News for hackers. Stuff that matters.

klue07

This goes against modern understanding that say LDL or ApoB is an independent risk factor for cardiovascular disease. Also interestingly one of the authors, Dave Feldman, was a fellow SWE that left tech and started challenging this notion.
Re:Debugging macOS Kernel Using VirtualBox on Tuesday April 11, 2017 @01:13AM (#14085037)
Wow this is great. I can confirm this works, though since SMAP is 20th bit, it should be

    cpuid.7.ebx = "-----------0--------------------"
Inside the VM:

    machdep.cpu.leaf7_features: SMEP ERMS RDWRFSGS TSC_THREAD_OFFSET BMI1 HLE AVX2 BMI2 INVPCID RTM RDSEED ADX FPU_CSDS
I have updated the post crediting you!
Re:Debugging macOS Kernel Using VirtualBox on Monday April 10, 2017 @12:34PM (#14079973)
Remove "-Werror".

Sometimes there are too many errors to deal with. I find building on a machine that's on the exact macOS version that you are trying to build does the trick.

Re:Debugging macOS Kernel Using VirtualBox on Monday April 10, 2017 @12:01PM (#14079610)
Author here. Nothing in the post is illegal.

Apple allows 3rd party kernel extensions so naturally you would need to be able to debug the kernel. In my post, I link plenty of official Apple documentation that provide information on how to debug the kernel.

Re:Debugging macOS Kernel Using VirtualBox on Monday April 10, 2017 @11:58AM (#14079586)
Jonathan Levin's MOXiL 2nd Edition volume 3 is out and I recommend you get it. 1st edition is still very good and can hold you off until the other volumes are out.

Amit Singh has a Mac OS X Internals A Systems Approach that is good we well.

There are also various talks at security conferences that detail parts of macOS/iOS.

Re:Vimperator: a Vim-like Firefox on Sunday January 15, 2017 @12:30PM (#13405097)
I haven't used vimperator for a long time, but in petadactyl you can use C-o and C-i to go back and forth, respectively. The key bind matches pretty well to what it is in Vim too.
Re:PEGASUS iOS Kernel Vulnerability Explained on Friday September 02, 2016 @02:31PM (#12415138)
Apple also released a fix for OS X with its latest update.

https://support.apple.com/en-us/HT207130

Re:EquationGroup Tool Leak – ExtraBacon Demo on Tuesday August 16, 2016 @12:02PM (#12298323)
Many people in infosec generally learn programming on their own and only code for their own need. They don't care about coding style, small optimizations, programming best practices, etc.
Re:Learn Voraciously (2015) on Wednesday August 03, 2016 @01:45PM (#12219929)
This is why when we hire entry level techies, we mainly look to see if they have a drive and passion to learn the work they do.
Re:Employee benefits at Basecamp on Tuesday July 26, 2016 @11:47AM (#12166437)
It's a pity not more employers do this. I've always been a big proponent of 4-on-3-off work schedules. Traditional work 5 out of 7 was arbitrarily chosen. Regular 3-day weekends really rejuvenates you. If 40 hours of work a week is mandatory, spreading the 8 hours of the fifth day into the 4 days isn't so bad.
Re:Vim GIFs on Tuesday July 19, 2016 @04:01PM (#12124406)
Call me old fashioned, but I still think the best way to learn Vim is vimtutor. Then just google whatever you might need or consult :help.
Re:Feynman on Fermat's Last Theorem on Friday July 01, 2016 @04:36PM (#12019446)
> is far from the real 110 pages long proof of FLT that took A.Whiles years to put together

He could've gotten away with the pun "took A. Wile to put together."

Re:Ways to maximize your cognitive potential on Thursday June 30, 2016 @11:36AM (#12009269)
While I don't think athletes are the most intelligent, I think the stereotypes of dumb jocks is simply a type of bias. If you were an athlete with potential, you would put more focus on your sport instead of academics. If you were bad at sports you would typically spend less time doing them which would then allow you to focus your time on other things like academia. In America, when all you need to do to get As in like highschool is to put effort, the ones who weren't great in sports tend to get higher grades which is perceived as having a higher intelligence. Thinking that athleticism is negatively correlated to intelligence is just ignorant.
Am I missing something? The result for the 6 main emotional arcs basically enumerates all the possible permutations of rise and fall of length 1, 2, and 3 which seems pretty obvious.

Length 1: rise, fall

Length 2: rise-fall, fall-rise

Length 3: rise-fall-rise, fall-rise-fall (must be interchanging because for example fall-fall-rise would probably just be considered fall-rise)

> Computers analyzed more than 30,000 different risk factors, including traditional ones like age and mental-health history. But some surprising issues—such as gastrointestinal problems, infections and injuries like rib fractures—were tied to increased risk.

> Dr. Nock says that some of these may be self-inflicted or related to impulsive behavior. Using the historical data, the approach was able to detect 45% of suicidal acts an average of about three years before the event.

> A study using similar methods looking at suicide risk among U.S. Army soldiers in the year after hospitalization for psychiatric issues was published in 2015 in JAMA Psychiatry. The algorithm was able to predict about 53% of the suicides in that high-risk period.

I wonder what the false positive rates on these are.

Re:Life in the People’s Republic of WeChat on Thursday June 09, 2016 @12:34PM (#11870476)
Wow, it seems life has changed quite a bit in China than what it was like when I was there (2002-2011). The author mentions that everything is using Wechat for e-payments and QR codes are every where. I wonder with such high rate of adoption and change, how secure every thing is.
Recent phrack had an article on Internet voting for those interested.

http://phrack.org/issues/69/11.html#article

Except you'd have extremely vulnerable browsers.
Any good alternatives recommended for Firefox?
Re:Benefits of 1 Minute of All-Out Effort during Exercise on Thursday April 28, 2016 @03:29PM (#11591349)
You should know what your limit is to not get sick if that is a recurring problem. What I was referring to is some people stopping a set right when they feel slightly fatigued or feel the burn. I was referring to people who smile and talk as they are lifting or working out.
Re:Benefits of 1 Minute of All-Out Effort during Exercise on Thursday April 28, 2016 @03:04PM (#11591174)
I'm in the exact same boat. My feeling is that as they workout more they will realize how much more they can do as well as just getting used to the fatigue.
Re:Benefits of 1 Minute of All-Out Effort during Exercise on Thursday April 28, 2016 @03:01PM (#11591158)
I have a feeling that your true 1rm is higher than you think it is if you can pull it off without acclimating to that weight.

I never said you will for sure get injured, merely the chances increase. And I agree that some people have warm ups that are too intense.

Re:Benefits of 1 Minute of All-Out Effort during Exercise on Thursday April 28, 2016 @01:25PM (#11590493)
I completely agree. I was going to post the same thing until I saw your comment. The inexperience with exercise causes people to not know how hard they can push their body and still be fine. When I bring a friend to the gym or something, they stop lifting for the set when they feel slightly tired. I can't imagine their pushing themselves to where there's phlegm in their lungs and still going.
Re:Benefits of 1 Minute of All-Out Effort during Exercise on Thursday April 28, 2016 @01:08PM (#11590352)
I wouldn't entirely agree. If you aren't lifting any relatively heavy, extra weights, e.g. running or something, warming up isn't as important. However, when lifting relatively heavy weights, I think warming up is pretty important.

Warming up has the benefit of lubing up your joints. I think we've all had the instance where our body are relatively stiff and if we do, say, a push up, our joints pop or make cracking sounds. I remember squatting once when I didn't fully warm up. My knee wanted to pop during the squat and it felt extremely uncomfortable trying to exert force on that leg. When there isn't any extra weight, merely extending your leg with a pop wouldn't bother anybody, but exerting a lot of force and doing so slowly sure wasn't a pleasant experience. What are the chances of serious injury? I don't know, but it hurt enough for me to not want to find out.

Another thing warming up helps with is to acclimate you to your working set weight. I know the first set of my bench press usually ends in a grinder and is the roughest out of all my sets. I'm not sure if it's just my mind acclimating to the weight or a physiological thing like more blood getting pumped to my muscles. Either way, I'm fairly certain (but do not have any sources) injury rates would be increased if you tried to deadlift your max without properly warming up.

Re:Detecting the use of “curl – bash” server side on Wednesday April 20, 2016 @11:46AM (#11535274)
Reminds me of why I also don't copy paste text from websites directly into my terminal.

https://thejh.net/misc/website-terminal-copy-paste

Older »