In a world of LLMs, is it realistic to port coreboot (or similar) to unsupported platforms.
1,056 karma · joined May 10, 2013
It’s only recently I realised that a lot of these very clever vulnerabilities are often not actually exploitable, except in quite specific conditions.
Good ideas on the QEMU. I guess you’d have to patch the binary if it’s expecting particular hardware etc?
Not sure what you mean by “desktop shaped”?
Can you give a concrete example of UAF on heap? I’m learning a bit on how this is done, and eventually recognised the LLM is doing something called heap spray. But that seemed to rely on hoping some object you wrote just happened to get interpreted by some process. And that was the “no, wait, pointer f isn’t y” loops.
How do you know which pointer (as I say, especially if it’s in the heap)? And I know it can go wrong - but how do you do more than just crash the kernel?
In OOB writes in a stack variable it’s completely clear to me. For other situations I’d love to find real and clearly explained exploits of past UAF or OOB vulnerabilities.
I ask because I’ve been dabbling in rooting various closed devices at home. I’m finding AI fantastic at finding vulnerabilities statically (from firmware upgrade binaries), but when you then ask it to use it to get root or code execution it just goes in circles.
In the end it usually ends up there’s no exploit it can find, because it can’t actually influence the affected memory in a useful way. This is especially so if that memory is in the heap. On the stack it’s a lot more predictable (especially with OOB writes).
Firstly, the forum site I’m theorising here is not compromised.
Secondly, as I mentioned, in this situation I would limit the URLs it’s allowed to get.
You’d allow the top level of the forum index, and only then allow it to follow links within that site. “Thisissomedata” would be denied anyway.
All I meant was all of these complex limitations still don’t prevent exfiltration.
Stripping headers, not allowing other than GET requests. Only allows HTTPS etc, the list goes on.
My point was that even if you locked down an agent to only ever read a single forum, and only to be able to access other post URLs that are from that forum, and not allow any query parameters that aren’t necessary etc.
Even then you can be having the slightest public effect that can exfiltrate data - a read count on some old post. I know it’s wildly impractical, it’s more a thought experiment on how hard it it.
All it needs is public access to anything it can have the tiniest effect on, and it can exfiltrate data. Something as simple as a read count on some obscure forum post would be enough, albeit very slow.
And what next? The answer is it’s not true? What’s even the point?
Yes, it’s the real and ONLY reason I have these. When my flight is over I take them off and revert to regular shades.
That should be a crime?
The last straw was getting a blood pressure monitor (which they don’t even sell) in place of £400 smart glasses. They insisted I returned the monitor, then said I failed to return the glasses. Took months for them to refund me.
I don’t post them anywhere (except occasionally to friends or family in direct messages).
I fly club gliders and can’t really attach a camera easily. And in any case the PoV is a useful learning tool. I can check I was doing lookout properly, I can see the instruments clearly and so forth.
I have a second pair of normal glasses that I always swap to when I’m back on the ground.
Do you find it worth £20/year? I used Terminus free version.
But what are you (and millions of others) actually adding here?
Show HN: Linux server management over SSH – written in Rust and Tauri
2 hours
Show HN: The wanderer – cozy weekend game with no objective
14 days
Show HN: Feature-packed 6MB Rust+Tauri free bookmarking app
16 days
Show HN: HN-jobs aggregator – updated in real-time
27 days
Show HN: One no-subscriptions online search for all your agent needs
30 days
Show HN: 100% Free Indian Railways API
35 days
Show HN: Xkcd Search
45 days
Show HN: A calculator CLI to help your agents perform calculations accurately
55 days
Show HN: Hacker-News Jobs
57 days
Show HN: Hacker-News Buddies
58 days
Show HN: HTTPS://HN-Jobs.com
59 days
Show HN: JerrySniffs – MCP Server (and API’s) for web and social media search
75 days
Show HN: Give This Markdown to Your Coding Agent Before Publishing to NPM
3 months
Show HN: Nano-RAG – Agentic multi-hog retrieval without graph database
3 months
Show HN: Chat with UFO Files
3 months
Clearly it’s the fabrication of RAM/HBM chips. But if the margin is so high, why can’t other fabs like CPU fabs be used? I assume they’re not as CPU prices are going down. Or are they radically different and not easily reconfigured?