jesboat

6 ms·

1.
by jesboat 1y ago
that's the point at which you say (reasonably accurately) that the 364 byte thing is written in machine code. it is small enough to manually translate between the binary and asm
2.
Unauthenticated RCE vs. all GNU/Linux systems (+ others) disclosed 3 weeks ago(twitter.com)
35 points by jesboat 2y ago|5 comments
3.
by jesboat 2y ago
* Unauthenticated RCE vs all GNU/Linux systems (plus others) disclosed 3 weeks ago. * Full disclosure happening in less than 2 weeks (as agreed with devs). * Still no working fix.
4.
by jesboat 2y ago
require sufficient info to identify the validation method to be included in an extension in the precert?
5.
by jesboat 2y ago
It means no extra cost relative to the same car without an AM radio, I think.
6.
by jesboat 3y ago
In the 2010-2013 era, i did most of my computing over X over ssh on a fast LAN. At the time, YouTube and other video stuff worked fine, and my environment felt as responsive as local computing.
7.
by jesboat 3y ago
This might be less of an option then you'd think. Android software is often compiled assuming the CPU has comparatively recent instruction set extensions. Older devices, especially lower-end devices (which are more likely to be stuck o
8.
by jesboat 3y ago
Different applications can have very different requirements. I've worked on systems which would kill for 5% latency and on systems that would gladly pay 5% for better memory usage.
9.
by jesboat 4y ago
In the normal course of events, no. If a CA demonstrates itself to be particularly untrustworthy, the actions most root programs might take (adding restrictions, or removing it from the root store entirely) still rely on those changes getti
10.
by jesboat 4y ago
From TFA: > This government surveillance has had a measurable chilling effect on Wikipedia users, with research documenting a drop in traffic to Wikipedia articles on sensitive topics, following public revelations about the NSA’s mass s
11.
by jesboat 4y ago
I think their statement is accurate. If they've been accepted into root programs (and it sounds like they have), then the GoDaddy cross-sign is only relevant for older browsers, and even then requires no additional or ongoing actions f
12.
by jesboat 4y ago
Very few people actually manage root programs: Mozilla, Apple, Microsoft, Google, Oracle, and maybe one or two others in smaller niches. Everybody else either uses the platform's store or ships an approximation (the certificate list an
13.
by jesboat 4y ago
> Formats like this sort of reenforce Steve Albini's claim that he only records to tape because he's more certain people will be able to play it back hundreds of years from now This article seems like a pretty strong argument i
14.
by jesboat 4y ago
There's at least one example on this thread so far of an actual web dev hitting this on a not-small website causing bugs for an actual user. With a 30px record size, it's only ~600k records, which really doesn't seem that u
15.
by jesboat 4y ago
> This is dishonest competition (all other major companies do the same but not as blunt: Facebook, Google, Amazon for example). Twitter could be an exception. But it won't. During the #deletefacebook movement, Facebook didn't b
16.
by jesboat 4y ago
I disagree. Two main points of the article are "nothing is inherently slow about doing stuff in userland (as shown by the fact that we made a fast implementation)" and "kennel interfaces, e.g. particular methods of boundary c
17.
by jesboat 4y ago
The privately run industry is maybe a tiny bit better, but that's not the point. The point is that the only way browsers have to influence a CA or the industry is the threat to eventually distrust. If they can't threaten that to
18.
by jesboat 4y ago
Google, Mozilla, Apple, and Microsoft all have presence in the EU, and the EU can exert jurisdiction over them. That gives control over the root stores for Chrome, Firefox, Safari, and Edge. (And the approximation of the Mozilla store used
19.
by jesboat 4y ago
> You're saying a State Government can request Google installs a 3rd party app on 1 million phones? If that's true then I'm genuinely astonished. And more so that it wasn't headline news at the time. Yes. That's
20.
by jesboat 4y ago
1. Some background process, probably part of Google Play services, installed the app. Users were not notified that the app was installed. Eventually the app, once already installed and running, would put up a notification asking if the user
21.
by jesboat 4y ago
>> If you really think about it, the only real difference between main memory blocking and disk blocking is the amount of time they may block. > > This is a somewhat confusing analysis you have here. Direct read/write from
22.
by jesboat 4y ago
> An Apple Watch with Crash Detection can only notify authorities if you have your iPhone with you, or if it’s connected to a mobile network or Wi-Fi. from TFA
23.
by jesboat 4y ago
Keep in mind you should have some some backup way to access your account in case the mac dies. Dunno if Apple IDs support recovery codes or something similar or if you'd actually need two apple devices.
24.
by jesboat 4y ago
Most likely, they don't keep any backups with user data longer than a short threshold, e.g 60 days. This is pretty common practice.
25.
by jesboat 4y ago
Facebook's "phabricator" is very different from OSS, to the extent that at this point probably most of what's left is terminology and architectural boundaries. The diff (PR) UI was completely rewritten; I think repo brow
26.
by jesboat 4y ago
> But I'm not sure how costly it is for thousands/millions of coroutines. Still cheap: you only need to preempt the threads which are actively running user code. If a coroutine is ready to run, but not actually running, you don
27.
by jesboat 4y ago
My interpretation was that the author meant "even if we tried to review all changes between current HEAD and the last known-safe commit, it would be difficult if there were large commits (e.g. a giant refactor.)"
28.
by jesboat 5y ago
The module is amazing and actually kinda terrifying: it grafts in a decent bit of xnu, rather than re-implementing all xnu's features from scratch. This is made a bit more sane because Mach was designed to be extremely portable and has
29.
by jesboat 5y ago
I think the storage was replicated by 2013? Definitely by 2014. It didn't have automated failover, but failover could be done, and was done during the relevant drills for some time. I think it only stopped when the storage services g
30.
by jesboat 5y ago
It's salient that the video is from 2010. Where I was (not Google), the push to make everything multi-region only really started in, maybe, 2011 or 2012. And, for a long time, making services multi-region actually was a huge pain. (E

More ›