smarx007

14 ms·

151.
by smarx007 2y ago
The ribbon trades space for less clicks. You may complain that it takes too much space, but I find "twice as many clicks" hard to buy.
152.
by smarx007 2y ago
> I interpreted that as a general claim about windows security Sure, because you understand that the other interpretation is nonsensical. All the publications that are popping up showing that the Recall DB is locally accessible are aimed
153.
by smarx007 2y ago
https://doublepulsar.com/recall-stealing-everything-youve-ev... Apple maintains some databases on macOS that are not sudo-accessible.
154.
by smarx007 2y ago
Yes. With the difference that now the have the DB which they can interrogate with a prompt like "list all credit card numbers entered in the past 3 months". The post touches on your question/remark.
155.
by smarx007 2y ago
The repo is along the lines of "2+2=4". GP said there is nothing interesting in that, to which I pointed to the QnA entry which shows that MS did tell a journalist that "2+2=22", so to speak. What else is there to dispro
156.
by smarx007 2y ago
With any available information stealing malware: https://doublepulsar.com/recall-stealing-everything-youve-ev...
157.
by smarx007 2y ago
If MS claims the data is not accessible [by malware] remotely and can only be accessed if the attacker has physical access, a POC just just fopens the file and prints it is a fair exploit POC. No matter how trivial that looks to you.
158.
by smarx007 2y ago
See the README under "Q: But the BBC said data cannot be accessed remotely by hackers."
159.
by smarx007 2y ago
Every archived file knows Jason Scott.
160.
by smarx007 2y ago
https://signal.org/blog/sms-removal-android/ ?
161.
by smarx007 2y ago
GP said "LPDDR5" and that Apple won't sell at component prices. You mention DIMMs and component prices instead. This is unhelpful. See https://www.digikey.com/en/products/filter/memory/memo
162.
by smarx007 2y ago
> arbitrary attacker can somehow become the DHCP server on your LAN, which is unlikely but not impossible Coffee shop wi-fi? A.k.a merely the no. 1 selling point for most VPN offerings. The proper course of action in this case is to use
163.
by smarx007 2y ago
Ubuntu Desktop upgrade breakage is listed as a known issue: https://discourse.ubuntu.com/t/noble-numbat-release-notes/39... Which indeed makes it a quite rushed release.
164.
by smarx007 2y ago
How is it not on the front page? https://news.ycombinator.com/item?id=40154395 with 36 points over 10 hours is but this submission with 89 points over 4 hours isn't. The submitter seems to have plenty of karma too.
165.
by smarx007 2y ago
22.04 LTS users are advised to wait until August for 24.04.1: https://discourse.ubuntu.com/t/noble-numbat-release-notes/39...
166.
by smarx007 2y ago
For Chrome, some apparmor policy relaxation would likely be needed: https://discourse.ubuntu.com/t/noble-numbat-release-notes/39...
167.
by smarx007 2y ago
> why does open source need to "win" Open source does not need to win. But your ability to be in control of your computer needs to be preserved (restored?). A proprietary fridge cannot control your diet, while a proprietary App
168.
by smarx007 2y ago
SHA-512(...)[:521] would still produce the same vulnerability, there would be 9 unchanging bits (assuming the [:521] would pad the 512 bits to 521). Those 9 guessable bits are enough to recover the key from 60 signatures, as the post explai
169.
by smarx007 2y ago
> long-timeout HTTP connection that wouldn't be responded to This open connection IS the overhead. Some approaches have more overhead, some less. Long-polling these days is not needed and can be replaced by SSE [1] (if you are OK
170.
by smarx007 3y ago
You quoted (2)(iv) and (7)(v) quite selectively. There are 16 items in that list and the text above the list clearly says that the specific sector (i.e. the criticality of the sector) of your company is irrelevant as long as you meet at lea
171.
by smarx007 3y ago
The draft amendment to the Code itself is just 10 pages long (pp. 123-133), pp. 1-123 are the analysis, a total of 133 pages [1]. § 226.2 Applicability (12) on p. 125 covers most IT/SaaS companies (any SW that has an OAuth2 client lib
172.
by smarx007 3y ago
How are you planning to work around https://www.apotea.se/security/authentication that uses national https://www.bankid.com/en/ ?
173.
by smarx007 3y ago
Sweden has been doing this since 2003 with BankID. Welcome to the 21st century. You can use it to log into bank account pages, file taxes, book appointments with dentists, place orders in (private) pharmacies, check your electricity company
174.
by smarx007 3y ago
What I was trying to say is that the article describes an architecture that takes cloud billing abuse attacks into account (they point out specifically that R2 is preferred to S3 due to egress cost structure) and this design is what partial
175.
by smarx007 3y ago
> As long as such abuse doesn't cause monetary [...] concerns 8TB egress on AWS is $595 (taking into account 1TB free egress/mo), while 8TB egress on Hetzner starts at less than $10/mo. With DigitalOcean you'd pay $30
176.
by smarx007 3y ago
Many cases where a recovery from backup is needed are due to PEBKAC.
177.
by smarx007 3y ago
UV-K5(8) is legit: http://en.qsfj.com/products/3268
178.
by smarx007 3y ago
The main difference is the Cortex-R5 subsystem. Beaglebone, the famed predecessor, had PRUs. These features paired with a powerful Cortex-A processor are really useful if you have a complex program that needs to do something (IO/contro
179.
BeagleY-AI: a 4 TOPS-capable $70 board from Beagleboard(beagleboard.org)
133 points by smarx007 3y ago|68 comments
180.
by smarx007 3y ago
I beg to differ. If the PII in the leak matches what's in AT&T DBs, they can still maintain plausible deniability that there is no proof the PII leaked from them . An encrypted DOB requires the DOB and an encryption key. The latte

More ›