luch

Word on the grapevine is saying that Google is doing similar. One of the "perk" of being a well-known DNS resolver (8.8.8.8) is getting an early notification whenever a server goes "online" on the internet.

fascinating answer from someone who chose the nickname "beltalowda"

Exactly, I am at a job where we have decades of cumulative experience using IDA and even we are wondering if we should not cut ourselves free of Hex-Rays's lock in and begrudgingly learn Ghidra.

For a "new" professional/team, it makes zero sense to buy a IDA license nowadays.

to get 4K resoltution with Edge on Windows, you need to activate VBS (Virtualization-based Security) and Secure Boot. In that config, DRM keys are stored in a trusted application in secure world, and Edge from normal world ask the TA to decrypt the stream.

Server side Netflix has nothing to do, just send out the encrypted stream if asked by a client.

You're absolutely right, it's still supported security wise. You just don't get the new versions of iOS

Because people like free stuff.

More seriously, it's a way to build a "clique" organically, same as for sports teams. It's a non mandatory uniform in a way.

If you missed the news, the Log4Shell RCE vulnerability in Log4j impacts a memory-safe language (Java).

It's too early to tell -it dropped last friday - but it will probably be marked as one of the most egregious vulnerability to date due to the sheer omnipresence of Log4j in production java's code and the simplicity of its exploitation. We are talking Heartbleed/EternalBlue/Struts2 vulnerability level here.

The difference of ROI of memory-unsafe/memory-managed is not so evident. Usually memory-managed languages have fewer bugs, but those tend to be massively impactful

I know several security professionals who do incident response and therefore see a lot of IT setup across multiple domains since ransomwares are endemic nowadays, and according to them 99% of the shops they intervene run Office or Outlook(365) in some capacity.

Or better : outlaw ski lifts. You can still do some skiing or snowboarding, but you have to get to the summit yourself like alpine hunters.

now you do : https://github.com/Cisco-Talos/vboxhardening

now I think they can't be built less than 350 m from any house, and if they are in the 350 m to 500 m range they must be an impact study before approving the construction.

However there wasn't such rules when the first wind turbine were built circa ~2005, and you have to keep in mind that wind turbines are usually located in places less desirable for housing and farming due to excessive wind.

Moreover, it's usually the mayor's office or the county's office which approve the construction. There was instances where the turbines were located at the edge of one county and they didn't check if it were bothering the neighbooring county before signing the deal.

Yep, the good ol' "if this feature annoys the hell out of me it should probably also annoy the hell out of the attacker"

(Which is not even remotely true)

It's actually pretty standard to fork QEMU when you want to emulate a custom kernel/board. QEMU is a good common emulation platform, but in no way it can emulate correctly every quirks of a custom pci or even PIC device expected by the system.

Air France, Lufthansa, airBaltic & SAS already said they would not fly over belarus anymore

we won't get a CPU Renaissance, but we are seeing a new era of "hybrid processors", aka dedicated processors running a custom ISA.

For example, Huawei's Kirin NPU.

faking being irrational about your position unfortunately may be quite successful when negotiating against a rational actor : https://www.ismanundpartner.com/blog/irrational-negotiator

However, I'm not sure it is the way to go for employment contracts where you have an ongoing relationship with the other party.

Depends on the situation, which is why CVE also have a CVSS score explaining the context and potential for abuse, e.g. : https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

For example an arbitrary computation is useless for browser exploits (unless you think arb. bitcoin mining is a problem) since Javascript already gives you it for free but it is highly problematic for smart contracts since it breaks the economy based on it.

Another example would be data leak vulnerabilities which on some cases be only a stepping stone towards a RCE, but on others scenarios like for Heartbleed basically breaks the Internet's overall security.

Don't be so sure it will never change.

Until last year the EU had zero involvement in healthcare and public safety, that was every nation's own private garden.

I agree, it's better to differentiate based on revenues rather than just age.

In my country, if you're poor and if it's the first house you buy, you can ask a 0% tax loan from the government and use it to pay your stamp duty with it.

Not even underdeveloped countries, I live in a G8 country and there is hardly any significant FAANG shop here.

For example if you want to work for Google in Europe it's either UK or Switzerland, which are interestingly the two developed european countries outside of the EU :)

there are always workarounds, but they are becoming less "generic" (i.e. more context-aware).

Here's a recent example : https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-c...

Google forensic team also maintain an Docker introspection tool : https://github.com/google/Docker-Explorer

Ursula Van der Leyen actually tried that and it's considered its biggest political mistake : https://industryeurope.com/sectors/politics-economics/ec-pre...

Basically by doing so the EU would take Ireland "hostage" over its commercial war with the UK, and it's something the Irish people took very badly.

Concerning the suspension, we just don't have enough info. The EU medical authority is due to talk officially about it next Thursday, but if every EU country is suspending it in advance, I think it will be officially banned/suspended

Holy shit, I knew from anecdotal evidences that young people from Spain and Italy were "fleeing" their country but the demographics are frankly scary !

I don't know how what the retirement scheme is implemented over there, but if it is generational (young gens pays for older gens) they willy have a BIG problem in 15/20 years ...

I also own a reMarkable 2 since last December and the fact it is not a light source makes it valuable when you spend almost all your waking hours staring at screens.

For me, the most useful trait is that it gathers all my note in a "physical" gadget rather than being scattered on several laptops/smartphones/notebook.

or even western Europe. There are some world class developers in Spain, Italy or France that are paid ~30K€ to 50K€ per year.

Even when factoring in the tax levels and COL, there is still a huge potential for social dumping from the EU

Several epidemiologist are trying to warn the developed nations that the current battle for covid vaccines provisioning is doing the world a disservice since it allows the virus to mutate in parts of the world that can't compete economically for vaccine shots (Manaus, South Africa, etc.)

But Nash equilibrium is still more powerful than everything else ...

I think the better hack would be to run it into a speech-to-text transcoder, and then use a vocoder to play it back.

You lose the "voice" in the process, but in some situations it might actually be fine

This is the magic of "offensive" security, where you don't really bother with your own security posture :D

you know what they say, the cobbler's children are the worst shod ...

A a side-note I'm interested in the PDF diffing tool the author is using, seems pretty well made