So this one integer overflow in sort, a command which is never ran as root is an issue somehow, because it can cause a denial of service(it crashes)? Am I missing something here. Can I use this to exploit someone's…
What kinds of memory safety bugs do you really care about in coreutils? Genuinely curious. Given how mature and well defined the GNU Coreutils are, how small their scope is, how they are used, I really don't see the…
That's not how it works out in practice. For example, journalists who have insider info from sources and leak it on the regular don't do anything to prove they have insider information, they build up reputation based on…
Indexing trillions of messages is outrageous.
Don't trust Signal for what? For communicating about illegal dealings, that intelligence agencies are interested in cracking down? Ok, sure, but then don't "trust" anything digital over the wire. What about having E2EE…
As I've been looking into freelance teaching and researching what kinds of services people provide, it's become astounding to me how poor most freelance teaching is. There's a bunch of people with the skills of a first…
How does memory safety allow you to protect your personal information? How many binary exploits have actually lead to the exposing your personal information? I can count with my fingertips exactly zero times that has…
When I had written my shell to the point where I could execute simple commands, this was the first thing that came to my mind using it. Execute the shell -> Modify the source code of the shell with vim -> Remake the…
So this one integer overflow in sort, a command which is never ran as root is an issue somehow, because it can cause a denial of service(it crashes)? Am I missing something here. Can I use this to exploit someone's…
What kinds of memory safety bugs do you really care about in coreutils? Genuinely curious. Given how mature and well defined the GNU Coreutils are, how small their scope is, how they are used, I really don't see the…
That's not how it works out in practice. For example, journalists who have insider info from sources and leak it on the regular don't do anything to prove they have insider information, they build up reputation based on…
Indexing trillions of messages is outrageous.
Don't trust Signal for what? For communicating about illegal dealings, that intelligence agencies are interested in cracking down? Ok, sure, but then don't "trust" anything digital over the wire. What about having E2EE…
As I've been looking into freelance teaching and researching what kinds of services people provide, it's become astounding to me how poor most freelance teaching is. There's a bunch of people with the skills of a first…
How does memory safety allow you to protect your personal information? How many binary exploits have actually lead to the exposing your personal information? I can count with my fingertips exactly zero times that has…
When I had written my shell to the point where I could execute simple commands, this was the first thing that came to my mind using it. Execute the shell -> Modify the source code of the shell with vim -> Remake the…