logical_person

8 ms·

1.
by logical_person 11mo ago
running multiple game servers in docker is a multi-tenant environment, because docker is not a serious security boundary unless you're applying significant kernel hardening to your kconfig to the tune of grsecurity patches or similar
2.
by logical_person 2y ago
it's shocking how low-quality these issues are in a client that is otherwise 1000x more performant than the other options listed in the article
3.
by logical_person 2y ago
Prop 65 went great! Let's get a warning out for every game with peer to peer networking while we're at it.
4.
by logical_person 2y ago
p2o is pathetically low in comparison to other markets. is your experience limited to legitimate bug bounty programs like that?
5.
by logical_person 2y ago
before the popularity of ARM SoCs that contain everything on-die there were much fewer choices for vertically integrated devices. it's a different segment. if you look at apple's vertically integrated devices, they chose a cryptog
6.
by logical_person 2y ago
> encrypted sessions (and/or EK cert verification) without PIN are not much more then obfuscation this is completely incorrect, encrypted sessions defeat TPM interposers when there is a factory burned-in processor side secret to use
7.
by logical_person 2y ago
do software cracks usually get posted to seclists? this is expected in the design of DRM...
8.
by logical_person 2y ago
> But what this simple experiment demonstrates is that Llama 3 basically can't stop itself from spouting inane and abhorrent text if induced to do so. It lacks the ability to self-reflect, to analyze what it has said as it is saying
9.
by logical_person 3y ago
200mb of data is not a large file, and chromium tabs have a memory limit of something ridiculously low so actual large 20-100gb datasets render this useless.
10.
by logical_person 3y ago
you're too kind replying to this
11.
by logical_person 3y ago
authenticated sessions are practically useless on anything but a fully integrated device, because there is no guarantee of the SRK's identity - MITM is still possible.
12.
by logical_person 3y ago
that's still less secure, though. without a TPM you have no guarantee of the underlying state of firmware on the device. this enables a persistent backdoor. TPM with no PIN is practically bitlocker with no password. A high entropy PIN
13.
by logical_person 3y ago
sorry but this is nonsensical, one site pushed malware so they all do? typical "security" person
14.
by logical_person 4y ago
wrong, loading drivers requires admin.
15.
by logical_person 4y ago
except the diagram shows several mobile blocks right above 40ghz, so what do you mean?
16.
by logical_person 4y ago
Super problematic that the HN mod team removed these posts by the author. His replies to this thread can likely be used to help ascertain the legitimacy of his claims, despite any rule-breaking they contained - let it be visible to the publ
17.
by logical_person 5y ago
Does anyone know how it performs on termbench? https://github.com/cmuratori/termbench
18.
by logical_person 5y ago
Thanks for the reply! I'm glad you're able to click the link and read the same table, which does not clarify what majors are categorized in these groups. Another user posted a category 11 link, for example, where CIS includes &quo
19.
by logical_person 5y ago
The reference does not state what other majors are categorized under CIS, unless you've got a link?
20.
by logical_person 5y ago
CIS is not computer science.
21.
by logical_person 5y ago
This article is absurd, the statistics are entirely around "computer and information science" degrees - note this is NOT comp. sci. What software developers do any of us know with that major, lol? As if the # of software engineers
22.
by logical_person 5y ago
To say business tools and confidentiality are at odds with open source is comical at best. Some of us work on FOSS as a career. We still have to sign NDAs with customers, we still upstream patches to core components. Throwing your toys out
23.
by logical_person 5y ago
People that have never interacted with a freenode ircoper will believe everything they post.
24.
by logical_person 5y ago
the formation of Christel's corporation did effectively make her* the owner. any court would see a service she is involved in operating by his company's trademark, as belonging to that company. sad.
25.
by logical_person 6y ago
wow if you remove features from software it becomes more secure? nice!
26.
by logical_person 6y ago
vmswitch is configurable by the host. these VPN authors have no clue what they're doing, windows firewall rules should not in any case be applied to traffic coming from a VM. ridiculous.