language

6 ms·

1.
by language 9y ago
iirc I think that the BPF JIT is disabled by default? Your kernel might be compiled with `CONFIG_BPF_JIT`, but I think the sysctl knob (`bpf_jit_enable`) is set to 0 by default. Also there's a sysctl for unprivileged BPF called `unpri
2.
by language 9y ago
Text and patch start here: https://lkml.org/lkml/2018/1/3/780 Also, see Linus' response here: https://lkml.org/lkml/2018/1/3/797
3.
by language 9y ago
Seems healthy leaving it to the user.
4.
by language 9y ago
Thanks for the clarification, although I recall messing with eBPF and kprobes before - pretty sure you can dereference pointers? editx2: Oh, guess seccomp doesn't use eBPF yet? Suppose that raises a bunch of questions about permissions
5.
by language 9y ago
I was under the impression that seccomp was a bit more flexible (via ptrace() and BPF fanciness) - although I guess you'd need other co-operating processes in userspace? I've only played around with it a tiny bit. Also, both kinds
6.
by language 9y ago
How so? I understand they're different, but I thought there was some overlap. Don't LSMs work by hooking syscalls anyway?
7.
by language 9y ago
> Update: they just managed to get this done with stretch, released 4 months ago! That's only like 7 years late for a crucial actual security feature) Dunno, taking @revelation's word for it? Mentioned they were missing it. I
8.
by language 9y ago
There's some kind of bind here between "putting burden on end-users" and "putting burden on application developers." Either you (a) ship $LSM with some defaults that are necessarily general (so as to avoid breaking
9.
by language 9y ago
Huh, didn't know that Debian was missing ASLR. Any idea about the reasoning there?
10.
by language 9y ago
I can't tell. If you remember they became a platinum member of the Linux Foundation last year too.
11.
by language 9y ago
Ah, this is neat! Would be nice to have a script for this that you could just point at a local copy of the source tree too!
12.
by language 9y ago
Love Graphviz, been using it for some time now. It's kind of painful rendering large graphs. Does anyone know the particular reason why `dot` and friends only seem to take advantage of one CPU core when drawing graphs? Multi-threading
13.
by language 9y ago
I've only dealt with this on Intel chipset HDMI - if I'm remembering correctly there's some part of the snd_hda_intel kernel modules you can blacklist in order to disable this.
14.
by language 9y ago
It applies to Macs. I think AMT is just one particular application/feature of ME. ME is a piece of hardware on Intel chipsets.
15.
by language 9y ago
Is difference (the distinction in question) something intrinsic to the world, or something imposed upon the world?
16.
by language 9y ago
>The problem of looking at human consciousness is similar to someone that knows little about computer processors pulling apart an I7 and trying to figure meaningful things about what is going on inside. Without knowing the history of pro
17.
by language 9y ago
> .. that perhaps 'our ability to think about the issue is constrained by our language' and '[consciousness] workings being inaccessible to introspection' are the same thing. I like to think about it that way, but it
18.
by language 9y ago
> But our consciousness goes beyond simple self-awareness: having a theory of mind is a step beyond (and is realizing that others have a theory of mind a step beyond that?) That [and this] whole space [of considerations, here] appears to
19.
by language 9y ago
Blade Runner means so much to me. I'm very glad that this is a thing, although, like with all sequels and re-interpretations of experiences that are near-and-dear to me, I'm struggling through "trying not to have too many exp
20.
by language 9y ago
I think DirtyCOW (CVE-2016-5195) had been dormant in the kernel for a long time. If I remember correctly the PoC demonstrated writing on root-owned files. Might be relevant. https://github.com/dirtycow/dirtycow.github.i
21.
by language 9y ago
If by class of bugs you mean "munging the stack," yes - but the difference is in the effect on integrity of the total system. In monolithic kernels, if an attacker can monopolize on the situation (by defeating mitigations, if an
22.
by language 9y ago
"Machine learning models have no access to such experiences and thus cannot "understand" their inputs in any human-relatable way" It may be that distinctions like the one you're describing here are useful to make,
23.
by language 9y ago
However, as we are all now beginning to discover, the employment of ‘feedback loops’ are creating one of the most mind-boggling new capabilities for automation. This is not hyperbole, [...] Always glad to see references to Hofstadter&#x27
24.
by language 9y ago
> one could imagine a boot loader that loads the main unikernel at a random address, sets up page tables with NX, and then makes a one-way transition to ring 3 True - I suppose I'm trying to hold onto the "kernel:hypervisor ::
25.
by language 9y ago
Just like an operating-system executes processes, a VMM executes unikernels. An operating system is responsible for randomizing the layout of processes in memory. Shouldn't the actual question here be "Does my hypervisor implemen
26.
by language 9y ago
Also worth mentioning that `ldd` only demonstrates how shared libraries are mmap'ed at randomized locations. Stack and heap allocations are also randomized at execution time.
27.
by language 10y ago
Very glad to see references to Bateson here. To paraphrase some other cybernetician[s]: "Order and chaos are not a properties of things, but relations of an observer to something observed - the ability for an observer to distinguish o
28.
The Mathematics of Charles Sanders Peirce (2001) [pdf](homepages.math.uic.edu)
55 points by language 10y ago|11 comments
29.
by language 10y ago
> Both arrive in similar places, but usually for different reasons. Kind of how I take philosophers/scientists to be (and other dichotomies that are variations on that kind of pattern). There's a funny [and highly paraphrased]
30.
Notes on an Epistemology for Living Things [pdf](ada.evergreen.edu)
1 points by language 10y ago|0 comments

More ›