veeti

35 ms·

511.
by veeti 9y ago
Every modern SoC has TrustZone.
512.
by veeti 9y ago
U2F support for most sites is already in stable Firefox, you just have to flip security.webauth.u2f in about:config. Unfortunately Google doesn't work yet, maybe due to missing AppID support: https://bugzilla.mozilla.org&#x2
513.
by veeti 9y ago
The best choices for no bloat and timely updates are Android One, Nokia and Sony devices. They have guaranteed updates for at least two years and actually provide timely security patches (so that in October you have October's security
514.
by veeti 9y ago
Project Zero doesn't discriminate: https://googleprojectzero.blogspot.fi/2017/07/trust-issues-e... https://googleprojectzero.blogspot.fi/2015/09/stagefrightene... https:/&#x2F
515.
by veeti 9y ago
I wouldn't host a database on a server without ECC RAM like most Hetzner offerings.
516.
by veeti 9y ago
You need to authorize each adb key on the phone, so a screen lock prevents this.
517.
by veeti 9y ago
https://developer.android.com/topic/libraries/architecture/r...
518.
by veeti 9y ago
> I think that, with killer features like breaking out of DRM, the market share could change. Indeed, that would kill Firefox once and for all.
519.
by veeti 9y ago
Standards have changed. For example, CSS :first-child without a parent is now legal: https://developer.mozilla.org/en-US/docs/Web/CSS/:first-chil... You can shift click the "A" in Acid3 to see
520.
by veeti 9y ago
> Compact. It uses more symbols than UUID (A-Za-z0-9_~) and has the same number of unique options in just 22 symbols instead of 36.
521.
by veeti 9y ago
Why stop there? Forget Electron, build your next desktop application using PHP-GTK! http://gtk.php.net/index.php
522.
by veeti 9y ago
Huh? Fedora is one of the most bleeding edge, "modern" distributions you'll find.
523.
by veeti 9y ago
> Moreover, the engine runs unsandboxed and as NT Authority\SYSTEM. Is there an antivirus that _doesn't_ parse untrusted input in a process with full system privileges? What a joke.
524.
by veeti 9y ago
Making optimizations based on telemetry from real world sites doesn't mean you're optimizing for that one site only, like a video driver including hacks for a specific game. For example, shifting an array in Firefox used to be O(n
525.
by veeti 9y ago
> And I could have sworn that it defaults to enabled? It does not.
526.
by veeti 9y ago
> DRM Mozilla fought DRM until the very end and lost . If Firefox is to have any chance at remaining a mainstream browser it needs to support Netflix and the likes. You can't seriously blame them for this, because they are damned i
527.
by veeti 9y ago
Google Analytics has nothing to do with this. As clearly linked in the mailing list, you can read the paper and source code for the client-side differential privacy tech used.
528.
by veeti 9y ago
Yes, Firefox developers can only work on addressing crashes or performance issues, but not both.
529.
by veeti 9y ago
Existing telemetry in Firefox already works on an opt-out basis. This changes nothing.
530.
by veeti 9y ago
Start by actually bothering to read the link: > One recurring ask from the Firefox product teams is the ability to collect more sensitive data, like how features perform on specific sites. > [for example]: "Which sites does a use
531.
by veeti 9y ago
RTFA: https://arxiv.org/pdf/1407.6981.pdf
532.
by veeti 9y ago
Chrome OS has first class support for Android apps nowadays. You can use a keyboard and mouse through USB OTG or Bluetooth on an Android as well.
533.
by veeti 9y ago
> Since FF is still a single process Multiprocess has been gradually rolled out since last year. Check about:support, you might have some ancient addon installed that isn't compatible.
534.
by veeti 9y ago
Dig a little deeper: https://developers.google.com/android/reference/com/google/a... I suppose USB support might need integration on the operating system level, whereas NFC and BLE can be integrated thro
535.
by veeti 9y ago
Good news, it's coming! https://developers.google.com/identity/fido/android/native-a...
536.
by veeti 9y ago
A) I don't know. How would you ever know? RCE can be silent. B) Yes, in Android patch level July 2017 and iOS 10.3.3.
537.
by veeti 9y ago
The app-level "mitigation" is that media isn't automatically loaded. You are still just as vulnerable after you decide to play that innocuous-looking MP4 file.
538.
by veeti 9y ago
https://googleprojectzero.blogspot.com/2017/04/over-air-expl...
539.
by veeti 9y ago
Just go through the monthly Android security bulletins [1]. Without fail there are a bunch of critical RCE issues every single month. [1] https://source.android.com/security/bulletin/2017-08-01
540.
by veeti 9y ago
The New Firefox and Ridiculous Numbers of Tabs https://metafluff.com/2017/07/21/i-am-a-tab-hoarder/

More ›