Slashdot Mirror

← Back to Domains

Domain: decsystem.org

Stories and comments across the archive that link to decsystem.org.

Comments · 10

  1. Re:Block Flash wherever possible by taviso · · Score: 1 · on Flash Vulnerabilities Affect Thousands of Sites

    Interesting that you consider flashblock a security tool (I use flashblock as well, but simply to suppress the onslaught of distracting ads).

    If there was a vulnerability discovered in flash player, flashblock would provide little protection, to demonstrate my point, install flashblock and click here (harmless testcase). Did flashblock prevent flash player from crashing, or taking down firefox?

    (to pre-empt replies, yes i do know about noscript)

  2. One pb you can avoid by this+great+guy · · Score: 1 · on Virtualization Decreases Security

    Virtualization is no doubt a complex problem to get right, but it's only one problem.

    And it's one problem you can avoid by not using virtualization.

    Theo's point is a very simple, obvious fact. Why is this necessary to even argue about this ? He is not saying virtualization is useless. He is not saying it has no practical uses in the real world. He is just saying it reduces your overall security by introducing new potential attack vectors.

    One concrete data point: a VM running under QEMU 0.9.0 can escape the virtualized environment by exploiting buffer overflows in the code emulating the virtual NIC. If you run under a VM you are vulnerable, else you are not. Remind me why you are arguing about this again ? See http://taviso.decsystem.org/virtsec.pdf for a bunch of other vulnerabilities recently discovered in VMware, Xen, QEMU, etc.

  3. Re:Theo is so full of himself he misses reality by Anonymous Coward · · Score: 0 · on Virtualization Decreases Security

    See http://taviso.decsystem.org/virtsec.pdf for several examples.

  4. a google employee has done a good analysis by cpm99352 · · Score: 3, Informative · on Virtualization Decreases Security

    As another person pointed out on the OpenBSD list, see http://taviso.decsystem.org/virtsec.pdf for Tavis Ormandy's analysis of various VM's -- attack methods were exploiting bugs in the x86 architecture as well as invalid I/O device communication.

  5. what does jfc stand for?? by Anonymous Coward · · Score: 0 · on Analyst Says Blu-ray DRM Safe For 10 Years

    it stands for jesus fucking christ
    http://taviso.decsystem.org/virtsec.pdf
    i even have to use google for you to find something posted by... a google employee.
    work for it!!!
    i think this is the last post i am allowed. have fun everyone.

  6. Re:OFR: Obligatory Futurama Reference by Anonymous Coward · · Score: 1, Informative · on Tempratech Self-Cooling Can

    mirror

  7. Re:Slashdotted! by taviso · · Score: 5, Informative · on The Next Level of X-Box Modding

    Mirror here.

    wget --page-requisites --convert-links 'http://www.sweclockers.com/html/artikel/art_03022 5_xbox_mod.php?page=15

  8. Re:Poor neo project by taviso · · Score: 2 · on Lindows CEO Funds XBox Hacking Contest

    works great, fonts look a little messed up though...

  9. Mirror by taviso · · Score: 4, Informative · on Linux Timeline By LWN and LJ

    Mirror, if anyones interested.

  10. Re:Needs signing from Microsoft? by taviso · · Score: 1 · on Xbox Runs Its First Legal Homebrew App

    sure about that?