbleed and Ticketbleed which are not side-channel attacks afaik.
105.
by scandinavian 7y ago
>it's more or less irrelevant if there is a working PoC today By that logic, all current crypto is already broken and we should only use quantum safe crypto. You guys threat model for your personal computers are way beyond most of t
106.
by scandinavian 7y ago
As said in that very blog, no attacks have been observed. Spectre has been out for a year and a half. Can you show me any indication of any feasible attack on firefox or chrome, that has a PoC or at least proof that it can be utilized for a
107.
by scandinavian 7y ago
Well, it remains to be seen if someone can even mount and attack against firefox or chrome. The researchers (RIDL) only managed ~1byte/s against a detached spidermonkey engine, with the old high-resolution timer enabled (these have bee
108.
by scandinavian 7y ago
Yeah, the shadows seem to match. And as the OP was posted March 9, they could be indeed be stolen images.
109.
by scandinavian 7y ago
php > echo count(get_defined_functions(TRUE)['internal']); 1196 They should clean up the global name space, but that will never happen, so I'll continue not using PHP.
110.
by scandinavian 7y ago
I doubt that you both manage critical infrastructure on AWS and haven't read the AWS security bulletin. https://aws.amazon.com/security/security-bulletins/AWS-2019-...
111.
by scandinavian 7y ago
CVE-2018-12130 is in the list of CVE's in your link. That is the ZombieLoad CVE. I hate these stupid names, they only confuse as shown by your comment.
112.
by scandinavian 7y ago
For sshd you would have to set PermitEmptyPasswords to yes for it to matter, right?
113.
MITM and XSS in Counter-Strike: Global Offensive(github.com)
2 points by scandinavian 7y ago|0 comments
114.
by scandinavian 8y ago
They were charged, not convicted yet.
115.
by scandinavian 8y ago
Yes, as I said, if DCI is already enabled and the device is connected via. a USB 3.0 debug cable. It can be made like this: https://github.com/ptresearch/IntelTXE-PoC#preparing-the-usb... Or you can buy one from Intel.
116.
by scandinavian 8y ago
The net-connected device would need to be connected with a USB 3.0 debugging cable. Also DCI would need to be enabled on the computer.
117.
by scandinavian 8y ago
It's common for gaming motherboards to leave manufacturing mode on? Got any info on that, can't find anything on google about this.
118.
by scandinavian 8y ago
Orange Mystery (their made up name) is an intended way to get JTAG access to TXE if the CPU is in manufacturing mode. Something that only happens if an OEM forgets to turn it off before shipping. This was the case with Intel Macbooks, befor
119.
by scandinavian 8y ago
I skimmed the slides. The password is unique per cpu. There is no hack presented in the slides to get the password, and they directly say they couldn't get the password for their system. Their evidence seems mostly based on this pdf:
120.
by scandinavian 8y ago
Him being behind TrueCrypt is only speculation. There is no proof that it was him, and he denies it himself. There's only some limited circumstantial evidence.

More ›