retsl

5 ms·

1.
by retsl 8mo ago
> A lot of phone manufacturers "save on memory" and use the same memory chips for the baseband processor and the central cpu. Which means that it's a little bit cheaper ... and the baseband has access to all the phone memo
2.
by retsl 8mo ago
> [...] The baseband implements other functionality such as Wi-Fi and GPS functionality [...] https://grapheneos.org/faq It doesn't need to ask the OS, it can just get the coordinates and send them off.
3.
by retsl 8mo ago
This is true but there's automatic restart which will automatically restart the phone to get it back into BFU state: > Automatic Restart is a security mechanism in iOS 18.1 iPadOS 18.1 and or later that leverages the Secure Enclave
4.
by retsl 8mo ago
Yes, afaik macOS apps could theoretically be sandboxed as well (or close to) as iOS apps are. You can find the policies for many first-party apps and deamons in /System/Library/Sandbox/Profiles. But in practice most thir
5.
by retsl 11mo ago
Not without approval, see https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_A... or https://web.dev/articles/async-clipboard#security_and_permis... . But that is not relevan
6.
by retsl 11mo ago
the malware's main function seems to be to check the clipboard for crypto wallet addresses and then replace them with attacker addresses: Bitcoin (bc1): bc1qrzh7d0yy8c3arqxc23twkjujxxaxcm08uqh60v Litecoin (ltc1/L/M): LQ
7.
by retsl 2y ago
the virustotal report shows the output from detectiteasy in "Details" -> "Basic properties": DetectItEasy PE64 Compiler: Microsoft Visual C/C++ (19.14.26715) [C++] Linker: Microsoft Linker (14.00.24241) Too
8.
VS Code Remote SSH: server-to-client remote code execution by design(lets.re)
1 points by retsl 2y ago|0 comments
9.
by retsl 2y ago
Containers on MacOS are ran inside a Linux VM. If you ensure that the Linux VM doesn't have access to anything besides the required files/networks, that should be pretty secure. Best case you go through the settings of Docker, Pod
10.
by retsl 2y ago
There's a feature request from 2018 to add a proper permission model for plugins in VSCode: https://github.com/microsoft/vscode/issues/52116 Sadly it doesn't seem to make any progress.
11.
by retsl 2y ago
"For VS Code remote, the VS Code server is in the same trust boundary as the VS Code client. [...] For Remote SSH: [...] A compromised remote could use the VS Code Remote connection to execute code on your local machine." https:&
12.
VS Code Remote Dev and Dev Containers are not security boundaries(lets.re)
4 points by retsl 2y ago|0 comments
13.
by retsl 2y ago
I set up Qubes OS for and with technical, less-technical and non-technical people and I very much disagree. It only works well for those who are prepared and motivated to learn, and even then, it sometimes can be frustrating. The copy-pasti
14.
Exporting iCloud passwords on Windows(lets.re)
2 points by retsl 2y ago|0 comments