xorblurb

21 ms·

121.
by xorblurb 10y ago
It is to put approx on the same level as ASLR, DEP, Mandatory Integrity Controls, etc. From a modeling POV it might actually be better than ASLR, DEP, etc, which are "only" mitigations for which multiple approaches are know to exp
122.
by xorblurb 10y ago
Even more of a problem on laptops since the market has overwhelmingly moved from a technical capabilities standpoint to a race to less weight and more autonomy. Has a result, max memory on high end or configurable models has at best stagnat
123.
by xorblurb 10y ago
The thing is HD caching is extremely elastic. Memory consumption by a browser, less so (maybe even nearly not at all elastic). So what you might think of a benefit one day might be a drawback the next if you want to open twice the same amou
124.
by xorblurb 10y ago
The point of defense in depth is that you should not rely solely in practice on a single defense element, but you still should strive the hardest when you design it to be sufficient if it was bug free (at least on points where it is possi
125.
by xorblurb 10y ago
Browser are caching web content, not much persistent storage content... and the OS does persistent storage caching fine, typically no need to try to add your own (poor) layer to do that.
126.
by xorblurb 10y ago
Although PAUSE only has a performance impact, it was part of its design (so you need only one binary for your spinlock, and it executes correctly even on processor who don't know anything about PAUSE)
127.
by xorblurb 10y ago
Then they removed it in their most recent chips...
128.
by xorblurb 10y ago
Windows can't even do live updates of its userspace, so don't even start to dream about the kernel...
129.
by xorblurb 10y ago
Then it shall be used. And we shall be sad about that. And we are not talking about building a platform. Facebook is hardly a platform. We are talking about advertising.
130.
by xorblurb 10y ago
A consent form for consenting to what?
131.
by xorblurb 10y ago
Even in the 90s it seems odd to design a system trivially vulnerable to birthday attacks (with maybe a simplification, but that's how primitives are evaluated: if it fails in a slightly simplified version or environment, it's unfi
132.
by xorblurb 10y ago
Well, I've got "concrete experiences" in the software world after the manifesto, where this has been interpreted has fuck processes and fuck tools (except those of Scrum, regardless of their applicability -- which is not the
133.
by xorblurb 10y ago
Ok I maybe went a little far for the bridge, but today a microprocessor is way more similar to software than it is to a bridge (at least in some of the design phase, but then now even in some maintenance phases). And a modern rocket also co
134.
by xorblurb 10y ago
Successful big waterfall engineering projects where waterfall is actually applied exist. Want to construct a bridge or a rocket, design a microprocessor? You are not going to do that with "stories". It remains to be seen if big Sc
135.
by xorblurb 10y ago
> A story can be written to encourage a developers to improve quality of a codebase, share knowledge with another team, or take time to learn themselves. A really good story would encourage these things and also deliver customer value. S
136.
by xorblurb 10y ago
In your church, maybe. In a country where logic reigns, it depends.
137.
by xorblurb 10y ago
And in a way it's saner than if you blamed over and over some people who still work 5m from you, even if they deserve it; and we all have stories about that kind of people. You often needs to be more subtile with them (x) than blatantl
138.
by xorblurb 10y ago
tmux Works quite well. WSL is still not the highest quality right now, but they explicitly say that it will be still a beta in Win10 RS1, and it's impressive the progress they managed to do during the few months of the Insider period i
139.
by xorblurb 10y ago
> paralysis by analysis (of which uber-complicated and rigid typing is a sort). How "paralysis by analysis" has anything to do with typing? And how is typing uber-complicated to begin with? This is ultra basic logic... And why
140.
by xorblurb 10y ago
Nope. Reserved to Win7 (and then; only Pro). Even third party VM software able to run it implements a custom check to make sure your host is Win7 otherwise they refuse to run it. This is quite concerning, from a backward compat POV, because
141.
by xorblurb 10y ago
Not gonna happen. The last MS attempt at FS is ReFS, and it certainly won't support WSL given its by design lack of some features WSL is using. Not even talking about WSL, I don't think you can even put the system on ReFS, you sil
142.
by xorblurb 10y ago
RS1 is mostly frozen. I think Win10 is quite good, and that WSL is quite good given its age, and will be extremely useful for a lot of things. Still, if you try some workloads, WSL is way slower than a Linux VM. I don't expect it t
143.
by xorblurb 10y ago
Hm, this is only the theory. In practice, lots of modern NT syscalls are directly or at least quite closely modeled after their Win32 equivalent. Even more so when they have been introduced after the end of the Windows Consumer vs NT split
144.
by xorblurb 10y ago
Because there is in general nothing to authenticate the hardware owner in contrast with the usual OS users/admins - that the model consider corrupted, and because it is designed to msot of the time prevent modification by even admins (
145.
by xorblurb 10y ago
Microsoft seems to have used a phased-in strategy: first it was all optional, then it should be there by default but ALSO with a mandatory option to disable to get the Windows logo (and probably goes with big OEM deals) then IIRC with Windo
146.
by xorblurb 10y ago
The argument that it was once a bug of the C standard makes absolutely no sense. It is not allowed by C11. C99 does not talk about that because C99 does not officially support multithreading, but that has not prevented largely C99 compliant
147.
by xorblurb 10y ago
Cygwin and Mingw are not really comparable. And if you are thinking about MSys, it's a fork of Cygwin, so...
148.
by xorblurb 10y ago
I don't care about the 8259, I don't see why anybody should care except PIC driver programmers, it's doubtful anybody designing NT cared given the very first architecture it was design against at was not a PC, and this is typ
149.
by xorblurb 10y ago
Hm I was more thinking about open FD, not just special file entries on the FS. Well, I agree with you: it's a little weird and in some cases dangerous to have the char/block devices in the FS, and it has already been worked-around
150.
by xorblurb 10y ago
What do you think the VDSO is used for? It also exports "functions potentially useful when called from the program". The approach is a little different though; ntdll exports all of the NT API, and you need to go through it to reac

More ›