yifanlu

10 ms·

31.
by yifanlu 8y ago
I haven’t used amazon for a while (and haven’t had prime in years) and a couple months ago, after reading some posts about amazon I decided to see what my life would have been like if I had used amazon exclusively for all my non-grocery sho
32.
by yifanlu 8y ago
Air travel isn’t always a luxury expense. Some people can’t afford anything except the cheapest ticket. It’s rather dismissive to blame them instead of the large airline companies who want to make a profit. Just because you can buy a more e
33.
by yifanlu 8y ago
A Raspberry Pi Zero is $5, runs ARM, has tonnes of community support, and is available to ship outside of china. If you look at taobao/aliexpress/ebay, there are also hundreds of RPI clones and ARM development boards and even FPGA
34.
Ensō: A PS Vita bootloader exploit(blog.xyz.is)
4 points by yifanlu 8y ago|0 comments
35.
by yifanlu 8y ago
Apple seemed to be very reasonable here—they reached out to the developer sensing their frustration with advice on getting their app approved. Seems to me that apple wants to help this to get approved by investing the effort of calling the
36.
by yifanlu 8y ago
Supply chain security is a known problem with mitigations. Don’t think all these billion dollar companies haven’t thought about the issue of having a third party implement their designs. Just like with software security, there’s no perfect
37.
by yifanlu 8y ago
Because AT&T is DSL, Comcast is cable, and Verizon is Fiber. If you want the fastest internet, you really don’t have a choice. And telling people “you have a choice, just switch to something slower” is not the same as “you have a choice
38.
by yifanlu 8y ago
No, because ISPs are natural monopolies ( https://en.wikipedia.org/wiki/Natural_monopoly ). The government allows them to have a regional monopoly in exchange for investing in the infrastructure. As such, there’s no easy
39.
by yifanlu 9y ago
Let’s stop pretending that we, as a society, care about fairness here. Rich people always get away with more shit. Let’s just enjoy one rich asshole getting part of what he deserved instead of lamenting about how a second rich asshole didn’
40.
by yifanlu 9y ago
The post was from 16 days ago right? Did Apple fix it?
41.
by yifanlu 9y ago
Just a half minute skim shows the author claims it passes the natural proof barrier but makes no claim about it being non-relativizing or non-algebraizing.
42.
by yifanlu 9y ago
> Broadpwn is a fully remote attack against Broadcom’s BCM43xx family of WiFi chipsets, which allows for code execution on the main application processor in both Android and iOS. This implies they have code execution on the application p
43.
by yifanlu 9y ago
Right, I'm guessing they just patched the actual wifi chip vulnerability. That's why I would like someone (preferably the author) to disclose if there is indeed a privilege escalation or not and to provide more details if there is
44.
by yifanlu 9y ago
> Most modern systems have a MMU to prevent the peripheral from DMAing to memory areas not specifically reserved for it, but given (certainly Android) systems run oldschool kernels hacked together by the last kind of crowd you want worki
45.
by yifanlu 9y ago
The article mentions > Broadpwn is a fully remote attack against Broadcom’s BCM43xx family of WiFi chipsets, which allows for code execution on the main application processor in both Android and iOS. But it doesn't go into any detai
46.
by yifanlu 9y ago
> Hickey created a malicious, macro-based Word document on his own computer that when opened would allow him to carry out a reflective DLL injection attack, allowing him to bypass the app store restrictions by injecting code into an exis
47.
by yifanlu 10y ago
Contracts have many terms that haven't been legally tested. The idea is that you put in words that will protect you in court if it ever comes to it. It gives them more options to pursue a legal argument--chances are though if their bes
48.
by yifanlu 10y ago
Occam's razor. Is it a giant conspiracy coordinated by some Other Entity with Power and Influence able to manipulate NYT as well as Google to maximize the impact of their destructive forces? Or... because of all the bad publicity and U
49.
by yifanlu 10y ago
No. The Vita also has FreeBSD listed in its OSS page because it used a lot of the network stack. That listing doesn't mean anything.
50.
by yifanlu 10y ago
BuzzFeed News has actually become a pretty reputable organization in the past couple of years. They have quality journalists working there (according to journalist friends). I was also surprised when I heard about this since I associate the
51.
by yifanlu 10y ago
The key insight from Adleman is that DNA complement binding allows for massively parallel "brute force" for the HPP. This exploits the fact that chemically, complement pairs will "find" each other given enough time, so i
52.
by yifanlu 10y ago
Lipton is legit. In page 1 though > However, it does _not_ mean that all instances of NP problems can be solved in a _feasible_ sense. Basically, this says nothing about the P vs. NP problem (as I'm sure many are thinking of when NP
53.
by yifanlu 10y ago
Can someone point me to the actual ruling? The only one I can find was from last year (2015). Has it even been ruled this year yet?
54.
Exploiting WebKit on Vita 3.60(blog.xyz.is)
4 points by yifanlu 10y ago|0 comments
55.
by yifanlu 10y ago
I have lived in America for a long time and can speak English fluently. However if I say "Americans are stupid, and most people don't know how to speak their own languages properly." even though it may be based on my observat
56.
by yifanlu 10y ago
So, umm, is nobody else going to call this racist? > Every bookstore, magazine stand, and school, has a significant portion of its bookshelves packed with comic books. Why? It’s generous, and a bit dismissive, to say that Japanese folks
57.
by yifanlu 10y ago
I have to admit I never done one myself (always been meaning to, never had the time) but a lot of friends have and I trust their words. I believe it helps in the real world because these "war games" simulate real world systems and
58.
by yifanlu 10y ago
Yup, when I hacked the Kindle, it was a weekend's work. It was fun and challenging work, but not educating as this was.
59.
by yifanlu 10y ago
In theory everything you need is in those binaries. We had to start from nothing. There's already a lot you can learn from the device just by running your own code on it.
60.
by yifanlu 10y ago
For the IRC bot, is there protection against an attacker with superior connection seeing the message first and replaying the hash before the bot sees the original message? Also maybe you can use a Merkle tree to tradeoff storage and verific

More ›