Readit News logoReadit News
jkrshnmenon commented on I'm the Canadian who was detained by ICE for two weeks   theguardian.com/us-news/2... · Posted by u/n1b0m
refurb · 5 months ago
They should put travel warnings on every country then.

The woman in question tried to self-sponsor a TN visa after being denied earlier at the Canadian border. I can understand why USCBP starts to think “this woman is trying to commit fraud” not “innocent mistake”.

I know most countries would detain and deport people attempting to commit immigration fraud.

Not sure why people should hold the US to a higher standard than other countries.

jkrshnmenon · 5 months ago
Most countries don't have for profit prisons or detention centers.
jkrshnmenon commented on TinyKVM: Fast sandbox that runs on top of Varnish   info.varnish-software.com... · Posted by u/perbu
wmf · 6 months ago
Fascinating but I'm having trouble understanding the big picture. This runs a user process in a VM with no kernel? Does every system call become a VM exit and get proxied to the host? Or are there no system calls?
jkrshnmenon · 6 months ago
I believe it ships with its own kernel

> The TinyKVM guest has a tiny kernel which cannot be modified.

jkrshnmenon commented on Show HN: Compile C to Not Gates   github.com/tomhea/c2fj... · Posted by u/tomhee
saagarjha · 7 months ago
Typically these obfuscators are applied in an automated fashion so yes.
jkrshnmenon · 7 months ago
DEFCON Quals challenge incoming.
jkrshnmenon commented on Show HN: Compile C to Not Gates   github.com/tomhea/c2fj... · Posted by u/tomhee
tomhee · 7 months ago
jkrshnmenon · 7 months ago
I would also be very curious to see if it's possible to make a decompiler for this type of obfuscated program.
jkrshnmenon commented on Show HN: Compile C to Not Gates   github.com/tomhea/c2fj... · Posted by u/tomhee
jkrshnmenon · 7 months ago
I wonder if someone has already made a Reverse Engineering CTF challenge for this concept.
jkrshnmenon commented on GPT-4 can exploit vulnerabilities by reading CVEs   theregister.com/2024/04/1... · Posted by u/ignoramous
grayhatter · a year ago
> The term "one-day vulnerability" refers to vulnerabilities that have been disclosed but not patched. And by CVE description, the team means a CVE-tagged advisory shared by NIST

I wonder if this whole article was written by an LLM. I've never heard anyone worth listening to use the term 1day. I've always just called them vulnerability. I've actually just recently taken to calling them bugs in normal conversations.

but while I'm ranting, I'm gonna rant about the widening of 0day. it's not synonymous with vulnerability it's when shell code or other POC payload is 'released' as the disclosure. Usually when it's release is immediately following an update. Especially when that update is 'Patch Tuesday.' It also should be scary, "you can make the app exit/crash" doesn't really count, but I'm not usually that pedantic. Meaning, if you disclose something to a vendor, give them 90 days, then publish the CVE but not shellcode, the best you have in a "90day" but even then, no POC exploit, no anything-day.

jkrshnmenon · a year ago
The jargon of 0-day and n-days are pretty common in the vulnerability detection community. The rest of your rant is pretty difficult for me to understand though.
jkrshnmenon commented on VirtualBox KVM Public Release   cyberus-technology.de/art... · Posted by u/CyberusTech
Fervicus · 2 years ago
Can someone ELI5 what this is and does it benefit someone like me who occasionally spins up VirtualBox VMs for various OSes?
jkrshnmenon · 2 years ago
This only affects anyone that wants to spin up VirtualBox VM's on Linux hosts.

I'm not an expert in this field, but my best TL;DR is that VirtualBox and other VMM's (virtual machine monitor) used to ship with their own hypervisors (the thing that let's you run virtual machines). However, now Linux has its own hypervisor/framework (KVM) and now VirtualBox can use KVM to do all the functionalities their own hypervisor used to do.

Someone please correct me if I'm wrong

jkrshnmenon commented on What's lost when we photograph life instead of experiencing it? (2016)   theconversation.com/whats... · Posted by u/rzk
jkrshnmenon · 2 years ago
This is article is way too old to be relevant right now. Back in 2016, Instagram and snapchat were just developing. And honestly I'd like to see a comparison between this study and a more recent one to see if the results actually match.

u/jkrshnmenon

KarmaCake day13June 30, 2023View Original