Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
a1xndr
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
1.
▲
by
a1xndr
2y ago
On most builds of QEMU, that command will start a VM with an e1000 card networked through SLIRP. It's the equivalent of something like: -netdev user,id=net0 -device e1000,netdev=net0
2.
▲
by
a1xndr
3y ago
Doing this is a huge amount of engineering work. Things like the usb controller, modem, audio, touch sensor, and many many more are often custom hardware without any specs available that you somehow need to simulate. That's not even ge
3.
▲
by
a1xndr
4y ago
> VM escapes are pretty difficult, especially with modern, patched microcode processors Most VM escapes happen through buggy virtual-devices written in C/C++/.. code. Virtual-device bugs that are exploitable by attackers with r
4.
▲
by
a1xndr
5y ago
I wasn't involved in the work mentioned in the post, but I worked on integrating QEMU into oss-fuzz. Here's an example of a report from oss-fuzz, that we get by email: https://bugs.chromium.org/p/oss-fuzz
5.
▲
by
a1xndr
8y ago
The English ones are probably most easily found since design guidelines are usually written in the local language. https://design.gov.ru/design-system/#principles
6.
▲
by
a1xndr
8y ago
on phones, ads are not limited to your web browser
7.
▲
by
a1xndr
8y ago
.local is perfectly fine according to the IETF https://tools.ietf.org/html/rfc6762
8.
▲
by
a1xndr
9y ago
I don't see how Spectre and meltdown were blown way out of proportion? Google and Amazon seem to have treated them quite seriously.. Maybe they should have just closed their eyes. The solution to Spectre right now is "Don't