News for hackers. Stuff that matters.

MrStonedOne

Attack vector requires local execution access and allows for escaping limited privileges like non-root user accounts and breaking out of (some?) namespace jails used by containers and sandboxing systems.
than disable that specific functionality until you can make the framework instead of throwing out the whole thing in a tempter tantrum?
a man raping a man is rape in most jurisdictions, its only when women rape men does it become sexual assault or "other sexual violence".
I think you might be missing their concern.

The concern is that google basically funds firefox, and can choose to revoke that funding at the most inconvenient time for mozilla, risking bankruptcy. Companies ebb and flow on cash flow, and a unexpected drop at the exact wrong moment can cripple even the most well funded ones.

Or just threaten to do so to exert pressure.

Re:The UBI should be inadequate on Saturday November 11, 2023 @03:12PM (#38234056)
Giving poor people a thousand a month caused them to get more jobs. Giving them 6k up front caused them to get even more jobs.[0] Author's argument is invalid.

Percentage of Participants Working Full-time, Enrollment and 6-month Follow-up:[1]

Group A (1000usd/m): 18% -> 25%

Group B (6500usd one time + 500usd/m): 21% -> 35%

Group C (50usd/m): 22% -> 22%

[0]: https://news.ycombinator.com/item?id=37836296

[1]: https://drive.google.com/file/d/1gqtOfZG2sSanWgUdzn-lx-pwSXZ... page 22 (pdf page 23) figure 9

Re:Tic Tacs claim to be sugar free but are almost sugar on Friday August 11, 2023 @01:47PM (#37091581)
related fun fact: splenda has more calories than sugar. it can say 0 calories because it has less than 5 per serving (packet)
Re:Let the Internet Be Grimy on Sunday July 09, 2023 @08:43PM (#36660647)
More and more of the digital world, from the internet to what applications our devices allow us to install, is about filing off the edges and rounding all corners to make the world safer for the common denominator and i don't have to like it.

And as the digital world increasingly invades and influences our realities and experiences the importance of not only serving the common denominator gets more important, not less.

“I did some bash-fu to extract the IPFS hashes from the emails and grep for them in my nginx logs, and was surprised to find not a single match,” Stanley explains. “None of them have ever been accessed, and of the ones that I checked, none even worked.”
Some of those UX dark patterns would qualify as making the site inaccessible to people with add and adhd, others make it inaccessible to people with autism.

engagement driving bullshit could very easy become banned under ADA if the right public servant gave it enough thought.

Not everybody is allowed to have bank accounts.
The D&D world is not covered by the OGL. its the core mechanics that have been mirrored by not just other TTRPGs, but video game RPGs as well.

This is like if the names of the functions in the c++ STL (and their argument/return types) was released under gpl, and they came out and "updated" their license to be basically cc-by-sa-nc but worse and also claimed it retroactively applied to the license. It could technically have repercussions to other languages that mirrored the style.

Now the fun question! how much of what was covered by the OGL was actually copyrightable?

Ideas and facts are not copyrightable, arrangement of ideas and facts can be copyrightable with a higher bar of 'creativity', but the barrer to change before it becomes a new 'arrangement' and not covered is also lower.

Re:Not-so-great features coming soon to Windows 11 on Sunday December 11, 2022 @12:43PM (#33945378)
TPM2.0 is required because it allows for running of encrypted binaries and microsoft will need that feature to ensure people can't modify away any user hostile features.
Re:Louis Rossmann explains why he left New York on Saturday December 10, 2022 @02:26PM (#33935868)
Heavy regulation isn't the issue, its heavy bureaucracy as a stick to beat people with.

His ""violations"" were all mistakes on the cities part or auditors trying to pigeonhole things into regulations they don't apply to.

He followed the regulations, and that wasn't even good enough.

You say he "used the dense, relatively wealthy New York ecosystem," to launch a business, but from their prospective i bet they feel they started a company in their hometown and then their hometown spat in their face in an attempt to get more money.

Copyright protects software better than patents do.
Re:SimulaVR Has Been Subpoenaed by Meta Platforms, Inc on Thursday October 06, 2022 @10:43AM (#33108830)
Meta requested it, meta wrote the subpoena, and meta is the party who will receive the supplied documents.

You are confusing signed off by the court with issued by the court.

hardware required for isolation of powerline communication is gonna be hard to stuff in that small of a space.

Powerline tends to be sorta unreliable and only runs at like 5-15% of the rated max speed, but if you had buffering at the camera to ensure all frames made it to the otherside, you could work around that.

Re:Apple.com Is Down on Thursday September 15, 2022 @12:05AM (#32846885)
Nothing on that status page would cover the parts of the website that is down.
Re:Framework Ethernet Expansion Card is now available on Wednesday September 14, 2022 @04:40AM (#32834635)
No.

Those fucking suck, and some of us use our laptops on our laps, with ethernet connected. Those expanding jacks basically only work while it is on a desk because if the cable bends downwards even a tiny bit it just comes out.

Re:Who cares about diversity? on Monday September 12, 2022 @03:14PM (#32815326)
>you can't deny that a black woman has had a vastly difference life experience than a white man

So, where i get stuck, is that you can't actually make this statement about any individual black woman or white man.

The one common theme across all of social justice is that stereotyping is bad. Erasing individuality and forcing people to live in the shadow of their stereotypes is bad.

Yet its apparently allowed here? Because it mostly benefits minorities?

This is the unspoken line the separates identity politics and equality. A focus on minorities vs a focus on ending discrimination and stereotyping, which under equality would include AA.

When (most) people say they are against "woke" culture or "sjws" they generally mean they are against the identity politics flavor of ""equality"". Because identity politics is just a racist sexist dog whistle for discrimination against majorities.

Re:Bouncer – Private SMS Blocker on Saturday September 10, 2022 @01:34PM (#32792722)
its a plus and a minus.

Verifiably open source packages are a net positive to security because it ensures the code running is the same code that has the public's eye on it.

People keep forgetting this, because they spend most their time thinking about security in the terms of a enterprise system, but for a personal usecase, an app extracting data to their servers that i was not expecting is a info leak security breach.

Its just that acknowledging that fact requires treating most operating systems (ubuntu, (but not debian) android, and ios included) as malware and this is a uncomfortable position.

Re:TIL: You can access a user’s camera with just HTML on Tuesday September 06, 2022 @12:50PM (#32739763)
Secure context has never applied for form data and i see no reason why it would here.

If it's acceptable to send the picture as a file upload over http then i see no reason why it wouldn't be acceptable to send a webcam captured picture.

Why do you think it should or would?

Re:Premature optimization caught up with me as well on Monday September 05, 2022 @03:58PM (#32728711)
wrong.

Every program that has any need for optimization will quickly turn into a death by a thousand cuts.

There is no right or wrong level of premature optimization, it all comes down to how much time it takes to code it to be more performant. if it takes a tiny amount of time, do so, even if you get little gains. if it takes twice as long to make it more performant, only do so if necessary or results in more than 50% gains.

Re:PC wakes from sleep when changing clothes on Saturday September 03, 2022 @03:31PM (#32705248)
In college I was told about a case with punchcard mainframes where it would crash around the same time in the process of running a long complicated multi step calculation. The place had under floor wires and tiled flooring. One was lose and a worker feeding data in would walk across it at the same point in the process, generating an emi spike.
In the us, there is an unspoken belief that preventing criminals from ""winning"" is more important than protecting citizens.

This is why police fired into a stolen minivan that had a unrelated child and a shoplifting/carjacking suspect in it, killing both. Protecting the child took a back seat to punishing the prep.

Therefore CP laws very quickly stopped being about protecting the children and more about punishing the pedophiles.

Vindictiveness and spite are the unspoken role models of the US justice system.

Nudity in kids is seen as obscene purely because a pedophile could find it arousing. We are preemptively sexualing children in order to prevent their sexualiztion.

A child was once forced to masturbate in front of a camera by COURT ORDER. Police held them down. All because the child was a victim of child pornography and the court wanted a "comparison image" in a similar arousal state to prove it was a image of that child.

Once again, a child was victimized by the justice system, in order to punish a perp.

Never make the mistake of thinking anybody in the justice system gives a rats ass about protecting anyone.

Re:Use one big server on Tuesday August 02, 2022 @01:00PM (#32321305)
i handled a 8x increase in traffic to my website from a youtuber reviewing our game, by increasing the cache timer and fixing the wiki creating session table entries for logged out users on a wiki that required accounts to edit it.

we already get multiple millions of page hits a months for this happened.

This server had 8 cores but 5 of them were reserved for the 10tb a month in bandwidth game servers running on the same machine.

If you needed 1,000 physical computers to run your webapp, you fucked up somewhere along the line.

Re:Use one big server on Tuesday August 02, 2022 @12:54PM (#32321198)
/tg/station, the largest open source multiplayer video game on github, gets cloudheads trying to help us "modernize" the game server for the cloud all the time.

Here's how that breaks down:

The servers (sorry, i mean compute) cost the same (before bandwidth, more on that at the bottom) to host one game server as we pay (amortized) per game server to host 5 game servers on a rented dedicated server. ($175/month for the rented server with 64gb of ram and a 10gbit uplink)

They run twice as slow because high core count slow clock speed servers aren't all they are cracked up to be, and our game engine is single threaded, but even if it wasn't, there is an overhead to multithreading things which combined with most high core count servers also having slow clock speed, rarely squares out to an actual increase in real world performance.

You can get the high clock speed units, they are twice to three times as expensive. And still run 20% slower over windows vms on rented bare metal because the sad fact is enterprise cpus by either intel or amd have slower clock speeds and single threaded performance then their gaming cpu counterparts, and getting gaming cpus for rented servers is piss easy, but next to impossible for cloud servers.

Each game server uses 2tb of bandwidth to host 70 player high pops. This works with 5 servers on 1 machine because our hosting provider gives us 15tb of bandwidth included in the price of the server.

Well now the cloud bill just got a new 0. 10 to 30x more expensive once you remember to price in bandwidth isn't looking too great.

"but it would make it cheaper for small downstreams to start out" until another youtuber mentions our tiny game, and every game server is hitting the 120 hard pop cap, and a bunch of downstreams get a surprise 4 digit bill for what would normally run 2 digits.

The take away from this being that even adding in docker or k8s deployment support to the game server is seen as creating the risk some kid bankrupts themselves trying to host a game server of their favorite game off their mcdonalds paycheck, and we tell such tech "pros" to sod off with their trendy money wasters.

>I don't know where to draw the line but assuming self driving cars are a thing they'll arguably need constant new data and constant updates so unlike most cars to date, they aren't things you'll just be able to buy and the sever your connection with the company you bought it from.

That sounds like an argument against self driving cars.

Proven's comment is dead because they are banned. on hackernews banned users can still comment, but their comments start out [dead] until vouched. (comments that get downvoted and flagged enough also go [dead], as do comments deleted by HN mods)

if you have enough karma, you can vouch for banned user's comments by clicking the vouch button, it only shows on the direct page for the comment, you get by clicking the date of the comment.

I know all of this because I am banned.

Re:Your phone may soon replace many of your passwords on Saturday May 07, 2022 @03:37PM (#31297823)
>Relying parties (aka online services using FIDO protocols) have a lot of freedom to define exactly how restrictive they want to be by making choices about which devices they accept.

This, in my view, is the problem with FIDO.

They shouldn't be able to make that choice.

None of those things are features of blockchains, they are all features of cryptocurrencies.

Blockchains refer to any time you use a chain of hashes to prove a block of data and any data that came before it, has not been mutated.

The time keeper service that takes out classified ads in the new york times with hash blocks for the documents they timestamped to prove they were timestamped before a certain date, is a blockchain, because they include the previous day's hash.

Git, is a blockchain.

It's just hashes all the way down.

The random entropy driver in linux, is technically a blockchain, with how it works.

Older »