2,054 karma · joined May 27, 2020
https://lights0123.com/
github.com/lights0123/
Really? Does trusting a self-signed cert as a root cert not work in most libraries? quiche at least lets you control the parameters of their TLS implementation (https://docs.quic.tech/quiche/struct.Config.html#method.with...), which lets you go as far as allowing you to manually verify certs yourself (https://docs.rs/boring/latest/boring/ssl/struct.SslContextBu...).
Not only in its public API, but those are missing from its source code as well. I can't see where it could be doing any encryption—it doesn't even link to e.g. OpenSSL.
Multithreading probably requires https://caniuse.com/sharedarraybuffer
Which would be great, except as the ruling states, Sonos didn't introduce the feature in the market until 5 years after Google did:
> The essence of this order is that the patents issued after an unreasonable, inexcusable, and prejudicial delay of over thirteen years by the patent holder, Sonos, Inc. Sonos filed the provisional application from which the patents in suit claim priority in 2006...Google then began introducing its own products that practiced the invention in 2015. Even so, Sonos waited until 2019 to pursue claims on the invention (and until 2020 to roll out the invention in its own product line).
systemctl set-property system.slice AllowedCPUs=16-19
Would set the "system" slice to certain pinned cores, but there's nothing automatic.i.e. not executables
Which you can use to wrap the unaligned type as a packed struct, i.e.
struct __attribute__((__packed__)) unaligned_int { int i; };
which has an alignment of 1.Depends on the resource request. For example, <img> can be used to load remote resources without CORS, since the image data isn't shared with JS (trying to read it via a canvas marks it "tainted", and errors read requests). Meltdown/Spectre breaks this barrier down, which led to the introduction of COOP/COEP headers that require CORS on remote requests and would break this attack—except that you can ask the browser to send requests without cookies, re-introducing this timing attack.