ms264556

joined 2 years ago
[โ€“] ms264556@beehaw.org 1 points 3 months ago

Yeah, reading the followup to that post, I think they just created a new intermediate with the same key as the old one & pushed this to chromecasts. I didn't know this was a thing you could do. Learn something new every day ๐Ÿ˜.

I've seen enterprise network equipment with this same issue, but the manufacturer instead forced owners to manually renew device certificates. Their device authentication is now broken because the certificate private keys were poorly protected in transit.

I'm wondering now why they didn't just use this key rewrap trick

[โ€“] ms264556@beehaw.org 2 points 3 months ago (2 children)

If the problem is an expired device certificate then this was a very quick turnaround.

All shipped chromecast receiver devices have the device cert private key safely locked behind a TPM. Sending new certificates across the network without carefully planning things gives us a chance to intercept them & use them in our own receiver software which could e.g. download streams from Netflix/ Disney etc.

[โ€“] ms264556@beehaw.org 1 points 1 year ago* (last edited 1 year ago) (1 children)

Linux font rendering is generally very good now, so I think they've gotten past that. Apart from a System76 desktop, which was terrible, I haven't hated the rendering for many years. It's just that Microsoft's font rendering (maximizing clarity at the expense of destroying the font metrics) is exactly what I want to look at all day if I'm staring at code. When I look at screenshots of vscode on Linux and Mac the code looks beautiful, because the font renderer hasn't beaten the characters with a big stick to make them fit the pixel grid, but when I switch back to windows after using Linux/Mac then it feels like someone fixed the focus and de-blurred everything.

And now that I can have as many Linux installs as I like running concurrently via WSL2, I get to use Linux all day without losing the stuff I like about Windows.

[โ€“] ms264556@beehaw.org 3 points 1 year ago (3 children)

I don't play games, but I do plenty of dev work including a lot in Visual Studio & SSMS. I always have a few Linux boxes running & try every few months to live on Linux rather than Windows.

Visual Studio can be swapped out for Rider. Rider is quite different feeling than VS, but I guess a lot of devs use another Jetbrains IDE of some kind, in which case it's a fairly easy switch.

SQL Server runs happily on Linux. But SSMS is harder for me to do without. I have Aqua Data Studio & Jetbrains DataGrip, but they don't feel as seamless as SSMS.

In the end though, it's hard to beat Windows + WSL2 now that Windows VSCode & Jetbrains IDEs seamlessly connect to Linux projects. And if you enable nested virtualization and MAC address spoofing then Hyper-V can run anything WSL can't.

Usually I end up moving back to Windows because of font rendering. I far prefer Windows cleartype font rendering on 2160p desktop screens. One day Linux fractional scaling will be perfected or 200+dpi desktop screens will become affordable. Then I might stay on Linux.

[โ€“] ms264556@beehaw.org 8 points 1 year ago

Totally OK way of doing it. You basically manually implemented the protocol APIPA uses to allocate 169.254 addresses.

[โ€“] ms264556@beehaw.org 17 points 1 year ago (1 children)

In addition to the excellent https://sci-hub.se suggestion...

I can find the paper for free 90% of the time by googling the authors and visiting their personal page on their university's website.