a random tech banner

/tech/ - Technology

Buffer overflow


New Thread
X
Max 20 files0 B total
[New Thread]

Page: Prev [1] [2] [3] [4] [5] Next | [Index] [Catalog] [Banners] [Logs]


thumbnail of ff3ab6aed90dd93e0ee4171c8b7a25bf-imagepng.png
thumbnail of ff3ab6aed90dd93e0ee4171c8b7a25bf-imagepng.png
ff3ab6aed90dd93e0ee41... png
(150.9 KB, 480x270)
DON'T Fucking Trust Intel

Should be obvious already, but here are the reasons. Go distribute them so others who aren't aware can be illuminated.
> Intel owns its own fabs. This means no external review(Such as in the case of TSMC potentially finding backdoors in ARM chips when translating the designs into hardware), and likely government oversight.

> Long long history of bugs. F00F bug. FDIV bug. Spectre and Meltdown recently. Netcat? is a very new one as well which attacks server CPUs. Even in the C2D the list of bugs was massive. Who knows what lies in the newer core generation processors.

> Shitty thermal paste under heat spreaders resulting in higher temperatures. De-lidding by gamers and server owners have lowered operating temperatures significantly.

> Using VLC player to fake an intel graphics demonstration, accidentally bringing up the menu and failing to play the video when the sound effects started playing.

> CEO got the fuck out of the company when the bugs became obvious. Kept the minimum amount of shares required to be the CEO and didn't contribute greatly to the company.

> Shitty business practices, suing another company in a completely different business sector because it had the word "Intel" in its name.

> x86 support back to CPUs over 30 years ago. Old as fuck architecture and bloated to all hell with undocumented instructions and multiple instructions to do basically the same operation.

> The Intel ME running the minix OS on all modern CPUs along with the HAP bit installed by the NSA so that they could turn their CPUs secure while everyone else was left in the dust.

> Also building controllers and chipsets, so even if they can't fuck you with their CPUs, they still might be able to hit you with another chip of theirs.

> Retard-level fab engineers can't get their process under 14nm for most chips, and only recently getting into 10nm while TSMC and other manufacturers like samsung are moving into 6nm from 8nm.

> Aggressive marketing and term usage. Many "technologies" in their chips that they advertise as additions rather than a normal part of its existence, TM and R symbols everywhere in their documentation and advertisements, and fucking over other companies.

> Programming their compiler to create shittier compiled code that runs slower and less reliably if a non-Intel CPU is detected.

> Israel-based design. Might be a problem for some people. Possible politically or monetarily-motivated additions to the CPUs like backdoors or weakened security technologies.

Even back in the Pentium III there was a processor serial number which could be shown with a CPUID instruction, an instruction which outputs information about the CPU. Nvidia is also in the pool with Intel, as they are heavily reluctant to work with Linux kernel for developing drivers and make compatibility with AMD CPUs much more difficult than it should be.
For any serious people in need of security, Intel is a poor choice.
> Using VLC player to fake an intel graphics demonstration, accidentally bringing up the menu and failing to play the video when the sound effects started playing.

Yikes.
**https://www.youtube.com/watch?v=Otcge1cn8Os**



https://blog.grobox.de/2016/is-signal-a-threat-to-free-software/

My opinion: the guy from LibreSignal was using the Signal servers, consuming their energy, and using their marketing. This is not right.
About the Signal requirement to have google shit, it's very unfortunate. Though, people should just use other thing and stop all this buzz.
 >>/8931/

Just as dumb. Anyone who would name their messenger/protocol RIOT is an idiot. Like the little shit who built a javascript encryption thing and named it Felony.

Just communicate by vibrating air particles. This is also known as talking face to face. Features include:
-Absolutely no botnet
-Safe from CIAniggers (unless you talk to a CIAnigger)
-Audited and mathematically proven
-Messages are scrubbed the moment they are delivered
-Best security ever

And optional benefits:
-Socializing
-Satisfying the natural, human exposure quota
-Bitches

can anyone play with this account? a dick how treats people as shit https www facebook com / 3752989eaa69da9bd5522b1877542370ff914298





thumbnail of playing mass-effect on kinect.jpg
thumbnail of playing mass-effect on kinect.jpg
playing mass-effect... jpg
(752.97 KB, 1000x750)
Let's have a thread for upcoming gimmicky stuff the tech companies sell. To start:

Google is developing a new radar based sensor. It'll be like using the Kinect to do shit on your computer or surf the internet. 

https://www.reuters.com/article/us-google-sensor/google-wins-u-s-approval-for-radar-based-hand-motion-sensor-idUSKCN1OV1SH

Don't laugh too hard, some people have carpal tunnel so it might be useful.







thumbnail of Sun Microsystems - The IT Guy - Episode #2-ZaEsFDjalvw.webm
thumbnail of Sun Microsystems - The IT Guy - Episode #2-ZaEsFDjalvw.webm
Sun... webm
(3.71 MB, 320x240)
thumbnail of Sun Microsystems - The IT Guy - Episode #4-1ilQ7qKMfs0.webm
thumbnail of Sun Microsystems - The IT Guy - Episode #4-1ilQ7qKMfs0.webm
Sun... webm
(3.51 MB, 320x240)



Endchan edition.

> go to local computer dude to buy a spare Precision M6500 mobo

> ended up buying a entire box full of M6500 parts and putting them together

> I have two M6500's now

> pic semi-related even though that's not my machine




thumbnail of 01-success-kid-c.jpg
thumbnail of 01-success-kid-c.jpg
01-success-kid-c jpg
(92.06 KB, 450x409)
thumbnail of 02-its-habbening.png
thumbnail of 02-its-habbening.png
02-its-habbening png
(5.93 KB, 389x51)
I'm posting this so you guys won't create conspiracy theories. I know, my hope us futile.
If everything goes well soon the site's and our problems will be resolved. But they will turn the site read-only mode for a while. I have no information how long the process will take. Keep calm and be patient.

Thanks.







thumbnail of eRpJ_vCl.jpg
thumbnail of eRpJ_vCl.jpg
eRpJ_vCl jpg
(12.01 KB, 256x256)
thumbnail of 6dd9df2169.gif
thumbnail of 6dd9df2169.gif
6dd9df2169 gif
(172.29 KB, 350x350)
Well that brand
is "tecch"
Tech + ecch
So it deserves utter desolation, as do 99.9% of these shit corporations and shitbrands and shitgineers and their shitty paychecks they are the enemies of America.

thumbnail of GetFile-6_1.jpg
thumbnail of GetFile-6_1.jpg
GetFile-6_1 jpg
(69.9 KB, 487x800)
I am not trying to be "flippant" or "cute"
Anyone who made sheckles in the last 20 years, on the destruction of IP 
NOTE: Sheckles not in many spellcheck dictionaries!  CONSPIRACY AGAINST ANTISEMITISM TRUTHS!)
Any the shits mentioned, wrecked IP over the last 25 years or so by:
(using stock fraud as FB and twit etc)
(and using spyshits and privileged moves)
(control the game is the end the same?)




thumbnail of er.jpg
thumbnail of er.jpg
er jpg
(20.58 KB, 480x360)
Why?
How about:

> Intel ME/HAP Inclusion

> So many bugs even a sewage worker would be surprised

> Aggressive marketing on Intel® Core™ Products™

> Using toothpaste instead of actual solder for the heat spreader

> CEO GTFOd' after Spectre/Meltdown/Portsmash fiasco

> Crappy as fuck x86 architecture bloated to hell riddled with bugs

> FDIV, F00F, and other catastrophes that "Wouldn't affect the average user"

> and later taking money from employees after they had to replace the fucked CPUs


If they were smart, they would start over, start with a simple pipeline with absolutely nothing else, and then adding the branch prediction, dynamic execution, and other accelerative features later, but they are in a bad spot, because while AMD, ARM, and other manufacturers are speeding ahead, Intel has just lost one of its tires and is slowing down.

Wat do?
Support more transparent manufacturers. AMD is far better than intel, but has its own problems(PSP, Etc.), while ARM/SPARC/POWER CPUs seem to be some of the most stable, but this is just speculation (Highly likely to be better than intel, though.) RISC-V/FPGA designs could also prove to be useful.
 >>/13257/
I think I would make a distinction(addition?) and say that x86_64 sucks but yes you're right OP, Intel can go die.
I am curious to know if any anons have had success with other ISAs/architectures, specifically a "libre" ARM SBC or a POWER9 system(raptor computing?). It would be nice to relegate my x86_64 system to just a few "performance intensive" tasks.

 >>/13283/
NPX Power Architecture might be an option too. They make SoC that are used in communications/aerospace/military applications. I'm having a difficult time finding designs available to civilians, but it looks like it could be a RISC option in addition to ARM.


 >>/13283/
I've got two ARM boards: A20 and A64 SoCs.  The A20 is a Cubietruck, got it because it has 2 GB RAM, SATA, GigE, and VGA (I like older 5:4 and 4:3 LCDs).  It's a well-supported SoC and solid board overall, with a real DC power jack, which helps avoid problems like some micro USB powered boards have (too much internal resistance in micro USB connector to supply enough current in some cases).  I don't use OpenGL, which needs driver blob for older Linux kernel (there's open source substitute driver, but not finished yet).  Anyway I don't need 3D graphics, and the simple framebuffer is enough for my purposes.  At most I read PDFs, use LaTex, write some code, play some old/simple games, browse web with simple browser like Lynx/Links...  All that works fine here.
However, it's kinda slow for running recent web browser (which I need to do on occasions), so I bought a faster A64 board, but I've been struggling to get OpenBSD working on it properly.  Right now I'm building latest u-boot snapshot that hopefully will improve things.  I guess Linux runs flawlessly on this board, but I wanted OpenBSD, since it has some additional protestions to sandbox the browser more (pledge and unveil).  I can tell you one thing now:  get an SD card 32 GB or bigger if you want OpenBSD!  They say 8 GB is sufficient, but my /usr/local parttion only has 59 MB free right now, and I used the default disklabel suggested by the installer too.
So anyway I hope this newer u-boot works.  I only bought this A64 board to run Iridium web browser, and maybe a couple other things.  Otherwise I'm happy with the A20 board as my primary computer.
I will probably buy more ARM boards for various purposes, like hosting network services and also some programming on the hardware level (not running on Unix/Linux or any other OS, just my own asm/Forth code).




thumbnail of loli gun2.jpg
thumbnail of loli gun2.jpg
loli gun2 jpg
(415.83 KB, 1080x1076)
ITT we shit on UNIX (because 8gag deleted the UNIX hater thread and blocked Tor). I'll start.

"Page down" is UNIX braindamage. In UNIX and shit you press page down (or some retarded combination of keys), and it replaces all the text on screen with the text from the next "page". It's a very crude way of scrolling, which makes perfect sense if you have a machine that sends the output to a printer each time you hit a key. Now since web browsers love to be a pile of UNIX braindamage for no reason, they copied this shit verbatim. You press page down and it goes down one page, leaving a tiny bit of the bottom of the previous page on top. This is literally just a copy of what UNIX does. But why the fuck? There should be a button to scroll down a tiny bit, and holding some modifier like shift at the same time as that button will scroll you down faster. And none of this key-repeat bullshit is needed either (where you press the scroll button and it does fuck all, until you hold it for over a second and it finally starts scrolling). Why the fuck would I want to scroll down some defined amount? I'm not comparing pixels on the page, and if I really wanted to, that feature could exist as an option, not the default. And no I don't want to fucking reach over to the mouse just to scroll whatever I'm viewing. Now by far the biggest example of UNIX braindamage here is that not only image viewers but even media players will do this key-repeat bullshit for panning and scaling (most likely typically because whatever API/libraries they use do it by default).
Now if you implemented sane scrolling and used an LCD monitor, you'd notice it looks like shit and will be completely unreadable (some fonts may still be partially readable) while scrolling, because the image is smeared across the screen. This isn't an understatement or some retards arguing about whether they can see 300us pixel transition times. It looks like complete shit and is hard to read, for everyone, it's just how the human vision system works. The point of this is that back when everyone used CRTs, there were no programs with real scrolling - only UNIX braindamaged variants of "page down" (and games/movies had framerates far below the refresh rate of the monitor so they'd look bad even on a CRT). So nobody experienced how much worse LCDs look because no applications in the CRT era rendered properly in the first place. What I'm saying is that if it wasn't for UNIX braindamage, the LCD meme may have never even taken off (or at least not until LCDs are able to display motion content -they only started getting there around 2015).

> hurr durr this is a shit thread

well technology is shit and if you're not complaining about it, you should kill yourself
thumbnail of alan kay linux dd665be857d28d652cc0b0744c6e7e61ddd1b6bb82ee56d4df58d29013b71419.mp4
thumbnail of alan kay linux dd665be857d28d652cc0b0744c6e7e61ddd1b6bb82ee56d4df58d29013b71419.mp4
alan kay... mp4
(6.13 MB, 1280x720)
Have some more I tried to post to 8gag this week but they blocked Tor and now cuckflare blocked them

https://www.halfdog.net/Security/2012/TtyPushbackPrivilegeEscalation/
Look at this shit. This is completely a non-problem - UNIX invented it into itself. And it's funny because the moment you go on this piece of shit OS renowned for its user-based privilege seperation, you get slapped on the hand for using the most obvious privilege separation tool they provide, which doesn't work. Typing sudo instead before every command is fucking braindamage. And the satire doesn't even stop there. Su will now be another thing that the smarter of the neckbeards will tell you not to use "because it's insecure", having no idea themselves what's insecure about it.
It's also funny because in the 2000s I always had the feeling there's something insecure about using su (why wouldn't there be? this is UNIX after all. if everyone's using sudo then that means su is insecure. but don't get me wrong, sudo is insecure too), and opted to instead login through a different virtual console[1].
Even without this vuln, how do you tell if you're still the user dropped into? I'm guessing as usual there's no way. If you press ctrl+d, it might ignore it, change its shell to look like the previous user's shell, and then start logging all input, so if you then enter something secret, it will get it. Of course at some point you'd notice some commands aren't working. And this is where the retard sysadmins will say "always use a fresh shell when doing something sensitive", having no idea why they have such a belief. Also the user you su into could probably end the session somehow while you're typing and the commands go to your previous user. I'm not sure if the user you login to has control over ending the session, but I wouldn't take some idiot on the web's word for it. To be safe instead I'll just assume it's insecure. Again none of these problems exist or are even considerations outside of braindamaged UNIX. On top of all that, metacharacters are probably turing complete (especially in shit like gnome shell or anything outside of the simplified in-kernel version) so the user you login to can just make your shell behave however he wants even a year after you logged out.

1.
virtual console is also braindamaged as fuck and proves how UNIX makes the most trivial crap as retarded as possible. Go type johnfuckyou. Will it log you in? You fucking bet not. Instead, you'll get some output like this:

localhost login: john  
Why? Why can't it just fucking do whatever IO bullshit in the background or multiplexed with select or whatever, instead of momentarily stopping accepting input and cut off half your password? probably because the terminal API is fucking retarded and something trivial like that is non-trivial in UNIX.
TL;DR: virtual consoles output half your password to the screen or whatever the fuck you're plugged into every time you login

Yes it only happens while the cache is cold or some bullshit (so it happens to everyone the first time within a cache lifetime), but that means it will happen every time you use it unless you're some fucking retard who carefully enters his login name, hits enter, and watches the screen until "Password: _" appears.
Yes maybe it's because of PAM or some bullshit but fuck you, why does that shit even exist. PAM is basically systemd for the 2000s. I don't need enterprise snakeoil login suite on my computer, I barely even fucking care about the password for my user.

Also fuck you for making it sit there for 10 minutes hashing your password every time you login. And fuck the delays to make it look smart like "hahaha you think you can guess the username, guess again because I will sleep for 10 seconds regardless of whether you got the user right." 

(cont)
Fuck your protectionism bullshit. Fuck infosec community for making these retarded mechanisms a thing. And why the fuck can you press ctrl+c to cancel that shit, but you can't use ctrl+c to clear the username field after typeing the username but before hitting enter (to save time from pressing backspace a bunch of times) - ooh i just found out you can actually press ctrl+d here, makes me wonder how many types of signals and input you can send to agetty and bypass or even stack smash its dumb ass.

I literally just mashed the keyboard (but didn't not anywhere near the scroll lock key) and now it says: Hint: Scroll Lock on

localhost login: _ and pressing new keys does nothing at all. all you can do is switch to a different non-fucked VT. and another VT says just: Hint: Scroll Lock on and has the same problem. and that's as many fucks I can give about UNIX for today, back to making my own OS with actual real primitives instead of text or a "terminal subsystem"

I had the previous post queued on my hard drive to send next time I have internet access (yeah I actually practice what I preach, the internet is UNIX braindamaged consumer garbage which I do not support), but I couldn't even go a week without running into a new variant of _this particular_ UNIX braindamage:

Yesterday I was using three virtual consoles (or VCs, VTs, virtual terminals, whatever the fuck) to write some code with vim, a console to build and run code, and a third for REPL, manuals, etc. First I had to go through the process of logging in 3 times with the fucktarded login UI described above. After about 4 hours of coding, suddenly caps lock was stuck on, but the caps lock light on the keyboard was unlit. So I pressed caps lock, and now caps lock was off, but the light was lit. And it was like this in all the other VCs (they have their own caps lock,num lock,etc state): you either have caps lock on, or the caps lock LED light is on and caps lock is off. This sort of thing is expected when switching between X11 and VCs, but I never started X11 during the uptime of this machine. Now the next problem was pressing alt+f1,alt+f2,alt+f3 to switch to other VCs stopped working. So I could only switch between two of my VCs by using the "menu" button, which switches to the last VC (I guess if I really wanted to, I could use the chvt command). So I tried logging out and logging back in. But the login agetty shit was also fucked. This fucked state was still happening _IN THE LOGIN SCREEN_. So reboot. Maybe the "reset" command would have worked, I didn't think to try it because you'd think going back to the login screen already does this and more. And I'm sure more stuff was broken, but didn't bother to explore it before rebooting.

This is peek UNIX braindamage. Even the fucking virtual console is full of bugs. Not even the most ostensibly basic part of the OS works (of course it's not actually basic, because it's a terminal emulator instead of an attempt at a real console). Now what are you gonna tell me to use Screen or X11/wayland because the virtual console is not meant to be used??? I've used those too and they're all the same shit. You can't even edit a fucking text file in X11 because an ostensibly (yes, most things in UNIX are only ostensibly what they claim to be) simple program like leafpad truncates the document half way through without telling you, and gedit takes half an hour to fire up. Screen is a horrible idea since metacharacters are not composable let alone well-defined. You will have shit leeking from the subwindow into the top window, and the subwindows breaking because Screen probably doesn't reimplement enough metacharacters.

But what I'm saying is: Not even the most basic, in-kernel implementation of metacharacters works. This is counterevidence that UNIX (or Linux in this case) is a viable OS. The fucking LOGIN SCREEN is affected by what the previous user did, which backs up the sysadmin cargocult idea of "you should not reuse a terminal another user has previously used". Then again instead of se

(cont)
Then again instead of setting up the virtual console state in a malicious way, the user could just set up a program that emulates the login screen without logging out. I'm sure theres some obscure way to counter that as well, which nobody knows about, because to run UNIX anywhere near securely you have to do 7 workarounds per second and remember 500 rules/workarounds, such as:
> never cat or display a file in any way because it can take over your terminal

> use ~/mnt instead of /mnt

> never chown an enemy directory

> never run python or any other interpreter (or any program at all, to be safe) from an enemy directory

> rewrite or redirect all your programs to use ~/tmp instead of /tmp

> do you actually know how file permissions work? protip: you don't

> do you actually know how (g/u)id,e(g/u)id/r(g/u)id work? protip: you don't

> never do fuck all from a signal handler (signal-safety(7))

> don't use C because it's an NP-complete problem of deciding whether to make this part of the program standards compliant or compliant to whatever the fuck everyone does in practice, and then rewriting that part when another part conflicts with that the rule. Use assembly instead.





thumbnail of NGC_1_&_NGC_2.jpg
thumbnail of NGC_1_&_NGC_2.jpg
NGC_1_&_NGC_2 jpg
(71.7 KB, 750x750)
This, to my knowledge, is the best /tech/nology board that exists. 4chan is consumerist gaymer garbage, 8ch/tech/ has been overrun with faggots from /pol/ trying to hide from muh jooz, lainchans data was wiped off the fucking planet when their administrators screwed up, and all of the others are dead.

If this board is to be brought back to a state of prosperity, we need to create and bring forth more educated individuals with a yearning to understand with the motivation and knowledge to pursue their own projects.

Learning 4 Newbs:
C Programming Language (Learn how to make that machine you shitpost with do what you want)
Computer Organization and Design (Learn how that machine you are using to shitpost works)
George Simmons Precalculus In A Nutshell (Will revamp your mathematical knowledge and help you understand deeply)
The Art Of Electronics (Learn how that machine you shitpost on works on the lowest level with electricity!)

Getting Started:
-Look on ebay for old thinkpads (If you are here, you should already have done this)
-Get a small Raspberry Pi (Simple to learn with and a massive community and hundreds of projects done already with firmware support)
-FPGA boards (Big boy electronic design, where you get to psuedodesign your own CPU. Try https://www.nandland.com/ (Xilinx is independent, Altera is Intel owned, so I'm not going to trust them)) LIMITED ONLY BY YOUR IMAGINATION!...
-Some cheapo electronics tools and wires from Amazon or an electronic supply store. Hakko is a japanese-based company and creates some of the best soldering stations and irons for the lowest price, 60/40 solder will get the job done. Don't forget solder wick, or your gonna have a bad time. Avoid working with BGA electonics.
-A multimeter and an Oscilloscope (EXTREMELY IMPORTANT) if you want to dig deeper into your electronics. A variable power supply will also give you more freedom.

Some tips:
-Electronics are delicate and static from carpets and cotton sheets with destroy them, ground yourself outside or with an outlet before work.
-Someone is always watching, this should be apparent to most of you, but this knowledge will give you more power to change the world than other people, use and gain it wisely
-A certain mindset must be adopted if you want to succeed here. Don't fill your mind with trivialities and stress yourself(Literally killing you), but have some fun for the limited time you are here, fun with computers is more than just hiding from malicious entities.

The rest is up to you.

Yeah, what 13351 said. If you want to go outside, pack your desktop and 21" LCD monitor and Honda generator up in a backpack like everybody else.


get yourself a librebooted thinkpad running a free distro like parabola or trisquel

if you dont know what intel management engine or amd psp is, then you really need to get libreboot





Post(s) action:


Moderation Help
Scope:
Duration: Days

Ban Type:


0 replies | 0 file
Refresh
New Thread
Max 20 files0 B total