32032141

5 ms·

1.
by 32032141 7y ago
Right. The first CVE gets you for example, cross window access. The second gets you system access outside of the sandbox.
2.
by 32032141 7y ago
What an absolutely worthless website. "Your browser does not support WebGL"
3.
by 32032141 7y ago
They're basically all exactly this though, no matter what you're paying this is generally what is underneath. Competent encryption in hardware is difficult, so everybody is doing it in software, and then why id the software hardwa
4.
by 32032141 7y ago
http://spritesmods.com/?art=bioslimdisk http://spritesmods.com/?art=diskgenie http://spritesmods.com/?art=biostick http://spritesmods.com/?art=securehd http://sp
5.
by 32032141 7y ago
This isn't for personal use, so no calls. The data rate is probably around 2-5c/MB for Canada (though its not on the pricing list, that seems to be average), which puts it above even Rogers consumer plans. Google Fi is intended fo
6.
by 32032141 7y ago
This is for Internet of Thing usage, the customer is a company who is making Internet Widgets with some need to be able to communicate no matter where their Internet Widget is operating, without necessarily having to configure or prepare fo
7.
by 32032141 7y ago
I've been wondering for a while what the purpose of all the NB band LTE stuff is even for. The going rate is often around 40c/MB in most countries (lower on Twilio by the looks of it, but the same order of magnitude), which seems
8.
by 32032141 7y ago
Just use ProxyJump. You basically should never be using agent forwarding.
9.
by 32032141 7y ago
This is an explicit tool in adwords, believe it or not. The feature is intended so that you can have a link "to" http://trackersRus.com/ which forwards to http://ebay.com/ , without the user seeing
10.
by 32032141 7y ago
I didn't realise Firefox came with that sort of backdoor.
11.
by 32032141 7y ago
I don't really see a situation in which someone has local file read access on your machine, but doesn't otherwise have you completely owned.
12.
by 32032141 7y ago
I genuinely don't understand downvoting a series of very realistic comments about what using a Yubikey is actually achieving in these situations.
13.
by 32032141 7y ago
I personally don't see the point in them at all, in implementation and reality you get basically zero use out of the things. Services that support them either have them locked down so hard that if you lose a single Yubikey (there'
14.
by 32032141 7y ago
2^32 milliseconds.
15.
by 32032141 7y ago
" I've only gotten a handful of viruses or malware " This is a variation of the bad toupee fallacy. You won't notice viruses and malware, almost by definition.
16.
by 32032141 7y ago
report.pdf 21.12M 1.84MB/s eta 2m 18s Seems to be handling it.
17.
by 32032141 7y ago
This isn't uncommon. There's hundreds or thousands of companies that combine [blockchain x thing], in some vague hope of getting people in the [thing] industry will give them money. There's never a technical reason for this t
18.
by 32032141 7y ago
Indeed. My point was that taking claims about effects from people is effectively worthless in a situation where the "threat" is invisible, effects are subjective, and there's a lot of political motivation for belief in them.
19.
by 32032141 7y ago
https://mybroadband.co.za/news/wireless/11099-massive-revela... This sort of thing happens quite a bit actually. In this case, a huge number of residents complained ofvarious illnesses that were supposed to have b
20.
by 32032141 7y ago
What you're saying has quite literally no basis in fact. Counter to it significantly, there's a heap more powerful non-ionizing transmission than things you have locally in very similar bands, like hundreds of kilowatt TV and FM r
21.
by 32032141 7y ago
It checks a bloom filter.
22.
by 32032141 7y ago
Why not do it deterministically then? 600 hashes of MAC addresses suggests that it's a very targeted group of machines, it's the size of a moderately large company, for example.
23.
by 32032141 8y ago
A notable reason for this sort of thing happening is that the price increased. Solutions which are obviously just toys very quickly grow into problems without you having to do anything.
24.
by 32032141 8y ago
I don't think my threat model encompasses the safety of other people's money.
25.
by 32032141 8y ago
Hi, I've written bootloaders before.I know that blacklisting addresses doesn't work, as many memory locations will be mapped multiple times. Strangely, most people that have worked with microcontrollers is aware of this, except
26.
by 32032141 8y ago
A "secure", closed source processor. Given the Ledger bootloader had a rather nasty and bluntly obvious bug in it that allowed you to bypass all of the write protection and boot any firmware, I'd give them nearly zero chance
27.
by 32032141 8y ago
The way they operate, I expect that there's HTTP logs of all activity. They do not operate in a way which is conductive to privacy.
28.
by 32032141 8y ago
Note that this doesn't actually do anything to attest the safety of the device, as has been pointed out in a CCC talk recently. It attempts to confirm that the code running on another processor is legitimate by asking it to read its en
29.
by 32032141 8y ago
Yep. Either they are so incompetent that they released software out of their git tree from someone's work environment, and had absolutely no process to catch a ridiculous and obvious failure. Otherwise they got popped and are lying abo
30.
by 32032141 8y ago
It's not the researchers responsibly that a vendor is incompetent, frankly. The vendor released something broken, that's their burden to bear, it's not wise to assume that you're the first to find a bug, with that in min

More ›