ehntoo

Despite that petition being denied, Part 47 97.309[1] is pretty clear that as long as the mode's "technical characteristics have been documented publicly" it's fair game, subject to 97.307(f) [2].

[1] https://www.law.cornell.edu/cfr/text/47/97.309

[2] https://www.law.cornell.edu/cfr/text/47/97.307#f

The Microsoft Precision Touchpad[1] devices are interfaced over I2C or USB. Bandwidth for I2C depends on implementation AFAIK, but should be plenty for a responsive touchpad.

[1] https://docs.microsoft.com/en-us/windows-hardware/design/com...

If it's an issue in an early stage of the production pipeline and the same chemical contamination is in place for more than one lot, you eat up to an entire pipeline full of product.

I heartily recommend this talk. It and the corresponding proof-of-concept Intel userland packet processing driver[1] went a long way for me in removing a lot of the magic from low-level network packet handling and device management in Linux.

[1] https://github.com/emmericp/ixy

The submission title is taken from the post, but isn't a good description of what this is addressing. This is Trustico's response to DigiCert's revocation of certificates and emails to certificate recipients.

Discussion of the DigiCert announcement here: https://news.ycombinator.com/item?id=16485801

I have not been able to trigger this with ssh, but certainly have been able to with Screen Sharing, even after explicitly re-disabling the root account.

I think the standard approach for crates to work around problems like this is to patch the vendor's XML. Terrible that it's necessary, but workable. The "STM32F103xx.patch" in japaric's stm32f103 support crate [1] seems a decent example of the sort of hacks that are standard. [1] https://github.com/japaric/stm32f103xx/blob/master/STM32F103...

From my own experience and what I've seen from major US universities, this does not seem to be the case.

For intro (1st year-ish) CS, it looks like most places are teaching Python and C++, with some institutions (such as my own) using Java. An ACM article from 2014 actually has some numbers here. [0]

I graduated relatively recently with a bachelors degree, majoring in CS and Computer Engineering. I had only one course which actually used C, and that wasn't for my CS major. I've spent a fair amount of time since then doing low-level work on ARM micros, but definitely wasn't taught this in school.

[0] http://cacm.acm.org/blogs/blog-cacm/176450-python-is-now-the...

Perhaps I'm overvaluing things, but $20k seems a bit low for this. It seems to me that Nintendo stands to lose a disproportionately larger amount of money to game piracy.

Don't get me wrong, I think it's great that they're incentivizing security research - it's just that given the history of piracy on their portable platforms, I'd expect a larger reward cap.

The surrounding paragraph gives a bit more helpful context.

"A typical startup is built around a single product, and some theory that people will pay money for that product. This theory eventually become false, and the company goes away."

The link to towerrecordsmovie.com is suggesting that many single-product companies outlive their product's usefulness, such as Tower Records. Tower Records was a large seller of physical music media (CDs, Casettes, Vinyl) which went out of business in the mid-2000s.

The author is suggesting that since Fog Creek is not a single-product company that this does not apply to them.

Convoluted tricks? Certainly. There's a functioning mov-only compiler [1], though. [1] https://github.com/xoreaxeaxeax/movfuscator

I cannot speak to copyright, but there seem to be mechanisms in place for stopping import of trademark infringing goods to the US. See for example the run-in which SparkFun had with importing lookalike Fluke Multimeters a few years ago: https://www.sparkfun.com/news/1428 and previous HN discussion here: https://news.ycombinator.com/item?id=7428799

This might actually do more to confirm than dispute your comment about "laws for those with money/power", though.

This is an excellent article, but might I suggest a (2012) in the title?

As a Grand Rapids resident who knows quite well how to use a SDR, I'm going to choose a positive interpretation of this comment and assume you're referring to the phenomena of "West Michigan nice", where hacking a public system for lulz would be absolutely unconscionable.

That being said, I'm actually rather tempted to at least figure out what the air interface is. The article mentions a 1200 baud modem - does a standard UHF/VHF voice channel have enough bandwidth to run PSK/FSK V.22 or V.23? That'd be quite a hack.

IANAL, But from the readme [1], it's Apache Licensed, so fork away - just make sure you retain their copyright notices and follow the rest of the license.

-edit- In addition, the bottom of the README which you quoted just mentions the need to sign a CLA if you want your code pushed upstream. See the FSF page about why they require copyright assignment [2] for their projects for some background.

[1] http://lcamtuf.coredump.cx/afl/README.txt [2] https://www.gnu.org/licenses/why-assign.html

It's not really a DIY solution, but Hurricane Electric offers support for dynamic DNS subdomains with their free DNS service. It's super easy to throw in a cronjob with curl and have work. https://dns.he.net/