back
user profile
akyuu
7,250karma·833submissions·October 14, 2018
recent activity (833 total)
comment
It can be exploited through JavaScript according to CloudFlare: https://blog.cloudflare.com/zenbleed-vulnerability/ …
comment
What about running JavaScript on a browser?
comment
Not sure if they're actually fine, some researchers have exploited this vulnerability on AWS instances that use affected EPYC CPUs: https://twitter.com/0xdabbad00/status/…
comment
https://www.amd.com/en/resources/product-security/bulletin/a... According to AMD's security bulletin, firmware updates for non-EPYC CPUs won't be release…
comment
> for most people in most cases that's akin to putting a bank vault door on the front of your house If we are talking about a device in which you do banking, shopping, manage sensitive or work…
comment
In my previous reply, I linked three articles which discuss the technical details extensively: https://madaidans-insecurities.github.io/linux.html https://privsec.dev/…
comment
The first use case they mention is restricting ad fraud (and, presumably, ad blocking): > Users like visiting websites that are expensive to create and maintain, but they often want or need to do i…
comment
On the explainer page [1], the first use case example is to prevent ad fraud (and, presumably, ad blocking...): > Some examples of scenarios where users depend on client trust include: > Users l…
comment
Flatpak permissions are very broad by default in most applications. Even if you manually override them by using Flatseal, some permissions like X.org or PulseAudio sockets are very problematic because…
comment
Compared to the other desktop operating systems (Windows and macOS), it absolutely is. It might have other advantages, but security is not one of them, and users should be aware.
comment
https://madaidans-insecurities.github.io/linux.html https://privsec.dev/posts/linux/linux-insecurities/ https://bjornpagen.com/en_US&#x…
comment
ChromeOS seems very interesting to me because it has managed to achieve a degree of security that no other desktop OS (Windows, macOS, and of course other desktop Linux, which are the least secure of …
comment
In the Firefox Nightly blog, there is some discussion of the performance improvements they've delivered in each release: https://blog.nightly.mozilla.org For example: https:/&#x…
comment
Speedometer is one of the primary benchmarks used by the Chromium team as a proxy for real-world use of popular JavaScript frameworks: https://v8.dev/blog/speedometer-2 …
comment
You can more or less get around this by using shared folders and logon commands on the .wsb configuration file [1]. For example, suppose you want to sandbox your torrent client. You can create a .wsb …
5 pts