yuhong

56 ms·

481.
by yuhong 9y ago
I was wondering what was happening to PatchGuard in Win7 when Skywing joined MS.
482.
by yuhong 9y ago
The problem is that we have been running trade deficits for decades now, mean that most of the debt is spent on imported goods. This led to businesses with high profit margins that are designed to exploit debt, and the economy ended up bein
483.
by yuhong 9y ago
Especially when it is open source.
484.
by yuhong 9y ago
I wonder if Sundar would be willing to attend Unicode UTC meetings.
485.
by yuhong 9y ago
Urea/diesel hybrids would be fun, since every modern engine has to use urea for SCR anyway.
486.
by yuhong 9y ago
I remember the 768-bit DHE in Java and the Nest problem in 2015. I wonder if that has led to the VP of security hire when Alphabet was created later that year.
487.
by yuhong 9y ago
The current debt-based economy fundamentally depends on stocks going up every time debt increases.
488.
by yuhong 9y ago
The ad bubble and how it affects Google/Mozilla is now one of my favorite topics. It is not just Google, but it is the most interesting.
489.
by yuhong 9y ago
I am also thinking of DRM. Thinking about it, part of the reasons music labels got big is for economy of scale when mass producing CDs for example. Of course, such economy of scale was not needed anymore with the move to digital distributio
490.
by yuhong 9y ago
It is not just MPEG LA BTW.
491.
by yuhong 9y ago
Reading /dev/mem is far easier/faster and typically provides more data than this attack would.
492.
by yuhong 9y ago
The point is what reading kernel memory would be useful for.
493.
by yuhong 9y ago
One problem is cross-vendor migration, because AMD don't support PCID.
494.
by yuhong 9y ago
One of the reason I don't consider the timing attacks that important is that there are often easier ways to bypass ASLR.
495.
Removal of Equation Editor from Office(support.microsoft.com)
10 points by yuhong 9y ago|2 comments
496.
by yuhong 9y ago
I posted these two images: https://imgur.com/a/QANol https://imgur.com/a/h3MhG Notice the variables they set up that RtlInterlockedPopEntrySList don't use.
497.
by yuhong 9y ago
JWS and JWE aren't as bad as JWT itself. You can use them without the JWT header.
498.
by yuhong 9y ago
F00F is probably worse in practice than the recent timing attacks. For the average user, I think even the perf hit from the workaround for the timing attack is probably not worth it.
499.
by yuhong 9y ago
I am thinking seriously of Yishan-style CEOs, and the board and other executives etc ideally should be held to the same standard too.
500.
by yuhong 9y ago
Unfortunately x86 paging only distinguishes between ring 0 and ring 3.
501.
by yuhong 9y ago
I wonder how many use ASICs for mining at public power outlets.
502.
by yuhong 9y ago
I wonder if that many people actually care. It is a timing attack only AFAIK.
503.
by yuhong 9y ago
My favorite is espfix. espfix64 is worse than espfix32 too. I have suggested limiting modify_ldt to root instead.
504.
by yuhong 9y ago
As a side note, I wonder if this is why Eric Schmidt left Google: https://citizensagainstmonopoly.org/
505.
by yuhong 9y ago
Thinking about it, part of the reasons music labels got big is for economy of scale when mass producing CDs for example. Of course, such economy of scale was not needed anymore with the move to digital distribution. This didn't work we
506.
by yuhong 9y ago
My favorite is that the more the FBI/NSA spends, the more government debt get printed. You may know that the government shutdown is because of a debt ceiling.
507.
by yuhong 9y ago
Don't forget the OS/2 2.0 debacle, which is an important part of the story and is so bad it is one of my favorite topics.
508.
by yuhong 9y ago
I wrote http://yuhongbao.blogspot.ca/2017/12/google-mozilla-and-debt... based on Twitter conversations with BrendanEich and others.
509.
by yuhong 9y ago
That is WHATWG not W3C. I don't like versioning HTML either, to be honest.
510.
by yuhong 9y ago
I already suggested basing the W3C spec on the web developer edition of WHATWG HTML as a compromise. In retrospect, the full spec was never a good fit for a W3C REC in the first place. (you may remember the 2022 prediction)

More ›