News for hackers. Stuff that matters.

Sintendo

I continue to wonder whether this can be legal at all. It's pretty clear they've been looking at the disassembled code, so it's not clean-room reverse-engineered.
I thought so too at first, but I'd expect non-x86 host systems running x86 guests to be vulnerable if that were the case. The advisory seems to indicate otherwise.

Anyway, I've done some digging and found an explanation here: https://insinuator.net/2015/02/the-dangers-of-x86-emulation-...

tl;dr: it falls back to emulation for very specific cases that cannot be handled by hardware-assisted virtualization

Why does Xen need x86 emulation code anyway?
Re:RedStar OS 3.0: Remote Arbitrary Command Injection on Sunday December 04, 2016 @05:11AM (#13099469)
Firefox on macOS. It feels like the page is trying to do its own smooth scrolling in Javascript, on top of the browser's existing smooth scrolling or something.
Re:RedStar OS 3.0: Remote Arbitrary Command Injection on Sunday December 04, 2016 @04:14AM (#13099361)
The scrolling on that page is atrocious.
Re:YouTab: Automatically get chords for music on Thursday August 21, 2014 @03:43AM (#8206271)
Do you guys happen to be using Intel graphics?
Re:Is Google crippling Firefox? on Monday April 07, 2014 @11:11AM (#7546907)
I can confirm this is the behavior I'm seeing on Firefox. However, it's important to note that YouTube seems to force https if you're logged in, meaning logged-in Firefox users ALWAYS get the Flash player. I've resolved this for now by installing the YouTube ALL HTML5 add-on ( https://addons.mozilla.org/en-US/firefox/addon/youtube-all-h... ).