zobzu

74 ms·

811.
by zobzu 12y ago
Nothing you could not do 10 years ago without any kind of remote video or automatic piloting.
812.
by zobzu 12y ago
to be honest all you see there are features of the APM, which is also sold by 3DR and developed by open source enthusiasts + 3DR. The features have been there for a couple of years now albeit they've been improved and made more and mor
813.
by zobzu 12y ago
Nice. :)
814.
by zobzu 12y ago
I like how cliche this is. They would have written word for word "think of the children" that it would have been exactly the same.
815.
by zobzu 12y ago
its not really the same in this case it updates in the background and stuff runs locally using NaCl
816.
by zobzu 12y ago
i dont know if i like the idea of depending on a zillion diff companies for everything i do or own on the computer to be honest.
817.
by zobzu 12y ago
thats a pretty good point ;P
818.
by zobzu 12y ago
basically this force ppl to only check for things at specific times instead of having to instantly interrupt work. its more of a social issue than a technological one. some people will have proper notifications setup and even when they get
819.
by zobzu 12y ago
interestingly this is the kind of tasks where i fear languages with no pointer exposed may be slower. Any one has a good comparison?
820.
by zobzu 12y ago
rather than adding fixup to these (which arent all exactly directly exploitable, and sometimes have dodgy POCs), it'd be nice if we stopped calling the shell at all and when necessary, always wipe the env entirely and parse the user in
821.
by zobzu 12y ago
sup advertiser
822.
by zobzu 12y ago
its respectable but in the end it doesnt matter. when you have to run this on thousand of systems that have not been tested with that LKM, the LKM can potentially destroy everything. its not like if grekh code was bug free - theres a lot of
823.
by zobzu 12y ago
Got a friend recently who used mongodb as first choice for an easy db. He got crazy, dropped it after a month, recoded the thing for postgres in 2 weeks and its been working ever since.. and hes now another die hard postgres fan. Sooo I don
824.
by zobzu 12y ago
If LXC was better, i dont think people would like docker as much. Docker works because theres very little configuration or fiddling around needed.
825.
by zobzu 12y ago
Eventually this will work with docker as well when distros enable user namespaces. but that doesnt change that you share the same kernel, which isnt going to be as good as running a kernel per container security wise.
826.
by zobzu 12y ago
The actual drawbacks (the author has chosen to ignore them): - less secure - you still have to update the system images and redeploy a lot (its made for that so its fine). you cant just spin an image and stop caring for it. libraries will u
827.
by zobzu 12y ago
pretty much. scripting envs are extremely flexible and powerful, thus very prone to such issues. thats why you dont give user input to shells unless you want the user to have the full shell access. environment included.
828.
by zobzu 12y ago
its pretty much the same for CGIs, its a one liner. theres other exploits like that. it happens :)
829.
by zobzu 12y ago
well, installing a LKM, just that =p Now sysdig aint bad per se but id like to see it mainlined or using mainline code
830.
by zobzu 12y ago
It actually says millions of USD or billions. ie not necessarily 1 billion+ I'm also wondering/suspecting these costs are very much tied to the USA which has a pretty specific model and costs involved. I wouldn't be surprised
831.
by zobzu 12y ago
thats a really small number of servers actually.. i mean ppl get owned every day, every minute. theres a bunch of more easily exploitable local bugs that actually elevate your privileges. this one bug DOES NOT elevate privs. you need a serv
832.
by zobzu 12y ago
you should update all security updates, reliably, periodically, regardless of HN posts. you're probably not directly vulnerable for this very vuln, but then again, maybe you are. with enough vulns it gets complex enough to check that i
833.
by zobzu 12y ago
people started to pay attention. theres a bunch of new vulns being patched daily. if you follow cve's or oss list you can see that. what's "new" (been done for a few years now) is that there's more marketing drive b
834.
by zobzu 12y ago
I have a feeling this is blown out of proportion. Who's running bash setuid exactly? Right. Who's running shell CGIs today? Right. So.. who has an example of common scripts that are executed remotely in most servers while acceptin
835.
by zobzu 12y ago
yes, anything that goes through their peering which is what they throttle. and the cdn servers go through the peering for some reason.
836.
by zobzu 12y ago
the documentation directory of the kernel source is actually pretty nice. theres a bunch of utilities for things like cgroups, namespaces, etc. they're not well known but they work perfectly fine. I suspect its not well known because t
837.
by zobzu 12y ago
if its not on paid streaming i use torrents + vpn. which happens more often than it should.
838.
by zobzu 12y ago
Ive both and it doesnt have anything close to anything I want. the selection is limited, you can get whatever you could see currently in a plane basically. Old stuff? yes if its cheap or very popular, but 90% of the old stuff you cant acces
839.
by zobzu 12y ago
Can't agree more.
840.
by zobzu 12y ago
I think the main critism is the political grabs from systemd. Every bad technical decision has been made because of political reasons. Its not like if they were stupid and took a bad decision because they didn't know any better. They t

More ›