startling

13 ms·

1.
Clickjacking Chrome Extensions(blog.lizzie.io)
2 points by startling 8y ago|0 comments
2.
Preventing USB Attacks with Grsecurity(blog.lizzie.io)
1 points by startling 10y ago|0 comments
3.
by startling 10y ago
It's useful to reframe this from "the manufacturer's fault". Lawmakers have a clear decision to make: 1). Prevent this business from existing. 2). Allow toy magnets to exist, thereby allowing X children to die from swall
4.
by startling 10y ago
...which is why he used the SYS_ #defines.
5.
by startling 10y ago
I used Digital Ocean for a year. No problems, never sent spam. Then my mail started being spamfiltered, apparently because a neighbor was spamming. Seriously don't recommend using cloud hosts if you care about people receiving your ema
6.
by startling 10y ago
I used DO for a year without a problem, and then my IP was blacklisted (apparently a neighbor was spamming) and I couldn't do anything about it. Be warned, and frequently check if Google accounts receive mail frequently.
7.
by startling 10y ago
It's different because Edge is emphatically not more safe.
8.
by startling 10y ago
Can you blame them? Wine and hacking does sound like fun.
9.
by startling 10y ago
"Illegal" seems stronger to me than "not strictly conforming", I guess (and so does "well-formed", for that matter). But I think we basically agree.
10.
by startling 10y ago
Undefined behavior is not illegal. The compiler can do anything with undefined behavior, including exactly what the author expected.
11.
by startling 10y ago
> No. Just No. > Docker has nothing to do with security. Docker can totally reduce the risk of in-container services being exploited. It has sane defaults, and makes it easy to distribute other restrictions with the application (secco
12.
by startling 10y ago
I get anxious about this too sometimes, but in my experience the "long lists of conditions that no one ever told me and assumed I knew" are hardly ever relevant.
13.
by startling 10y ago
Black and white horizontal lines or misrendered text for a split second until a white blink rerenders the whole page. Happens somewhat frequently when I have heavy CPU load on a Linux laptop.
14.
by startling 10y ago
Got it. Then ICANN (or whoever) controls all websites, and is responsible for their infrastructure. That may or may not be better than what we have.
15.
by startling 10y ago
Attacking high-value dissidents: https://blog.lookout.com/blog/2016/08/25/trident-pegasus/
16.
by startling 10y ago
I'd assume Chrome is safer than Lynx these days, to be honest. Not to mention the fact that using Lynx makes you unique enough for it to be a useful tracking indicator.
17.
by startling 10y ago
How do you decide which nameservers to trust about the "ycombinator" domain? What happens if I advertise a nameserver with that domain?
18.
by startling 10y ago
Here's a dynamic approach to stopping rowhammer: http://www.openwall.com/lists/kernel-hardening/2016/10/27/18
19.
Linux containers in 500 lines of code(blog.lizzie.io)
3 points by startling 10y ago|0 comments
20.
by startling 10y ago
Writing parsers is really nice in Haskell: http://www.cs.nott.ac.uk/~pszgmh/pearl.pdf Trifecta is a nice modern parsing library: https://hackage.haskell.org/package/trifecta
21.
by startling 10y ago
So, what's stopping the wrong site from making those requests to your bank and proxying the image?
22.
by startling 10y ago
I think dynamic analysis would be more useful.
23.
by startling 10y ago
This isn't about you, the consumer, getting root access. It's about a piece of code running on your phone (i.e. maybe part of an app with restricted permissions) getting root access.
24.
by startling 10y ago
...except the whole problem is that they overpaid bonuses.
25.
by startling 10y ago
That's not even true. Functions can map between lots of things, not necessarily numbers.
26.
by startling 10y ago
Functions are one kind of arrow. There are other arrows besides functions. Renaming "arrow" to "function" is like replacing "number" with "1".
27.
by startling 10y ago
Sure, it can go either way. But in the absence of a kernel 0-day, segregating services on the same host is useful.
28.
by startling 10y ago
This exploit doesn't write to disk at all. It's about modifying the in-memory datastructures that correspond to executables on disk in between when they're read and executed.
29.
by startling 10y ago
It's just the in-memory executable, as I understand it.
30.
by startling 10y ago
> "In almost all cases, whether or not there's a known local privesc bug, assume that code execution on your Linux systems equates to privesc; this is doubly true of machines in your prod deployment environment. It depends. I&#

More ›