HN user

munchlax

115 karma
Posts0
Comments98
View on HN
No posts found.

I've replaced all my GPT disklabels with Sun disklabels because I refuse to let them talk.

UEFI still boots. Spec said it can boot from fat in an eltorito floppy image and sun disklabels sit in the second or so sector. Spec also said it abstracts the type of volume so all boot methods always work for all drives. ISO images don't use the first 4kB so it doesn't see there's disklabel at all

So now I can mount the ssd as iso9660 but there's also partitions on it of which the third spans the entire drive (of course, because that's the c partition)

Keep Android Open 9 months ago

Not neccesarily a guise of security, but perhaps a different means of security. E.g. securing stock investments, profits, monies, etc. Nothing is 100% secure, you can't be in the void and still call it a void, etc

Keep Android Open 9 months ago

I think it is and it doesn't just end there. It's develop and distribute binaries.

Everyone is still free to develop and distribute source code.

Keep Android Open 9 months ago

And good lock unlocking anything over 5 years old because the updated website doesn't support what you've got. Been there, it sucks.

Keep Android Open 9 months ago

It doesn't make sense to choose between a snake that bit you and another that bit you earlier.

If you don't want to be bitten, get out of the snake pit.

Yup. There's always some kind of tool anyway so why not. I mean, even if you read the logs as they come out of a screaming line printer, the tool is the thing that takes log messages and spits them out the printer port.

How hard can it be to write a log cat utility in awk?

Recall for Linux 9 months ago

Who knows how many ways there are to exfiltrate data. Without software (and hardware) freedom, you can never tell what's going on.

I admit I havent investigated this thoroughly, but I suspect the low hanging fruit in the tinykvm case is having rw access to /dev/kvm

I think it should be possible to pass /dev/kvm as an open fd to daemons like kvm server and mark it as non-inheritable. As long as the vm is in a subprocess it would be okay I guess.

The traditional way of doing this is by combining programs. Many programs already do this. e.g.:

time nice distcc ccache gmake

I do this with other tools as well. bwrap, chroot, env, setpriv, xchpst, etc. They all stack.

If websites didn't force insecure SMS 2FA, these services wouldn't be neccesary. It's like we can't have nice things anymore because criminals can't have nice things so you can't have them either.

Try entering a landline whenever you're asked a phone number for your account. They say the number is invalid, which I find insulting because I know my number very well and it's been around for longer than those websites.

And now this article insults me again by saying it's only used for criminal activities.

The gall.

Yeah but how does the malware get there?

It would be very powerful to get malware into ports and packages. It would also be noticed rather quickly. OpenBSD developers tend to run everything through dynamic tracers and other debugging tools.

I doubt you could keylog my openbsd server that I remote into over ssh or serial.

I also doubt you can take pictures of me when it doesn't have cameras attached. If it did and you were to take pictures, you'd see some blinking leds and cables all day.

And I highly doubt you could take remote control even if I had openssh open to the public.

Perhaps your industry just doesn't care about the same things the openbsd community does.

Edit: I missed the ssh key stealing. My keys are always encrypted.