geococcyxc

Another setting that surprised me with being turned on by default apparently on macOS 15 is System Settings - Spotlight - "Help Apple Improve Search": "Help improve Search by allowing Apple to store your Safari, Siri, Spotlight, Lookup, and #images search queries. The information collected is stored in a way that does not identify you and is used to improve search results."

In firefox, you can get this by navigating to about:translations

You just have to allow more than 75% memory to be allocated to the GPU by running sudo sysctl -w iogpu.wired_limit_mb=30720 (for a 30 GB limit in this case).

There's Frets on Fire: http://fretsonfire.sourceforge.net/

Ext4 has no snapshot feature, do you mean with lvm?

Maybe add that it's a "zero-click, wormable, cross-platform remote code execution in Microsoft Teams" :)

I remember this indeed being a thing in the news at the start of the Snowden leaks press coverage. Journos saw Google etc. logos in the NSA slides and thought they were on board rather than being tapped.

No need for an app even, I read that (some?) german emergency call centers use a service that will send the caller a text with a link to a website that will then use the browser's geolocation API.

Sorry, I was wrong about the courts, but at first it is not even handled by a court or prosecutor at all, only by the administration. If the potential fine is not accepted it then indeed goes to criminal court.

This is at least wrong in Germany, they are handled by different courts, will not show up on criminal record etc., it's more like a civil case, but with the government. Though of course you could park your car so horribly that it might get to be one, there's criminal neglect.

Everybody should be ignoring this "test" by someone who obviously has no idea what conftest is or does :)

If you did the normal monthly patches for your 8.1, you should be safe, no need to download the ones for 8.0.

Not all home routers are allowing this by default. I don't have any hard numbers to offer, but my feeling is that only very old and today's very crappy ones do.

Not sure what sysstat on Tenex did, but you can still use ^T on the BSDs and Mac OS X to get the wait channel and some additional stats.

Have not tried this myself, but it seems like FreeBSD does: https://news.ycombinator.com/item?id=11226386

I'm pretty certain they could sue for damages in that case, though I have never heard of this happening. I have heard of people playing the "I'm ill-card" in such cases, though.

ezjail-admin update -i has always worked for me, binary upgrades should work as well. What "design" are you thinking of here?

If you've never heard of "fantasy sports", John Oliver to the rescue: https://www.youtube.com/watch?v=Mq785nJ0FXQ

"The nonsense of english spelling": https://www.youtube.com/watch?v=XTjeoQ8gRmQ

(1) I have never heard of this behavior, correctable errors will be reported via MCA on Intel and uncorrectable ones will reset the system (and probably be logged in some firmware log).

(2) So as far is I know, the normal consequence of a detected multi bit error will be a system reset.

While there certainly are some employers that will want /tolerate you to work 60h/week for a whole year, this is very much illegal in Germany, for example. Standard employee contracts also mandate you to get permission from your employer for any side jobs, so consulting for 20h/week may not be that easy to do.

I read about one of these devices once, vendor info said that it runs a small and "verified" kernel (probably seL4 or something like that) that does the TCP stuff and took care not to let any real information flow in the other direction. Apart from FTP, it support SMTP, probably others as well that I forgot. It did not sound very convincing to me. Even if the kernel is totally secure, you could probably have a side channel via ACK timing?

Your MBP contains what is commonly called an "LED" display - an LCD with LED backlight.

This might not help a lot, but at least Google does not map if your SSID is ending with "_nomap". By using this, you will at least not give away your home location. You will of course not be able to add this to every public network you're using.

It will help, two bit errors are not corrected, though. The system will be rebooted and and an error should be logged.

If the private key/certificate really is the same for every installation of superfish, it would be interesting to investigate whether the the key is shared by all the other customers of the SSL interceptor as well. Their references mention Barracuda Networks and Astrill, for example.

It would be interesting to investigate whether the uncovered private key is shared by all the other customers of the SSL interceptor as well (http://www.komodia.com/products/komodia-redirector/ as mentioned by ChuckMcM earlier). Their references there mention Barracuda Networks and Astrill, for example.

Because it is needed to decrypt the key and as the program uses it, it must be in memory (at least at some time).

Care to elaborate? I do not think you will get a warning if the MITM is done with a certificate signed by a valid CA, even if you have approved some self-signed certificate before for that site. At least I have never seen this in any browser.