commandersaki

Joined 7 years ago

Karma
2,366
Submissions
1,424
Member since
Mar 19
View on Hacker News

Recent submissions

Comment · 5 minutes ago
How brave of you to defend your CEO's incompetence.
Comment · 4 hours ago
Rex is cool, but I feel gimped because all the cool stuff happens over Tailscale but it doesn't support headscale.
Comment · 11 hours ago
<insert laughing emoji>
Comment · 1 day ago
Does `sysctl -w net.mptcp.enabled=0` work?
Comment · 2 days ago
But it's not really useful until it has critical mass at say 80 or 90%.
Comment · 2 days ago
I hope there is a way to reset the toner level/page count detection as that would let me refill the new toners which are chipped.
Comment · 2 days ago
The independent researcher who published a proof of concept before the release did not.

Just to clarify that no actual PoC was published, just a demonstration video was floating about.

Comment · 2 days ago
Comment · 2 days ago
I'm sure we'll make a fuss about this today, but we won't hear about this project again for at least 10 years.
Comment · 2 days ago
AT protocol? Likes Hayes compatible AT commands?
Comment · 3 days ago
When a significant portion of devices are patched (including gui apps on mac), pulling off an MITM without detection is pretty much impossible. That would be usual culprits of telco, ISP, or public wifi. That's what I mean by the window has closed. Anyone attempting is taking significant risk of being detected; at least in my neck of the woods would be illegal to do as well.
Comment · 3 days ago
Yeah also got to be lucky that the users are using https and not ssh. You're very limited in what you can mitm, you'll be trivially detected by patched devices (though maybe not acted on because nobody is the wiser), but then you'll need to serve objects with common/conflicting hashes -- fixing up that state synchronisation (what you call "correct") to then do nefarious things is not trivial at all. Extremely difficult to pull off successfully for git anyways or to do it in stealth.
Comment · 3 days ago
Doesn't affect app bundles though, only *nix commands. This'd be detected pretty quickly, at least by the significant portion of patched devices.
Comment · 3 days ago
The window of opportunity to MITM has passed. If you attempted an MITM from an easy vantage such as telco, ISP, or public wifi you'd be trivially detected as a significant portion of devices are patched, including on these unpatched macs as only the *nix commands are affected and not app bundles.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton