Hacker Newsnew | past | comments | ask | show | jobs | submit | guipsp's commentslogin

In the script tag you only have access to JS. This allows you to escape JS and have native code execution. It is still sandboxed by os-level primitives, but it is an escalation/first step in successful exploitation.

I see, so there are certain things that arbitrary native code could try do (let's say, try to execute a certain syscall) that native code produced by the JIT compiler wouldn't normally be able to attempt?

It's specifically about the mechanics/physics rather than the model, but yes.


It has the vertices, the surfaces, the textures and the animations.

There's a minecraft mod too, you press m and f5, boom you're mario.


The Linux kernel is pretty small


This does still look like it uses XLA, fwiw.


It is not a stupid concern, butt there is architecture around making sure you can't just save a request for later and replay it


It is mostly developed by AMD and used to be hosted on the AMD github iirc


You cannot explain everything to everyone all the time. Besides, this is not even a paper. Sometimes you are not the target audience and have to put some words into Google.


While that is true, it's not like I can use two laptops at once


The hotel can just not offer free cancelation


The irony, hotel industry is among the cheapest.


You might be mixing up LXC and LXD


From Incus main page:

> The Incus project was created by Aleksa Sarai as a community driven alternative to Canonical's LXD. Today, it's led and maintained by many of the same people that once created LXD.

Thé confusion si real


Even I that worked for a long while with this tech would mix them up time and again, I think it's understandable.


No, LXD’s LXCs. I use it and it’s good.

The UID mappings are correctly setup in Ubuntu so the containers run non-privileged by default.

I hear Incus, a fork of LXD, is better. It’s used in truenas.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: