Viewing profile — ARob109

That’s how this[0] project mitigates e.g. CopyFail. BPF LSM if you want to return -EPERM. Or a kprobe that kills the process via bpf_send_signal() if BPF LSM isn’t enabled. [0] htt…

Firmware (XBL and other non OS components) are versioned with anti rollback values. If the version is less than the version burned into the fuses the firmware is rejected. The “boo…

I've been seeing "that's vibe coded" comments a lot lately on posts. Comments that call out code that may or may not be vibe-coded. At what point should these types of posts start …

/s the breakthrough: A basic car with that happens to have EV power train. The anti-secret: EV power train that accelerated 0-60 in 1s and all the software engineering going into a…

Ugh, already have to deal with filtering out interviewees who are obviously using AI to answer questions. It's annoying when you ask someone how they go about troubleshooting a mis…

Wonder if you could measure your breathing rate and heartbeat and cryptographically sign the time series data as ground truth. Then post process the video with Eulerian Video Magni…

RCT, Railroad Tycoon 2 (which has scripted scenarios and sandbox ), SimCopter and Streets of Sim City were great RRT2 has it scenarios like Hell or High Water where you have fill i…

I always used the Do Not Enter marquee signs such that once guests entered the park they could never leave. Great for helping meet the total park population scenarios.

That and before The Minecraft Movie came out, you could play multiplayer LAN from Xbox to PC cross platform without an XBox Live subscription. Once the movie was released and they …

Making physical goods low quality, cheap, and therefore disposable is the equivalent of rent seeking. Instead of growth and innovation, it’s how can the Company get recurring reven…

The Debug Policy apdp partition is flashed with an ELF “mbn” file. It is possible that sections are encrypted. At the very least it is likely signed. From a security perspective, h…

I see what you did there

Would love to see a write up on this

Learning Rust ATM and using bindgen on a C header. Just looked and it generates Rust enums from C enums. I'm not sure what the default behavior of bindgen is, but it seems there is…

I keep telling myself one day I’ll design a PoE DC to 120VAC adapter board so I can run PoE to a standard outlet box or light switch.

Would be cool to see integration of landlock with configuration file in a way that a service launched by systemd can apply the configuration to the executable. Akin to systemd Syst…

I regularly sing “I Never go to Work” and make new lyrics for to the tune. My wife and I really enjoyed Caspar Baby Pants and Laurie Berkner for kids music.

Using uprobes to hook the SSL library, would it be possible to filter content by inspecting and modifying eg the decrypted HTTP response ?

Android too in a way via Android Verified Boot. I think ChromeOS uses AVB as well. Android Verified Boot extends the System on chip Hardware based secure boot to the kernel and roo…

Seems like this could be easily mitigated with a read only root filesystem using dm verity Store the root hash of the dm verity formatted rootfs in the PCR. If a malicious partitio…

Yes. I could not put this book down. If you liked this one as an against the odds shipwreck survival story, David Grann’s The Wager is also very good.

Not sure about TA, but definitely saw radio station in Indianapolis using RDS to broadcast advertisements. In between the artist/song info, ads for an injury lawyer appeared. Thoug…