jeffmcjunkin

You're not far from agreeing with each other: (74 megabytes per second) / (1 gigabit per second) = 59.2 percent

"Rolling snake eyes" means rolling two ones on six-sided dice. In many games that's a bad throw, as it only adds to two out of a possible twelve.

I was recently affected by my an aftermarket NVMe SSD: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1678184

tl;dr -- add `nvme_core.default_ps_max_latency_us=0` to /etc/default/grub in the GRUB_CMDLINE_LINUX_DEFAULT parameter, run `update-grub`, reboot. Verify with `sudo nvme get-feature -f 0x0c -H /dev/nvme0`.

Totally agreed that this shouldn't happen. I hope that's your issue.

Many laptops require higher voltage. My XPS 13 does require 20V, for example.

Same. I was inspired by https://christian.gen.co/ring, and in fact worked with the same designer. I got to iterate over four or five designs and ended with a very nice design, and choose the stones separately.

(I didn't go with cubic zirconia, but that's a whole 'nother topic)

I agree that $25 / month is more than the average bot is generating. That said, there's a lot of value to many people's computers if properly exploited: https://krebsonsecurity.com/2012/10/the-scrap-value-of-a-hac...

It could use something like bdfproxy[1] to intercept HTTP-downloaded EXE files, then add some persistent malware in _addition_ to whatever the EXE was doing. This has been done before, over Tor[2].

The malware doesn't have to add a new root certificate, either, though that's completely possible. The Zeus trojan [3] does "man-in-the-browser" to intercept banking information, for example.

[1] https://github.com/secretsquirrel/BDFProxy

[2] https://www.pcworld.com/article/2839152/tor-project-flags-ru...

[3] https://en.wikipedia.org/wiki/Zeus_(malware)

No problem! Thanks for writing that blog post, there's lots of great stuff there :)

I prefer getting a really powerful workstation and doing virtualization from there. Example: http://natex.us/enthoo-128kit

(No affiliation with Natex, but I've bought that kit and I enjoy the overkill of 16 cores and 128gb of RAM)

I'll admit I'm a little biased here (I made the preso), but here are a few more resources for those interested in building a home lab:

"Building Your Own Kickass Home Lab" -- bit.ly/kickasslab (or https://docs.google.com/presentation/d/1V-mWiyaJ3I6HhXRxH1M5...)

Recorded webcast version -- https://youtu.be/uzqwoufhwyk

I talk about hardware, software (choose your own host OS, consider VMware Workstation), operating systems, vulnerable builds, example labs, and some ideas of what to test.

I'd be surprised if it'd be that much additional work, if the local SSD options are NVMe -- which is also PCI-e like GPU's.

What about something easier? Instead of a puffer, just take a big bin of the same part and loop it through the hopper for a few hours. Presto, as much accurately-labeled training data as you want (though limited to a single part at a time).

Well, except for Firefly :(

It's also a great way to check if user input's being parsed server-side! :)

I think arca_vorago is just commenting on the difficulty of seeing the code to make his or her own modifications to the TV because of GPLv2, and saying that the barrier to entry is considerably higher, such that groups like the CIA can modify the software for nefarious purposes.

Absolutely.

That said, the Linux kernel is a helluva lot more attack surface than the relatively few hypercalls provided by most Type 1 hypervisors.

Amusingly I just ran across this[0] link an hour or so before this HN post went live.

I haven't done it yet, but it looks pretty reasonable. I prefer not to mix LUKS with random many-year-old GitHub repos.

[0] http://askubuntu.com/a/599826

For item 3h under recovery, consider:

  chattr +i /var/opt/gitlab/postgresql/data

Yes, it doesn't completely stop foot-guns, but it means you have to shoot twice [0].

[0]:

  chattr -i /whatever
  rm /whatever

I'm a little dubious they can fit the Nano smarts inside the USB-C connector, like they did for USB-A. It's just so much smaller, and they didn't have a lot to work with before.

FWIW, with latest rustc:

    $ rustc --print target-list | cut -d- -f1 | sort | uniq | wc -l
    20

That same T420 does support[0] 16 GB of RAM[1] in practice, for the record.

[0] https://forums.lenovo.com/t5/ThinkPad-T400-T500-and-newer-T/...

[1] http://pcpartpicker.com/products/memory/#t=9&Z=16384002&s=30...

And to be clear, this is an issue that resurfaced in August or so of 2016, and is patched in supported OpenSSH daemons[0][1].

[0] https://access.redhat.com/security/cve/cve-2016-6210

[1] https://www.ubuntu.com/usn/usn-3061-1/

I can't help but reference https://xkcd.com/795/

They have a number of blog posts that just launched on Medium: https://medium.com/waymo

"Windows 10's protections are an inconvenient subset of EMET's"

1. tptacek answered this already.

2. https://news.ycombinator.com/leaders (read #1)

This is prior versions of Chrome taking up disk space, not memory. That's a completely separate issue.

Whoa. A core BitCoin dev (maaku7) just suggested blacklisting those transactions in miners[0]. More to come, I'm sure.

[0] https://www.reddit.com/r/Bitcoin/comments/4vupa6/p2shinfo_sh...

Yes, that's a scary precedent.

exiftool says it's PowerPoint, surprisingly:

  $ exiftool Build+Book+Backblaze+60+Drive.pdf  | tail -n5 | head -n3
  Title                           : 7400-0283 Rev A OMS Assy Backblaze 60 Drive
  Producer                        : Mac OS X 10.11.3 Quartz PDFContext
  Creator                         : PowerPoint

Agreed! Burp Suite also has the ability to copy a request as a cURL command, which can definitely help with reversing mobile device API's as well.