#race condition

Empirically, just based on observed behavior, it seems that Git has lots of commands that you'd think are read-only, but which in some cases will mutate internal Git state - specifically, the index (normally at ".git/index"). I haven't yet figured out if this can ever happen with other internal ".git" files.

This creates a race condition with any networked filesystem sync - if you do some work on a local checkout of a repo, then switch to another device to continue where you left off, you can't safely check if Syncthing has synced the local changes to the repo in the most intuitive way: by running commands like "git status".

You have to wait until you're sure the changes have synced, or you'll get a Syncthing merge conflict with the Git index file, which will manifest as weird/unexpected results from commands like "git status" and "git diff [--staged]".

(If you want to look more deeply into this, I'd probably start by reading and understanding Git's "Racy Git" documentation, which seems indirectly relevant - it's talking about a different race condition, but I wouldn't be surprised if the optimization which causes that race condition and/or any workaround which mitigates it contributes to this race condition.)

Here's another contender for the most useless fact about a Sonic game

You know that crash in Labyrinth Zone act 1? They never fixed it in Sonic 2

In fact, you can trigger it much earlier if you know where and when to do it, but it's trickier to pull off.

Race Condition low-poly arcade game developer evaluating a port for Linux with Windows PC. Thanks to the effort and further detail from developer Ravine Studios. Which is currently available on Steam with 93% Positive reviews. Swedish indie developer Ravine Studios released their physics accented arcade racing game, Race Condition. Which is doing well on Steam right now. A game that also takes place in a modern low-poly arcade world. While players of Race Condition find themselves as a rookie in a highly competitive open-wheel racing league. A rivalry with the suspiciously good opponent Mr. Dickmann takes them on a tour across the world. One that also unfolds a series of intense races with their fair share of crashes, pit-stops, and strategic choices. Now that you have the premise of Race Condition. I reached out to Ravine Studios regarding Linux support. Doing so in partial response to the Discussion post. But also as a follow up to the ongoing emails.

As for a Linux port, we are still evaluating the cost/benefit of this. As you know, Steam are pushing Proton quite heavily (even more so now that Steam Deck has come out).

Since Proton is one of the issues here. I did test out Race Condition myself, yes it works, as does the Steam Demo. But the game is developed in Uniy 3D, which does make the porting process far easier. As a result, Ravine Studios will continue to evaluate a port. Interested Linux gamers can vote via the Discussions link above. If you're undecided, check out the gameplay trailer.

Race Condition Trailer

Taking its low-poly looks and simple controls from the arcade hits of the past. Race Condition adds in realistic car behavior to end up with arcade racer. One that also looks deceptively simple, but provides a real racing challenge. Doing through a simple David and Goliath story. In true arcade fashion, the races are only a few speedy minutes long, and there is no heavy car setup. Coupled with fast loading times, players might just find themselves lost in a “just one more go” loop. Resistance is provided by the opponent AI which has been carefully crafted to play fair. Whatever the AI manages, the player could do the same. The best chance of beating them might just be with a more clever pit-stop strategy. Race Condition ships with three distinct game modes:

World Tour Travel the world by beating rivals and unwinding the story of who will be the champion. Set on four continents, the 21 tracks (including 10 reverse versions), unlocks as the player progress through the tour.

Quick Race Play the unlocked tracks to climb the online leaderboards, or go head-to-head with friends in local split screen racing.

Time Trial Practice makes perfect. Here, the player can enjoy the unlocked tracks without pit-stop concerns or AI drivers getting in the way. Speed is crucial though, as the player searches for the perfect race lines in an attempt to beat the global lap records.

Race Condition

good lord my screenshots are so low-res. I don’t know why that is. anyway this is a simple circuit racing game - just accelerate and brake - but it’s the kind of game for people that like Trackmania and that kind of game. I did a time trial for a bit until I got like 128th place on leaderboards (pretty good!) and then did a race against the CPU like the above (I got 3rd place). I like how well the menu interface and stuff works; it’s all very well-made! the cars also flash a red light at the back when you’re going too fast for a corner which is cool (well you can still try and cheese a drift but yknow). game comes out March 1st!

Grand Mountain Adventure: Wonderlands

looks like shit in my low-res screenshot again

Some programming algorithms require a series of operations to execute in the correct order or with the correct timing. In a multithreaded or distributed environment, this can be difficult to control, and a poorly-written algorithm can suffer from bugs if it does not enforce checks on the sequence. If an attacker discovers the flaw, he can use malicious code to try to exploit the bug in his favor. This attack vector is known as a race condition.

Here's the week in review.

Articles:

0-day race condition in Parallels Desktop for Mac (Local Privilege Escalation On Host):  https://beistlab.wordpress.com/2015/01/08/0day_race_condition_parallels_desktop/

Practice of Android Reverse Engineering: http://www.slideshare.net/jserv/practice-of-android-reverse-engineering

New Javascript Deobfuscator Tool: http://www.kahusecurity.com/2015/new-javascript-deobfuscator-tool/

Btproxy - Man In The Middle Analysis Tool For Bluetooth: http://www.kitploit.com/2015/10/btproxy-man-in-middle-analysis-tool-for.html

Tricky new malware replaces your entire browser with a dangerous Chrome lookalike: http://www.networkworld.com/article/2994803/security/tricky-new-malware-replaces-your-entire-browser-with-a-dangerous-chrome-lookalike.html

Fitbit Vulnerability Means Your Tracker Could Spread Malware: http://www.darknet.org.uk/2015/10/fitbit-vulnerability-means-your-tracker-could-spread-malware/

How to Solve Caching Conundrums: http://www.sitepoint.com/solve-caching-conundrums/

Hacking ZigBee Networks: http://resources.infosecinstitute.com/hacking-zigbee-networks/

Automating Forensic Artifact Collection with Splunk and GRR: http://informationonsecurity.blogspot.com.au/2015/10/automating-forensic-artifact-collection.html

Hackers Can Wirelessly Upload Malware to a Fitbit in 10 Seconds: http://gizmodo.com/hackers-can-wirelessly-upload-malware-to-a-fitbit-in-10-1737880606

Twitter:

C++ Turns 30 – Looking Forward to the Future http://t.co/34DzbLqRvq

— The Security Sleuth (@Security_Sleuth) October 18, 2015

Connected kettles boil over, spill WiFi passwords over London http://t.co/U97seBZ6qo

— The Security Sleuth (@Security_Sleuth) October 19, 2015

BlackBerry says it has fixed Android's rampant security issues with Priv http://t.co/E0O4DJTUO4

— The Security Sleuth (@Security_Sleuth) October 19, 2015

Adversary Manifesto https://t.co/63XlHYq0Ri

— The Security Sleuth (@Security_Sleuth) October 19, 2015

In honor of Snorty's 2016 Calendar release, we're giving away some Snort swag to 3 lucky winners! Snort On! pic.twitter.com/ARWHno8YSS

— Snort (@Snort) October 19, 2015

Handbook on Securing Cyber-Physical Critical Infrastructure https://t.co/aIiJ5aVFzs #InfoSec #CyberSecurity #Tech pic.twitter.com/5ufl7XkNOk

— CyberWarrior (@CyberDomain) October 20, 2015

Firefox will warn you when your password will be exposed https://t.co/n6j6xNBYTs

— The Security Sleuth (@Security_Sleuth) October 21, 2015

Closed Circuit Cameras, NAS Devices Enrolled in Botnet https://t.co/T7YVuHAUgQ

— The Security Sleuth (@Security_Sleuth) October 22, 2015

Security Slice: Beneficial Botnets? https://t.co/FwupLvTEvl

— The Security Sleuth (@Security_Sleuth) October 22, 2015

DDoS scammers collect $20,000 with Ashley Madison extortion https://t.co/CXUplm0AEE

— The Security Sleuth (@Security_Sleuth) October 22, 2015

Learning Android Forensics A hands-on guide to Android foren https://t.co/XHW7LBggfP #InfoSec #CyberSecurity #Tech pic.twitter.com/HJCZ5D4lYf

— CyberWarrior (@CyberDomain) October 24, 2015

Read last weeks round up here