Viewing profile — tryauuum

Doesn't this one need it as well? I see the shadow mmu

ah, to live in a country where the government doesn't block wireguard packets

no, I mean the attacker boots his own copy of Windows or Ubuntu, which is supposedly trusted by the UEFI keys. Will tpm somehow detect that it shouldn't unlock secrets for this boo…

It all weird still Suppose the physical attacker doesn't reset the bios. He boots Ubuntu or any other os which is signed. Will the tpm unlock and give out the key? I guess it depen…

holy hell! snap-based kernel can someone explain like I'm 5, what's the point of during storing disk encryption keys in TPM? What kind of attack or attacker do we protect from? my …

So Microsoft did something good? I thought they are too busy keeping my personal data in a prison and writing tight bash loops wasting 100 percent of a core

I've never had a twitter account so all these people hating durov for his exile marketing look weird to me. I'm not disagreeing with what you say but it's like a whole another subs…

> You people are just racist towards Russians and need help. >> That doesn’t exclude the statements about Telegram to be correct though. just attack the telegram from the technical…

that's stupid. getent passwd will fetch the user list from the network depending on setup. Have fun fetching 40000 records from the network every call

come on guys, stop upvoting me and answer the question please

whoa, didn't expect a wall of text When I said about "no mitigations except for the kernel updates" I meant exactly that. Some sysctl config to flip, some kernel module to unload. …

Today they already analyze the SSL handshake and traffic patterns in Russia. And if your valid https traffic crosses the border but doesn't behave like https (I don't know how they…

> new technology that is designed to balance interests on all sides and actually enforce the guarantees IN CODE AND PROTOCOLS. They will just call your code illegal in law. And if …

That's cool and all but looks like we are running out of good countries And if they all have censorship, they are not failing (when comparing them to each other)

It's hard to compare US and EU internet freedom because a person usually spends most of their life in one place and is clueless about the life in other. I've never lived in US, wer…

it's all so tiresome so no mitigation except for kernel updates?

how dangerous is the vulnerability in practice? How hard is to actually achieve the KVM escape?

Not all device files, only /dev/kvm. I assume the logic was "with /dev/kvm access the user can ...allocate memory and execute code, which they already can, so why not allow it?". C…

"lock-in factor"?

> don't, like, invade their country I did not invade any country At least this app just displays the flags and not prints such accusations

this touches two pieces of my knowledge: - microsoft is evil, I cannot delete my github account, will never use anything by this company - if the attacker knows your *public* key t…

wonder if anyone tried X over infiniband, latency would be so great

The ad companies I think would want the opposite If they cannot distinguish real people from bots they can just charge more for more ads shown !

I would tell them to not give their children internet access at all until they think they are ready. Does it sound realistic? I don't know. From technical point of view certainly r…

I don't fully get you. Do you mean untrusted regex or untrusted data it operates on? And to be honest, even if the regex is trusted (came from a developer) and the data as well (so…