temac

84 ms·

841.
by temac 10y ago
> They take the AOSP source code that Google drops and then they add all of their source code and then build and distribute their own version of Android that only they can update. Yep that's a insanely huge design flaw, coherent wit
842.
by temac 10y ago
> This makes no sense. "People associate X with Y" is not the same as "Y is responsible for X". If I associate Android with Linux, is Linus now culpable for Android's security problems? This is ridiculous. Linus
843.
by temac 10y ago
I don't see how microkernels have anything to do with all of that? Userspace drivers exists in all systems and arguably they are not more backward compatible or anything than kernel-space drivers, just the incompatibilities appears aga
844.
by temac 10y ago
Well, GNU/Linux distro are usually patched. Main ones for pretty much all known vulns. Tons of Android systems are not patched. I don't think any of those is secure against anybody motivated enough (and I'm not even think
845.
by temac 10y ago
So there are security patches in Android? So the problem seems to be: some vendors seem not interested in distributing them... :/
846.
by temac 10y ago
I'm currently working on a system that had no locking order defined (and no any other proper way to prevent or handle deadlocks) -- and looking at the face of my colleagues when I announced that, a good proportion (maybe even the major
847.
by temac 10y ago
I was serious: you can't put any obligation you want in a SW license and hope it can be enforced against those who buy said license. And it has been debated whether restriction to run consumer general purpose software on specific har
848.
by temac 10y ago
It's unclear whether a license can actually prevent you from running licensed software on the HW you like, if you buy said SW in the first place.
849.
by temac 10y ago
Windows might have been the OS with the overall top market share at one point (depending on precisely what you include in your measure), however measuring only "traditional" desktop/WS and server makes no sense anymore, and e
850.
by temac 10y ago
You have bugs in every (mainstream) kernels. With them, you can elevate your privileges to kernel level, and once you've done that it's game over. There is no reason to believe an additional layer (a VM) will always protect you (a
851.
by temac 10y ago
Well the thing is, it should not fail because of obscure reasons completely unrelated to NaNs...
852.
by temac 10y ago
A new Debian is about to be released, featuring Linux 4.9. Some people using a completely different kind of OS insist in continuing to use a version from 2009, instead of its more recent version. I guarantee you that this version from 2009
853.
by temac 10y ago
We can easily distinguish between the two by calling them units.
854.
by temac 10y ago
It mitigates. IIRC DDR4 also mitigates. With both at least I'm pretty sure RowHammer is not a security problem anymore, and maybe even the risk of crashing disappear completely (or have an extremely small probability)
855.
by temac 10y ago
That's a problem, not a manifesto to continue to live with it... And if the prices difference are large, they are largely artificial. That means if ECC is more widely uses, prices difference will decrease to reasonable levels (at the m
856.
by temac 10y ago
> It's a bigger premium to go from an i7 to Xeon than to equip the Xeon with ECC RAM. Not exactly. The prices between comparable i7 to Xeon are nearly the same.
857.
by temac 10y ago
This EXTREMELY reduces the probability that a bit flips happens. And consumer PCs (or mobile devices) are the only devices where there is no ECC memory, RAM is the only place in such devices where there is no error detection and/or cor
858.
by temac 10y ago
Big laptop i7s have something like a 50W TDP. It's quite a lot, even for a somehow "heavy" laptop... You can do maybe twice more on extra heavy laptop (for hardcore gamers) that probably only few people want.
859.
by temac 10y ago
A new HDD is more probably full of 0s.
860.
by temac 10y ago
Wasn't the Fukushima reactor supposed to be passive safe ?
861.
by temac 10y ago
I would like to add that there are starting to be mitigations against attacks modifying control flow, for example CFguard under Windows (which will probably be extended to cover ROP also) but like DEP an ASLR those are only mitigations, not
862.
by temac 10y ago
If people start to consider bound checking branches as overhead (which, in some extremely rare limited cases, they are in the right to do so), they should as well understand what happen with e.g. some largely used calling convention such as
863.
by temac 10y ago
If memset is actually not async signal safe on some target, and a compiler targetting the same does that transformation, the end results are very unsound...
864.
by temac 10y ago
Posix is terrible. But I'm not sure we have anything better. MAXIMUM_WAIT_OBJECTS is also terrible of course, but even apart from that Win32 is not bright, at all. The doc contains so little details (or worse is sometime even false) th
865.
by temac 10y ago
Well, it was truly a piece of shitty crap. Absolutely not comparable to how Apple does it - and by several order of magnitude... it was a soo huge disaster that they made sure to design the next model so people would be able to retrofit its
866.
by temac 10y ago
They might have been able to "capture" a good amount of drivers with their new update strategy. This might help to be able to do that... and this is a good news!
867.
by temac 10y ago
Actually I just found that some Samsung Notebook 9 "pro" 15" have keypad-less keyboard. However, they seems to be limited to 8GB, and I don't want to be sent 6 years in the past. I also don't exactly know what the &
868.
by temac 10y ago
Sadly, most recent 15", of all brands, have a numeric keypad. IIRC I only found one non-MBP beside the XPS15 that still have no keypad, but it has way worse issues (very bad heat issues). So you pretty much only have the choice between
869.
by temac 10y ago
The author mostly said that: this kind of equipment is intrinsically quite expensive, because lots of various tech are intrinsically high-end. Now there is also the question of regulation. From my experience, the major part of the cost of a
870.
by temac 10y ago
And have probably been used in some cheap systems?

More ›