asciilifeform: gabriel_laddel: i just tested the thing i pasted from my notes, on the box i'm presently sitting at, and it did not work. but this latter one - did.

asciilifeform: on the listening end.

asciilifeform: thing is maintained by braindamaged folks, and so you might have to:

asciilifeform: gabriel_laddel: you might have the other version of netcat

asciilifeform: imho it belongs there.

asciilifeform: mircea_popescu: consider emplacing the thing into the #t subjline

asciilifeform: if gabriel_laddel recently uploaded a commonlisp that doesn't behave like a retarded child when, e.g., socket shits itself 10,000time/sec, i must've missed..?

asciilifeform: gabriel_laddel: i'm fresh out of telekinesis pills, cannot debug your nic...

asciilifeform: trinque: presumably he wants to test with bare hands, etc.

asciilifeform: trinque: i'm assuming he doesn't want to use a library, hence the netcat

asciilifeform: (if you're using a crossover snake between two nics there is no conceivable reason to use anything but udp datagram)

asciilifeform: to transmit.

asciilifeform: lel, the victi^H^H^H^H^Hcustomers complain when you don't patch, and when you do...

asciilifeform: and the incidence of such a thing at a konsooomer-friendly price point is ~0.

asciilifeform: thestringpuller: there are not so many vendors that patch old shit eternally

asciilifeform: crapple box is quite comparable to a stainless steel prison toilet - it resists whatever attempt at modification, either by user or whatever shitware he syphilitically encounters

asciilifeform: (either until the iron mysteriously fails, two weeks out of warranty, or for decades)

asciilifeform: while crapple box, with its various familiar faults, chugs along more or less eternally in the condition it left the crate

asciilifeform: in practice, typical turdroid box resembles housewife's winblows 98 - crawling with popup maggots, 'mysteriously' slow, bristling with adware, etc.

asciilifeform: not interchangeable shit, though.

asciilifeform: VE-2016-1828 in May 2016 without doing a security review of the code in question. In only 20 lines of code THREE codepaths existed that allowed UAF. Apple fixed only one of those paths although the other release() methods were clearly right next to it in the code...'

asciilifeform: hat the PEGASUS surveillance malware was using completely new kernel vulnerabilities to takeover iOS devices and that Apple heard about these problems for the first time mid August 2016. Unfortunately after having reversed what kernel vulnerability has been used by the PEGASUS surveillance malware a completely different picture emerges: The kernel vulnerability known as CVE-2016-4656 was only still in the code because Apple patched C

asciilifeform: in other lulz, 'In the last two weeks many security professionals have praised Apple for reacting lightning fast to the PEGASUS threat that has been actively exploited in the wild. This praise was given because the parties involved kept samples from independent 3rd party researchers and did not reveal any detailed information about the kernel vulnerabilities involved to the public. Without this information the public simply assumed t

asciilifeform: mircea_popescu: and bleeding'em from outside (for the sake of argument positing that they ~have~ an outside) is available to weak/poor/haremless/etc. ??