keyme

Wow! They should really make a movie out of this

Throughout history, Jews had to outsmart and outperform their peers in order to survive.

The morals of these employees aren't at question here. The problem is that Facebook, a private company not answerable to anyone, get to decide who is naughty and who isn't, while being a monopoly on online communications.

That's straight from a Black Mirror episode... Unsurprisingly no one here cares, because NSO bad.

Some commenters on the thread suggested that Play Protect reports to Google that your device (linked to your account) uses this app. I'm not sure that's true, but I disabled it nonetheless.

I found your hack (http://41j.com/blog/2016/09/mirrorswitch/) very interesting. Enough to pop open a dumb switch I had laying around... RTL chipset. Googled the DS in 2 minutes. What do you know... VLANs, port mirroring, IGMP snooping, ACLs and an embedded 8051!

Couple that with geographic constraints and I guarantee you that's true somewhere in the world.

This is NOT a matter for a private company to decide on. That's the issue here.

Censorship

A detailed research paper also available here: https://go.armis.com/hubfs/White-papers/Urgent11%20Technical...

Overview is here: https://armis.com/urgent11/

And a detailed research paper: https://go.armis.com/hubfs/White-papers/Urgent11%20Technical...

There is always at least one guy that really does understand the implications, is in the position to make changes, but proceeds anyway.

It's attitude like this that makes my 8GB of RAM laptop barely able to handle Spotify and a few tabs in Chrome.

Not sure what you're referring to and genuinely interested. All I've seen here is fairly polite discussion into some contentious issues.

The reason is that there's a big difference between an exploit and a fully weaponized utility that gives you a root shell for a given IP address.

You almost never see these lying around the Internet. There is a lot of work involved in creating a tool that'll successfully identify and exploit every single build of an executable, with 99.9% reliability. There is lots of testing to be done, lots of tweaks required. Things that random individuals just don't do by themselves.

Affects both

This makes more sense, thanks.

I still don't understand why the trim is "stronger" on these planes than a fully pulled back column. Is this necessary on large planes?

So the physical cutoff switches are still just inputs to software? WTF.

I don't have a LinkedIn page, or any other social media for this matter. Does that make me a non-trusrworthy person now? This is horrible. (I don't disagree with your other points).

Looking at the reproducer (in the kernel commit message for the fix), this is a PE. Unless some software allows a remote user to control the issuing of these calls (seems unlikely).

Almost certainly these are still archived somewhere accessible, like wayback machine.

Tel Aviv has the same fate, I'm afraid. The problems are very similar. Highly paid tech workers have driven the rent prices in the good parts of town up to insane levels. These days I don't think you'll find anyone living alone or as a couple in the good parts of TLV unless one of them is in tech.

The only thing keeping TLV an awesome city still, is that Israel is such a small country. There really isn't anywhere else to go. As such most single non-religious people will want to live there due to lack of other options, whatever the cost.

Of all "dystopian future" things that are now becoming a reality, this is IMHO the most disturbing.

There is nothing you can do about it as a privacy conscious person. Some random relative will give their DNA up at some point or another. Then you're fucked forever.

The sovereign entity I was referring to in this case was Saudi Arabia, but whatever.

Yes. Would you consider exposing spies in the field, leading to their capture, academic work? Or is more akin to an act of war?

You see this work as merely exposing cyberintrusions. However, for the powers in question, this constitutes harming or disabling strategic intelligence capabilities. At this point shit gets real.

Does it matter that it's the wrong side? It's an act of war nonetheless. Retribution usually follows.

Was dumping the DNC mail server to Wikileaks investigative journalism? Or an act of war?

When security is only an afterthought, the product (and in this case, the entire discipline) will remain insecure for decades.

Just like security was an afterthought in the software world up to the late 90's. Software today is still written in C...

I actually looked at the widevine DLL at some point out of curiosity. It didn't seem obfuscated in any way. Honestly I think getting the keys to the encrypted streams out of there is at the difficulty level of an average CTF challenge. The reason you don't see PoCs, is because it's strictly illegal to distribute such code. Even the act of reversing this DLL is illegal.

L3 is the only thing used on desktops.

L1 on desktops requires Intel SGX, however, I haven't ever seen this implemented in reality. If anyone has seen it, please share.

Otherwise, L1 exists only on Android and iOS, AFAIK.

The article claims that you can't record HD content from Netflix with L3 DRM. IIRC, that's false. They require L1 only for 4k content.

It's patchable, but requires each implementor to recompile the FW with an up to date stack. The patched stack is available on TI's site for months now.