Recent submissions

Comment · 17 hours ago
Comment · 1 day ago
The most fascinating thing about this is how american billionaires can speak in public and advocate for abolition of private [computing] property (means of production), to give full control over these resources to a handful of megacorporations (the party), in effect letting them control and command the economy (central planning). It's the communist boogeyman wearing a trench coat under the banner of capitalism!
Comment · 1 day ago
It's almost the same thing. Both psilocybin and 4-aco-dmt are just (?) prodrugs for psilocin which is the psychoactive compound associated with magic mushrooms.

It's not like those horrible synthetic THC analogues we see in Europe that can kill people.

Comment · 1 day ago
Over here Vitamin D often comes in spray bottles that you're meant to just spray in your mouth. It's more convenient for me than a pill because you don't need to open a container or a glass of water, takes 5 seconds.
Comment · 1 day ago
What's "that"? Running your own hardware, using a CLI to manage servers, or touching anything below your application layer?
Comment · 1 day ago
That's unlikely because Cursor (and VS Code) enforce a 12h delay for all extension updates by default. Malicious extension was only live for 11h so you shouldn't be affected unless you reduced it.
Comment · 1 day ago
Comment · 1 day ago
Comment · 1 day ago
> From all the evidence I’ve seen, the disastrous effect of social media is everywhere but in the data.

This study doesn't say anything about the effects of social media on students.

It finds that phone bans in schools are not associated with measurable improvements in mental health. This is not the same as saying that social media and phone use aren't harmful, it only means that phone bans in school don't independently improve mental health outcomes.

A similar study from a couple of years ago [1] reached the same conclusion, however they had more data which exposed the hidden correlation (emphasis mine):

> Implications of all the available evidence

> This study does not provide evidence to support the use of school policies that prohibit phone use during the school day in their current form, given that no differences were observed in mental, physical, and academic outcomes for adolescents attending schools that permit, versus restrict phone use. However, the negative associations found between increasing time spent on phones/social media and worsened mental health and wellbeing do provide evidence on the need to address phone and social media use in adolescents, and school policies should be developed as part a more holistic approach. Preventative efforts should also consider how other behaviours that influence mental health and wellbeing are influenced by increased phone/media use, such as sleep, physical activity, attainment, classroom behaviour and problematic use.

[1] https://www.thelancet.com/journals/lanepe/article/PIIS2666-7...

Comment · 2 days ago
> can any devices actually put such a malformed message onto the carrier network? It probably requires at least a custom app that would never be allowed on an app store, if it's possible at all.

The author has provided an APK that claims to do just that. Hacking tools aren't allowed on app stores, no, but that has no bearing on the severity of vulnerabilities they exploit.

> And do any carriers actually let it go through their network and to a device like a normal message? It's entirely possible the malformed message would crash some software in the carrier's processing stack first and so never be delivered.

Apparently, unless you're accusing the author of lying.

> And if it doesn't, they could easily add a check to block such messages.

Your ISP could block RDP but that doesn't lessen the severity of RDP vulnerabilities, shift responsibility, or lessen the need for the vendor to respond in any way, that's not how this works.

This is an Android vulnerability and it should be assumed that the carrier is indifferent, actively hostile, cooperating with law enforcement to carry out this attack, or someone might carry out this attack using an IMSI catcher.

> It's difficult to believe they don't already have some sort of protection against spamming tons of messages to any device.

20? I doubt it. Do you think the author is lying?

> It's also entirely possible it works differently on different carriers, and some but not others might add blocks for this

Indeed. What's indefensible is Google's classification that this isn't a security vulnerability.

Comment · 2 days ago
What difference does that make, genuinely?

Are there systems that can warn drivers and prevent collisions without external signaling, like ACAS?

Comment · 2 days ago
Driving a train and driving a car are two completely different challenges.

If signaling worked properly then it wouldn't matter whether the train was driven autonomously or not, the "problem" becomes trivial. Establishing and continuously verifying that signaling is working properly is the hard part.

Without signaling you're limited to crawling speed just like humans are when they don't have any signalling .

Comment · 3 days ago
All of your comments are coming up as [dead]. I vouched and upvoted your first one shortly after you posted it, I think that's probably why you couldn't edit it anymore.
Comment · 3 days ago
However on page 8 the document states that these "session logs" don't record commands, they're just audit logs of when, where, by whom the sessions were initiated.
Comment · 3 days ago
> Plenty of apps run Terminal commands in the background

Most notably agents like Claude Code and Codex? Easy to check if you ask it to run:

    $ curl 'https://dv-g3b-emudhra.we-have-a-problem.com/'

    Your client successfully connected to the site. That's bad!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton