Hacker Newsnew | past | comments | ask | show | jobs | submit | more zorlack's commentslogin

> I still hear people talk about stuff that’s happening in the news

Well phew! Thankfully someone's still paying attention.


ULA: What if we're already falling behind in the orbital laser race?


We cannot not allow a Space Laser Gap!


US Taxpayer: great, get those spacex contracts ready!


> To trigger the vulnerable code path, an application on the target must be bound to a raw socket.

What is a "raw socket" in this context?


This means the listening socket was created using SOCK_RAW as opposed to SOCK_STREAM or SOCK_DGRAM. Raw sockets are used for working with ICMP, doing packet sniffing, sending some types of custom TCP packets, etc. Basically anything that isn't UDP or TCP, you'll need a raw socket for.


Historically programs like `ping` and `traceroute` use raw sockets. Using raw sockets requires privilege, which is why those historically have been set-uid on Unix systems.


Indeed. Windows requires elevation for raw sockets as well. The ping binary works without elevation by using the IP Helper Win32 API's ICMP functions: https://learn.microsoft.com/en-us/windows/win32/api/icmpapi/...


https://learn.microsoft.com/en-us/windows/win32/winsock/serv...

And here they explain that if you use SOCK_RAW, you should look out for bad datagrams:

https://learn.microsoft.com/en-us/windows/win32/winsock/tcp-...


So is this a vulnerability in specific raw sockets applications (i.e., you could get it right in the application), or a vulnerability in the Windows kernel's TCP/IP stack that is only exploitable when there is a raw sockets application running?


Raw is a protocol type in the socket api allowing the application to send and receive arbitrary packets (e.g. not packets generated by the system's TCP implementation).


Things like wireshark binds to a raw socket rather than using the Windows API


The sockets API is a Windows API, and Wireshark does not use it. Instead it uses Npcap, a custom kernel driver.

A raw socket allows creation/consumption of bespoke packet types (i.e. not Tcp/Udp). In this case ICMP.


It'd be so interesting to collect aCropalypse-affected images. Maybe you could build a crop-suggester out of it...

Not that I'd want to maintain custody of such a dataset...


[] Make sure to place Mr. Epstein's gun in the table drawer. (P11)


Saw that one. How often was Epstein removing his gun and leaving it laying around the house that this was an explicit instruction?


Probably staff would secure it somewhere else while he wasn’t there.


OP should run their route backwards for a week. To see if the effect is symmetrical.


Sunsets are gradual...


This is from 2018


...and also leads would-be anonymous image-posters to increase the noise-floor of their photographs.


It makes more sense to just denoise.


Most phones do that for you anyhow. Unless there are serious defects in the sensor that would probably mean it would fail QA even for bargain bin phones the amount of “AI” post processing that phones do these days is probably sufficient to erase any sensor fingerprint.

Even with DSLRs and RAW files you often don’t get a RAW output from the sensor all of them do their own “color science” magic and other alterations like denoising too even on the rawest of the RAW settings.

RAW files today just mean that the files are uncompressed or the least compressed since there might be some compression/downsampling happening at readout anyhow and that you get a ton of metadata that can be used by a photo editing app to better work with the image.


Or to just dither the hell out of your image.

Luminance sensitivity information could probably be most-easily detected in the dark areas of an image. So just crush those areas.

I suspect the more you think about this problem the more the answer becomes: Compress your image in order to remove information density.

Still, a determined adversary might find this information discernable over a long enough series of images.


(web2)(web3) = (web5)

(web)(2)(web)(3) = (web)(5)

[SNIP]

(web) = (5/6)

Nailed it.

Er.. Or web = 0.

Hmm.


Woah woah woah! You can't just blow right past web 4. Unless you are following the rule that all web versions must be prime numbers. Then it's okay.


You clearly missed that all web versions actually have to follow the Fibonacci sequence.

And I've already called dibs on Web8


Pfff it's time for web2022


You could put the braking resistors above ground, no?

Or if the braking resistors have to be close the the coils, then you could use a heat-exchanger to move the heat somewhere else...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: