HN user

mhei

51 karma
Posts1
Comments19
View on HN

(Rot13 as not to spoil the riddle)

Ubj nobhg n grgenurqeba? Begubtencuvp cebwrpgvba nybat gur yvar pbaarpgvat nal rqtr zvqcbvag gb gur bccbfvgr rqtr zvqcbvag tvirf n fdhner, lvryqvat 3 fhpu cebwrpgvbaf (cyhf gurve bccbfvgr pbhagrecnegf). Abg fher vs gurer ner bgure fhpu funcrf (vtabevat gevivny zbqvsvpngvbaf bs gur grgenurqeba) - qvq lbh znantr gb svther guvf cneg bhg?

Could it help to have a point-like light source from a good angle that gives you a sharp shadow? Then it may be possible to judge distance based on the distance between the tip and its shadow.

second to last paragraph:

All tests were run on both ubuntu 17.04, 4.10.0-37, as well as on arch, 4.12.8-2. We got the same results on both machines.

I feel the pagination method demonstrated here is advantageous in that regard, eliminating vertical motion while allowing to see parts of two "pages" at the same time:

http://www.magicscroll.net/

I would love to have that on my ebook reader, may need to hack that together some time to try. I dislike switching back and forth between two pages as is sometimes necessary; in this regard, this even seems better to me than a regular book.

Binary Puzzle 9 years ago

Or possibly the other way round? 0hh1.com was registered in 2014 according to whois info, the puzzles on this site go back to 2011. (I'm not claiming this is proof, of course)

The problematic patch only seems to be introduced in mainline 4.2, not 3.19, compare:

http://lxr.free-electrons.com/source/net/core/datagram.c?v=3...

http://lxr.free-electrons.com/source/net/core/datagram.c?v=4...

http://lxr.free-electrons.com/source/net/core/datagram.c?v=4...

I am just trying to completely understand the bug, I wonder if it really was unexploitable before the patch. Got any source for that?

EDIT: sorry, misunderstood your message / mixed up commits, I was looking into when 89c22d8c3b27 hit mainline, which causes the vulnerable code path.

If this is not caused by the Windows issue mentioned by TeMPOraL, I might have another explanation:

My former notebook (Acer Timeline 1810TZ) used to wake up from a press on any keyboard button, which I was unable to change. The issue here is that with sufficient pressure (e.g. when I was running with the device in a messenger bag), the lid would bend enough to actually press a key and wake up the machine.

My hackish solution was a script that would automatically put the laptop back to sleep a few seconds after waking up, which I then manually killed after intentionally waking the device.

I'm using xming as well.

glxinfo reports

  OpenGL vendor string: VMware, Inc.
  OpenGL renderer string: Gallium 0.4 on llvmpipe (LLVM 3.4, 256  bits)
  OpenGL version string: 2.1 Mesa 10.1.3
  OpenGL shading language version string: 1.30
glxgears works for about a second, then crashes:
  XIO:  fatal IO error 11 (Resource temporarily unavailable) on X  server "localhost:0.0"
         after 732 requests (732 known processed) with 0 events remaining.
When i run it from strace, it keeps running.
Agar.io 11 years ago

At the moment you can use a trick to play with your friends (that's what I'm doing): For each player, redirect m.agar.io to your own server (/etc/hosts), which serves a static file with the gameserver location (which you get from the original m.agar.io). Then reload the game until you're in the same realm. Don't forget to set the Access-Control-Allow-Origin header.

If the operating system is compromised, your application stands no chance hiding its data (including keystrokes) from it. The keystrokes could simply be intercepted after decryption, or even before - if you keyboard controller is that capable, it probably has more than enough space for malware of its own.