ARob109

6 ms·

1.
ARM Open Sources AI-Powered Security Code Review(github.com)
10 points by ARob109 4mo ago|0 comments
2.
by ARob109 4mo ago
That’s how this[0] project mitigates e.g. CopyFail. BPF LSM if you want to return -EPERM. Or a kprobe that kills the process via bpf_send_signal() if BPF LSM isn’t enabled. [0] https://github.com/cozystack/copy-fail-blo
3.
by ARob109 8mo ago
Firmware (XBL and other non OS components) are versioned with anti rollback values. If the version is less than the version burned into the fuses the firmware is rejected. The “boot” partition is typically the Linux kernel. Android Verified
4.
by ARob109 1y ago
I've been seeing "that's vibe coded" comments a lot lately on posts. Comments that call out code that may or may not be vibe-coded. At what point should these types of posts start getting down-voted? It's not constr
5.
by ARob109 1y ago
/s the breakthrough: A basic car with that happens to have EV power train. The anti-secret: EV power train that accelerated 0-60 in 1s and all the software engineering going into a software defined, internet connected autonomous vehicl
6.
by ARob109 1y ago
Ugh, already have to deal with filtering out interviewees who are obviously using AI to answer questions. It's annoying when you ask someone how they go about troubleshooting a misbehaving SPI peripheral. Instead of their personal rout
7.
by ARob109 1y ago
Wonder if you could measure your breathing rate and heartbeat and cryptographically sign the time series data as ground truth. Then post process the video with Eulerian Video Magnification to recover the values and compare. edit forgot the
8.
by ARob109 1y ago
RCT, Railroad Tycoon 2 (which has scripted scenarios and sandbox ), SimCopter and Streets of Sim City were great RRT2 has it scenarios like Hell or High Water where you have fill in a giant crater with cement by orchestrating trains before
9.
by ARob109 1y ago
I always used the Do Not Enter marquee signs such that once guests entered the park they could never leave. Great for helping meet the total park population scenarios.
10.
by ARob109 1y ago
That and before The Minecraft Movie came out, you could play multiplayer LAN from Xbox to PC cross platform without an XBox Live subscription. Once the movie was released and they updated the game to add movie related content, this feature
11.
by ARob109 1y ago
Making physical goods low quality, cheap, and therefore disposable is the equivalent of rent seeking. Instead of growth and innovation, it’s how can the Company get recurring revenue after first sale. The balance for the Company is finding
12.
by ARob109 1y ago
The Debug Policy apdp partition is flashed with an ELF “mbn” file. It is possible that sections are encrypted. At the very least it is likely signed. From a security perspective, hopefully the vendor signed with a prod key and not a test ke
13.
Mocking Tokio requests without using traits(users.rust-lang.org)
4 points by ARob109 1y ago|0 comments
14.
EBAF – eBPF Based Ad Firewall(github.com)
39 points by ARob109 1y ago|51 comments
15.
by ARob109 1y ago
I see what you did there
16.
by ARob109 1y ago
Would love to see a write up on this
17.
by ARob109 1y ago
Learning Rust ATM and using bindgen on a C header. Just looked and it generates Rust enums from C enums. I'm not sure what the default behavior of bindgen is, but it seems there is option for constifying enums --constified-enum <REG
18.
by ARob109 1y ago
I keep telling myself one day I’ll design a PoE DC to 120VAC adapter board so I can run PoE to a standard outlet box or light switch.
19.
by ARob109 1y ago
Would be cool to see integration of landlock with configuration file in a way that a service launched by systemd can apply the configuration to the executable. Akin to systemd SystemCallFilter directive for no-code application of seccomp fi
20.
by ARob109 2y ago
I regularly sing “I Never go to Work” and make new lyrics for to the tune. My wife and I really enjoyed Caspar Baby Pants and Laurie Berkner for kids music.
21.
by ARob109 2y ago
Using uprobes to hook the SSL library, would it be possible to filter content by inspecting and modifying eg the decrypted HTTP response ?
22.
by ARob109 2y ago
Android too in a way via Android Verified Boot. I think ChromeOS uses AVB as well. Android Verified Boot extends the System on chip Hardware based secure boot to the kernel and rootfs. Root of trust is fused into the SoC, and second stage b
23.
by ARob109 2y ago
Seems like this could be easily mitigated with a read only root filesystem using dm verity Store the root hash of the dm verity formatted rootfs in the PCR. If a malicious partition is presented to initrd, its root hash will not match the t
24.
by ARob109 2y ago
Yes. I could not put this book down. If you liked this one as an against the odds shipwreck survival story, David Grann’s The Wager is also very good.
25.
by ARob109 2y ago
Not sure about TA, but definitely saw radio station in Indianapolis using RDS to broadcast advertisements. In between the artist/song info, ads for an injury lawyer appeared. Thought it was super lame use of RDS.
26.
by ARob109 2y ago
> `oe-pkgdata-util find-path` Thanks for that one. Will keep it in mind. With buildroot, I can use menuconfig to search for available packages and add them to the rootfs. Yocto AFAICT you have to get the recipe name and manually add it t
27.
by ARob109 2y ago
I found the learning curve to be much easier with buildroot and compared to yocto whose build system is python but uses mixed shell/python to describe the build. Builroot errors seemed to happen much less, and easier to understand comp
28.
by ARob109 2y ago
He’s 7.5yo. Don’t think he really understood The Secret Brian’s mom had, and probably still hard for him grasp severity of the situation, but he was very engaged and enjoyed the book. I don’t recall how old I was when i first read it… but I
29.
by ARob109 2y ago
That’s the alternate story line as told in Brian’s Winter. He did not ordeal the winter in The Hatchet. One of my favorite books as a kid, just recently read Hatchet to my boy
30.
by ARob109 2y ago
I’m a first time kimchi maker, used the a Baechu ( napa cabbage ) Kimchi recipe from “Fiery Ferments” ISBN-13 978-1612127286 Came out really good despite not having some of the ingredients because I’m disorganized (left out carrots, ginger,

More ›