kuroguro

he probably means the nitter part, not the literal domain. never occurred to me before tho.

Likely referencing https://www.crowdfense.com/exploit-acquisition-program/

Zerodium used to offer up to 300k in 2021 https://www.securityweek.com/sites/default/files/images/Zero...

These brokers usually don't pay the bulk sum - they sell access to nation actors and you get payed out over time as long as the bug is not patched to discourage reselling and burning it. I doubt anyone would confirm if they got the full payment or not for something similar.

Clearly we need blockchain to solve this, not AI! /s

Eh, I think part of it is just making a more clickbaity title.

Maybe he's confusing it with the other post? https://subseacables.blogspot.com/2024/10/facebooks-semi-sec...

Huh, good to know. I guess the only other downside is actually making the compiler do the bswap depending on the language. Eg C has some weird compiler specific builtin keywords vs zig has a nice packed struct that does it for you.

I know that's the standard but for all private projects I always write little endian so I can sleep soundly at night knowing I've saved precious picoseconds not flipping to cpu order.

+1 there are many pain points, probably for historic reasons. *nix almost always comes with the source, so binary only debugging is never a priority.

> your hacker experience level is: Computer Illiterate

Well, apparently I can't use the computer ^^;

I think it's the name of Vietnam's currency.

Technically. I'm saying there's a huge difference between what a layman might read "large org conspires to spy" and a possible dull reality of "some engineer neglects to remove convenience feature".

Basically there's a master key that allows reading blocks that are supposed to be unreadable.

> put in there on purpose by the manufacturer

Hard to prove "on purpose" either way, my guess it was for debugging.

That's my understanding as well. Voltages are relative, you are free to choose a "ground" and work with negatives or not if you want.

We'll soon need reinforced, precision machined, well oiled cubes for robot tournaments ^^;

For usermode fuzzing it's pretty nice and easy to get running, but for more advanced cases I ended up using the underlying unicorn-afl directly. IIRC it wasn't loading some ELF correctly (this was some years ago).

Having owned a few old motorcycles, the stock bulbs are terrible, you can barely see anything at night. LED aftermarket parts have been decent in my exp. That being said some cars are too bright but surely you could dim them a bit.

Clearly removing all plants gets rid of all weeds as well. I see no problems here.

The funny thing is IDA added an x64 decompiler for the free version right after the post. The piracy could have been avoided if it wasn't for the timing.

I think vagueness is kindof ok in math/physics questions - if you think about it there's usually and interpretation that makes more sense, but I doubt most of them are made that way on purpose.

Where I really hate to see it is humanities e.g. psychology tests/surveys - if after reading a question I immediately think of 3 different interpretations I just think it's a bad test. And if I spend any more time thinking about it I get almost nowhere.

I feel the urge to post an xkcd here. https://xkcd.com/378/

Came to write the same thing. Great post otherwise!

Yeah, like we should put them in a public digital ledger of some sort... oh wait.

> paste code from source files of projects they worked on for different companies

I wonder what would happen if legal action started between two companies and it turned out a coder pasted code from personal projects that predates both.

Pi Hole just blocks on DNS level, I believe.

I sometimes get blocked but refreshing the ads and quickfixes lists on ublock solves it every time

Most bots operate in the gray area of just getting the view count up and not messing with the ads. They can operate publicly and not have law enforcement raid their offices.

Yt definitely makes an effort to prevent that. You can read up on how botguard's virtual machine works in some older writeups.

Pretty sure it is a legal requirement in a lot of places (EU, Australia, NZ, Brazil, India).

The only other place I'd turn off ABS is driving offroad, tho I hear that has improved a lot over the years as well.

I think the MCSAMPLE zip contains the full thing as well

got to 9 with two finger left clicks

mouse middle button seems to work in ff