News for hackers. Stuff that matters.

asherkin

Firefox is/was really lacking in WebRTC support for non-P2P use cases - bandwidth estimation support was sub-standard until recently, there is no support for simulcast (multiple video quality encodings) when using H.264, and no E2E encryption support (which is very new to the spec). There has been a lot of back and forth on the Firefox / Jitsi situation but it does seem that most of the time the ball has been sitting in Firefox's court.
The originating browser is responsible for encoding all the desired quality levels and sending them to the SFU to decide what to forward to the other participants - that is the difference between a SFU and a MCU, and why SFUs can scale. SVC-capable codecs are coming to WebRTC too, which makes this a lot more efficient for the browser to do.

Encryption keys are distributed out of band of the media, so it's the same as whatever the tradeoffs are for multi-party E2E-encrypted text chat there (I don't know what those are though!)

Re:Encoding data into dubstep drops on Friday April 13, 2018 @04:31PM (#16833664)
Pretty sure they're talking about Cinavia, as the PS3 was one of the most well-known implementors of it.
UK, more than 10 working days consecutively requires director approval according to the written policy, but I can't imagine it ever being denied or enforced (I have never had or heard of a holiday request being denied at all). We're not allowed to carry days over though, so people do not generally accrue large holiday allowances.
Re:Reverse Engineering One Line of JavaScript on Friday July 14, 2017 @07:28AM (#14768977)
By that definition, analyzing compiled native code would be "un-obfuscating".

IMO, deobfuscation is a subset of reverse engineering - which at a push I would define as "taking a program from the form it is distributed into a preferred form for modification/understanding".

Re:Reverse Engineering One Line of JavaScript on Friday July 14, 2017 @07:23AM (#14768961)
It is a shorthand method of casting to a boolean value - C didn't have a true bool type until "recently" (but did have the concept of truthiness, where true is `is not 0`), so many projects and libraries use `#define TRUE 1`, and #define FALSE 0` or some similar variant.

So rather than write `foo ? TRUE : FALSE` or being more explicit `(foo != 0) ? 1 : 0`, you can just do `!!foo`.

Re:Opera is Reborn on Wednesday May 10, 2017 @04:14AM (#14306652)
Opera is licensed as the embedded browser that powers most set-top boxes.
Re:NeverSSL on Wednesday January 11, 2017 @04:23AM (#13372759)
As the OP said, that is already in iOS - it is just that more and more captive portals are whitelisting the domains it hits to check for a captive portal.
Re:Chrome 55 to start highlighting Not Secure websites on Wednesday September 07, 2016 @08:05AM (#12442609)
> Scaling that up - if I'm not logged into Wikipedia, and simply searching and reading articles, why does that need to be served under HTTPS either?

Because a malicious MITM could modify the content you are reading (and thus affect your perception of a subject). A bit of misinformation here and there can go a long way.

Both require running on Windows Server, WSUS is "free", SCCM is "very expensive".
> Company claims No Man's Sky uses its patented equation without permission

is pretty damn different from

> No Man's Sky sued over procedural generation algorithm patent

Yes you are, it'll cost you £6 in processing fees to go to all 3 agencies.

http://www.experian.co.uk/consumer/statutory-report.html

https://www.equifax.co.uk/Products/credit/statutory-report.h...

http://www.callcredit.co.uk/consumer-solutions/your-credit-r...

You can alternatively use the free online services:

Noddle use data from Callcredit, and Clearscore use data from Equifax - I don't think there is a free service exposing Experian data.

Re:The Children's Illustrated Guide to Kubernetes on Friday June 17, 2016 @11:12AM (#11923088)
Looks like illustration 12 got replaced with a repeat of 10 at the end, the file is there and matches the text: https://deis.com/images/blog-images/kubernetes-illustrated-g...
That's already part of the EME standard, implemented in the browser (so as open source as the browser is).

https://w3c.github.io/encrypted-media/#clear-key

Re:Electron 1.0 is here on Wednesday May 11, 2016 @06:28AM (#11674051)
Not the OP, but in the same situation until I moved: Close-ish to an exchange (so no street cabinet on the line for fibre equipment), no cable coverage (so Virgin is out), out of range of wherever the hell Relish's tower is, and ancient wiring in a block of flats (so can't reach sane ADSL speeds).
getUserMedia was killed off for insecure origins quite a while ago in Chrome.
Re:AlphaGo Beats Lee Sedol in Final Game on Tuesday March 15, 2016 @11:29AM (#11290350)
He's getting $170,000, $150k for playing the 5 matches, and $20k for winning match 4.
Re:Mondo bank taking £1m crowdfunding investment on Tuesday February 16, 2016 @08:23AM (#11109599)
> The problem with freezing cards is that transfers are not direct: freezing the card on the banks end might work, but some ATMs or other systems might have a sufficient delay to allow (some) abuse while the card was 'frozen' by the user. The question will be who will pay for the delay.

This is part of why their cards are online-only, every* transaction has to be verified with them before it can complete at the reader - so transactions are slower, but there is no grace period after the freeze.

* as I understand it, certain merchants are white-listed on-card for offline transactions - namely TfL.

From hovering over the (?) next to Disabled: > Due to Conficker Sinkholes, the server got listed a few times on blacklists, so I decided to disable the HTTP check
Re:Llvmpipe: The Jitted OpenGL software renderer inside Mesa on Monday January 11, 2016 @12:22PM (#10881720)
The "LLVM" bit is that it is using the IR JIT compiler that is part of the LLVM suite, which makes it relatively easy to build a high-performance native runtime for a custom language.
Yes, this is explained in Apple's FAQ on the issue - they have servers that are distributing your app from the US, thus you are exporting crypto from the US.
Re:Postgres features and tips on Tuesday December 29, 2015 @06:41PM (#10809827)
This could really do with a definition of the several acronyms used.
Re:Walmart Pay on Thursday December 10, 2015 @02:50PM (#10712941)
Once you've worn the contacts away you can hardly call them contacts any more (and it's unsurprising they fail regularly). Cashiers will also say that even if they've never seen another card fail to read :P it's to make you feel better.
Re:How to stop a DDoS attack on Tuesday December 08, 2015 @04:58PM (#10699903)
You need an Enterprise plan for that unfortunately, it's not even included in Business.
Re:Telegram probably isn't as secure as ISIS thinks on Friday November 20, 2015 @05:20AM (#10600525)
They did, which ended in February (https://telegram.org/blog/cryptocontest-ends) - I've also seen mention of a round 3 with even more relaxed rules due for around now, but I can't find it anywhere now.
Re:Chrome kills the HTTP-HTTPS “mixed content” warning on Wednesday October 14, 2015 @11:25AM (#10387132)
From the (5 paragraph) article: "In the long term, Google eventually plans to reduce Chrome's security states to just two: secure (full HTTPS) and non-secure (everything else)."

And the actual proposal: https://www.chromium.org/Home/chromium-security/marking-http...

This looks really handy - thanks! A word of warning though: TfL aggressively protects the roundel trademark.
Re:Chrome is developing a Sidebar API on Tuesday July 07, 2015 @11:58AM (#9846223)
> Why does the developer console open on the bottom

Actually, the developer console has defaulted to the right side on new profiles for a while now.

Older »