Bought 320gb of patriot ram for work recently..80 sticks, none bad. Maybe they checked them since bulk..but they have good heat spreaders too. Great ram for a similar price
So all you NASCAR fans coming out of the wood work (and racing fans in general) I have a questions. Are there any motor racing events without restrictions to (at least) the engines?
As a huge nerd...I'd love to see a motor sport that is more about the ability to manufacture some crazy ass vehicle than how good the driver is.
Eight instruction can, in fact, be executed simultaneously. Run a parallel CompletableFuture task or something, and this becomes extremely obvious. Each parallel "run" use a ClassTransformer to see the ASM instructions being run with a locking (NOT a re-entrant lock) counter, and a \n every 8 locks/unlocks.
You will see 8 ASM instructions at a time.
That being said...physically they aren't cores, and shouldn't be referred to as such. They should have referred to them with their own term "module." If they didn't...they should be sued.
Javascript doesn't attack a browser in the classical sense. The way you cause damage with JS is poisoning the browser's cache. So you add something sketchy to the cached version of a given webpage.
The classical route of this attack is a proxy that injects code to cache sketchy objects on top of the cache of any page visited. The cache expiration is set to something ridiculously high, so it's not removed without clearing the cache.
So for example injecting an ad that wasn't there before into youtube, slashdot, etc. Every time the user loads the page they load your ad, and get you an impression.
So yes this is strictly limited to browsers, and even within the browser is quite limited.
I asked if you meant Java, because there have been attacks in Java that can escape the browser sandbox and modify system files. Potentially java could be used to infect a server via a means besides a browser.
Flash is not on servers, no one checks email on servers, and no one views word/excel documents on a server. Word/excel files may be "viewed" on a server, but that would be for processing. In which case they would be accessed using something like the mono interop API (C#) or Apache tika/POI. So embedded bytecode wouldn't be executed.
I suppose these things could happen on a windows servers, but if you're admin is browsing and checking his email on a server...ffs
All of those services you configure, run as root, then they are running as services. Its not like you start sshd or cron up everyday. Hell, starting things up often is cron's purpose.
Also ping can be replaced with a script...tcp doesnt need root.
"overpaid" exec here...chief information officer. If I got to work 60 hours it would be a blessing. Most executives work literally twice the hours, and cause 10x more to happen per given hour than any employee there. Then we go home and file dailies/weeklies and get 4hrs of sleep.
Outside of leviathan-esque companies this is mostly true
This is a lot more of an important question ask than you think. A friend of mine runs a DDoS protection service, and they recently got hit by a 60 gigabit attack (Syn-flood, unamplified obviously) that was from a botnet of surveillance cameras. Shit be whack yo.
As an ISS professional I'm looking forward to the advent of chip-and-pin in the US. All the extra mandatory PCI-compliance auditing, and pen-testing contracts are going to be great.
I'm so excited for all the data breaches after attackers are able to leverage the card as a means to compromise the point of service.
Also the nostalgia of seeing all these super-micro pieces of malware combined with "interesting" hardware hacks is probably going to make me tear up a little bit.
Odd, all of the PRs for my software are functionality patches...as are my changes. Almost as if it's not an issue of "haters gonna hate," and that 40 vulnerabilities in that period of time is insanely unacceptable.
Then again it's corporate IT, and a ridiculous amount of that "community" are still running highly vulnerable IIS servers, so par for the course I suppose.
Ask hackers and other cybersecurity experts, and they'll tell you that the entire idea of a âoebackdoorâ is a bureaucratic fantasy with little basis in technical reality.
The entire idea of a "backdoor" is fantasy? What the actual fuck are you smoking man.
So...what do you call a command interpreter listening on the port of an unsuspecting user's machine exactly?
How about a modification of hosted files to allow an attacker to bypass authentication on a page in some highly unlikely/impossible set of conditions he/she can emulate?
Bought 320gb of patriot ram for work recently..80 sticks, none bad. Maybe they checked them since bulk..but they have good heat spreaders too. Great ram for a similar price
Dont buy wireless audio stuff or you'll be sad. My PX22s could be sturdier...but performance wise they are awesome
At my old retail job A/A extenders usually got returned because they thought it was a regular usb cable
Kids arent so big on perspective
The key has to be derived out.
So all you NASCAR fans coming out of the wood work (and racing fans in general) I have a questions. Are there any motor racing events without restrictions to (at least) the engines?
As a huge nerd...I'd love to see a motor sport that is more about the ability to manufacture some crazy ass vehicle than how good the driver is.
Eight instruction can, in fact, be executed simultaneously. Run a parallel CompletableFuture task or something, and this becomes extremely obvious. Each parallel "run" use a ClassTransformer to see the ASM instructions being run with a locking (NOT a re-entrant lock) counter, and a \n every 8 locks/unlocks.
You will see 8 ASM instructions at a time.
That being said...physically they aren't cores, and shouldn't be referred to as such. They should have referred to them with their own term "module." If they didn't...they should be sued.
Javascript doesn't attack a browser in the classical sense. The way you cause damage with JS is poisoning the browser's cache. So you add something sketchy to the cached version of a given webpage.
The classical route of this attack is a proxy that injects code to cache sketchy objects on top of the cache of any page visited. The cache expiration is set to something ridiculously high, so it's not removed without clearing the cache.
So for example injecting an ad that wasn't there before into youtube, slashdot, etc. Every time the user loads the page they load your ad, and get you an impression.
So yes this is strictly limited to browsers, and even within the browser is quite limited.
I asked if you meant Java, because there have been attacks in Java that can escape the browser sandbox and modify system files. Potentially java could be used to infect a server via a means besides a browser.
Flash is not on servers, no one checks email on servers, and no one views word/excel documents on a server. Word/excel files may be "viewed" on a server, but that would be for processing. In which case they would be accessed using something like the mono interop API (C#) or Apache tika/POI. So embedded bytecode wouldn't be executed.
I suppose these things could happen on a windows servers, but if you're admin is browsing and checking his email on a server...ffs
All of those services you configure, run as root, then they are running as services. Its not like you start sshd or cron up everyday. Hell, starting things up often is cron's purpose.
Also ping can be replaced with a script...tcp doesnt need root.
None of these are things you can even do on a nix server. Also...js? You mean java?
Cache poisoning itself doesnt infect you.
I can make bugs that a team wouldnt catch from looking at code alone...c++ templating is incredibly powerful
"overpaid" exec here...chief information officer. If I got to work 60 hours it would be a blessing. Most executives work literally twice the hours, and cause 10x more to happen per given hour than any employee there. Then we go home and file dailies/weeklies and get 4hrs of sleep.
Outside of leviathan-esque companies this is mostly true
This is a lot more of an important question ask than you think. A friend of mine runs a DDoS protection service, and they recently got hit by a 60 gigabit attack (Syn-flood, unamplified obviously) that was from a botnet of surveillance cameras. Shit be whack yo.
Are you insane? From a business standpoint they don't give a shit about your privacy. If anything it should have already been blocked.
Second
As an ISS professional I'm looking forward to the advent of chip-and-pin in the US. All the extra mandatory PCI-compliance auditing, and pen-testing contracts are going to be great.
I'm so excited for all the data breaches after attackers are able to leverage the card as a means to compromise the point of service.
Also the nostalgia of seeing all these super-micro pieces of malware combined with "interesting" hardware hacks is probably going to make me tear up a little bit.
I think of it more as "death by a few billion cuts" followed by the government using a phoenix down on them.
This is actually one of the best posts I've ever read on slashdot. Well done sir.
Odd, all of the PRs for my software are functionality patches...as are my changes. Almost as if it's not an issue of "haters gonna hate," and that 40 vulnerabilities in that period of time is insanely unacceptable.
Then again it's corporate IT, and a ridiculous amount of that "community" are still running highly vulnerable IIS servers, so par for the course I suppose.
Ask hackers and other cybersecurity experts, and they'll tell you that the entire idea of a âoebackdoorâ is a bureaucratic fantasy with little basis in technical reality.
The entire idea of a "backdoor" is fantasy? What the actual fuck are you smoking man.
So...what do you call a command interpreter listening on the port of an unsuspecting user's machine exactly?
How about a modification of hosted files to allow an attacker to bypass authentication on a page in some highly unlikely/impossible set of conditions he/she can emulate?
Whoops this was me.
I don't post much anymore, so I don't have mod points, or I'd give them to you.
Hahahahhahaha, I'm going to go out on a limb and say you don't work in IT cdwi?
Sarcasm was super effective
Obvious troll is obvious...I hope.