besselheim

5 ms·

1.
by besselheim 9y ago
I've found Compiler Explorer to be very useful indeed, for two main use cases: gaining insight into how security mitigations are implemented in different compilers, and for quickly checking my working when reverse engineering tricky C+
2.
by besselheim 9y ago
To give another example, Amon Tobin's Verbal achieves a similar effect through piecing together fragments of vocal samples: https://youtu.be/HsdBgQqBfsM
3.
by besselheim 9y ago
Do you have any evidence of this?
4.
by besselheim 9y ago
It's the responsibility of the communicating parties to protect themselves against interception if they consider this to be an unacceptable risk. Using end to end encryption for message content secrecy, and obfuscating message routes u
5.
by besselheim 9y ago
That's an argument for ensuring that such data is properly secured, not an argument against collecting it in the first place.
6.
by besselheim 9y ago
It makes sense to collect everything possible, then discard what you don't need later, because when conducting an investigation you don't know in advance which data are of interest. If your communications are intercepted, stored,
7.
by besselheim 9y ago
Assuming 32-bit unsigned integers (but similarly for other integer sizes), multiplying by 0x11111111 and shifting right 28 bits would give a function of period 15, at least for inputs between 1 and 0x1000000e inclusive. Faster than dividing
8.
by besselheim 9y ago
The WebSDR at http://websdr.ewi.utwente.nl:8901 (based in the Netherlands) can be used to hear the station as it is broadcast. Set to 4625 kHz, USB.
9.
by besselheim 9y ago
MOV RAX, 1 is seven bytes: 48 C7 C0 01 00 00 00
10.
by besselheim 9y ago
The work by Hayashi published last year had derived precursor egg cells, but the sperm was from normal mouse testes as usual. As described in the article, they did successfully create healthy offspring, though the success rate was very smal
11.
by besselheim 9y ago
The distinction does make sense though. If an intercept is taken, never looked at, and eventually deleted, then from a 'privacy violation' point of view it may as well not have been collected at all. But these still need to be int
12.
by besselheim 9y ago
That doesn't help you if the code running outside your filesystem is compromised. For example, a backdoor implanted in the disk firmware would be virtually undetectable for the vast majority of users.
13.
by besselheim 9y ago
I agree, expressing non-authentic feelings is so common we even have figurative expressions to describe it, e.g. to "put on a brave face" or "grin and bear it". On the other hand, it seems that autistics have the unpleas
14.
by besselheim 9y ago
The author of the article believes that their gender cannot be categorised as either male or female (hence a "non-binary" gender), so they prefer for others to refer to them using "they" and its inflected forms, rather t
15.
by besselheim 9y ago
Any permutation could be used, but I suppose you'd want to use ones that form some sort of visually recognisable pattern. For example, a spiral emerging from the centre of the image, or all the even numbered pixels from a linear scan f
16.
by besselheim 9y ago
Might be interesting to experiment with different mappings of pixel location to audio sample number, rather than just having a row by row linear scan from corner to corner.
17.
by besselheim 9y ago
More interesting is exactly why floating point 0.1 + 0.2 != 0.3, and it's due to the way rounding is defined in the IEEE-754 standard: > An implementation of this standard shall provide round to nearest as the default rounding mode
18.
by besselheim 9y ago
We know from neurosurgery that some fairly large parts of the brain can be removed without apparently adversely affecting the subject's sense of self, so it seems it must be more complex than drawing a boundary around the gross anatomy
19.
by besselheim 9y ago
The sandbox does block such modification, but a useful exploit would combine the arbitrary code execution vulnerability with a sandbox escape, using e.g. some arbitrary read/write vulnerability in the kernel or similar.
20.
by besselheim 9y ago
But why do you consider the brain (and presumably no more or no less than the brain) to be the vessel for your self, rather than other boundaries of embodiment?
21.
by besselheim 10y ago
This is the first time Hyper-V has been offered as a target in Pwn2Own, but it's had its share of host escape bugs over the years. The latest one was patched in this month's updates, just before the contest.
22.
by besselheim 10y ago
Doesn't seem that big a deal, it's an upsell for Microsoft's own file synchronization services, not some third party ad. And you can easily disable it.
23.
by besselheim 10y ago
Indeed, all commonly-used hypervisors have had host escape vulnerabilities reported over the years, including Xen as used in Qubes - see e.g. http://blog.quarkslab.com/xen-exploitation-part-3-xsa-182-qu... Of relevance to E
24.
by besselheim 10y ago
Seems rather like the ASN.1/DER based encodings already used in crypto to describe hash outputs, except using an integer rather than an OID to describe the hash type.
25.
by besselheim 10y ago
WSL is great, I use it every day and am very much looking forward to the next update. Regarding future work, are there any plans to make the emulated Linux filesystem usable in the rest of Windows e.g. via a drive mapping?
26.
by besselheim 10y ago
I wonder if this is at all related to the recent 'Shadow Brokers' leaks. Positive news that they caught him anyway, another Snowden-like espionage drama would be highly undesirable.
27.
by besselheim 10y ago
It's not really a ridiculous question. The popular narrative of Snowden's actions and motivations doesn't add up when you look at all the available evidence. It's quite reasonable for people to suspiciously probe the myt
28.
by besselheim 10y ago
Regarding point 4: what is your opinion on Edge and its exploit mitigation strategies, in comparison to Chrome?
29.
by besselheim 10y ago
The only effect it might have to slightly alter the overall bias of the site. Which is not necessarily a bad thing. HN already has something of a negative bias towards the work of the various security services (that is, the mood is largely
30.
by besselheim 10y ago
Anyone can sign up and comment here, and it's a public forum with no private messaging capability, so I don't really see what would be changed by your scenario.

More ›