HNHacker News
TopNewBestAskShowJobs

dg246

25 karma · joined November 27, 2017

submissionscomments
dg246··on New York employers must include pay rates in job ads under new state law
Take a look at Netflix, here's one at random but I believe they're all like this:

https://jobs.netflix.com/jobs/294103648

"The overall market range for roles in this area of Netflix is typically $180,000 - $900,000."

dg246··on MIT researchers uncover ‘unpatchable’ flaw in Apple M1 chips
Really amazing work here!

A colleague pointed out that FPAC[1] in ARMV8.6-A likely prevents this attack, is that right?

I haven't fully digested the paper, but the gadgets seem to rely on AUT, and "Implementations with FPAC generate an exception on an AUT* instruction where the PAC is incorrect"

[1] https://community.arm.com/arm-community-blogs/b/architecture...

dg246··on Telnet BBS Guide
Not exactly what you're asking for, but there's this for Linux - https://www.aon.com/cyber-solutions/aon_cyber_labs/introduci...
dg246··on Three Ways to Hack a Printed Circuit Board
Bunnie Huang gave an excellent talk on this subject at BlueHat IL 2019 that goes very deep, including showing technical details of how attacks like this can be pulled off. Well worth the 45 minutes - https://www.bunniestudios.com/blog/?p=5519
dg246··on RIP ROP: CET Internals in Windows 20H1
ROP does not bypass ASLR or canaries. It does bypass DEP/NX in the sense that it executes code that already exists in executable memory.
dg246··on In-Memory-Only ELF Execution Without Tmpfs
Similar - https://blog.gdssecurity.com/labs/2017/9/5/linux-based-inter...
dg246··on Office 365 is now on Mac App Store
Neither. The existing Office desktop apps are already sandboxed.
dg246··on The Bear Case for Crypto, Part II: The Great Bank Run
Diana can't just "decide to take her profits" at whatever price she'd like. If she wants $1m but Charlie isn't interested, she will have to lower her price until he is. This is how exchanges work, cryptocurrency or otherwise. If a stock falls to zero, do you think that Etrade dips into its own assets to provide an "off ramp" to its customers that weren't able to sell in time?

You're essentially saying that the exchange should artificially prop up the price of bitcoin with its own money during a panic.