Email or username:

Password:

Forgot your password?
Kate Temkin

I swear, half the CVEs I hear about are “if your computer is connected to the internet and someone sends you a text message, they now have your power of attorney”

and the other half is “if a trained thief were to sneak into your house and replace your hard drive with an identical copy, an attacker with an exact predictive model of that drive could interrogate the SSD wear leveling algorithm and reduce the search space for your bitlocker password by up to 12 bits _without you even noticing_”

9 comments
Mika E.

@ktemkin OMG and if you ask for a proof of concept to clarify if they really do have to break into your house, the “reporter” gets so fucking pissed off.

Do not miss that part.

timthelion

@ktemkin You forgot the 30% of CVEs which are 'if you turn on these three flags that were deprecated in 2009 and point your program at a non trusred server the program would run slightly slower. LOOK ITS A DOS ATTACK CAN I PLEEZZ HAVE A CVE ON MY RESUME PLZZ!!!!'

Björn Lindström

@ktemkin so now you know the difference between High and Critical? :-/

milas

@ktemkin that second one sounds like a real 9.8 CVSS to me

hjakku
@ktemkin If someone were to break into my house with the intent to harm me, my PC would be the least of my concerns
Fritz Adalis

@ktemkin
For the first one, is it springing or durable power of attorney?

M.O.M.O.

@ktemkin@chaos.social and the other half is named “The End of All SSDs”

Go Up