merpkz

Joined 4 years ago

Karma

601

Submissions

134

Member since

Mar 7

View on Hacker News

Recent submissions

Comment · 17 days ago

What did Microslop change in Xbox One that prevented it from being exploited much in the same way? Afaik Xbone is still undefeated in terms of security, either because it's so good or because it's just uninteresting console to own

Comment · 1 month ago

we have been hearing this all the time whenever Dark Web is being discussed, but fact of the matter is that all the big darknet market busts have been done in past because of sloppy opsec by their operators and not some magical government wand which can pinpoint location of a hidden service

Comment · 1 month ago

Nokia N95 had an impressive media menu [1] where you could select music, internet, radio, navigation apps and what-not, it was great for it's time. They even had a gaming figured out at one point, if I am not mistaken even with a store for their n-gage games. So yeah, I don't agree that they avoided building a truly personal computer, but at the same time they still managed to screw up everything.

1: https://www.reddit.com/r/FrutigerAero/comments/1k2ao9b/the_m...

Comment · 1 month ago

> only way we are able to eat affordable food is because some diesel truck is transporting it.

I would also add to that affordable food is being first produced by agricultural machinery running on diesel, which is then transported by trucks running on diesel on roads build by machinery running on diesel. There is a good youtube video about this from channel driving 4 answers.

Comment · 1 month ago

Raspberry Pi Zero 2 is the sweet spot these days for price/performance, but it's nowhere to by found in stock, sadly despite the fact it has LPDDR2 type of RAM

Comment · 1 month ago

Hurricane Electrics brings back memories of first playing around with IPv6 many years ago. Thanks a lot to them for offering such a great service free of charge for anyone to learn about IPv6 networking. Sometimes I wonder don't they have a lot of abuse from those services with people using them as proxies or something

Comment · 2 months ago

I feel like in near future the meme about "it's all just chatbots emailing each other" will actually be true. I wonder when I will receive my first AI generated email and will I bother to respond to it at all

Comment · 3 months ago

Back when it was called Backtrack if my memory serves right. I remember being puzzled that it was not the case anymore one day and they even switched to regular user around when Kali became a thing

Comment · 3 months ago

Electronic injection sounds like too complex system to maintain, now if it had an actual carburetor that might be a peak "ICE", true and pure mechanical experience. Jokes aside, I hope that car at least have airbags, otherwise it's just death trap

Comment · 3 months ago

What stops your navigation app on phone collecting all the data anyways and sharing it with insurance corps?

Comment · 3 months ago

Why are some copies of the game "graded" higher than the others if they are all the same copy of the same game?

Comment · 3 months ago

That privileged port thing is not true anymore for Docker created containers, since it lowers that limit and unprivileged containers can listen on any port.

  docker run -ti --rm --user 1000:1000 --privileged=false alpine:latest
  ~ $ cat /proc/sys/net/ipv4/ip_unprivileged_port_start
  0
  ~ $ id
  uid=1000 gid=1000 groups=1000
  ~ $ nc -lvp 80
  listening on [::]:80 ...

Also the iptable rules Docker creates is for routing traffic to container with destination NAT, to actually limit traffic you have to do it yourself by inserting rules in DOCKER_USER chain.

Comment · 3 months ago

That is what I have been thinking too about recent linux vulnerabilities in context of container escape, but upon brief research I am not convinced it's all that straightforward. For example here https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC relies on sharing same container layers with other privileged workloads, which is quite a stretch to find in the wild and moreso it says that having a seccomp enabled breaks the exploit - "The default seccomp policy disables the unshare syscall." Other thing is that temporary remedy to lot of these exploits is to blacklist esp4, esp6, algif_aead modules, but how on earth are they going to be loaded in host kernel, which they are not by default, from unprivileged container in first place?

Comment · 3 months ago

Copy data into extra large capacity micro sdcard and hide it in your rubiks cube, nobody will suspect a thing

Comment · 4 months ago

What's in there for these people to push for chat control of all things?