LeberechtReinhold

joined 1 year ago
[–] LeberechtReinhold 8 points 1 year ago

Waterloo (1970). That many extras required the collaboration with the soviet army, as well as bulldozing a big area to film.

We can see the difference very clearly with the new Napoleon trailer, which despite the huge budget looks outright poor in battles.

[–] LeberechtReinhold 8 points 1 year ago

Do people have such short memory? The US does it, yeah, it was a super major scandal years ago. Spying not just on "enemy" states but also supposed allies, as well as all citizens all over.

[–] LeberechtReinhold 3 points 1 year ago

Set your build goals now (check [email protected] ) and use alerts/price trackers to see good deals. There are some good deals on Black Friday but many are bogus, its to better to check every now and then for deals.

[–] LeberechtReinhold 1 points 1 year ago

Yeah, the password is much better. In Windows you also realize it because the admin screen is hard to miss, but you can just go ahead and accept it, since many users run their PC as admins.

[–] LeberechtReinhold 1 points 1 year ago (1 children)

I mean, in europe they are more expensive, 4070RTX was about 700€ (770$). Different currencies and different taxes. And greed.

[–] LeberechtReinhold 4 points 1 year ago (4 children)

If you have root in linux you can disable that, so you are in the same state. You could also selfsign.

This is an issue, but IMHO quite overblown.

[–] LeberechtReinhold 22 points 1 year ago* (last edited 1 year ago) (11 children)

nVidia GPUs:

970GTX was 329$ in 2014

1070GTX was 379$ in 2016

2070RTX was 499$ in 2018

3070RTX was 499$ in 2020

4070RTX is 599$ in 2023

Probably, the 5070 in 2025-6 will be 650-700.

[–] LeberechtReinhold 1 points 1 year ago (1 children)

With admin privileges you can do the first one though, as the whole revocation list on certs is a fucking general mess (and that applies to web in general, not just windows).

In general if your attacker is admin or has tricked you into executing something as admin, you are pretty much fucked, regardless of drivers.

[–] LeberechtReinhold 5 points 1 year ago* (last edited 1 year ago) (1 children)

No, that exploited a legitimate driver to be a point of entry and enable other attacks, and is much more problematic.

This enables attackers to make non legitimate drivers appear legitimate to windows, but they have to be installed anyway, requiring admin privileges.

[–] LeberechtReinhold 12 points 1 year ago* (last edited 1 year ago) (11 children)

Yes and no. It's an escalations issue. Even with administrator access, you are not supposed[note1] to be allowed to install drivers with invalid signature, which supposedly haven an even high chain of trust (although this really iffy unless you are using secureboot as well but that's another discussion).

That said, when the attacker already has admin privileges you are so far in the compromised chain that the kernel driver is an issue, but you are most likely completely fucked anyways.

This just makes your vulnerability state to be the same as in linux, where your drivers arent required to be signed in the first place, for example.

[note 1]: There's a caveat, with admin acess you can disable driver signatures entirely, using bcdedit, this is called test signing and leaves a visible watermark at all times with "Test signing enabled", therefore the user can already see that the computer is compromised. Its mostly useful for devs (or attacking people who dont give a fuck).

[–] LeberechtReinhold 29 points 1 year ago (1 children)

The whole signing of kernel drivers and UEFI code has always felt more of a walled garden/security racket to get actual legitimate hobbyist/open source to pay a shit ton for certificates, rather than actual security. Especially with all the hoops with older version support (if you wanted to fully support win vista or early7 you needed to dual sign with sha1, and most cert companies didnt know that and you had to fight with them to provide one), and the super shitty page that was the windows development hardware center for signing.

[–] LeberechtReinhold 1 points 1 year ago

If she wants a PC for starfield the best option would be to wait closer to release. Both AMD and nVidia are doing big sales and reducing prices now and this is likely to continue until nextgen so they clear stock up. Also at release you will be aware of performance problems and you may need a stronger build than the minimum reqs suggest.

view more: ‹ prev next ›