loeg

Joined 15 years ago

Karma

27,192

Submissions

11,445

Member since

Oct 24

View on Hacker News

Recent submissions

Comment · 3 hours ago

The Redox article is underselling it somewhat. Part of the problem is Linux's historical syscall restriction systems (seccomp) did not (does not?) apply to io_uring, so io_uring is (was?) all or nothing on async versions of syscalls it implements. Also, io_uring is rapidly adding API surface compared to other parts of the kernel. With these factors combined, it has had repeated security problems since 2019 and has lead to, e.g., Android disabling io_uring entirely for applications.

https://security.googleblog.com/2023/06/learnings-from-kctf-...

> in the past year, there has been a clear trend: 60% of the submissions exploited the io_uring component of the Linux kernel (we paid out around 1 million USD for io_uring alone). Furthermore, io_uring vulnerabilities were used in all the submissions which bypassed our mitigations.

Comment · 3 hours ago

Why now? These events were 60 years ago.

Comment · 1 day ago

Europe never beating the allegations...

Comment · 1 day ago

Forging doesn't scale. No one wants counterfeit for anything close to $1 per dollar. You have to pass off bad bills one at a time.

Comment · 2 days ago

That's just what the writers of the fictional show thought was utopian. It doesn't tell us anything about the real world; it's fiction.

Comment · 2 days ago

> For security purposes, we are not disclosing the vendor or the affected versions

Wat

Comment · 3 days ago

Huh. Do people actually find that Fable-5.1 is worse than Opus-5.5 for any task?

Comment · 3 days ago

Does it rank on FelonyBench, though?

Comment · 3 days ago

> Another breathless fearmongering.

It's Ars; you come to expect it.

Comment · 3 days ago

CVSS scores are essentially meaningless. Don't read anything into it.

Comment · 3 days ago

Or Social Security.

Comment · 3 days ago

The German one isn't relevant for post-war American ships. Hope that helps.

Comment · 4 days ago

Games can have a story/narrative without extensive scripted cutscenes! These things are almost entirely orthogonal.

Comment · 4 days ago

Eh. My point was that your wishful thinking isn’t even internally consistent. And certainly has no basis in the real world, where not everyone shares your exact ideology.

Comment · 4 days ago

(And it’s annoying as hell if you actually want to play a game rather than watch a movie.)