置顶推文
Stealing Credit Cards from FUZE via Bluetooth (CVE-2018-9119) with exploit PoC and X-ray teardown blog.ice9.us/2018/04/steali…
English
Mike Ryan
1.6K posts
Mike Ryan
@mpeg4codec
https://t.co/gcKpmu4uDC and founder of https://t.co/gtByUmxdpc. I still sniff your Bluetooth. @[email protected]
Silicon Valley 加入时间 Mart 2011
149 关注2.4K 粉丝
@m17_project Nice! Very feasible to use these curves and honestly 160-bit is probably enough given the extremely ephemeral nature of the data. Really loving the progress on this project!
English
Finally some good news regarding digital signatures. I've been experimenting with ST's CMOX library and just got 160-bit ECDSA to run on the Module17. It takes around 8.25ms to sign a 16-byte M17 voice stream digest. The signature can be appended to the voice stream.
^SP5WWP
English
@DrawsMiguel If you’re gonna work on macOS it’s kinda unavoidable. Otherwise gdb is the goat.
English
@TenativeTangent @davideasnaghi @emuboy85 @travisgoodspeed @saleae Can you share one that works? I’m also on team @saleae but I’d love a cheaper functional alternative, at least to recommend.
English
@davideasnaghi @emuboy85 @travisgoodspeed @saleae Oh my God you can do that with a $15 logic analyzer. Please try one.
English
A friend needs a cheap logic analyzer and won't invest in a quality one. What are the cool kids using instead of Sigrok these days?
(Open or closed, must reliably decode UART traffic on at least two channels at 115200.)
English
@youdontpost @Master_eh Note to all future readers: this book is extremely good and also extremely fucked up at times. Consider yourselves warned! Also you can read it independently from the rest of the trilogy.
English
@tsurudraws Welcome to the exciting, efficient, and extremely noisy world of switched mode power supplies!
English
shoutout to all my homies who can hear plugged in appliances (even ones turned off), light fixtures humming, and when something is fully charged cause the noise changes
English
@tavo1ga @felixrentfree @raltyro @blackhawk2306 @IrisShaders @CyberStudios808 On the server side (only place where it matters) Folia threads ticks between non-overlapping regions.
English
okay mojang just rewrote like half of the vertex code this snapshot wtf
English
Alan Turing ofc, who else?
MIT CSAIL@MIT_CSAIL
If you could have dinner with any computer scientist, past or present, who would it be?
English
When I code things I keep in mind:
- how can I build this so it lasts
- how do I build this so future contributors understand it
- how can I make sure future contributors can’t break it
AI doesn’t consider a single one of those.
English
100% if you are fine w mediocre, unmaintainable code use AI. Not saying it’s all bad but takes a human to morph it into something usable.
Raphael Schaad@raphaelschaad
At this point of technology, the people that are fine with AI output, are the people that are fine with mediocre work. I've observed it over & over again, the raw output just isn't quite on point yet. I'm bullish on AI, but it simply produces a bunch of lofty words.
English
It burned 6 hours of GPU time on debugging its own unnecessary code versus something that should have taken 10 minutes. AI right now really just generates unmaintainable code, which anyone who uses these tools knows first hand
English
No hate, but this video is great. Let’s hold on the hype of these tools. FF to halfway thru for the good stuff where Devin starts generating code it doesn’t need then is looping thru debugging the bugs in its code, the instructions were in the readme youtu.be/tNmgmwEtoWE?si…
YouTube
English
@DiogenesOfTron @realtdx @twinkophrenia Classic GB reporting in. You cannot understand what an impact Pokémon Red and Blue had at that table unless you were there.
English
@realtdx @twinkophrenia Back in my day it was the OG GBA lunch table. Absolute hype
English
@_Sn0rkY @Enno_Insinuator 🙌 awesome effort, glad I could help someone enjoy the area!
English
@mpeg4codec @Enno_Insinuator Thanks so much @mpeg4codec I was able to reach 1900 m in terms of elevation with 2 loops
English
Hey californian trail runners - need an advice :)
I used to run around PurisimaCreekRedwoods but unfortunately there is not so much elevation. Any recommendation for a good trail in order to to do my long training session this Sunday?
Need to be reachable from Sunnyvale via Uber.
English
@robertgraham Considering all packets fail in the case of TCP, that points to the first hop dropping low TTL packets. Can you get upstream of the router to validate?
English
Seriously, this is bugging me. I'm an expert about such things, so what's going on?
I'm suspecting it's the local Comcast router that for some reason is filtering out such packets.
English
I've been playing with traceroute and hand generated packets for the past hour. I've noticed that while it works as expected using ICMP and UDP packets, I don't get measurements using TCP.
What's up with that?
English
@brad_hensil @joshcarlosjosh So simple yet superbly executed. Part of what makes the original trilogy the best!
English
@jduck @herrmann1001 If it’s a safety/security flaw that requires new hardware to address, they should issue a recall and supply the new equipment.
English
@herrmann1001 Sounds like a responsible approach to fixing a flawed system to me
English
@robertgraham @allanfriedman @GossiTheDog Don’t slander Perl’s good name, Rob. Larry is watching you.
English
English
The question "I have an #SBOM. Now what?" is a legitimate one, and more tools and use cases emerge every day.
But this basic analysis from @GossiTheDog on what's in Avanti tells a pretty clear story of why we need transparency for our software NOW.
English
@robertgraham @allanfriedman @GossiTheDog Perl (not in caps, not an acronym) is notorious for maintaining backward compatibility while introducing new features in the 5.x point release series.
English
@allanfriedman @GossiTheDog PERL is especially notorious for breaking people's code when updated. Any reasonable appliance is going to have a very old version of PERL. Knowing which will not help you secure the box.
English
@jduck @hashbreaker Verifiably is the key metric: 97.5% of zones are reachable from the secure root zone. This inflates numbers a bit because if a server delegates subdomain.example.com it’ll be counted as distinct from example.com. But tl;dr a ton of adoption.
English
@mpeg4codec @hashbreaker Forgive me for not being able to make sense of that. There are 414 million .com domains.
English
2009: "Not covered in this talk: other types of DoS attacks. e.g. DNSSEC advertising says zero server-CPU-time cost. How much server CPU time can we actually consume?" #2009.08.10" target="_blank" rel="nofollow noopener">cr.yp.to/talks.html#200… Also posed the question in some later talks. Most recent answer: athene-center.de/fileadmin/cont…
English