robododo

If you're admin, you might have to install a driver to scrape all memory. So... one hoop to jump through :)

Caveat: you're still trapped in your hypervisor partition. Enclaves (e.g. SGX) are also protected from admin/root snooping. IIRC, this is the same as on Linux.

Does this all hinge on EPID? So will cloud workloads have to phone home to Intel for assertions to be satisfied?

My question is built on the presumption that SGX is the only real TEE available right now.

Also, how is Google dealing with PRM/EPC memory limitations of SGX?

Just to clarify the article a bit:

Your password hash is not sent over the wire. What is sent over the wire is the NTLMv2 response message. This, simplified, is: HMAC_MD5(Hash | challenge). If you want the gory details, check out MS-NLMP.

That said, a dictionary-attackable password + attacker with fast GPUs can still brute-forcing the HMAC, then attack the password hash (MD4). It's a bit harder than just banging on a simple hash, though not terrifically difficult.

In a row?

You still need delete for some things.

Smart pointers are not a panacea.

They are completely unrelated products, except for branding.

Yeah, I know. Sigh.

This is the burden of having [email protected] email address.

Once, my wife had someone setup some sort of financial account with her email (CC, IIRC). They didn't verify the address!

My wife called and tried to do the right thing, but the people on the phone just didn't understand the concept that the email address was wrong. It simply wouldn't compute for them. Since my wife had the email address, she /must/ have been the account holder. Right?

Hrm... I wonder if you're missing a fw update, perhaps?

I've got a SP3, and though it can get warm, it's not worryingly so. The fan kicks on when it should and does its thing.

I always felt it was odd that Notch bashed Windows 8 so publicly for the store, yet happily sells on iOS, XBox, PS3, etc.

"OneDrive for Business" is a branding disaster, as it creates a completely rational link in people's minds that it's the same as OneDrive. In reality, it's a completely different product that acts in different ways.

Sigh.

How many of these have gotten new server keys? How many have invalidated all prior session ids and cookies?

I have a feeling heartbleed will haunt us for a while.

"High quality" in close proximity to "calories" is another sign of woo.

Calling the data gathering intrusive is a bit of a stretch. Considerable efforts are made to ensure you're anonymized and personally identifiable information is not gathered. There are people to actively work to ensure you're not "tracked" in any way.

Off-Topic: I'd be interested to see the number of people who turn off the Microsoft CEIP (terrible abbreviation), yet still use a Google id and/or accept DoubleClick cookies.

Definitely. Though I often wonder how much Google's apps strategy is a direct-compete with office for now?

I have a sneaking suspicion it's similar to Microsoft's Bing strategy. It feels like Bing was created to annoy Google and keep them focused on search. Microsoft could afford to throw a few billion at something to keep Google out of it's bread-and-butter. It feels like Google's doing the same with apps.

Of course, given enough time to gain feature parity, both GApps and Bing could be true competitors.