Viewing profile — language

iirc I think that the BPF JIT is disabled by default? Your kernel might be compiled with `CONFIG_BPF_JIT`, but I think the sysctl knob (`bpf_jit_enable`) is set to 0 by default. Al…

Text and patch start here: https://lkml.org/lkml/2018/1/3/780 Also, see Linus' response here: https://lkml.org/lkml/2018/1/3/797

Seems healthy leaving it to the user.

Thanks for the clarification, although I recall messing with eBPF and kprobes before - pretty sure you can dereference pointers? editx2: Oh, guess seccomp doesn't use eBPF yet? Sup…

I was under the impression that seccomp was a bit more flexible (via ptrace() and BPF fanciness) - although I guess you'd need other co-operating processes in userspace? I've only …

How so? I understand they're different, but I thought there was some overlap. Don't LSMs work by hooking syscalls anyway?

> Update: they just managed to get this done with stretch, released 4 months ago! That's only like 7 years late for a crucial actual security feature) Dunno, taking @revelation's w…

There's some kind of bind here between "putting burden on end-users" and "putting burden on application developers." Either you (a) ship $LSM with some defaults that are necessaril…

Huh, didn't know that Debian was missing ASLR. Any idea about the reasoning there?

I can't tell. If you remember they became a platinum member of the Linux Foundation last year too.

Ah, this is neat! Would be nice to have a script for this that you could just point at a local copy of the source tree too!

Love Graphviz, been using it for some time now. It's kind of painful rendering large graphs. Does anyone know the particular reason why `dot` and friends only seem to take advantag…

I've only dealt with this on Intel chipset HDMI - if I'm remembering correctly there's some part of the snd_hda_intel kernel modules you can blacklist in order to disable this.

It applies to Macs. I think AMT is just one particular application/feature of ME. ME is a piece of hardware on Intel chipsets.

Is difference (the distinction in question) something intrinsic to the world, or something imposed upon the world?

>The problem of looking at human consciousness is similar to someone that knows little about computer processors pulling apart an I7 and trying to figure meaningful things about wh…

> .. that perhaps 'our ability to think about the issue is constrained by our language' and '[consciousness] workings being inaccessible to introspection' are the same thing. I lik…

> But our consciousness goes beyond simple self-awareness: having a theory of mind is a step beyond (and is realizing that others have a theory of mind a step beyond that?) That [a…

Blade Runner means so much to me. I'm very glad that this is a thing, although, like with all sequels and re-interpretations of experiences that are near-and-dear to me, I'm strugg…

I think DirtyCOW (CVE-2016-5195) had been dormant in the kernel for a long time. If I remember correctly the PoC demonstrated writing on root-owned files. Might be relevant. https:…

If by class of bugs you mean "munging the stack," yes - but the difference is in the effect on integrity of the total system. In monolithic kernels, if an attacker can monopolize o…

"Machine learning models have no access to such experiences and thus cannot "understand" their inputs in any human-relatable way" It may be that distinctions like the one you're de…

However, as we are all now beginning to discover, the employment of ‘feedback loops’ are creating one of the most mind-boggling new capabilities for automation. This is not hyperbo…

> one could imagine a boot loader that loads the main unikernel at a random address, sets up page tables with NX, and then makes a one-way transition to ring 3 True - I suppose I'm…

Just like an operating-system executes processes, a VMM executes unikernels. An operating system is responsible for randomizing the layout of processes in memory. Shouldn't the act…