News for hackers. Stuff that matters.

jlujan

Re:ESP32/ESP8266 Wi-Fi Attacks on Wednesday September 04, 2019 @11:08AM (#20877866)
Their "Trusted Root Catalog" is a total fiasco as well. They were one of the AWS IoT launch partners and they apparently repeatedly failed to including AWS root authorities in their catalog. They were responsive in acknowledging, but typically took a month plus to actually update the SDK, (released quarterly,) to address it.

https://e2e.ti.com/support/wireless-connectivity/wifi/f/968/...

They did finally provide a method to use a custom root CA for SSL a year later, https://e2e.ti.com/support/wireless-connectivity/wifi/f/968/....

They seemingly failed to comprehend why anyone would not want to use TI's chain of trust, that is not manufacturer customizable, on proprietary IoT devices. This was explicitly an issue for code signing as well, as it required obtaining a third-party code signing certificate from any number of CA's instead of using our explicit root CA.

[edit] spelling, clarity

Layout is very similar to https://artlist.io/page/aboutus
Re:A guide to difficult conversations on Tuesday March 26, 2019 @05:11PM (#19496062)
When going through a similar event, I was able to find resources at the hospital that helped a lot. In life and death situations they often have patient advocates on staff. I was able to reach out and had a patient advocate, either a nurse practitioner or doctor, that helped sort out the communications. A lot of the stress came from doctors' reluctance to put things in simple terms. The patient advocate was able to basically come in and say, "Look, they can put a pacemaker in, but your loved one only has 12% heart function and is still dying." It was received differently than a family member saying it. After all, their job is to advocate for the best interest of the patient. Ours actually got pretty angry with the doctors for how things had been allowed to progress. Hospitals usually have grief counselors and social workers as well. Just getting the brother extra support might be enough to open him up.
Re:Ask HN: How to Find the Best Info on Cancer Treatments? on Sunday August 30, 2015 @03:04PM (#10144188)
There is T.h.e. Brain trust that hosts online support groups for brain tumor patients and caregivers. I am on the adult ependymoma mailing list. It is a good way to find specific hospitals and doctors to get in contact with. The ependymoma list has a couple of doctors that regularly communicate on specific questions.

Their GBM specific list is here

http://braintrust.org/groups/gbm/

Edit:spelling

Re:Verizon's accidental mea culpa on Friday July 18, 2014 @02:34AM (#8051942)
As a residential subscriber this is contractually the case. ISPs do not allow the operation of servers in residential contracts and they are almost always provisioned with asymmetric speed. 50 down, 5 up, etc.
Re:Android without the mothership on Friday June 27, 2014 @04:22AM (#7953161)
presumably, as a programmer, you check return values. Especially if they could be a null reference
Re:Android without the mothership on Friday June 27, 2014 @12:49AM (#7952769)
>I have occasionally downloaded apps through one of the APK downloader services mentioned in the article comments -- I've had mixed luck.

One of the biggest issue of running Apps (open source or not) is the inclusion of the Play Store API in the app itself. These apps when not logged into the play store usually crash with NullPointerExceptions. Please... if you are an Android developer... expect your third-party services/APIs to be missing or to crash and handle that case... If you include the Map API or several other Google Services APIs in your app and the Play Store is missing or the user does not have a registered account... calls to those services will most likely result in NullPointerExceptions. Tell me to deal with it, don't crash.

Re:Python Best Practice Patterns on Friday February 28, 2014 @01:40PM (#7320619)
What you are referring to is a design pattern called fluent interfaces[1]. They do make for very usable APIs when used to represent pipelines and filters. They are also used heavily in creating domain specific language features. In your SQL example it works very well such as in SQLAlchemy. But in that example, the chained methods are building a query as opposed to mutating the actual data. Splitting hairs.

[1]http://en.m.wikipedia.org/wiki/Fluent_interface

Re:Don’t Slurp: How to Read Files in Python on Friday September 27, 2013 @07:23PM (#6460175)
Another nitpick. The article doesn't specifically say text file. Who is to say it has newlines at any reasonable spacing. Why is this front page.
Re:Golang Diaries II on Tuesday July 16, 2013 @04:53PM (#6054679)
Yes. I am aware how to sort and can only read your comment as as informative sarcasm as to the ease.
Re:Golang Diaries II on Monday July 15, 2013 @11:38PM (#6049891)
Screw map, let me pass a comparator function into sort for interfaces.
Re:The Revel Web Framework for Go on Saturday July 06, 2013 @02:56PM (#5999681)
I am new to go with a Python and C# background. Using Revel on my latest project. Not completely convinced it provides that much over roll-your-own or composition with Gorilla's libraries. I much prefer Gorilla's mux to Revel's routes. Looking at the source code has been highly beneficial to learning Go, so Thanks all the same.
Re:The Unexotic Underclass on Wednesday May 29, 2013 @11:24AM (#5786777)
Re:The Unexotic Underclass on Wednesday May 29, 2013 @11:20AM (#5786754)
"On February 5, 2013, the Secretary of Defense and the Secretary of Veterans Affairs announced that instead of building a single integrated electronic health record (iEHR), both DOD and VA will concentrate on integrating VA and DOD health data by focusing on interoperability and using existing technological solutions. This announcement was a departure from the previous commitments that both Departments had made to design and build a new single iEHR, rather than upgrading their current electronic health records and trying to develop interoperability solutions."

http://www.fas.org/sgp/crs/misc/R42970.pdf

Re:Why are Buddhist monks attacking Muslims? on Thursday May 02, 2013 @01:55AM (#5642812)
tl;dr

"If you have a strong sense of the overriding moral superiority of your worldview, then the need to protect and advance it can seem the most important duty of all."

I'll take "What is the definition of succinct for 1000 Trebeck"

Re:New, Higher-Resolution Image of Boston Marathon Suspect on Friday April 19, 2013 @12:09AM (#5574760)
Like the where's waldo of "high res suspect photos"...
The barrel is probably the only part that has "rigid tolerances". The AK is famous for a stamped receiver with minimal machining.

http://ultimak.com/AKReceiverID.htm

Re:NTSB identifies origin of JAL Boeing 787 battery fire on Thursday February 07, 2013 @03:25PM (#5184300)
>Were I the folks in charge at Boeing, I'd be looking at a joint venture with Mr. Musk, starting today.

Boeing and Lockheed are pretty much the only space flight companies working with the government. Musk has an issue with this which is why his battery predictions are so enjoyable.

http://articles.washingtonpost.com/2011-10-16/business/35279...

Re:The Meditations of Marcus Aurelius on Sunday February 03, 2013 @03:12PM (#5160944)
Yes, I would read Seneca first or I highly recommend "A Guide to the Good Life: The Ancient Art of Stoic Joy". Then reading Epictetus and Aurelius. Henry David Thoreau and Ralph Waldo Emerson can also be added to the reading list in my view.
Re:The End of Ragequitting on Monday January 21, 2013 @04:33PM (#5093874)
>Ragequitting is childish, a sign of immaturity.

I had never heard this term before. I agree with Jeff in general but there are very legitimate reasons beyond immaturity. One is maturity in the sense of picking your battles in life and knowing when your current activities are incongruent with your principles. There are many situations when the best course of action for everyone involved is to walk away. The result is not always having given up forever, but an opportunity to step back, reflect and reevaluate your approach. It is unfortunate that people do "rage quit" and give up entirely. Resilience is not always a function of maturity.

Re: Black and Whitey: How the feds disable criminal defense on Thursday January 03, 2013 @03:19PM (#5004406)
The supporting argument is that, if proven guilty, there might not be enough assets left over to compensate victims. Also, in some cases to prevent the alleged perpetrator form fleeing. The problem is scenarios as described in the article. The issues that I see in this is a)that funds unrelated to any crime are frozen/held and b)there is no recourse when proven innocent. There almost needs to be some mechanism to hold funds while leveraging them for defense, in the similar way to a bail bond. As far as rich mobsters, having prosecutors resorting to vague statutes of unrelated crimes (wire fraud instead of murder) is indicative of a larger issue with the criminal justice system (as well as many other scenarios in comments here.) Creating obscure, vague, all encompassing statues to snare criminals, and ever more frequently, the ignorent and unwary white-collar, is not representative of an effective and fair social justice system.
Re:Ninja IDE: written in Python for Pythonists on Tuesday November 27, 2012 @01:49PM (#4838134)
On mountain lion, it requires X11. Not sure why as my PyQT apps do not.
http://www.wired.com/threatlevel/2012/09/rfid-chip-student-m...

As a Texan, I think it is ridiculous to spend millions on a technology "solution" just to get more funding. Why would you want kids in class that don't want to be there? Money would be better spent on actually educating the kids that do attend than tracking kids that don't.

Re:Facebook the Devourer on Saturday October 06, 2012 @01:20AM (#4619872)
> Facebook has TREMENDOUS lock-in. For any new place to have value, it's got to have the majority of the people Facebook has > Facebook's value IS lock-in

How can a website lock you in to only being able to share things with your friends through their website? Do they lock you out of your friendships if you quit the site? This is a very bizarre notion to me. Facebook accounts have no value, the people behind the accounts and the relationships have the value. Facebook disappearing wouldn't prevent you from communicating with them. Is this real life?

> and companies with real technical prowess will fail because they rely on producing something new

Err, what? Do you mean that smart people working on hard problems are destined to fail? That facebook has some how consumed all of the available users and prevented them from existing any where else on the internet?

Re:Facebook the Devourer on Friday October 05, 2012 @05:43PM (#4618817)
>it's a wonderful medium for us to have shared experiences for things that otherwise would be extremely difficult to share.

His rant doesn't touch this because that is the perceived value to individuals that facebook provides. Cannot really argue against that and I am glad people are able to use it like this. However, there is something in this "value" that bothers me and why I do not use facebook. From the facebook ad link at the beginning of his post:

"We make the tools and services that allow people to feel human, get together, open up. Even if it's a small gesture, or a grand notion -- we wanted to express that huge range of connectivity and how we interact with each other,"

The ad does not show that. It shows people doing things together. It shows real people interacting in a physical world. It shows physical, tangible, things. Not pictures of things, or short quips and a link to an article or an emoticon. The feeling the ad tries to carry across to the viewer is the exact reason that facebook is a terrible medium to "connect" in the human sense. Lets compare it to Apple's FaceTime ad (https://www.youtube.com/watch?v=yatSAEqNL7k). Not only is the product in almost every scene, but the ad shows exactly how it directly integrates and impacts peoples lives. The last scene with the sign language drives home the technology empowering humans to connect in an almost surreal new way. Another example is the Kodak Carousel scene from Mad Men (https://www.youtube.com/watch?v=suRDUFpsHus). How facebook goes from their Timeline ad (https://www.youtube.com/watch?v=hzPEPfJHfKU) to "Chairs are like Facebook" is incredible to me. The commonality in all of these is capturing intiment moments between individuals. That is where the value proposition falls down with facebook. There is no sense of intimacy in the communication channel. A photo of your mom and dad probably has a different value to you than to your other facebook friends. It has very little to do with the photo itself as the photo has no intrinsic value either. It is the memories and emotions tied to it. That is the extent of it. Your mom doesn't need you to like the photo. Your friends don't need to see your comment saying your dad looks like a dork in that sweater. I argue that the passive nature and resulting noise to signal ratio makes facebook insufficient to build real human connections. For these things, not sure how facebook is better than email... it is no where close to live voice or video chat. Having a billion people on it means nothing when you only really want to communicate with 50 of them on a regular basis and only 1-4 of them at a time. Everything else on facebook is just self absorption and ego.

But I digress. His rant is really about how facebook is trying to make everything a part of its ecosystem. I can barely get older generations on email or MMS messaging let alone facebook. Trying to include facebook in every website serves no one but facebook and to what end? It definitely isn't user experience. Facebook is going the way of AOL as a ubiquitous term describing what the internet is and that is a scary thought.

Not really. Go to a couple of the meetups like Startup Happy Hour occasionally. I am a developer ("Chief Architect") for a local experiential marketing company and do mostly system design and iOS, Python development.
I am in Dallas, so this is interesting. Is the signup just for the Beta? If not, first thing, cut the cutesy landing page and let me find things. Craigslist might be dated and spam bloated, but I can find/price things quickly.

Older »