User Profile

[hotaru]

Google doesn't update their devices to new kernel versions either....

[hotaru]

even worse: it'll probably never be available on existing Google Pixel phones because they never get updated to newer kernel versions....

[hotaru]

Coffee Lake Pentiums and Celerons are ancient?...

[hotaru]

no. some attacks are within the same thread (JS in a browser reading data from outside its sandbox, for example).



even if we...

[hotaru]

how much did the NSA pay you for that?...

[hotaru]

only by people outside the field of information security. within the field, he's largely considered a hack whose only notable achievements have been inventing...

[hotaru]

that's not a real package manager. it doesn't handle dependencies at all. it doesn't keep track of which files belong to which package. it doesn't even...

[hotaru]

1. Android can't self-host on most devices.
2. Windows doesn't have any package manager.
3. A lot of widely-used Linux distributions don't...

[hotaru]

according to that report, it was updated after I posted a link to it here.



that particular bug is why I was still considering...

[hotaru]

new package management is nice, but I'd think serious security vulnerabilities would be a higher priority.

[hotaru]

that's what any computer running JavaScript in a web browser is....

[hotaru]

would -mlfence-before-indirect-branch and -mlfence-before-ret even do anything to mitigate the vulnerability? isn't the problem with indirect branches...

[hotaru]

https://twitter.com/gnyueh/status/1236178639483527168...