logical_person

Combined with N<20 and a definition of trauma that means literally any experience, we might be able to get a preprint published claiming trauma cures cancer as well.

running multiple game servers in docker is a multi-tenant environment, because docker is not a serious security boundary unless you're applying significant kernel hardening to your kconfig to the tune of grsecurity patches or similar

it's shocking how low-quality these issues are in a client that is otherwise 1000x more performant than the other options listed in the article

Prop 65 went great! Let's get a warning out for every game with peer to peer networking while we're at it.

p2o is pathetically low in comparison to other markets. is your experience limited to legitimate bug bounty programs like that?

before the popularity of ARM SoCs that contain everything on-die there were much fewer choices for vertically integrated devices. it's a different segment.

if you look at apple's vertically integrated devices, they chose a cryptography coprocessor that was not on die originally. with a key accessible only by both pieces of silicon's trusted execution environments, rather than the operating system directly, encrypted comms are established in a similar fashion as the TPM2.0 proposal.

> encrypted sessions (and/or EK cert verification) without PIN are not much more then obfuscation

this is completely incorrect, encrypted sessions defeat TPM interposers when there is a factory burned-in processor side secret to use. lol at being just "obfuscation" because you can spend $5m to decap and fetch the key then put the processor back into working order for the attack.

that just requires a vertically integrated device instead of a consumer part-swappable PC.

do software cracks usually get posted to seclists? this is expected in the design of DRM...

> But what this simple experiment demonstrates is that Llama 3 basically can't stop itself from spouting inane and abhorrent text if induced to do so. It lacks the ability to self-reflect, to analyze what it has said as it is saying it. > That seems like a pretty big issue.

what? why? an LLM produces the next tokens based on the preceding tokens. nothing more. even a harvard student is confused about this?

200mb of data is not a large file, and chromium tabs have a memory limit of something ridiculously low so actual large 20-100gb datasets render this useless.

you're too kind replying to this

authenticated sessions are practically useless on anything but a fully integrated device, because there is no guarantee of the SRK's identity - MITM is still possible.

that's still less secure, though. without a TPM you have no guarantee of the underlying state of firmware on the device. this enables a persistent backdoor.

TPM with no PIN is practically bitlocker with no password. A high entropy PIN happens to solve this entire attack.

sorry but this is nonsensical, one site pushed malware so they all do? typical "security" person

wrong, loading drivers requires admin.