if I'm reading the paper correctly, the UTM is effectively the host for a virtual TM and in this attack, the states that the UTM goes through to implement the virtual TM can be exploited with careful input so that the virtual tape head of the TM ends up in the data area of the virtual tape and executing arbitrary code ...

Show thread

via Risky Business Podcast - The Register reports (among others) of code execution vulnerabilities in Minsky's Universal Turing Machine implementation from 1967 ... theregister.com/2021/05/11/tur

eg:

old-style: {"locationId":"c066ea81-4f9e-4474-8242-390cd894bad5","locationName":"Public Record Office Victoria - Public Record Office Victoria","jti":"0ad3ba77-83c3-4d72-977f-3117d4c7edda","exp":3183420454,"iat":1605583654,"iss":"dvrs.service.vic.gov.au"}

new-style: {"t":1,"lid":"U2FsdGVkX1/36yzY+thZTGsha1/QwQ4chZAR1HBOhKm7rr68hDDfvBFEc0D9lj6cA1eI8dVahDEKJtmXvmOlxg==","ln":"Cobradah Homestead"}

Show thread

which means that the newer QR code is likely to be easier to scan as it doesn't have to be as dense ...

Show thread

I think that something has changed though - previous URLs generated with a metadata=XXX argument appear to contain a full-blown JWT with signatures and issuing numbers and are huge ... more current ones seem to be a simple base64 encoded JSON blob of location name and a hashed binary string ... 600char vs 200char (ish) - including the leading base url

Show thread

hat-tip to @bruceherbert for this - some sort of mapping/survey flights going on over Melbourne at the moment - check this out: flightradar24.com/F406/278d113

sometimes there are mornings and other times there are Mornings ...

... I've not had the music-induced goosebumps to metal before, so that was new ... probably helps that I've rehearsed and performed it before ... :)

Show thread

I feel the "flying coffin" tag is a little unfair, but this does look an interesting place - roughly half-way between Tbilisi and Zugdidi (on the way to Mestia) traveller.com.au/chiaturas-dys

The cancelled Dr. Seuss books are selling for $100+ on fleabay already, which is probably going to save a lot of libraries from having a discussion about whether to cull them from circulation or not: they'll get stolen and sold first.

Show older
jauntygoat.net

Freedom needs horns! An expressive platform for today's modern, privacy-aware goat.