News for hackers. Stuff that matters.

dikkechill

Re:What if America turned off Britain's weapons? on Friday March 07, 2025 @02:06PM (#43293198)
With 'only one country', I assume you refer to South Africa. Are you aware that the ANC itself approved of nuclear disarmament?

If you look at the Budapest Memorandum, Belarus, Kazakhstan and Ukraine also voluntarily gave up their nuclear arsenals by becoming a party to the Treaty on the Non-Proliferation of Nuclear Weapons in exchange for security guarantees.

I found the open source Valetudo (https://github.com/Hypfer/Valetudo) project quite interesting, as it sits between the vendor firmware and (cloud) connectivity. The project is made possible due to Dennis Giese's research.

It currently supports Dreame, Xiaomi, Roborock and some others. But not Ecovacs. And not sure it prevents this type of Bluetooth vulnerabilities.

How did you do your research and which one did you eventually buy?
That's a much requested feature. With imho two main challenges:

1. Much traffic data is private / requires licensing, however some countries have reasonable public data. For example the TraffXML (https://gitlab.com/traffxml) project has some.

2. The project is free to use, but also volunteer driven. It requires setting up a privacy preserving "live data" infrastructure.

If you think this is a nice challenge and you can help, feel free to reach out!

https://github.com/organicmaps/organicmaps/issues/1160 would be a good starting point.

Cool projects! I actually had a look at you gtfs-server, to use Rust for processing GTFS files. Processing GTFS (basically large zipped text files) is quite resource intensive indeed, especially if you want to do it for the whole planet. What were your learnings?
Thanks for bringing this up to hackernews! The challenge for OrganicMaps is to make it privacy preserving and offline usable, which means on device routing and getting as much information on the device as possible.

The referred document concerns the existing static part, it's a rather cumbersome to build it yourself at the moment. There is some routing logic in the app - I think from the Maps.me time - but currently disabled. The idea is to redesign this - in the mentioned ticket - and divide it in static (e.g. stops, routes) and 'live' data (e.g. schedule changes). It requires an efficient infrastructure. It's all volunteer drive. Wanna help, feel free to contribute!

Re:Hungarian Railways' Live Countrywide Map on Tuesday January 02, 2024 @07:56AM (#38841154)
Have a look at https://travic.app

It visualizes GTFS data for many countries, also outside of Europe. Next to trains, it shows buses, metro's, trams, etc.

For interesting technical details (e.g. on interpolation, updates, scaling, etc) you can find the paper at http://ad-publications.informatik.uni-freiburg.de/theses/Mas...

Re:InfoWars files for bankruptcy in U.S. court on Monday April 18, 2022 @11:02AM (#31071605)
I agree with you on the issue with trust. The Atlantic compares the US developments from the last 10 years with what happened to the tower of Babel:

"Look, they are one people, and they have all one language; and this is only the beginning of what they will do; nothing that they propose to do will now be impossible for them. Come, let us go down, and confuse their language there, so that they will not understand one another’s speech."

https://www.theatlantic.com/magazine/archive/2022/05/social-...

Re:The mysterious disappearance of the longest shrubbery on Saturday September 04, 2021 @02:56AM (#28412757)
Obligatory shrubbery Monty Python: https://youtu.be/watch?v=2UbtcmjfKa8
Re:'Insect apocalypse' more complicated than thought on Friday April 24, 2020 @06:55AM (#22966664)
Perhaps a better source in English, the EU policy advisory report from the European Academies Science Advisory Council from 2015 on Ecosystem services, agriculture and neonicotinoids.

https://easac.eu/fileadmin/Reports/Easac_15_ES_web_complete_...

Most neonicotinoids are now banned for outdoor use in the EU: https://ec.europa.eu/food/plant/pesticides/approval_active_s...

Re:'Insect apocalypse' more complicated than thought on Friday April 24, 2020 @06:32AM (#22966533)
One of the driving forces behind the neonicotinoids theory is a toxicologist called Henk Tennekes, who used to work as a consultant for Solvay, Roche, Monsanto en Sandoz (now known as Syngenta). Basically he claims that the toxicity was underestimated as it grows with time, the damage to the nerve system in insects is irreversible.

The pesticides also go into the surface water, where they found a link between higher surface-water concentrations of imidacloprid - a specific neonicotinoid - and a decline of birds that feed on insects.

Article in Dutch: https://www.ftm.nl/artikelen/toxicoloog-tennekes-had-al-die-...

On the toxicity of exposure time: https://www.sciencedirect.com/science/article/abs/pii/S03004...

On the decline of insectivorous birds: https://www.nature.com/articles/nature13531

Re:Reconsidering whether Prohibition was a failure on Saturday June 15, 2019 @11:48PM (#20193742)
The problem is not so much whether it's the government's job to regulate it, but that it is primarily treated as a criminal issue, and thus is 'solved' through police enforcement. In other countries people see it more as a health issue, this leads to completely different approaches and policies. What would happen if we treated e.g. education primarily as a criminal issue?
Nice to mention the link to Objectivism and Ayn Rand. I can highly recommend Adam Curtis's 'All Watched over Machines of Loving Grace' docu [1], which goes into that relationship and has a great scene of pong!

[1] https://en.wikipedia.org/wiki/All_Watched_Over_by_Machines_o...

What I find interesting is that it supports access to an external wallet on your phone. This reduces the attack surface.

Another browser that has a wallet built in is Brave [1]. But afaik this does not support access to wallets on other devices.

[1] https://brave.com/funding-your-brave-wallet/

Re:Wi-Fi Gets More Secure: What You Need to Know About WPA3 on Saturday September 08, 2018 @03:30AM (#17939899)
Thank you, I appreciate that!

Actually, thinking a bit longer about the problem, the issue in my mind is that vendors/producers do not have an incentive to update software if you only pay for the hardware once. For them it's just a cost. It's more interesting to sell more hardware. My strategy as consumer is to go to open source for such devices. But perhaps there are better strategies.

I'm aware of Cisco having a model to pay for software updates, but this is mainly for business clients. Does anyone know other vendors that have business models, that create incentives for updating devices? Perhaps even for consumers?

I remember that in the past MacOS updates had to be purchased, but this no longer seems to be the case. Is there actually a consumer market for such business models, where hardware and (paid) software are tied together for a longer life cycle?

Re:Wi-Fi Gets More Secure: What You Need to Know About WPA3 on Friday September 07, 2018 @11:27PM (#17939228)
I agree, you have a good point with respect to a large amount of older hardware and I do not have a solution for that problem. What I can say is that I try to buy hardware which has support for open source software and has a community around it. So far this helped me to extend the life of these devices, as it does not depend on the vendor alone.

I'm not really sure how to interpret your 'Awesome!'. If it was meant snarky and if you're willing to, please have a look at the HN guidelines for comments [1]. We can then improve the quality of the discussion.

[1] https://news.ycombinator.com/newsguidelines.html

Re:Wi-Fi Gets More Secure: What You Need to Know About WPA3 on Friday September 07, 2018 @10:01PM (#17938978)
If you're using something like OpenWRT, you most likely don't need to buy new hardware.

The WPA3 functionality is already added to hostapd and wpa_supplicant [1]. Look for the terms SAE (Simultaneous Authentication of Equals), DPP (Device Provisioning Protocol) and OWE (Opportunistic Wireless Encryption).

The current experimental wpa_supplicant Debian package has this enabled [2]. I think the main challenge is upgrading clients, especially when vendors no longer provide updates.

[1] https://w1.fi/cgit/hostap/log/?qt=grep&q=SAE

[2] https://packages.qa.debian.org/w/wpa/news/20180722T152029Z.h...

Re:The Most Common Type of Incompetent Leader on Saturday March 31, 2018 @12:43AM (#16721765)
I truly believe that if you can't do the job of the people below you: you're not qualified to lead them. If you can't motivate people to work harder to solve the issues that they're stumbling on: you don't deserve leadership. If you can't get your team together to coordinate their activities in a way that makes Russian ballet seem like a circus full of bears - you need to get out of the way and get someone in who can handle the machine-like precision needed to coordinate an organization and start making real headway to building the business.

I disagree that if you can't do the job of the people 'below' you, you're not qualified to lead them. When I first lead a team, I worked with people that were a lot more competent in specific areas than I ever will be. In turn, I could still learn from my 'managers', but in different areas than where I have my skills. So everybody learns from one another.

I do agree that motivation is very important. I had to think of theory X or Y. Do you distrust (X) or trust (Y) people to do their work well? These believes tend to be self-fulfilling, but can still be useful in different situations. Distrust tends to lead to a lot of control and micromanagement, which imho for knowledge workers does not work. Trust has advantages and for me leads to a better working culture, but can also lead to the issues described in the article.

I learned a lot from an online version of Harvard's Psychology 1508: The Psychology of Leadership given by Tal Ben-Shahar. If you can find it somewhere (there are some classes on youtube), highly recommended!

To differentiate between needs and (economic) wants, I found the "fundamental human needs" framework quite useful: https://en.wikipedia.org/wiki/Fundamental_human_needs (as developed by Chilean Economist Manfred Max-Neef).

Basically: Subsistence, Protection, Affection, Understanding, Participation, Leisure, Creation, Identity and Freedom.

Re:The Most Common Type of Incompetent Leader on Friday March 30, 2018 @11:43PM (#16721591)
If you're interested in how that works, I can recommend psychologist Marshall Rosenberg (a student of Carl Rogers): https://www.youtube.com/watch?v=LkQlAL8mVPs

Another student of Carl Rogers was Joseph Weizenbaum, the creator of ELIZA.

Re:Patriot Missiles Are Made in America and Fail Everywhere on Thursday March 29, 2018 @11:02AM (#16707607)
The mentioned 1991 issues with the Patriot Missile were due to an issue converting integers to floats.

  The [system's] prediction of where the Scud will next appear is a function of the Scud's known velocity and the time of the last radar detection. 
  Velocity is a real number that can be expressed as a whole number and a decimal (e.g., 3750.2563 . . . miles per hour).    
  Time is kept continuously by the system's internal clock in tenths of seconds but is expressed as an integer or whole number (e.g., 32, 33, 34 . . .). 
  The longer the system has been running, the larger the number representing time. 
  To predict where the Scud will next appear, both time and velocity must be expressed as real numbers. 
  Because of the way the Patriot computer performs its calculations and the fact that its registers are only 24 bits long, the conversion of time from an integer to a real number cannot be any more precise than 24 bits. 
  This conversion results in a loss of precision causing a less accurate time calculation. 
  The effect of this inaccuracy on the [system's] calculation is directly proportional to the target's velocity and the length that the system has been running. 
  Consequently, performing the conversion after the Patriot computer system has been running continuously for extended periods causes the [system's estimated Scud position] to shift away from the center of the target, making it less likely that the target will be successfully intercepted.   
See also http://cs.furman.edu/digitaldomain/themes/risks/risks_numeri...
Re:Sam Altman, the Bilderberger on Tuesday June 07, 2016 @02:22PM (#11856531)
To my knowledge the Bilderberg conferences operate under Chatham House rule, with the goal of encouraging openness and information sharing through a certain degree of anonymity to the outside world.

In practice this often means that attendees can reveal what was discussed, but not where, when or from whom they obtained information.

So if you happen to have the chance to talk with an attendee, you could potentially learn what was discussed (ofcourse without any references to where it was discussed) ;-)

Re:Pirate Bay founder builds the ultimate piracy machine on Saturday December 19, 2015 @08:46AM (#10763535)
For the original page of the project, see also http://konsthack.se/portfolio/kh000-kopimashin/