My Tailscale RCE[1] in 2022 involved forcing a device onto an attacker-controlled control plane, at which point your device is no longer "yours", and the fact that Taildrop is implemented in your client binary can be…
I agree that this is how you should use it, but it is not "supposed" to be that in the sense that Tailscale strongly encourages you to use it in lieu of auth...
This is the place they direct researchers to report bugs. If they don’t want to pay out for MITM, that’s fine, but they should still be taking out-of-scope reports seriously
Apple CPUs do decode instructions into micro-ops. https://dougallj.github.io/applecpu/firestorm.html
It is in fact documented that you can't do this: "Currently the default global allocator is unspecified. Libraries, however, like cdylibs and staticlibs are guaranteed to use the System by default.", however:…
Presumably the metabase instance also has credentials to access some databases, some of which may be have enough privileges to also get RCE on the database machines (as well as messing with the data they hold).
I found something which is clearly a security fix, using the same idea but more naive: just diffing at the lengths of the decompiled files. It's not at all clear how the issue I found would be triggered by an…
Oh, I didn't mean to imply you can, just that it's 404... presumably it exists in a repo checked out on someone's machine, and maybe in a separate private Github repo.
They haven't released the source, and the compiled versions are non-trivial to diff (e.g. there are nondeterministic numbers from the clojure compiler that seem to have changed from one to the other, and .clj files have…
llama.cpp runs on the CPU, not the ANE or GPU.
I don't believe so – from a quick glance it seems that supervisor requests are proxied through the normal HA port, and the supervisor doesn't have it's own port except for the Observer (which seems to be a simple…
As a random example, if your Microsoft account is OAuthed to a GitHub login, and you log in through that, the popup browser just takes you back to a Microsoft account settings page instead of handing the OAuth flow back…
I'd also like to see motivating examples of specific things it does find (that LLVM doesn't), even if that's not a representative benchmark
Android's has an app signing system which isn't dependent on Google Play. Updates to a given app have to be signed with the same certificate as previous versions.
Have you considered making the website actually show the comments instead of pinning yourself on every large post?
unfortunately this is a real thing the US imposes on the world (it's called Secondary Sanctions)
In fairness, filecoin is linked on the IPFS homepage (though it is less prominent than I remember)
I just checked cloudwatch for my rust-based function, I'm now being billed 1ms :D
Probably also with a peripheral access crate (type-safe register definitions) and and HAL integration.
That wouldn't apply to Espressif since they started with WiFi, right?
Aside from the variable lengths which are really neat, SVE supports AVX512 style masking (predicates), which makes some algorithms simpler and hopefully faster
Nor do I, though it should be noted that most of the games with intrusive anti-cheat are Windows-only so the entire kernel is already closed-source blobs…
Firefox prompts you before even turning on search prediction, and it asks you about telemetry at first startup.
Private mode doesn't run a VPN, right? So your IP address is still associated with the searches.
I wonder if, with MITM devices set up on a few consecutive floors, you could make massive pixelart animations on the outside of the building by turning lights on and off...
My Tailscale RCE[1] in 2022 involved forcing a device onto an attacker-controlled control plane, at which point your device is no longer "yours", and the fact that Taildrop is implemented in your client binary can be…
I agree that this is how you should use it, but it is not "supposed" to be that in the sense that Tailscale strongly encourages you to use it in lieu of auth...
This is the place they direct researchers to report bugs. If they don’t want to pay out for MITM, that’s fine, but they should still be taking out-of-scope reports seriously
Apple CPUs do decode instructions into micro-ops. https://dougallj.github.io/applecpu/firestorm.html
It is in fact documented that you can't do this: "Currently the default global allocator is unspecified. Libraries, however, like cdylibs and staticlibs are guaranteed to use the System by default.", however:…
Presumably the metabase instance also has credentials to access some databases, some of which may be have enough privileges to also get RCE on the database machines (as well as messing with the data they hold).
I found something which is clearly a security fix, using the same idea but more naive: just diffing at the lengths of the decompiled files. It's not at all clear how the issue I found would be triggered by an…
Oh, I didn't mean to imply you can, just that it's 404... presumably it exists in a repo checked out on someone's machine, and maybe in a separate private Github repo.
They haven't released the source, and the compiled versions are non-trivial to diff (e.g. there are nondeterministic numbers from the clojure compiler that seem to have changed from one to the other, and .clj files have…
llama.cpp runs on the CPU, not the ANE or GPU.
I don't believe so – from a quick glance it seems that supervisor requests are proxied through the normal HA port, and the supervisor doesn't have it's own port except for the Observer (which seems to be a simple…
As a random example, if your Microsoft account is OAuthed to a GitHub login, and you log in through that, the popup browser just takes you back to a Microsoft account settings page instead of handing the OAuth flow back…
I'd also like to see motivating examples of specific things it does find (that LLVM doesn't), even if that's not a representative benchmark
Android's has an app signing system which isn't dependent on Google Play. Updates to a given app have to be signed with the same certificate as previous versions.
Have you considered making the website actually show the comments instead of pinning yourself on every large post?
unfortunately this is a real thing the US imposes on the world (it's called Secondary Sanctions)
In fairness, filecoin is linked on the IPFS homepage (though it is less prominent than I remember)
I just checked cloudwatch for my rust-based function, I'm now being billed 1ms :D
Probably also with a peripheral access crate (type-safe register definitions) and and HAL integration.
That wouldn't apply to Espressif since they started with WiFi, right?
Aside from the variable lengths which are really neat, SVE supports AVX512 style masking (predicates), which makes some algorithms simpler and hopefully faster
Nor do I, though it should be noted that most of the games with intrusive anti-cheat are Windows-only so the entire kernel is already closed-source blobs…
Firefox prompts you before even turning on search prediction, and it asks you about telemetry at first startup.
Private mode doesn't run a VPN, right? So your IP address is still associated with the searches.
I wonder if, with MITM devices set up on a few consecutive floors, you could make massive pixelart animations on the outside of the building by turning lights on and off...