Avatar

rotopenguin

rotopenguin@infosec.pub
Joined
0 posts • 568 comments

aka @rotopenguin@mastodon.social

Direct message

An AAAA cell has 200-350 mohms internal resistance. A 9v battery has 6 of them in series (many of them are literally that, others have their cells as a stack of plastic buckets). The nose ring is a short run of wire, it’s idunno a 0.2 ohm heater?

I think the septum is going to get pretty toasty.

https://data.energizer.com/pdfs/e96.pdf

permalink
report
reply

How do you know there isn’t a logic bug that spills server secrets through an uninitialized buffer? How do you know there isn’t an enterprise login token signing key that accidentally works for any account in-or-out of that enterprise (hard mode: logging costs more than your org makes all year)? How do you know that your processor doesn’t leak information across security contexts? How do you know that your NAS appliance doesn’t have a master login?

This was a really, really close one that was averted by two things. A total fucking nerd looked way too hard into a trivial performance problem, and saw something a bit hinky. And, just as importantly, the systemd devs had no idea that anything was going on, but somebody got an itchy feeling about the size of systemd’s dependencies and decided to clean it up. This completely blew up the attacker’s timetable. Jia Tan had to ship too fast, with code that wasn’t quite bulletproof (5.6.0 is what was detected, 5.6.1 would have gotten away with it).

permalink
report
reply

It’s kinda wild that GTK’s grandpappy is now the last thing to get updated to the current GTK.

permalink
report
reply

Has anybody mentioned yet that tar isn’t even a “compression format”?

permalink
report
reply

It’s an “.avi.exe”.

permalink
report
parent
reply
78 points
*

Patch notes: clause unnecessary. Refactored to cover the general case.

permalink
report
reply

But I might need 99 of every potion for the last boss!

permalink
report
reply

My favourite part is when it ends with “buy the steam deck on Amazon [affiliate link]”

Yeah, that’s the last place where I’ll buy it.

permalink
report
reply

I use Ubuntu, which is apparently the least popular distro around.

permalink
report
reply

It’s a shame that Valve couldn’t get Steam to issue them a new AppID, so they had to delete CSGO in order to put CS2 on the store. It was the only way.

permalink
report
reply