JJJollyjim

7 ms·

1.
by JJJollyjim 7mo ago
This is the place they direct researchers to report bugs. If they don’t want to pay out for MITM, that’s fine, but they should still be taking out-of-scope reports seriously
2.
by JJJollyjim 1y ago
Apple CPUs do decode instructions into micro-ops. https://dougallj.github.io/applecpu/firestorm.html
3.
by JJJollyjim 1y ago
Chrome doesn't allow it - local network services have to opt-in to being fetchable from public sites ( https://github.com/WICG/private-network-access ), although they're replacing it with a user-permission-base
4.
by JJJollyjim 1y ago
Especially the fact that he says the toolchain is now available for download (which lends credibility – if they're willing to share it so people can see the quality of output it produces), when in fact the website has no download links
5.
by JJJollyjim 1y ago
As noted in the article I reversed the protocol for a related Goodix device (which was on Intel so used actual SGX instead of the white-box): I used the firmware update system to insert additional vulnerabilities in the sensor firmware and
6.
by JJJollyjim 1y ago
They mention that compiling one crate at a time (-j1) doesnt give the 7x slowdown, which rules out the object file/caching-in-rustc theories... I think the only explanation is the rustcs are sharing limited L3 cache.
7.
by JJJollyjim 2y ago
It is in fact documented that you can't do this: "Currently the default global allocator is unspecified. Libraries, however, like cdylibs and staticlibs are guaranteed to use the System by default.", however: "[std::al
8.
by JJJollyjim 3y ago
Presumably the metabase instance also has credentials to access some databases, some of which may be have enough privileges to also get RCE on the database machines (as well as messing with the data they hold).
9.
by JJJollyjim 3y ago
I found something which is clearly a security fix, using the same idea but more naive: just diffing at the lengths of the decompiled files. It's not at all clear how the issue I found would be triggered by an unauthenticated user thoug
10.
by JJJollyjim 3y ago
Oh, I didn't mean to imply you can, just that it's 404... presumably it exists in a repo checked out on someone's machine, and maybe in a separate private Github repo.
11.
by JJJollyjim 3y ago
They haven't released the source, and the compiled versions are non-trivial to diff (e.g. there are nondeterministic numbers from the clojure compiler that seem to have changed from one to the other, and .clj files have been removed fr
12.
by JJJollyjim 3y ago
llama.cpp runs on the CPU, not the ANE or GPU.
13.
by JJJollyjim 4y ago
I don't believe so – from a quick glance it seems that supervisor requests are proxied through the normal HA port, and the supervisor doesn't have it's own port except for the Observer (which seems to be a simple read-only th
14.
by JJJollyjim 4y ago
Shodan lists 125,000 HA installs exposed to the internet (though I don't know how accurate that statistic is, nor what fraction have a Supervisor) https://www.shodan.io/search?query=product%3A"Home+Assistant...
15.
by JJJollyjim 4y ago
As a random example, if your Microsoft account is OAuthed to a GitHub login, and you log in through that, the popup browser just takes you back to a Microsoft account settings page instead of handing the OAuth flow back to Minecraft
16.
by JJJollyjim 4y ago
[co-author of the research here] They actually approximate this functionality in the Windows implementation: It checks netstat to enforce that incoming TCP connections are from the expected Windows user! https://github.com/t
17.
by JJJollyjim 6y ago
I'd also like to see motivating examples of specific things it does find (that LLVM doesn't), even if that's not a representative benchmark
18.
by JJJollyjim 6y ago
Android's has an app signing system which isn't dependent on Google Play. Updates to a given app have to be signed with the same certificate as previous versions.
19.
by JJJollyjim 6y ago
Have you considered making the website actually show the comments instead of pinning yourself on every large post?
20.
by JJJollyjim 6y ago
unfortunately this is a real thing the US imposes on the world (it's called Secondary Sanctions)
21.
by JJJollyjim 6y ago
In fairness, filecoin is linked on the IPFS homepage (though it is less prominent than I remember)
22.
by JJJollyjim 6y ago
I just checked cloudwatch for my rust-based function, I'm now being billed 1ms :D
23.
by JJJollyjim 6y ago
Probably also with a peripheral access crate (type-safe register definitions) and and HAL integration.
24.
by JJJollyjim 6y ago
That wouldn't apply to Espressif since they started with WiFi, right?
25.
by JJJollyjim 6y ago
Aside from the variable lengths which are really neat, SVE supports AVX512 style masking (predicates), which makes some algorithms simpler and hopefully faster
26.
by JJJollyjim 9y ago
I'm certainly no expert, but I would guess that the context-switch time (where I believe the new overhead is added) in games is fairly small compared to the raw number-crunching in-process, so the effect would be minimal in any case
27.
by JJJollyjim 9y ago
A UI toolkit
28.
by JJJollyjim 10y ago
AFAIK, Play Services is controlled by Google and has system-level permissions, so it could easily access Signal messages post-decryption if Google wanted it to.
29.
by JJJollyjim 10y ago
Nor do I, though it should be noted that most of the games with intrusive anti-cheat are Windows-only so the entire kernel is already closed-source blobs…
30.
by JJJollyjim 10y ago
I imagine it could be largely mitigated by compression

More ›