News for hackers. Stuff that matters.

emmab

Oh, nevermind on #2 then. Sounds like they've been doing a lot of feature development.
I had two main problems with LogSeq when I used it:

1. Not designed from the ground-up to prevent data loss. Has had data-loss issues in the past.

<strikethrough>2. An electron app that doesn't let you open multiple documents at once. (edit: nevermind, seems like they did lots of feature development here)</strikethrough>

That said, I don't know of any other good local-first outliners (i.e. like Workflowy).

Re:Holes on Thursday September 15, 2022 @07:05AM (#32849975)
Uh, you can treat holes as being defined as entities by their cause and telos, just like any other object/entity.

e.g. A hole made by a hole punch (cause), for fitting into a 3-ring binder (telos). Done.

So? I didn't say there were any good countries on earth.
Re:GitHub suspends Tornado Cash developer account on Monday August 08, 2022 @04:29PM (#32390608)
There's no disobedience like civil disobedience. All the best things in life are illegal. Long live anarchy! Fire to the prisons!

Information wants to be free! ACAB! Eat the police!

Or you can fight for absolute good and justice on a war to unweave entropy itself across the entire multiverse. Your choice.
Re:Printf(“%s %s”, dependency, injection) on Tuesday October 19, 2021 @05:23AM (#28916296)
Re:Beware of Applications Misusing Root Stores on Monday May 10, 2021 @05:32PM (#27111135)
> Additionally, some application developers directly parse a file in Mozilla’s source code management system called certdata.txt, in which Mozilla’s root store is maintained in a form that is convenient for NSS to build from. The problem with the scripts that directly parse this file is that some of the certificates in this file are not trusted but rather explicitly distrusted

Could the file be split to retroactively fix everyone doing this?

It's not strange. Many religions contain an absolute prohibition against denying your faith. It prevents any true believers in those religions from having government documents.

It's fully intentional.

Re:All my servers have an 8 GB empty file on disk on Thursday March 25, 2021 @04:02PM (#26584703)
What?!? How does that work? Does he just draw up a blueprint and write "solid gold block goes here" and them some contractor says "yes that gold block will be $NNNNN" and includes it in the budget??
Re:All my servers have an 8 GB empty file on disk on Thursday March 25, 2021 @03:58PM (#26584674)
If it would be detected by profiling that does make the technique asymmetric in that it would only stick around if nobody profiled to find it.
Re:Obedience Training on Wednesday March 24, 2021 @02:53AM (#26564265)
Slavery is wrong.
The only winning move is not to play. Fight for liberation.
Re:Vendor by Default on Thursday March 11, 2021 @07:27PM (#26430832)
Adding a content integrity hash in the lockfile seems like a more flexible solution.
Re:Hackers hide web skimmer inside a website's CSS on Saturday December 12, 2020 @06:23PM (#25402757)
> but it’s way too much of a hassle to be used in the wild.

No it's not, it's just rare that you'd have the ability to inject CSS but not JS.

A core skill of hacking is being able to see through the things people would normally see as "hassle" or "friction" to the reductionist "what keys do I have to press on the machine in what order to make this happen".

Solution: Reserve cool user ids and sell them yourself later if your service becomes popular?
Re:AI competitions don’t produce useful models on Friday September 20, 2019 @01:00AM (#21023449)
https://www.lesswrong.com/posts/5gQLrJr2yhPzMCcni/the-optimi...

The competition and test set will still have hidden biases due to the ontology you use.

Sufficient optimization pressure always eventually overcomes your bias control metrics, in the context of actual utility rather than other metrics.

It's well known in cryptography and security that all abstractions are leaky.

Re:tmux Privilege Escalation on Thursday July 11, 2019 @04:05PM (#20415253)
Which is normal if you want to maintain only a single ssh session to a remote machine.
Re:The Fall of Ethereum on Thursday December 20, 2018 @01:37PM (#18727676)
omg could ya'll get back to researching decentralized technologies instead of speculating on them?

who cares how much it costs? who cares if ethereum itself wins or it gets replaced by something new? the value to humanity is in the research

Re:Subtle visual cues nudge users to reveal more in online forums on Wednesday November 14, 2018 @08:00PM (#18455942)
> The size of the crowd suggested by the icon changed randomly for participants so that they were not merely jumping on the bandwagon of a large crowd, according to the researchers

.... so it was a lie?

Would "anthropology for the purpose of strategy" be reasonable/fair?
Well if you're really paranoid that's the point where you get a new laptop.
Why not put a bounty of bitcoins on your laptop? If it's large enough it becomes worth taking even though that will alert you.
> The letter also reveals that in Kermit, West Virginia, a town of just 406 people, the company delivered 6.3 million hydrocodone and oxycodone pills between 2005 and 2011. For just the year of 2008, the numbers work out to Miami-Luken providing 5,624 opioid painkiller pills for every man, woman, and child in the town, the committee notes.

> “If these figures are accurate, HD Smith supplied this pharmacy with nearly five times the amount a rural pharmacy would be expected to receive,”

So it's normal to supply 1124 pills per capita&year to rural pharmacies? Something seems strange about these two pieces of information...

Re:Write your next Ethereum contract in Pyramid Scheme on Friday December 01, 2017 @05:13AM (#15823011)
> Formal Verification: Get an absolute 100% guarantee that your contracts are free of errors

This is not actually possible, there could have been an issue with your threat model. e.g. side-channel attacks could be out of scope.

> They simply don't believe it can have any useful value as a store of value or be used for exchanging goods or services.

I found it very useful for buying cyproterone acetate online as it's not available in my country.

Also there's stuff that's not even illegal, like kink, but for which credit card companies refuse to allow related transactions because of respectability politics or too much fraud.

Re:Walking away from $30,000 of DJI bounty money [pdf] on Friday November 17, 2017 @12:37PM (#15724068)
> maybe the author did have malicious intent to harm the reputation of DJI

In the context of a bug-bounty program, it's not malicious to "harm the reputation" of the entity in question, it's malicious to attempt to profit off the hack itself.

> The author wanted to sign the papers, take the money, and advertise the hack.

Of course! It's part of their portfolio.

It's common for security researchers to share details of a hack once it's been fixed. It's not "malicious" to tell the truth.

Re:Manipulating Human Psychology To Turn Users Into Addicts on Friday November 17, 2017 @12:32AM (#15719236)
> Drug dealers don't have intricate control over the effects of the drugs they're selling.

yet

A small robot is a lot less dangerous when backing in response to an emergency than a car. The small robot can't accidentally drive over and crush something.

Older »