• 0 Posts
  • 7 Comments
Joined 8 months ago
cake
Cake day: January 25th, 2024

help-circle
  • From what I understand, the end of the URL string is just one of the clues the browser uses to determine the “type” of received data (https://mimesniff.spec.whatwg.org/), and the true behavior depends on the browser’s specific implementation. A part of the process involves actually reading and analyzing a small portion of the received file to see if the file really is the type that the URL claims it is. For example, I started a quick python server, and made it serve the OP image, except I renamed it as a jpg file (without actually converting the image of course). When saving the picture inside the browser, Firefox correctly identifies the file as a png image: While edge incorrectly tries to save the image as a jpg image:

    Regarding your “MP3” file specifically, opening it in a hex editor reveals that the actual file contents identifies itself as an M4A file, despite what the URL claims:

    So, you should be good to download them any way you find convenient, and then just renaming them to the proper extension afterwards.


  • It’s an exploit path to a UEFI bootkit, so at the very least you’d have to throw your motherboard away or find someone that can physically overwrite it through an external flash programmer or something. And the patch should be delivered through a UEFI firmware update, so if your motherboard is no longer supported you would have to buy a new one. And for laptops and embedded devices having everything soldered in, the motherboard is basically the whole computer, so I don’t think it’s that much of an exaggeration.

    I guess it’s true that if you have ring 0 access you’re boned, bug if your ring 0 access gets upgraded into ring -2 access you are even more boned. They put those security boundaries in place for a reason after all.





  • That article (or rather, the article linked in that article) doesn’t contradict your intuition, just a specific interpretation of that intuition. The randomly generated data puts everyone around 50%, which is indeed what you would expect from randomly uniformly generated data. So the similarity that the generated data presents is supposed to imply the conclusion that “everyone thinks they’re about average, so their judgement is no better than randomly guessing (assuming that the guesses are uniformly distributed)”, which is a subtle difference from “dumb people think they’re smart” - the latter attributes some sort of “flawed reasoning” to one’s self-judgement, while the former specifically asserts that there is absolutely no relevant self-judgement going on.

    edit: You would also be correct that this doesn’t disprove the previous explanation, it just offers an alternative explanation for the observed effect. The fact that data matches up with a generated model definitely does not prove that it is not actually caused by something else, which is one of the criticisms of that viewpoint. It is obviously easier to rigorously demonstrate a statistical explanation than a psychological explanation of course, due to the nature of the two different fields.