Should you invent a new UX?
https://blog.asmartbear.com/new-ux.html [blog.asmartbear.com]
2017-08-01 02:19
tags:
development
ux
Your customers don’t want to figure out some newfangled thing just to navigate a dialog box. In fact, your customers don’t want to think about you at all. They have their actual job to do. They’d like to be able to do it predictably and safely.
Standards state a contract or implication
https://marc.info/?l=openbsd-tech&m=151233832624797&w=2 [marc.info]
2017-12-04 22:05
tags:
c
development
openbsd
programming
standard
unix
In reference to the inquiry, gettimeofday(2) does not conform to POSIX.1-2008?
Standards state a contract or implication: *if* you, the developer follow _these_ rules, *then* the standardized item will follow _these_other_ rules (if compliant). If you violate the implication, then the standard no longer applies and you have lost the guarantees of the standard.
Nice summary of the standards situation. If you color inside the lines, you get a pretty picture. If you don’t, you don’t.
A Remote iOS Bug
https://objective-see.com/blog/blog_0x34.html [objective-see.com]
2018-07-11 20:43
tags:
investigation
iphone
text
She claimed that any time she typed the word Taiwan or worse, received a message with a Taiwanese flag (🇹🇼) it would crash the application on her (fully patched) iOS device.
source: L
Supo (Finnish intelligence) annual teport
http://www.supo.fi/instancedata/prime_product_julkaisu/intermin/embeds/supowwwstructure/72829_SUPO_2016_ENG.pdf?304cc2d77276d488 [www.supo.fi]
2017-04-01 03:16
tags:
networking
opsec
paper
pdf
policy
security
update
Not sure how to classify or summarize. Interesting reading.
source: grugq
Disney’s multiplane camera, an innovation in illusion
http://kottke.org/17/01/disneys-multiplane-camera-an-innovation-in-illusion [kottke.org]
2017-01-07 20:17
tags:
graphics
movie
retro
tech
video
In a short film shot in 1957, Walt Disney described the multiplane camera, one of the many inventions and innovations his company had developed in order to produce more realistic and affecting animations.
source: K
Exploiting PSoC4 for fun and profit
http://dmitry.gr/index.php?r=05.Projects&proj=23.%20PSoC4 [dmitry.gr]
2017-03-05 20:11
tags:
cpu
exploit
hardware
security
systems
tech
This article explains how I figured out how Cypress’s jury-rigged “supervisor” mode in the PSoC4 family works, dumped the secret unreadable SROM, exploited it, and found a way to unlock extra flash in the PSoC4 as well as how you can develop scary rootkits for touchpads and touchscreens that use Cypress chips.
source: grugq
OpenBSD syspatches for one release in the future.
https://marc.info/?l=openbsd-tech&m=150793229700628 [marc.info]
2017-10-15 20:46
tags:
openbsd
update
Errata patches will continue to be generated for 2 releases.
Undefined Behavior Is Really Undefined
https://cryptoservices.github.io/fde/2018/11/30/undefined-behavior.html [cryptoservices.github.io]
2018-12-03 17:09
tags:
c
compiler
cpu
programming
standard
This is in a nutshell what UB means: the compiler can assume that UB does not happen, and produce code under that assumption. In the code producing routines used by the compiler, each instruction has dependencies that restrict the opcode scheduling algorithm: an instruction cannot be issued before the instructions that it depends upon, or after the instructions that depend on it. In the example above, UB removes the dependencies between the writes to d[], and the “subsequent” reads from s[]. In a similar way, UB can allow the compiler to simply remove code that cannot happen without going through an UB condition.
source: L
Lower VM_MAX_USER_ADDRESS to finalize work-around for Ryzen bug
http://marc.info/?l=dragonfly-commits&m=150234443814532&w=2 [marc.info]
2017-08-12 18:07
tags:
bugfix
cpu
dragonfly
hardware
systems
A good summary of the bug affecting Ryzen CPUs.
Memory Conscious Programming in Ruby
https://gettalong.org/blog/2017/memory-conscious-programming-in-ruby.html [gettalong.org]
2017-11-03 18:47
tags:
intro-programming
malloc
ruby
When programming in Ruby many people think that egregious memory usage is the norm and unavoidable. However, there are ways and strategies to keep memory usage down and in this post I will show you some of them.
source: L
OpenBSD splash screen on Chrome Pixel
https://twitter.com/jcs/status/816141932179161088 [twitter.com]
2017-01-03 05:51
tags:
hardware
openbsd
tweet
Finally took the time to get modified vboot bitmaps & layout working on the Pixel, now shows this instead of “developer mode warning”
All hail the puffy.
The Internet of Unprofitable Things
http://strugglers.net/~andy/blog/2018/12/24/the-internet-of-unprofitable-things/ [strugglers.net]
2018-12-24 15:15
tags:
business
ioshit
networking
Uncle Andrew wants to tell you a festive story. The NTPmare shortly after Christmas.
source: L
Announcing NetBSD 9.0
https://www.netbsd.org/releases/formal-9/NetBSD-9.0.html [www.netbsd.org]
2020-02-15 23:52
tags:
netbsd
release
This release brings significant improvements in terms of hardware support, quality assurance, security, along with new features and hundreds of bug fixes.
source: Dfly
Digital TV’s Tiny Achilles Heel
http://tedium.co/2017/07/03/portable-digital-television-problems/ [tedium.co]
2017-07-04 07:15
tags:
retro
tech
tv
When it comes to technology, I have a lot of love for edge cases—situations where the march of innovation actually makes things a little bit worse.
Frag Grenade! A Remote Code Execution Vulnerability in the Steam Client
https://www.contextis.com/blog/frag-grenade-a-remote-code-execution-vulnerability-in-the-steam-client [www.contextis.com]
2018-06-01 23:23
tags:
exploit
gaming
malloc
networking
security
This blog post explains the story behind a bug which had existed in the Steam client for at least the last ten years, and until last July would have resulted in remote code execution (RCE) in all 15 million active clients.
source: HN
Planned Obsolescence: Innovation Versus Preservation
https://tedium.co/2019/09/03/planned-obsolescence-technology-problem/ [tedium.co]
2019-09-05 12:38
tags:
energy
hardware
retro
We keep making old stuff significantly less useful in the modern day, sometimes by force. We cite problems things such as security, maintenance, and a devotion to constant evolution as reasons for allowing this to happen. But the net effect is that we are making it impossible to continue using otherwise useful things after even a medium amount of time. I’m not even exclusively talking about things that are decades old. Sometimes, just a few years does the trick. Today’s Tedium ponders planned obsolescence and how it theatens preservation.
A sign of people's fading belief in RSS syndication
https://utcc.utoronto.ca/~cks/space/blog/web/RSSFadingBelief [utcc.utoronto.ca]
2019-04-04 09:22
tags:
ux
web
In other words, we’ve reached a point where people’s belief in RSS has faded sufficiently that it makes perfect sense to them that a technical blog might not even have an RSS feed. They know what RSS is and they want it, but they don’t believe it’s automatically going to be there and they sort of assume it’s not going to be. Syndication feeds have changed from a routine thing everyone had to a specia
The New Writs of Assistance
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3075587 [papers.ssrn.com]
2017-12-01 22:58
tags:
history
ideas
ioshit
life
networking
paper
pdf
policy
social
web
One possible solution to this problem is for network intermediaries to refuse government requests for aid, and attempt to sustain those refusals in court. Although this possibility has received an enormous amount of attention, there is substantial cause for skepticism about how well it can work. Congress has given the government wide authority to demand information and assistance through tools like subpoenas, the Stored Communications Act, and Title III. Even when the government does not have specific statutory authorization, courts have interpreted the All Writs Act to authorize a great deal of open-ended aid, consistent with the well-settled Anglo-American history of third-party assistance in law enforcement. It is also far from unheard-of for the Executive to read restrictions on its surveillance authority narrowly, and its own inherent powers broadly, to engage in surveillance that is quasi- or extra-legal.
This is a very good read, covering several hundred years of common law history in general, plus a hundred years of wiretapping history, plus some current events.
Binutils Changeout
https://www.dragonflydigest.com/2016/11/25/18987.html [www.dragonflydigest.com]
2016-11-26 00:14
tags:
dragonfly
release
Another turn of the crank.
In Nome, Where the Muskoxen Roam … Controversially
https://hakaimagazine.com/features/in-nome-where-the-muskoxen-roam-controversially/ [hakaimagazine.com]
2024-03-04 05:12
tags:
article
biology
history
hoipolloi
policy
In Alaska, residents are negotiating a contentious relationship with muskoxen, which were introduced to the area decades ago without local consent.
One Iñupiaq word for muskox is umiŋmak, a term that refers to the animal’s beard-like coat. The word’s existence speaks to the Iñupiat’s long relationship with muskoxen, which once roamed the Arctic. The decline of muskoxen is often attributed to climatic changes after the last ice age, along with predation and hunting. Around Nome, few, if any, Indigenous stories about the animals survive.
The average visitor to Nome today would never guess that muskoxen were ever ghosts on the landscape. The animals adorn guidebooks and artwork at gift shops and draw wildlife viewers and photographers. With their bulky coats, sloping shoulders, short legs, and upturned horns, it’s not hard to picture them roaming alongside saber-toothed cats, wooly mammoths, and other big-bodied beasts of the Pleistocene. But all the muskoxen around Nome today have ancestors that saw the inside of a train station in New Jersey. Their reintroduction to Alaska was the result of a decades-long campaign by early 20th-century settlers and promoters, one that followed a template used many times over before and since: it was a plan for developing the Arctic, drawn up without the consent of Indigenous people.
source: HN