simiones

29 ms·

451.
by simiones 2y ago
I don't think so. As far as I understood this, the wildcard match was basically considered a no-op (since anything matches, they probably optimized by not even attempting the match), and so that 21st field was never provided to their C
452.
by simiones 2y ago
Oh, yes, what I meant to say is that you can send frames larger than 1500 bytes without resorting to IP fragmentation, in certain networks. I can see how it sounded like the "1500 limit" was the IPv6 reassembly limit, but I wanted
453.
by simiones 2y ago
I couldn't find any quote that is even remotely similar to this in the article. Can you give more context?
454.
by simiones 2y ago
It should be noted that IP fragmentation is quite limited and often buggy. IPv6 only requires receivers to re-assemble an IP packet that is at most 1500 bytes, so sending a 65KB TCP segment is quite likely to just result in dropped packets.
455.
by simiones 2y ago
You then need extra memory to store the de-compressed instructions, since you can't predict before running the decompression how many instructions you'll get. And you still the problem of an unpredictably-sized instruction cache.
456.
by simiones 2y ago
Memorizing is clearly a necessary, but not sufficient part of learning. If you are to become an expert in any subject whatsoever, from math to football fandom, you will need to develop an ability for remembering huge amounts of raw facts. O
457.
by simiones 2y ago
All of these are legitimate issues with AV software. However, they don't mean that AV is a crutch, or that it could easily be supplanted by other security features. There is simply no good alternative to AV for systems where it's
458.
by simiones 2y ago
PDF parsers, and really all complex format parsers, are very often exploitable. Maliciously crafted documents trigger a buffer overflow, and now they can take control of the process and execute arbitrary code, code that almost certainly has
459.
by simiones 2y ago
Ok, how about an image in an email? Or a PDF receipt? How about clicking a link online? All of these have a serious potential to infect your system with malware.
460.
by simiones 2y ago
I agree to some extent, but still: if you were starting your own company, would you wait until someone wrote a secure OS? Or would you provide your developers and sales people etc. with an existing OS, and run your servers on an existing OS
461.
by simiones 2y ago
Then what's stopping them from charging more today, in the absence of any fine?
462.
by simiones 2y ago
Automatic security updates are widely touted as the gold standard in IT security, at least for anything that is not a life-support system.
463.
by simiones 2y ago
Ok, replace MRI with ATM then.
464.
by simiones 2y ago
Is there an example of a real OS for desktops and servers that is secure from this point of view? I think SeL4 might qualify, but that can only realistically be used for embedded applications, it doesn't have, at this time, many of the
465.
by simiones 2y ago
Even then, continents have little to do with it. The Indian numbering system is indeed used in much of Asia - but it's not used in Russia for example. If you live in Vladivostok, you might need to learn these two systems even if you ne
466.
by simiones 2y ago
Who collects and maintains all these lists of known good/expected configurations? Should the kernel know that apache shouldn't be launched from root? How about autocad, is that ok to be launched from bash? What directories should
467.
by simiones 2y ago
You haven't answered anything interesting. Any software system that anyone cares about operates on state - user documents, a database, other bespoke systems etc. If the operator of that system accidentally deploys malware to it, how to
468.
by simiones 2y ago
The cat-and-mouse game is between OS security features and hackers. AV software is not a crutch, it's an extra level of defense. All OS kernels are vulnerable to malware - this is a 100% given at this moment in history. The question is
469.
by simiones 2y ago
Falcon provides many levels of protection (in principle - in practice, given the extreme incompetence demonstrated in this case, I doubt they do much more than sell snake oil), some of which have OS-native alternatives, some of which do not
470.
by simiones 2y ago
What if the uptime of 50% of your computers does, but you need 100% percent of your computers to run at 100% capacity? If a shop has two lathes and one crashes, and now the shop has 50% capacity, is not losing money because of CrowdStrike&#
471.
by simiones 2y ago
How is it someone other than CrowdStrike's fault that the systems failed again at every reboot until someone with physical access and know-how deleted the crashing driver manually from recovery mode? What should a company operating, sa
472.
by simiones 2y ago
Unfortunately, CrowdStrike decides when it's time to upgrade CrowdStrike software, not the admins.
473.
by simiones 2y ago
That only works when the company has full power to set prices unilaterally, i.e. when it has monopoly power. Which is a separate problem that should be prevented separately. If Cisco gets fined a billion dollars, it can't just hike up
474.
by simiones 2y ago
> If you aren’t talking across continents there is no need to speak two languages Continents have nothing to do with this. If you live in the UK and need to talk to people in the USA and Australia, you can be monolingual and still speak
475.
by simiones 2y ago
The difference between a function and a procedure is strictly whether they can be used as a value or not in the syntax of the language, not the semantics. A function is a subroutine that can be used as either a value or a statement, a proce
476.
by simiones 2y ago
The calling convention is part of the abstraction, it's not part of the processor's logic. Different languages often have different calling conventions, on the same OS and processor family. Different OSs have different calling con
477.
by simiones 2y ago
There is no general legal right for one entity to interpose itself between another entity and its customers. The concept of a User Agent is not a legal concept, it is merely a technical term. If RyanAir doesn't want you to interact wit
478.
by simiones 2y ago
C functions (and in fact the "functions" of most mainstream programming languages) are not computations, they are algorithms. An algorithm doesn't necessarily have a result of any kind, at least not in the way that a (mathema
479.
by simiones 2y ago
A tool that has full control of the OS (which is apparently required by such security software) fundamentally must have a way to crash the system, and continue to do so at every restart.
480.
by simiones 2y ago
A thing which can nearly get into orbit. It never quite reached it (probably intentionally). But more importantly, the recent Starship tests ran with no payload whatsoever, and they definitely didn't deploy anything into orbit.

More ›