News for hackers. Stuff that matters.

edgeform

Re:Writing a firmware-only keylogger on Monday July 05, 2021 @11:47PM (#27744060)
You're wrong, go see my reply to the other guy. What a miserable lot you two make.
Re:Writing a firmware-only keylogger on Monday July 05, 2021 @11:47PM (#27744056)
> I truly meant no offense

Work on your approach.

Re:Writing a firmware-only keylogger on Monday July 05, 2021 @05:56PM (#27742186)
> So I don't mean to be rude

He said, before being rude & condescending. Here, would a chat bot pick apart your miserable comment like this?

https://twitter.com/jsnell

Oh no I mixed up social media handles I must be a chat bot

> Skimmed for proper-nouns

Oh no I mixed up social media handles I must be a chat bot

> then generic shrills

Huh? I'm complaining about the very real technology present in the Realtek chips that enables any moron with access to a web browser to send firmware-level commands anywhere in the world.

Did you even read the article?

> about how the author and article are great

Are you a chatbot? I didn't even sing about the article being great, I asked if anyone had a real consumer application for the tech presented as an attack vector in the article.

Go outside. Talk to a human being. I'm betting it's been a couple years for you if you're this bad at not only misjudging intention but going straight to "this must not be a human being, only a bot would respond with something I do not wholly understand".

Again, what a miserable comment.

Re:Writing a firmware-only keylogger on Monday July 05, 2021 @04:52PM (#27741703)
RealWoW.
Re:How iOS 15 makes apps launch faster on Monday July 05, 2021 @04:37PM (#27741595)
Calling them 'essentially bricks' is calling them functionless, which they are not.

The iPhone 5/5c was released nine years ago. I'm just not crying for it. If your app dev isn't updating for iOS 15, you're stuck with the old version anyway. Sorry your decade-old device can't use the latest technology.

Re:How iOS 15 makes apps launch faster on Monday July 05, 2021 @04:26PM (#27741517)
It appears to be related to sign-in flow[1], but may not affect signing in via Google.com or other Google-hosted services directly. It's the API for "Sign in with Google", far as I can tell here.

[1]: https://developers.google.com/identity/gsi/web

Re:How iOS 15 makes apps launch faster on Monday July 05, 2021 @04:23PM (#27741500)
> before 2018 are essentially now bricks

Quit being overly antagonistic, you know this is hyperbole because you are

> someone with a device locked on iOS 10

Re:Writing a firmware-only keylogger on Monday July 05, 2021 @02:55PM (#27740845)
When Jason Snell posts on HN, I sit up in my chair.

Great read. That "technology" included in Realtek is absolutely bonkers -- who asked for that functionality at a consumer level? No one.

Re:Why Isn't iTunes Shuffle Random? on Saturday July 03, 2021 @08:19PM (#27726163)
> Asked 9 years, 10 months ago

> Active 8 years, 9 months ago

Come on. Try.

Re:EDIT : To be Deleted on Saturday July 03, 2021 @08:18PM (#27726162)
> I love IT, I love working

> I have to be happy to go to work when I wake up in the morning.

Not too sure you love IT there, my friend.

Also sounds like you haven't risen above the first couple tiers of any given organization, because a lot of your complaints are bottom-of-the-ranks type stuff:

> non-sense tasks, no trust, social pressure to prove my skills

Are you company hopping like everyone else your age like a damn jackrabbit?

What an awful headline.

If you're buying this webcam, you're buying an external mic. Onboard microphones for cameras have always been awful, this is not news.

> Distribution is a low margin business.

Hard disagree. It's low margin if you're doing it wrong.

Hank's Trucking exists. It's called FedEx Expedite, among many other expediting companies. You should check things out before your fingers type a check that facts can't cash.

The owner/creator of Nexus Mods is an abusive one toward his users.

Years back, there existed a simple Nexus Mod Manager for well... managing your mods for installed games. It was a simple tool that did the job well.

At some point the owner of Nexus Mods decided/needed to monetize, so he started jamming ads and slow connections to non-premium customers.

Soon after, he deprecated Nexus Mod Manager for Vortex. Go search their own forums if you want to see the nightmare, but "installing" a mod via Vortex takes around 9 clicks, doesn't always install the mod properly, and generally is slower than molasses. It's essentially an app wrapper over a poorly written website.

No shock at all they're making yet another anti-user, anti-creator move. They generally seem to have a grudge against their own community.

The entire "mod" community around gaming is like this as well. ModDrop was created as a response to the onslaught of ads/premium/bad stewardship and became the very thing it hated.

Re:Ask HN: Hobbyist Programmers? on Saturday July 03, 2021 @03:36PM (#27724150)
I don't code professionally because I know I can't hack it at that level. I wouldn't want to code for 40+ hours/week, it would drive me mad.

I program insofar to make things on Raspberry Pi, manage my home automation tasks in Linux, although I'm sure professionals would label what I'm doing "scripting" in some instances.

Re:The F1 App Hacked on Saturday July 03, 2021 @03:18PM (#27724022)
Oof. You can confirm it pretty much everywhere. Qualifying just ended for the Austrian Grand Prix, and many people will/would be paying attention to their phones for news relating to that.

Someone at FOM/Liberty Media (holder of the commercial rights for Formula 1, thus the responsible parties for the app)[1] is not having a pleasant Saturday evening in Austria.

A head or two should roll up the IT chain, but who knows ... might be a credential leak. An event was held at this same track last weekend, an oddity of the COVID-affected race schedule for the sport. Perhaps they re-used some credentials from last week, that were leaked/identified in the layover between race weekends.

[1]: https://en.wikipedia.org/wiki/Formula_One_Group

Re:WASM to PS Compiler on Saturday July 03, 2021 @03:16PM (#27724006)
> The so-called compiler implemented uses the dumbest possible implementation

I love remarkably blunt comments in code. The Quake III code that caused the uproar recently with Copilot probably being the most famous example.

Interesting to apply this to the logistics industry, specifically with freight movement costs. A company might use Joe's Trucking for 80% of their shipping needs, but Joe doesn't have trucks that can take a last second shipment to an important customer. So the company calls Hank's Trucking, who specializes in those last second fulfillment.

Both Joe and Hank enjoy the account because both fall into the upper-right quadrant in the article: they're tuned to keep the company's account high margin, and the "drop size" (volume of shipments in this instance) works fine for both outfits. Joe wouldn't want to only do two moves a week for the company, and Hank wouldn't want to do 50.

[citation needed] on that attempted forced MSA claim. I use a local account from inception and have not had a single issue being bothered to use an MSA.
Re:Using Paper for Everyday Tasks on Saturday July 03, 2021 @04:37AM (#27720215)
I've had the habit of having these things next to me for six months.

It's just not useful to me.

Re:Make Patterns Pop Out of Heatmaps with Seriation (2018) on Saturday July 03, 2021 @04:34AM (#27720203)
https://news.ycombinator.com/item?id=27713441

Today's hot topic, TSP solvers.

Re:RateOurCops – Like Yelp, but for Cops on Friday July 02, 2021 @07:50PM (#27718203)
If you want to take the dim, sound-bite-and-karma-friendly approach of not really considering the argument you just read... sure, I can see how you could come to this conclusion.
> "This product that isn't aimed at me isn't aimed at *me*, and that makes me stamp my feet in anger."

> Sometimes I already have background knowledge that overlaps with the course content.

I used to think like you, all the time. "Oh, I already know this." and while I'm sitting there being all smug and self-satisfied that I'm the smartest person in the room I realized:

* The content is good for a refresher. "Background" knowledge is just that, you're admitting you want to hear an expert speak on a subject yet want to throw out what they have to say because you "already know it from before this class".

* The content often provides context. Just like the "Previously on..." segment of TV shows that will recap specific plot points so the viewer understands the events of the new episode they're about to watch, discussing what you term "prior knowledge" will help contextualize the new content that you don't understand properly.

> Basically, I see no reason online courses can't be structured to give us more choices about how we want to consume the content!

OK, but that's not edX/Corsera's job lol

They don't have to cater to every single whim of every type of education personality. It's all well and fine that you, a multiple degree holder, would love to skip around content that you find boring/tedious/whatever while saying you want "someone qualified to teach me who can filter out what's important and what's not".

Like it or not, these websites are just simply not aimed at you, a large-brained Multiple Degree Holder. They're aimed at people who are behind you in education.

Re:JavaScript Is Weird on Monday June 28, 2021 @10:13AM (#27662236)
> these are not footguns and should not be used to attack JavaScript

No one is calling them that except you. The site says it right at the front:

> most of this syntax is probably, and hopefully, not something you use in your daily life.

Your obsession with having to choose Side A or Side B won't let you see this for what it is...

Just showing weird syntax in JS. That's all. Good lord.

Re:JavaScript Is Weird on Monday June 28, 2021 @10:10AM (#27662202)
Not to mention just because I was alive in 2012 doesn't mean I know or knew about this.

The parent comments floating to the top here seem to have a common theme of "I knew that already how did the rest of the world not also get the memo at the same exact moment I did?"

Re:Using Paper for Everyday Tasks on Saturday June 26, 2021 @06:21AM (#27640707)
I keep trying this. I have a coffee cup full of pens, a stack of 3x5 cards, and Post-It notes not 6" from my mouse hand. I just hardly reach for them.
Re:WD My Book users wake up to find their data deleted on Friday June 25, 2021 @03:37PM (#27635296)
> How could an oven

Starting pre-heat before you get home. Monitoring temperature away from home. Leaving a dish in the oven and starting it at a specific time, say an hour or two before you leave the office and head home for the day. Checking if you left the oven on after you left home.

> or washing machine

Notifications for the end of the cycle. Status of detergent levels if equipped ("Do I need fabric softener?" whilst at the store). Starting a load (similarly to the oven above) while you are on your way home so you don't end up with wet clothes sitting all day, so they're ready for the dryer when you walk through the door.

--

I get your popular cynicism, but c'mon now. None of the stuff I'm outlining there was researched, it was all off the cuff and I live in an apartment with "dumb" appliances from 1996.

Re:WD My Book users wake up to find their data deleted on Friday June 25, 2021 @03:31PM (#27635236)
> If I want to get data off it, I set up an isolated segment in RFC3927 space.

Do you really not see how completely unrealistic this is for the average consumer, and honestly the majority of HN readers?

Re:The rise and fall of Oxygen OS on Friday June 25, 2021 @03:29PM (#27635216)
> The users who are voting now

Except no one is voting "now", they voted nine months ago and now this post is making an entire article centered around that vote.

Re:I was let go for refusing to deploy a dark pattern on Friday June 25, 2021 @03:28PM (#27635208)
"Employee surprised when they wouldn't perform their work duties and were let go because of it."

We get it, you personally think dark patterns are here to destroy humanity. Lesson learned, don't shit where you eat. There's a lot I don't like about my work too but I'm not about to risk my stability just to make a point to some people on a blog post.

Re:The Next Backblaze Storage Pod on Thursday June 24, 2021 @12:51PM (#27620305)
Always love these articles, look forward to them without knowing it.

This one is particularly interesting as they discuss the logistical challenges of their own success in having to build more and more Storage Pods.

As always, a super fascinating read worth your time.

Older »