News for hackers. Stuff that matters.

tkinom

Re:WTF Ubuntu? on Monday November 02, 2026 @09:41PM (#50347320)
Asked claude/haiku5.5 to review that cve against my server, docker images. Claude had passwordless ssh access to that server and no root access. It did the review, confirm that server has the volubility, asked me to ran a few sudo commands, give it the output. It asked me to run a command to disable mptcp option.

I then asked it to do complete cve reviews on the host server (U 26.04 was installed a few weeks back) and docker images on that server and update the security review and added a task to do daily check on ubuntu website on kernel security update.

Re:Building a Memory Allocator from Scratch in C on Monday May 11, 2026 @06:22PM (#48101500)
Implemented my own specialized memory allocator 26+ yrs ago. (Y2K timeframe) Probably older than the most of the CMU students :-(

Use pre-allocated pools with array of indexes, free/allocation idx for alloc and free.

Con: Fixed pool size and fixed amount of memory can be allocated per pool.

Pro: constant cost operations per alloc/free via Atomic inc/dec of idx - no linklist tranversing ; Can be alloc in kernel space and free in user space (linux/QNX) and in multiple user processes when memory pools are in shmem; Run very will in SMP environment without any locks - all memory contentions were handled with atomic +/- alloc/free idx.

Same source code run in QNX, vxworks and linux (kernel and user space) at that time.

Can we design something like virustotal setup? (https://en.wikipedia.org/wiki/VirusTotal)

NPM setup similar dl_files_security_sigs.db .database for all downloaded files from npm in all offline install? List all versions, latest mod date, multiple latest crypto signatures (shar256, etc) and have been reviewed by multiple security org/researchers, auto flag if any contents are not pure clear/clean txt...

If it detects anything (file date, size, crypto sigs) < N days and have not been thru M="enough" security reviews, the npm system will automatically raise a security flag and stop the install and auto trigger security review on those files.

With proper (default secure) setup, any new version of npm downloads (code, config, scripts) will auto trigger stop download and flagged for global security review by multiple folks/orgs.

When/if this setup available as NPM default, would it stop similar compromise from happen to NPM again? Can anyone think of anyway to hack around this?

As Dr. Ian Malcolm said it: “Your scientists were so preoccupied with whether they could, they didn’t stop to think if they should.”
Re:AMD Announces 7950X3D, 7900X3D Upto 128MB L3 Cache on Thursday January 05, 2023 @04:05PM (#34266566)
About right, did it two years ago with 2 Sockets, 128Cores (64 core per socket), 256 Threads 2 Epyc Motherboard with 1TB DDR4. Build Kernel < 90 seconds. Should be faster nowadays....
Re:Moonwalkers: The World's Fastest Shoes on Thursday January 05, 2023 @03:58PM (#34266460)
Another idea for them: Walkatron for NFTs token for "....." causes....
RPi+ Yolo can do real time object recognition of cluster Tank, Trucks, BMP from orbit.

A service with real time streams of those objects + GPS data info directly from starlink for a select sets locations should worth a lot for DOD, NATO, Ukraine. DOD and NATO would likely flip the bill for everything need to build such system.

Love to see a container environment that can monitor Monitor and log all outgoing network connection requests.... Monitor and log all critical file/directory access such as /etc/*

With such container, we can catch the compromised supply-chain attach easily, right?

Does anyone know such container exist?

There should be some post post-processing algorithms that can remove/clean hex elements, right?
Got Honda Clarity PHEV since 2018. Loving it so far. It is 48 miles E range. I need ~36 for round trip daily commute. Charging at work is free. I remember only fuel up only 3 times in 2019 with the 7 gallon gas tank. Normal fuel up is 5-6 gallon only as it has a very small tank. But the Hybrid range is supposed to be 350 miles.

I also just installed solar at home. I expect the next family car would also be PHEV suv to replace the 16 years old minivan. Other than long trip, I don't expect to use gas much, maybe just once a week to oil up the engine for a few minutes.

Fog of war.
Re:Timescale raises $110M Series C on Tuesday February 22, 2022 @04:03PM (#30433753)
I have written time series logging db with sqlite believe that approach has following advantages:

   System performance scales well with latest SSD HW.
      As compare to cloud base approach that is limited by network/cloud speed.

   One can store logs per day / week / year in separate db files as needed.  

   Backup of small db files for last few days/weeks are trivial with rsync.


Love to hear other pro/con arguments from folks who use Timescale type approach.
Re:3D reproduction of TSA Master keys (2016) on Tuesday February 15, 2022 @02:19PM (#30351308)
One can easily cut the zip-tie, search and re-zip it again, right?
Re:Writing an open source GPU driver without the hardware on Thursday January 27, 2022 @10:44PM (#30110491)
Start by tracing exist open source Intel/AMD driver in linux:

   Can be for old laptop (T420, etc with Intel GPU/Driver.) 
   Use FTRACE in kernel. 
   Setup ebpf trace for GPU acitivies.
   Write some doc/blog/medium pages on the process and show off your works.
   Understand, document and improve some opensource GPU API related utilities
   Understand and document interaction between GPU/GUI App and OpenSource driver.


In term of jobs: AMD has 289 opening for intern positions: https://jobs.amd.com/go/Internships-&-Co-op-Opportunities/25... A lot of them are graphic related.
Love to see compiler benchmark (compile firefox, chrome) on this vs system with EPYC 64C/128T or 128C/256T.
Re:Guide to Doing Radio Astronomy with RPi and SDR [pdf] on Tuesday January 04, 2022 @11:57AM (#29796947)
Name the project "SETI@PI"?
Religion can help? - I have a Mormon co-worker. They have 8 kids. Move whole family to Japan. Told me that every time they came home to US they took a row in the wide body Jet.
I love the fact they can convince VC to spend $80mil to try this.

20 year ago, most of space experts probably laugh at SpaceX for even trying to reuse the rocket by landing it back on earth vertically.

Re:The reports of Perl’s death have been greatly exaggerated on Wednesday October 20, 2021 @04:49PM (#28936336)
Old Programming Languages never die, they just fade away.
Re:IoT hacking and rickrolling my high school district on Tuesday October 12, 2021 @05:18PM (#28845203)
For anyone who like to hack legally and ethically, check out https://www.hackerone.com/. If you're very good at hacking devices, software, networks, etc, companies will pay bounties for the vulnerabilities you find thru HackerOne.

Looks like they paid out millions in bounty in 2020:

    https://www.zdnet.com/article/hackerones-2020-top-10-public-bug-bounty-programs/
Re:Statement from Mark Zuckerberg on Tuesday October 05, 2021 @09:04PM (#28767873)
Commander BGP (aka DATA) entered the "sleep" command. The faceborgs found they can't enter building, connect to the collectives or take over the Galaxy.
Re:Android 12 is live in AOSP on Monday October 04, 2021 @07:54PM (#28753896)
Instead develop a system to auto upgrade users to latest release with security patches like iOS, G is focusing on the tweaking icon/layout with a new "(im)material design".
Re:GM tells some Bolt owners to park 50 feet away from other cars on Wednesday September 15, 2021 @07:38PM (#28545903)
For the few folks that doesn't live in SF, maybe?
Re:Arm China Has Gone Rogue on Friday August 27, 2021 @05:03PM (#28332940)
In 2-5 years, US/Japan/UK can/will block every single silicon build with "ARM China" IP for < 28nm, similar to how it block Huawei last year. Just look at Huawei's current, next couple years revenues, you can predict what will happen to "ARM China".

"ARM China" without any IP license / Interop tests for USB4, PCIe gen4,5,6, LPDDR5,6 etc, will be completely useless in 3 years.

CCP is following the path of North Korean/Iran/Mao.....

Re:Linux Kernel Module Programming Guide on Tuesday August 24, 2021 @01:15AM (#28285338)
Another way to learn how the kernel module work is by tracing the kernel code..

    Learn about FTRACE - https://jvns.ca/blog/2017/03/19/getting-started-with-ftrace/

    Use ftrace to trace your favor .ko
       - simple one such as serial port driver. 
       - usb driver
       - usb to serial port driver, 
       - usb camera driver
       - gpu driver (opensource intel/amd)
Re:When did Neil Armstrong set foot on Mars? on Wednesday August 18, 2021 @08:16PM (#28228876)
This works for me:

"Google Search Page" -> Setting (icon, upper right) -> "Dark Theme: Off/On" (Last Entry in the drop down menu)

Would one use the youtube as training date?

Especially for the videos with Close Caption....

As simple as extracting the Audio and CC text?

Big Money can buy.
Re:Intel Distribution for Python on Wednesday July 21, 2021 @02:42PM (#27910284)
Any benchmarks comparison data?

   For example:   .... benchmarks with this python is XXX % higher than ... (std python, AMD, ARM)

Older »