geographomics

5 ms·

1.
by geographomics 10y ago
It is a security measure, as it involves authentication through the series of knocks. It's a weak security measure on its own, so you obviously wouldn't want to rely on port knocking by itself, but it does have utility in preventi
2.
by geographomics 10y ago
Looks rather nice, reminiscent of drawing using Teletext (e.g. http://teletextart.co.uk/ , http://www.bbcbasic.co.uk/bbcwin/manual/bbcwinh.html ).
3.
by geographomics 10y ago
If the port knocking was obscuring an unauthenticated root shell then you would have a good point, but this is a defence in depth measure that adds to the security. It helps because it's one more hurdle for an attacker to bypass.
4.
by geographomics 10y ago
Hopefully a lot better than the Linux kernel: http://www.cvedetails.com/product/47/Linux-Linux-Kernel.html...
5.
by geographomics 10y ago
https://en.wikipedia.org/wiki/Problem_of_induction
6.
DevSecOps – Manifesto(devsecops.org)
2 points by geographomics 10y ago|0 comments
7.
by geographomics 10y ago
You can uninstall it with an administrative Powershell using this command: Get-AppxPackage Microsoft.WindowsStore | Remove-AppxPackage Would this not continue to work?
8.
by geographomics 10y ago
> Unfortunately the QR code might be an improvement over Windows 8 and 8.1 if the QR code contains more detailed information. The QR code shown in the example screenshot is just a link to http://windows.com/stopcode - ho
9.
by geographomics 10y ago
The USA has a lot of catching up to do with the rest of the world then. Six weeks paid leave is paltry compared to the vast majority of countries.
10.
A music-making machine constructed using 2,000 marbles(youtube.com)
2 points by geographomics 10y ago|0 comments
11.
by geographomics 10y ago
Most of the commentary here so far is really quite tangential to the actual research done. Everyone commenting on this article should make sure they've read the study first, with particular attention to the 'Limitations' sect
12.
by geographomics 11y ago
It does appear to be some encoding issue relating to the Unicode "→" (U+2192). Encoded with UTF-8, this is represented by the three bytes 0xE2 0x86 0x92. In the TeX EC encoding, these correspond to "âĘŠ". (See https:&#x
13.
by geographomics 11y ago
After the initial period of adaptation, I found it actually increased productivity. Perhaps it was just preventing already-established bad habits that arise from having the internet constantly available.
14.
by geographomics 11y ago
On the topic of work environment: in one job I worked at, we had the Internet machines completely separated from the work machines. If you needed to check something you had to physically walk over to the Internet desk. Great for focussing o
15.
by geographomics 11y ago
Unsurprising that they've ceased to accept Bitcoin. The only significant use cases thus far have been ransomware and buying recreational drugs. And early adopters cashing out of the pyramid scheme.
16.
by geographomics 11y ago
Only in the amount of effort one is willing to expend in doing so, and learning any necessary skills. It's only a happy accident that so many (relatively inexpensive) routers are easily flashable with custom firmware, not an entitlemen
17.
by geographomics 11y ago
If you're buying a device to replace the stock firmware with something customised to your liking, then you're already in the hacker mindset, so having to tinker that little bit harder surely shouldn't be much of a burden.
18.
by geographomics 11y ago
Is this really that much of a problem? Circumventing the block sounds like it could be a rather interesting technical challenge.
19.
by geographomics 11y ago
In what ways is the BSD networking stack superior?
20.
by geographomics 11y ago
There's no known API to read the UID out (there is one to use it, or the GID, or any other AES key: http://iphonedevwiki.net/index.php/IOCryptoAcceleratorFamily... ), no published side-channel attacks, and the dest
21.
by geographomics 11y ago
You can't parallelise it like that, because the passcode check relies on an unreadable AES key (the UID) that is unique to that particular iPhone.
22.
by geographomics 11y ago
Interesting technique, but it doesn't remove the long interval between permitted passcode attempts - an equally important problem for brute-forcing. So the FBI would most likely still require Apple's assistance in this.
23.
Could machines have become self-aware without us knowing it?(aeon.co)
4 points by geographomics 11y ago|2 comments
24.
by geographomics 11y ago
That's quite a delight for the ears. Reminds me of Stéphane Picq's work on the Dune computer game soundtrack, back in the early 90s. It had some similar sounds.
25.
by geographomics 11y ago
The way it is currently implemented, by which Apple can - if in physical possession of the device - unilaterally force new firmware onto it without the consent of the user, yes.
26.
by geographomics 11y ago
Nonetheless, if Apple had designed the update mechanism to require both a signed firmware image, and authentication by the user, then the FBI's request would not be possible. Such a design would also help to mitigate the end-user effec
27.
by geographomics 11y ago
Being able to load arbitrary firmware onto the device without requiring user authentication, so long as it's signed by Apple.
28.
by geographomics 11y ago
The backdoor is already present, through Apple's design. The FBI are just requesting to use it.
29.
by geographomics 11y ago
Good point, thanks for the correction.
30.
by geographomics 11y ago
I'd be very surprised to meet a computer scientist who doesn't know what a stack is. It really is a fundamental part of computer science.

More ›