HN user

fowl2

561 karma
Posts18
Comments200
View on HN
securitycryptographywhatever.com 4mo ago

Standardizing Pure PQC

fowl2
2pts1
www.rogerbinns.com 4mo ago

APSW in Colour (Async) – Another Python SQLite Wrapper

fowl2
3pts0
github.com 4mo ago

Abusing AAD Family Refresh Tokens for Unauthorized Access and Persistence (2022)

fowl2
1pts0
twitter.com 7mo ago

Exchange Online Mailbox Audit Logs "On" might not mean "On"

fowl2
1pts1
twitter.com 1y ago

GraphemeOS' sandboxes Google Play [X Thread]

fowl2
3pts0
blog.cloudflare.com 1y ago

Is this thing on? Using OpenBMC and ACPI power states for reliable server boot

fowl2
3pts0
terrytao.wordpress.com 2y ago

Eigenvectors from Eigenvalues: a survey of basic identity in linear algebra-2019

fowl2
2pts0
www.postgresql.org 2y ago

Pl/dotnet, version 0.99 (beta)

fowl2
2pts0
sec-consult.com 2y ago

SMTP Smuggling – Spoofing Emails Worldwide

fowl2
2pts0
www.gamespot.com 2y ago

Zelda: Tears of the Kingdom's Ascend Ability Exists Because "Cheating Is Fun"

fowl2
2pts0
webpack.js.org 3y ago

Webpack – Roadmap 2021 (2020-12-08)

fowl2
2pts1
support.google.com 3y ago

Location based reminders will no longer be supported by Google

fowl2
9pts5
devblogs.microsoft.com 3y ago

MIDI 40 and the new Windows MIDI Services

fowl2
3pts0
www.youtube.com 3y ago

Space Cadets – The Most Expensive Hoax in Television History [YouTube]

fowl2
1pts0
www.projectrho.com 4y ago

Preliminary Notes – Atomic Rockets

fowl2
2pts0
ablawg.ca 5y ago

What has Meads vs. Meads wrought? (2013)

fowl2
1pts0
code.visualstudio.com 6y ago

Visual Studio Code 1.43 (Feb 2020)

fowl2
28pts1
www.economyofmechanism.com 10y ago

Office365 Auth Bypass (fixed) – The road to hell is paved with SAML Assertions

fowl2
3pts0

Telco networks are sprawling and accurately defining the boundary might be harder than it sounds.

Traditionally they have a bias towards "working"/delivering traffic. It's easier to issue a refund than answer a urgent support request.

I can also imagine the biggest customers have all sorts of multi-vendor failover plans that may be affected.

I wonder if the next obvious attack - 2 pushes in rapid succession, one to show and one to hide - has been handled. The browser should debounce and replace the notification with a notice instead of hiding if it’s removed too quickly. Human time scales.

Also no mention of Firefox in the article ;(

It might be possible to create/use some app compatibility shims:

https://techcommunity.microsoft.com/t5/ask-the-performance-t...

https://learn.microsoft.com/en-us/previous-versions/windows/...

Given that Windows 11 isn't that different from Windows 10, I assume the app compatibility toolkit can be coaxed to work.

Or, more excitingly, probably more versatile in the longer term, and a pile of hacks upon hacks, it might be possible to run in the browser with the likes of jslinux + wine.

eg. https://github.com/lrusso/WinAppRunner or https://github.com/DustinBrett/daedalOS

If you get that working, that'd be really exciting.

I was thinking more for communicating the “mass disruption in progress” message - or even just distributing the manually verified “traffic lights down” data between vehicles.

I wonder if the cars also have some sort of mesh (LoRaWAN?) network to help each other out in temporary dead zones, emergencies, etc.

When you run Get-Mailbox -Identity <MailboxIdentity> | Format-List AuditEnabled, the AuditEnabled property always displays as True. This hardcoded display value doesn't reflect the actual mailbox-level audit configuration.

To verify the actual mailbox audit status, use the Filter parameter in the following command: PowerShell

Get-Mailbox -Identity <MailboxIdentity> -Filter "AuditEnabled -eq 'True'"| Format-List

If the command returns the mailbox object, mailbox-level auditing is enabled. If the command returns an error stating the object couldn't be found, mailbox-level auditing is disabled.

https://learn.microsoft.com/en-us/purview/audit-mailboxes?so...

Suprised no one has mentioned RFC 8914 Extended DNS Errors, specifically section 4.17[1]:

4.17. Extended DNS Error Code 16 - Censored

The server is unable to respond to the request because the domain is on a blocklist due to an external requirement imposed by an entity other than the operator of the server resolving or forwarding the query. Note that how the imposed policy is applied is irrelevant (in-band DNS filtering, court order, etc.).

Which would be relevant for Google DNS's "Query refused" at least. Although I guess it's possible maybe they do support it but Windows/Chromium don't...

[1] https://www.rfc-editor.org/rfc/rfc8914.html#section-4.17

Binary compatibility is necessarily at odds with the “recompile the world” philosophy. This global view has some advantages, eg. performance can be improved system wide LTO, calling conventions changes, security with hardening options, etc.

The local view, where a program with no knowledge of its runtime environment could appear at any time to a runtime environment that similarly knows nothing about a program, loses all those advantages and costs added constraints but gains.. the ability to run those programs.

The article argues that the balance should be shifted, to their (eventual) benefit, sure. I wonder how long until that would take.

I wonder if there’s more “pay for play” path. I guess that’s containers. Or maybe what they argue for but bundled software could stay the way it is now. Further bifurcation seems bad, adding more code paths to test etc.

Presumably there's some reason Go can't just use an embedded manifest[1] like everyone else?

Ahh, I'm inferring (from [2]) even with the manifest entry, a system wide registry key is also required to get long paths working:

I'm working with the Windows security team to find a way to enable long path support without having to modify the registry, just by using the embedded manifest, but the chances of this happening soon are quite low.

[1] https://learn.microsoft.com/en-us/windows/win32/fileio/maxim... [2] https://github.com/golang/go/issues/69853

I guess "hibernating" (writing VRAM to swap) works better than expecting userspace to gracefully handle device resets. One linear read vs. a thundering herd of processes re-initialising, decompressing, etc. should be more predictable/reliable at least.

I do wonder however how much VRAM is "volatile" - ie. framebuffers - and could just be thrown away. And web browsers seem to handle GPU resets just fine, so maybe they could opt-in?