shaded-enmity

5 ms·

1.
by shaded-enmity 4y ago
Yeah, it's much, MUCH different to have those vistas unfold in front of your eyes at smooth 144 fps while you have control over the movement and everything compared to hyperanalizing 1 still frame or a sequence of frames with no real c
2.
by shaded-enmity 4y ago
The nice thing about this is that it's simple and works pretty much in any language so there's very little cognitive strain if you work with multiple languages at the same time.
3.
by shaded-enmity 4y ago
From your link: > securelevel may no longer be lowered except by init > The list of securelevel's effects may not be comprehensive. So yes, it's a nice sandbox that can help prevent accidents, but doesn't sound like som
4.
by shaded-enmity 4y ago
Aye, I think what you're describing is "security by obscurity" - i.e. the capability is still there, I'm just counting on the attacker not knowing that it is because I've hidden it so well. It can work really well i
5.
by shaded-enmity 4y ago
> I believe the concern is that the attackers gain root access on system A but hide their presence/activity - even in the presence of logs to remote, more trusted server B. That's generally called pivoting and has nothing to do
6.
by shaded-enmity 4y ago
How is the vector of persistence of any significance here? At some point the attackers got root access on your system, game over.
7.
by shaded-enmity 4y ago
Turns out (1) works: #include <stdio.h> #include <stdlib.h> static void begin() __attribute__((constructor)); void begin() { unsetenv("LD_PRELOAD"); } Build with: gcc -shared -fpie -o library.s
8.
by shaded-enmity 4y ago
This is a nice summary: https://lcamtuf.blogspot.com/2014/10/psa-dont-run-strings-on...
9.
by shaded-enmity 4y ago
1. Can't the process just scrub LD_PRELOAD from its environment? Linker already done it's job at that point. 2. I'd suggest against using `strings` (let alone with sudo) on attacker controlled inputs
10.
by shaded-enmity 4y ago
No it's not fine, this is just another coercion and consolidation of power where it shouldn't belong. Independent entities cannot innovate on their own because now there's a central apparatus that decides what should be innov
11.
by shaded-enmity 4y ago
You still need to implement a CI rule so that I don't just call `set_fs()` without using `preferred_syntax(set_fs)`, don't you?
12.
by shaded-enmity 4y ago
A simple policy that both set_fs() calls need to happen within the same function body with corresponding CI test based on AST/DWARF inspection would have also prevented it. Do you really want to rely on stack unwinding/destructors
13.
by shaded-enmity 4y ago
I'm no physicist either, I just like to ask questions :) How does the demon attain the knowledge of what is "fast" and "slow" without continuous observation (and thus interaction) with the particles. Velocity is jus
14.
by shaded-enmity 4y ago
How do you build a mechanism that has a perfect knowledge about a system while being part of said system?
15.
by shaded-enmity 4y ago
This all depends how much product are you expected to produce. Your "don't chop things beforehand" works if you're cooking for 1 or 2, but if you need to cook for 4+ you absolutely need to plan your steps and prepare you
16.
by shaded-enmity 4y ago
This looks amazing but I'd appreciate an autoplay button or free walk + look, the scrollwheel monorail handcranking makes the exploration rather frustrating.
17.
by shaded-enmity 5y ago
I haven't touched this in a long time, but isn't the attack vector essentially the same as in Vortex lvl 4? https://overthewire.org/wargames/vortex/vortex4.html
18.
by shaded-enmity 5y ago
Defense in depth would disagree that it is fine. I'm pretty sure this vulnerability can go much further if you combine it with, for example, the `https_proxy` environment variable.
19.
by shaded-enmity 5y ago
Probably because you'd need a battery to store the energy generated via braking thus eliminating much of the environmental benefit.
20.
by shaded-enmity 5y ago
My crazy pet theory: computational bandwidth is constant for any spacetime coordinate. According to Bekenstein bound the lower the temperature of the system the cheaper it is to flip a bit of information. As time progresses the CMBR gets co
21.
by shaded-enmity 6y ago
If you want to learn more how these things work I'd highly suggest going through the PoC||GTFO archive ( https://github.com/angea/pocorgtfo/blob/master/README.md ) and check out entries by Ange Albert
22.
by shaded-enmity 6y ago
In Docker each container process is a child of the Docker daemon process. If you need to apply security patches to the Docker daemon it kills all your running containers.
23.
by shaded-enmity 6y ago
Both examples look unreadable to me. Just because you can do a lot on a single line doesn't mean you should. all_members = ", ".join(members) all_scores = ", ".join(map(str, scores)) print(f'{id:&
24.
by shaded-enmity 6y ago
Not really, I'm going to give the worst example of all - Star Citizen (aka Scope Creep The Video Game) - which was IIRC crowdfunded, and according to the wiki page below remains the most expensive game in terms of development cost. ht
25.
by shaded-enmity 6y ago
So is this survivorship bias or something else? I don't understand your point. I have a white wall in front of me. If I take a brush and red paint and paint a big red circle on the wall, are you saying that the big red circle "jus
26.
by shaded-enmity 6y ago
I'm confused, isn't the whole schtick around past events being related to future events the basis of causality?
27.
by shaded-enmity 6y ago
If you upgrade your packages during a build then inadvertently if 2 people build your Dockerfile at two distinct times they can end up with 2 different images. So rather than focusing on "we're using base-image:1.0.2" you nee
28.
by shaded-enmity 6y ago
I think you meant "very low resistance" or "very high conductivity", right?
29.
by shaded-enmity 6y ago
How much are you willing to pay for those answers? What you're describing sounds similar to interactive courses and 1:1 couching.
30.
by shaded-enmity 7y ago
Amazing work, I wish every service was covered like this! Some feedback/things I'd like to see (or not see): - Make the Comments section collapsible, right now it takes 1/4 of the screen - Filtering by categories is kinda con

More ›