Unfortunately, with secrets in the OS env, you‘re one `printenv` or improperly written third party dependency that leaks env vars away from a security incident. The env and more importantly what populates it should be…
This article is probably not correct. The actual behavior is documented [1]: > BitLocker hashes the user-specified personal identification number (PIN) by using SHA-256, and the first 160 bits of the hash are used as…
Is this LLM slop? One cannot truncate RSA signatures and still check them. The sample hook code is nonsense, it lacks an address to hook (and would break Enigma‘s self-checks). The sentence structure and all lower-case…
That's including the enterprise premium for software, hardware support, and licenses. Building this in-house using open source software (e.g. Ceph) on OEM hardware will be cheaper by an order of magnitude. You of course…
I would welcome if this global legislative push would end up in a more open app ecosystem for iOS overall. BrowserEngineKit is a thin wrapper over XPC and iOS' extension system. The system would be so much better to…
You can update SEP firmware, but only by providing your PIN. This is why iOS prompts for you PIN again before updating. This still effectively prevents Apple from adding backdoor to be installed on phones the user can…
They might just as well send any other .reg file that runs a program (e.g. by creating an autoboot entry, COM server, service, ...) that bricks devices.
Apple unfortunately declared XPC to be a private API on iOS, whereas on macOS it is the foundation for sandboxing custom services. I found no way to sandbox things beyond the sandboxes provided by iOS extension points…
SysCfg with serial number etc has been on a separate NOR chip for quite some time [1]. I wouldn't be surprised if Apple allowed DFU restore to initialize a blank flash as mere optimization in the production process. [1]…
The linked msdos source code on GitHub has since been rewritten by Apple /again/ [1], so the article is a bit out of date. This happened 3 months ago, and it now plugs into a private framework named FSKit. I did not…
Hi Gigachad! Is there a policy on using portrait photos of oneself at your company? Then the profile photos should indeed be changed, because they're not photos of oneself, but drawings of cartoonish animals. Otherwise…
This is unfortunate. The writing was on the wall already with vSphere+, but I can't really commit to a subscription for VM infrastructure. Broadcom would be able to hold the whole company hostage with price increases.…
The PostgresBuild 2021 slides of OrioleDB [1] (also linked in the GitHub project's readme) mention that there is a 1K LoC patch that adds features to the extension interface. I guess the patch is larger by now in 2023.…
Oldest trick in the book, good luck faking the PE signature to match the vendor's certificate ;-) (Jokes aside, the kernel does not provide any information about which application reads a canary page. It's best to just…
Previous discussion: https://news.ycombinator.com/item?id=34909218
(Wrote anti-cheat software in the past.) There are multiple ways to detect this. Hardware breakpoints were already mentioned, but they only work per thread, so if one is sniffing on your memory from another process or…
Just, uh... don't have a custom cross-platform scrollarea? This is a feature the browser provides already. Your page is perfectly usable by just removing `overflow: hidden scroll;` of…
tl;dr this adds a clause to forbid reserve engineering and bypassing "technical limitations" > You agree that you will not work around any technical limitations in the software provided to you as part of the Services,…
What threat model does AMD attempt to address by burning vendor keys into the CPU itself? It can't be physical attacks, because a physical attacker could just replace the CPU by one w/o PSB fuses blown and then go on…
And its last byte is a NOP, quite a flex :-).
Details are missing in the linked techradar article, but covered in its source [1]. To summarize, futex2 (for faster Windows-style locking) and syscall user redirection (for supporting odd DRM constructs) may land in…
I am wondering whether there is a management issue at Hex-Rays. The newly released company website features a page which appears to advertise against the product [1], because it entirely misses who their audience is.…
Careful though, and read the datasheet first! AM4, for example, uses 1.8V SPI flash chips. Connecting them to Raspberry Pi directly will at the very least fry the chip, if not the whole board.
Apple's WiFi password sharing system uses iCloud Keychain, which is end-to-end encrypted [1] [1] https://support.apple.com/en-us/HT202303
In addition to the points already mentioned, a good bit of Apple's software depends on Intel-proprietary features, e.g. QuickSync for video encoding. So far, no macOS system ever shipped with an AMD CPU, and porting the…
Unfortunately, with secrets in the OS env, you‘re one `printenv` or improperly written third party dependency that leaks env vars away from a security incident. The env and more importantly what populates it should be…
This article is probably not correct. The actual behavior is documented [1]: > BitLocker hashes the user-specified personal identification number (PIN) by using SHA-256, and the first 160 bits of the hash are used as…
Is this LLM slop? One cannot truncate RSA signatures and still check them. The sample hook code is nonsense, it lacks an address to hook (and would break Enigma‘s self-checks). The sentence structure and all lower-case…
That's including the enterprise premium for software, hardware support, and licenses. Building this in-house using open source software (e.g. Ceph) on OEM hardware will be cheaper by an order of magnitude. You of course…
I would welcome if this global legislative push would end up in a more open app ecosystem for iOS overall. BrowserEngineKit is a thin wrapper over XPC and iOS' extension system. The system would be so much better to…
You can update SEP firmware, but only by providing your PIN. This is why iOS prompts for you PIN again before updating. This still effectively prevents Apple from adding backdoor to be installed on phones the user can…
They might just as well send any other .reg file that runs a program (e.g. by creating an autoboot entry, COM server, service, ...) that bricks devices.
Apple unfortunately declared XPC to be a private API on iOS, whereas on macOS it is the foundation for sandboxing custom services. I found no way to sandbox things beyond the sandboxes provided by iOS extension points…
SysCfg with serial number etc has been on a separate NOR chip for quite some time [1]. I wouldn't be surprised if Apple allowed DFU restore to initialize a blank flash as mere optimization in the production process. [1]…
The linked msdos source code on GitHub has since been rewritten by Apple /again/ [1], so the article is a bit out of date. This happened 3 months ago, and it now plugs into a private framework named FSKit. I did not…
Hi Gigachad! Is there a policy on using portrait photos of oneself at your company? Then the profile photos should indeed be changed, because they're not photos of oneself, but drawings of cartoonish animals. Otherwise…
This is unfortunate. The writing was on the wall already with vSphere+, but I can't really commit to a subscription for VM infrastructure. Broadcom would be able to hold the whole company hostage with price increases.…
The PostgresBuild 2021 slides of OrioleDB [1] (also linked in the GitHub project's readme) mention that there is a 1K LoC patch that adds features to the extension interface. I guess the patch is larger by now in 2023.…
Oldest trick in the book, good luck faking the PE signature to match the vendor's certificate ;-) (Jokes aside, the kernel does not provide any information about which application reads a canary page. It's best to just…
Previous discussion: https://news.ycombinator.com/item?id=34909218
(Wrote anti-cheat software in the past.) There are multiple ways to detect this. Hardware breakpoints were already mentioned, but they only work per thread, so if one is sniffing on your memory from another process or…
Just, uh... don't have a custom cross-platform scrollarea? This is a feature the browser provides already. Your page is perfectly usable by just removing `overflow: hidden scroll;` of…
tl;dr this adds a clause to forbid reserve engineering and bypassing "technical limitations" > You agree that you will not work around any technical limitations in the software provided to you as part of the Services,…
What threat model does AMD attempt to address by burning vendor keys into the CPU itself? It can't be physical attacks, because a physical attacker could just replace the CPU by one w/o PSB fuses blown and then go on…
And its last byte is a NOP, quite a flex :-).
Details are missing in the linked techradar article, but covered in its source [1]. To summarize, futex2 (for faster Windows-style locking) and syscall user redirection (for supporting odd DRM constructs) may land in…
I am wondering whether there is a management issue at Hex-Rays. The newly released company website features a page which appears to advertise against the product [1], because it entirely misses who their audience is.…
Careful though, and read the datasheet first! AM4, for example, uses 1.8V SPI flash chips. Connecting them to Raspberry Pi directly will at the very least fry the chip, if not the whole board.
Apple's WiFi password sharing system uses iCloud Keychain, which is end-to-end encrypted [1] [1] https://support.apple.com/en-us/HT202303
In addition to the points already mentioned, a good bit of Apple's software depends on Intel-proprietary features, e.g. QuickSync for video encoding. So far, no macOS system ever shipped with an AMD CPU, and porting the…