News for hackers. Stuff that matters.

derekerdmann

That approach to disclosure is about discovering vulnerabilities. Talking about something with a published CVE isn't really comparable.
Re:US Man Given Prison Sentence for Bot-Farming Music Streams on Thursday October 08, 2026 @04:00PM (#50011268)
> What crime did he actually commit?

Fraud. https://xkcd.com/1494/

No. Bought in person at a Walmart in like, 2005
I once had a cheap Timex watch die from water ingress after running a track workout during a torrential downpour. At the time I joked that it only failed because we ran farther than the 100m rating
Re:ICAO issued new power bank restriction on flight on Saturday March 28, 2026 @01:51PM (#47556825)
Not really, even Anker recalled a huge number of power banks last year: https://www.cpsc.gov/Recalls/2025/Anker-Power-Banks-Recalled...
If I remember correctly it's up to the client program to set up the session, not something to do with the vendor's implementation. It's conceptually similar to how an HTTPS client performs a TLS handshake after opening a socket before it can work with plain HTTP content.
Re:Dumping Memory to Bypass BitLocker on Windows 11 on Monday December 30, 2024 @04:54PM (#42553971)
Correct, unless you're using a self-encrypting drive the FVEK sits in RAM once it's been released by the TPM during boot. The TPM is only a root of trust; for fast crypto operations without keeping the key in kernel memory you would need something like Intel SGX or ARM TrustZone.
Re:Music and Geometry: Intervals and Scales on Friday December 20, 2024 @12:31PM (#42473012)
Take a look at Fretboard Theory by Desi Serna - it spends a lot of time on how different scales are constructed and relating different patterns and chord forms back to the underlying concepts.
Re:Apple Hearing Study shares preliminary insights on tinnitus on Monday September 09, 2024 @03:37PM (#41492595)
It’s self-oscillating
Re:Never ask a candidate to rate themselves out of 10 on Monday July 08, 2024 @02:40PM (#40908087)
When someone asks you if you're a god, you say, "yes!"
Re:Static Analysis Tools for C on Thursday October 26, 2023 @09:40AM (#38025371)
Static analyzers are NOT formal methods. Reporting no issues just means your tool didn’t find anything, not that your program is correct.
> Is rackmount equipment cheaper than regular consumer PC hardware?

Never

Re:Wi-Fi packet capturing on M1 Macs is broken on Thursday April 29, 2021 @06:17PM (#26987508)
> 1. Packet captures don’t use the correct channel

I've also seen this on a 2020 Intel MacBook Air. I assumed it was a Big Sur issue but had never tried it on Catalina.

Sniffing from the command line did pick up the correct channel: https://unix.stackexchange.com/a/49317/36875

Re:The eleven nations of the United States and their cultures on Friday December 06, 2019 @09:53AM (#21722222)
Greater Appalachia definitely extends through PA in a T shape across the center of the state and the northern border (sometimes called Pennsyltucky) and covers at least the Southern Tier in New York.
Re:Ways to Get Better at C++ on Friday June 23, 2017 @12:52PM (#14620621)
Effective Modern C++ by Scott Meyers
Re:A Cosmic Burst Repeats, Deepening a Mystery on Tuesday April 18, 2017 @07:26PM (#14144006)
"the FRBs were as blinding as flash grenades in a dark forest"

Just that much should be terrifying for anyone who's read The Three-Body Problem and its sequels.

Re:Users Have Been Betrayed in the Final TPP Deal on Monday October 05, 2015 @04:08PM (#10334515)
I'm not convinced this analysis is reading the draft fairly:

... if you need to circumvent a DRM for personal use, you are now liable for criminal penalties. Traditionally, for many jurisdictions, circumventing DRM is typically reserved for civil penalties. Criminal penalties implies that the government would foot the bill for enforcement. In civil cases, it is typically rights holders that go after individuals."

Except that here's the actual text:

> Each [7] Party [US/SG/MX/NZ/PE/JP/BN/AU/CL/MY propose: shall] [CA propose: may] provide for criminal procedures and penalties to be applied where any person is found to have engaged willfully and for purposes of commercial advantage or financial gain in any of the above activities.

That doesn't sound like "if you need to circumvent a DRM for personal use, you are now liable for criminal penalties" to me.

Re:The FBI Can Bypass Encryption [pdf] on Friday October 31, 2014 @03:07AM (#8537643)
That is not what the linked patent describes. In that patent, the base key in the hierarchy (the one created by the administrator, NOT the storage root of trust or SRK) is created outside the TPM and stored elsewhere, then imported and used. If the TPM is cleared or reset, then loading the key will fail and the base key will need to be imported again.

Creating key hierarchies under the SRK that can be duplicated or moved is actually very clearly specified in the TPM 2.0 spec, and is at least partially meant for exactly this sort of recovery process. The seed that's used to derive the SRK itself will still never leave the TPM, so any keys that are in a separate hierarchy under the SRK (instead of the imported base key) are still secure.

https://www.trustedcomputinggroup.org/resources/tpm_20_libra...

Re:Gradually sunsetting SHA-1 on Saturday September 06, 2014 @03:14PM (#8279191)
This is something Linus addressed quite a while ago: http://lwn.net/Articles/132513/
It also makes for an interesting redistribution of electoral votes.
Re:Swift impressions on Sunday June 08, 2014 @05:57PM (#7866050)
C# also includes compiler checks to make sure you're explicitly overriding methods correctly: http://msdn.microsoft.com/en-us/library/ebca9ah3.aspx
Re:Git 2.0 is here on Friday June 06, 2014 @10:25AM (#7858033)
Just because semantic versioning allows breaking changes doesn't mean Git SHOULD break compatibility.
Re:OS X Yosemite on Monday June 02, 2014 @02:20PM (#7834927)
What? Then what are the new Universal apps? http://blogs.windows.com/windows/b/buildingapps/archive/2014...
Re:An Open Source Author's Lament on Wednesday March 20, 2013 @09:35AM (#5407125)
Great idea. Stack Overflow uses the same concept when you're asking a new question on the site, and I believe it helps the quality of answers tremendously. Making contributing.md visible when creating issues would be incredibly helpful.
Re:Fix the DMCA on Wednesday March 06, 2013 @04:51PM (#5334250)
It looks like there's a misplaced space in "thea nti-circumvention provision of the DMCA", part of the text of the email you're sending on visitors' behalfs.
Re:The Coolest Experience I Had as an Apple Store Employee on Saturday March 02, 2013 @11:13AM (#5309890)
Or just "Bitcoin is at a new high"

Older »