News for hackers. Stuff that matters.

richij

Re:SpaceX designed an orbital Vera Rubin. Radiation comes next on Tuesday September 01, 2026 @12:46PM (#49524500)
Uh, you do know SJVN worked for NASA, right?
FreeBSD thought it had scrubbed all GPL code, but a few kernel leftovers remained.
Re:TEE.fail: Breaking TEEs via DDR5 Memory Bus Interposition on Thursday October 30, 2025 @09:08AM (#45759631)
something-something I have a bridge to sell you something
Re:TEE.fail: Breaking TEEs via DDR5 Memory Bus Interposition on Wednesday October 29, 2025 @09:20AM (#45746484)
tl;dr: A rogue device plugged into a "trusted" motherboard makes it untrusted.

As the saying goes, "It rather involved being on the other side of this airtight hatchway."

Sigh.

/me laughs in legitimate-interest
Steve is in GDPR land, according to his profile page.
Not theft, AFAICS: Creative Commons licensed, with correct attribution given.
And Thunderbird is dead to me
Re:Spain is about to face the challenge of a "black start" on Tuesday April 29, 2025 @08:14AM (#43831545)
bless you for your correct use of the C-word.
Re:Treasury's OCC Says Hackers Had Access to 150k Emails on Thursday April 10, 2025 @09:20AM (#43643513)
In other words, the threat actors had access to the breached network during the 22-ish months before they were discovered.
Re:Collection of Dark Patterns and Unethical Design on Thursday July 18, 2024 @09:26AM (#40995369)
Fun website, but most of these really don't cross the line from "aggressive marketing" into "dark pattern." If the site reps are listening, why not let me browse the worst offenders first?
tl;dr: Send an email message with a carefully crafted file attachment. Triggers a parsing bug (presumably a buffer overflow). Attacker could cause several bad things, including adding a root user. Yikes.
Troll detected.
Re:Dropbox Sign (formerly HelloSign) data breach on Thursday May 02, 2024 @07:19AM (#40234862)
[dupe] https://news.ycombinator.com/item?id=40233746

(this item was first, but the other has more traction)

Re:Google to delete records from Incognito tracking on Tuesday April 02, 2024 @08:44AM (#39905090)
No, it does not.
Do you?

Because I'd guess the true figure would be a bit higher than 75%. Have a think about that.

AFAICS, it wasn't the journalist's fault. It was the Swiss PR spokesman. While the company concerned made a mild followup statement implying the journalist misunderstood because of a translation error, both parties spoke Swiss German as a native language.

tl;dr: It was Fortinet's fault and they tried to cover it up: https://securityboulevard.com/2024/02/toothbrush-ddos-botnet...

Re:Google apparently backs off on WEI on Friday November 03, 2023 @10:23AM (#38129213)
It absolutely does not. The ability to craft a realistic phishing login page is unaffected by Google's proposed MI API.
Re:Auto Execs Are Coming Clean: EVs Aren't Working on Friday October 27, 2023 @05:04AM (#38036207)
Accelerating the switch to NACS on the car side won't work. The unspoken part of "automakers standardize on NACS" is the update to the Superchargers themselves. The signaling is basically CCS, not the legacy Tesla protocol.

Older »