News for hackers. Stuff that matters.

qguv

Also, is there a CVE assigned to this exploit already?
This is insane. I was reading up on the "advanced protection program", cited as the only mitigation currently available to prevent this exploit.

But it's got some enormous downsides! The only apps you're allowed to install are signed ones from the Play store; you have to use a passkey for all things Google; and that Chrome is the only supported browser for logging in.

Google, fix this attack vector!

Re: on Wednesday October 22, 2025 @01:26PM (#45672337)
I think this is AI generated; the Lean snippet on page 33 is full of LaTeX syntax.
Re: on Wednesday October 22, 2025 @01:13PM (#45672170)
Nota bene: their Github link 404s, and there are goofy LaTeX mixed in with their Lean snippets.
Re:Can I exec an new process without an executable file? (2015) on Thursday November 03, 2022 @06:32AM (#33449124)

    ; set the first syscall argument to 42
    push   0x2a
    pop    edi

    ; select syscall 60 (sys_exit)
    push   0x3c
    pop    eax

    ; sys_exit(42)
    syscall
Re:Genetics Basics for Programmers on Friday August 07, 2020 @11:56AM (#24083274)
After reading through "A T Cell Army against SARS-CoV-2" and not getting much out of it, I started looking for a primer on how viruses infect cells. But without a strong background in biology, even that was somewhat out of reach for me. This article started to frame the idea of DNA as a DSL for generating molecules, which put me on better footing.
Re:Crown shyness on Sunday August 13, 2017 @08:55AM (#15002712)
I think they're saying that you may have thrown out the baby with the bathwater. If your conclusion horrifies you—doesn't resemble what you were optimizing for—you may be optimizing for the wrong thing. Rationality isn't broken; revisit your optimization criteria. See the paperclip optimizer, the smiles optimizer, etc.
Re:You can't say that – It might be true on Saturday August 12, 2017 @04:23PM (#14999775)
Gender segregation in sports is certainly not without controversy.
This is not "birth control"—it's "coerced sterilization."
Re:FCC Takes Stronger Aim at Robocalls on Monday July 17, 2017 @04:12AM (#14786551)
United States: 3–8 per day on my cell phone. Some nights, I get dozens of calls one after the other. I work on-call.
Internet access, especially to Wikipedia, did wonders for me whenever the lecture turned to something I was already familiar with. That alone kept me from getting distracted and frustrated as I would in classes whose professors prohibited laptop use.
Re:How 'OK' took over the world (2011) on Monday June 12, 2017 @07:01AM (#14536293)
You're looking for brackets, not slashes, since you're giving a phonetic discription, not a phonemic one.
Re:Ask HN: I don't want to be a founder anymore on Friday May 26, 2017 @08:50AM (#14423640)
At the risk of sounding obvious: you've identified that your job is the source of the stress and unhappiness. That's certainly not an irrelevant factor, as my parent and sibling comments claim. Make the sale, maybe move to a cheaper apartment, use your newfoud buckets of money to work in your community garden for a month. See how you feel then.
Re:Hardbin: secure encrypted pastebin on Tuesday May 23, 2017 @07:23AM (#14400331)
For a simpler secure pastebin, try https://sptpb.pw.
I'm not sure this is trying to prevent anyone from needing to learn the actual git commands. (Note that the abstraction intentionally leaks by showing the commands that are run.) It appears to be more of a tool for experienced users on centralized teams to save some time typing.
As an experienced git user, I'd use this on projects with a central repo, if only because it saves some typing.
Re:Nintendo Switch on Friday January 13, 2017 @08:35AM (#13390622)
Dolphin is a very good emulator that can absolutely handle F-Zero. No need to hold the game in your heart, just play it on your PC!
Re:SPECTRE: A Fast and Scalable Cryptocurrency Protocol [pdf] on Wednesday January 11, 2017 @11:37AM (#13375144)
Remember that /r/Bitcoin is censored to the extreme. For an uncensored bitcoin and cryptocurrency forum, try /r/btc.
This is a mistake. The sort of problems we have in the US can't be solved with censorship and earplugs. If anything, we need more conversation, not less.

Ditto to the many commenters who point out that nothing is apolitical and that such censorship would be subjective anyway.

Don't do this.

Ask HN: Using Powers for Good

How can graduating university students and other young software engineers put their talents to work to support progressive politics in the United States, without ending up maintaining dying servers in the back of some office?Do junior positions exist that engage politically while still providing the sort of technical engagement and creative freedom found in a smallish software shop?Could it be...

( Read More... | 2 comments | 4 points | on HN )
Re:Myron Ebell Takes On the E.P.A. on Saturday November 12, 2016 @10:02AM (#12938113)
Call your senator and tell them not to confirm but to fight against the nomination. Donate to NGOs supporting climate efforts. Tell your friends to do the same.
Re:Paper Planes on Monday October 03, 2016 @06:47PM (#12631992)
/r/InternetIsBeautiful
Github pages is pretty sluggish right now. Github's actual Web interface is much slower than, say, pushing and pulling.
I stopped using infix calculators a while back in favor of RPN/stack calculators (dc) because I get quite tired of parens. Is the program structured such that this change would be simple? Otherwise I feel like this is simply yet another CLI calculator.
Re:Heartbleed in Rust on Monday February 02, 2015 @02:55PM (#8986482)
Shouldn't that analogy read:

code no true C programmer would write : heartbleed :: code no true rust programmer would write : (exercise for the reader)

Perhaps you're not human after all…?