|
"The attacker then calls the leak gadget... the leak gadget is a fragment of code that speculatively uses an AVX2 instruction."
|
|
|
|
|
In security researcher terms "gadget" is a bit of existing software on the target machine that is being exploited by the attacker.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
That was my point; the claimant said that no code had to be run on the target. He probably meant "no custom code". I figured it was a reporting error, but apparently his original paper said the same. It may have since been corrected.
|
|
|
|
|
ok, without context I'm not sure how I'm supposed to've guessed that was your intent. Every other time I've seen someone commenting on the usage, they were using it as step 1 in an argument that concluded that the attack required installing something else on the target first, at which point the entire exercise was pointless because that malware could pwn the server more directly.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies.
-- Sarah Hoyt
|
|
|
|
|
Some have compared WebAssembly to Java applets; in some ways, they’re very right, but in some ways, they’re very wrong. Short answer: no. Longer answer: weeeeelllllllll, not really
|
|
|
|
|
When is the most popular time for ordering pizza, Chinese food, or other forms of takeout? You might think there's no set answer, but it turns out that wherever you are in the world there’s a particular time when most people think about getting food. We bring you all the news that fits under your door
Mercifully: "We received no funding for this study."
|
|
|
|
|
Quote: "Successful foraging behavior has been favored by natural selection, which shaped innate, species-specific decision rules that maximize energy gain,"
Or to put it more simply: people are most likely to order pizza when they are either hungry or drunk.
Whenever you find yourself on the side of the majority, it is time to pause and reflect. - Mark Twain
|
|
|
|
|
the economist
I CERTAINLY didn’t set out to create a language that was intended for mass consumption,” says Guido van Rossum, a Dutch computer scientist who devised Python, a programming language, in 1989.
Snakes are NOT slimy. Really!
|
|
|
|
|
Hi,
I think this is because Python is the language that many educational institutions choose to teach. Back in the 1990's there was a controversy over which languages were being taught in the schools. Some people claimed that teaching students to code for a specific platform was basically free advertisement and corporate bias. Many of these schools responded by changing the programming curriculum to use platform independent languages. It would be interesting to cross reference the popularity to the number of schools teaching the programming language.
I am very skeptical about these 'language popularity' graphs that use search engines for measurements.
Here is the most popular programming languages according to GitHub:
languages in GitHub
Best Wishes,
-David Delaune
|
|
|
|
|
Randor wrote: Back in the 1990's there was a controversy over which languages were being taught in the schools. Some people claimed that teaching students to code for a specific platform was basically free advertisement and corporate bias. Many of these schools responded by changing the programming curriculum to use platform independent languages.
Yes, one of our complaints at the time.
Schools and universities would go to Open Source hobby-languages that would not be asked in any vacancy listed. Stuff like Java (because it is only corporate bias if it involves a MS product), where they simply could download some tutorials and start "educating".
It took years of whining from corporations and the introduction of .NET before schools started to pick it up. And while they still don't like Microsoft, most schools love their apples.
That's also one of the reasons why Java came so far as it did; it was pushed by educators.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Python is a pretty easy and forgiving language; so it's use as an academic tool is understandable and even, to an extent, desirable. Hell, if people in general could figure out if they're going to use 2.7 or 3 I might actually work in it regularly as well.
There is also a link to the Linux community's strange obsession with Py, the prevalence of Linux in the security community, and the growth of cybersecurity as an industry.
My only real issue with it is that, in recent years, it's been following a trajectory similar to PHP and PowerShell; people are using it to write applications rather than relying on the efficiencies of compiled languages. As a tool, though, it's got a purpose that it can serve well, when used properly.
"Never attribute to malice that which can be explained by stupidity."
- Hanlon's Razor
|
|
|
|
|
Quote: In the past 12 months Americans have searched for Python on Google more often than for Kim Kardashian, a reality-TV star.
Does this say something about:
1. anything ?
2. the type of person who programs in Python ?
3. Kim Kardashian ?
4. Python ?
«... thank the gods that they have made you superior to those events which they have not placed within your own control, rendered you accountable for that only which is within you own control For what, then, have they made you responsible? For that which is alone in your own power—a right use of things as they appear.» Discourses of Epictetus Book I:12
|
|
|
|
|
5. Americans ?
6. Google?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Well it should not have been named Python especially if mass consumption was to be involved !!!
Caveat Emptor.
"Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
|
|
|
|
|
Bacon?
I am not the one who knocks. I never knock.
In fact, I hate knocking.
|
|
|
|
|
yummy
Caveat Emptor.
"Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
|
|
|
|
|
|
After I started the OSSU Computer Science I used python in a few course. it's popular because schools and universities uses it for teaching algorithm. so students search it in google. But I think python is little dangerous for big projects. But it's awesome for math and statistic. You can easily write scripts and check them while coding in spyder.
|
|
|
|
|
Citrix report claims big changes are on the way concerning how data is stored. Not for the reasons I was hoping
|
|
|
|
|
Well, hopefully by then I'll be phased out of having to earn a living doing this.
|
|
|
|
|
I'm surprised Marc!
If anyone on CP never goes out of his way to learn new and exciting technologies it's you.
Personally, I love the cloud (Azure specifically).
I can get a web app up and running in mere minutes and another one in a few minutes more.
Need a database? Whether I like MongoDB or good old SQL Server, it just takes me another few minutes.
With Application Insights I've got more logging than I ever has with complicated on premise tools and, again, it's just a click away.
You can get scaling, failovers, redundancy, backups, all with a few clicks and fairly cheap.
And when I'm done I delete my complete environment with two button clicks (one for confirmation).
And that's just the tip (of the tip of the tip) of the iceberg.
What's not to love? 
In fact, I just got on an Azure job and I really love it.
|
|
|
|
|
Sander Rossel wrote: If anyone on CP never goes out of his way to learn new and exciting technologies it's you.
Well, maybe -- I tend to be rather selective though -- the geeky excitement I felt in my 20's has been replaced with a jaded "so what?" and "how long will this trend last?" hard questions.
I mean, look at what's happening with autonomous AI -- they're going back to storing everything locally because autonomous systems need to react fast to changes in the environment -- they can't be hoping for a wifi or cell or satellite connection to the cloud where even a few milliseconds (and realistically a lot longer) is a matter of life or death.
Cloud computing has its place, certainly, but thinking that your can remove the word "cloud" because everything will be done by remote servers, well, that's going a bit to far. 
|
|
|
|
|
Marc Clifton wrote: but thinking that your can remove the word "cloud" because everything will be done by remote servers, well, that's going a bit to far.
I wouldn't be surprised if cloud became the default.
I guess we'll have applications (implicit web app in the cloud), on-premises applications (web app on-premises), desktop applications, embedded applications, mobile apps...
Kind of like we have now except that now we have applications (implicit web app on-premises) and cloud applications (web app in the cloud).
In any case, just because not everything will be hosted in the cloud doesn't mean it's going to be huge and that the cloud is bad or not worth learning.
I'm fairly certain that you'll love the ease with which you can deploy a web app to Azure and get complete logging in Application Insights and with a single button click create an entire CI/CD pipeline in VSTS
|
|
|
|
|
Azure is merely a platform, the underlying things like the programing stacks from Microsoft etc , definitely have to improve if Microsoft has to stay relevant against amazon , google and apple who are eating into their market share. The word cloud was used and abused by the likes of ever other vendor from oracle to sap to put all their stuff online hosted on their own or contracted server service provider....
Caveat Emptor.
"Progress doesn't come from early risers – progress is made by lazy men looking for easier ways to do things." Lazarus Long
|
|
|
|
|
Google barely has any market share and Apple has no cloud platform at all 
I'm really not seeing where you're going with this.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
