danarmak
Joined 11 years ago
Joined 11 years ago
You could say that any non-register memory access "blocks" but I feel that's needlessly confusing. Normal async code doesn't "block" in any relevant sense when it accesses the heap.
An error is preferred to silently returning garbage data!
That said, the most important extension usecase is adblocking, and with Manifest v4 and FLoC/Topics and SafetyNet/remote attestation, well...
Presumably they don't use CSV to sync, they're using a saner json/etc. data structure that they're not letting us export ourselves. Seriously, being limited to CSV in this day and age...
At most I imagine the plaintiff is allowed to do discovery, and then has to prove positive discrimination based on that.
> Though manufacturers cannot so easily escape liability, sellers can escape liability by informing the customer before the purchase that a product must be taken "as-is,” which means how the product was found when it was purchased in-store. “As-is” works because the buyer has an opportunity to inspect the product and decide whether to buy it given its condition.
On that analogy, Github and RedHat aren't liable, but the original author of the software still is.
ETA: the first couple of Google results say that no, product liability can't be disclaimed away - particularly when there is no contract or opportunity for bargaining. I am very much not a lawyer but this sounds correct to me (i.e. this is what the law is).
https://www.findlaw.com/injury/product-liability/are-product...
https://www.eltonlaw.com/does-a-disclaimer-mean-you-cannot-f...
https://twitter.com/aionescu/status/1393955460517040129
> * AMD Zen "Summit Ridge" Stepping B1. That is Ryzen's 1xxx series.
> * AMD Zen2 "Matisse", "XT" series only. That is Ryzen's 3xxx series.
Other info at:
https://twitter.com/aionescu/status/1394039410300051456 https://twitter.com/aionescu/status/1394359314102427650 https://twitter.com/aionescu/status/1394359317038452738
Regardless, the vulnerability is in the driver, not the CPU / microcode. Also in the WHQL process that signed such a 'fake' driver. Until the signature is revoked, it might be possible for an attacker to manually install the signed driver on other system configurations too.
> But even better, it has a security descriptor allowing Everyone + Low IL R/W Access, and an IOCTL interface with absolutely no Probes/SEH, which yes, dereferences wild pointers. They don't even bother checking for input size or output sizes.
If that's true of the driver, then it's a sec vuln regardless of what the MSR bit does or doesn't do, no?
(Sarcastic? Who knows?)
It would be less than 3x the length, not 10x. The mountains are a problem; it could go around but would still need to dig a lot. And it doesn't seem feasible politically right now, but it could be a really cool project.
(If it was built, then a side-canal to irrigate the Dead Sea would be a relatively cheap value-add.)