Recent submissions

Comment · 2 years ago
"Mainstream" (as opposed, to, say, amateur SSTV) video broadcasting, aka TV, is definitely very obsolete and too elitist in implementation to even get me "onboard". Not a second of interesting content per day for me there. But you know that you couldn't have written this comment without a computer? Regardless of its form-factor...
Comment · 2 years ago
Comment · 2 years ago
Now this is f*cked up, isn't it?
Comment · 2 years ago
Order it from a Czech online pharmacy, where it's an OTC medicine (which have better quality controls than supplements). It's not a controlled substance in the US (heck, not even phenylpiracetam is), it's just not registered there.
Comment · 2 years ago
Correct move, admins.
Comment · 2 years ago
Try piracetam.
Comment · 2 years ago
Ah, okay. You're welcome. I've seen also a similar paper called "Citadel" on arxiv.
Comment · 2 years ago
Why resort down to ad personam (the last two paragraphs)? These are not insults, but not valid arguments, either.

I know very well about Zerodium. However, FPGAs can be way more secure than any kind of ASICs. If you don't understand why, then I don't think further discussion is warranted. I worked with Apple's implementation of security enclaves, and they don't isolate (or "outsource" to be processed there) nearly as much as should be isolated. For example, whole display and touch input needs to go through the application processor, anyway. It's not a good way to go, to say the least. You can't overlay anything on the top of the display nor isolate touch input from some area (say, virtual keyboard) to go to the enclave. The rest of what it does is pretty meaningless, given these constraints.

Comment · 2 years ago
> If you are at threat of being targeted by NSO Group or Zerodium enabled attacks, you are already on the radar of a country's Law Enforcement/Interior Ministry/Dept of Homeland Security/Intelligence Community and any attacks on your phone are the least of your worries.

Ah, you mean social engineering attacks and more powerful attacks relying completely outside of the cyberspace (to say more bluntly, which perfectly fits the case here, "in the meatspace"), right?

In terms of broadly-understood virtualization, there's always FPGA with its possibility to spawn multiple number of completely independent softcores. These days some FPGAs with enough computing power for well-optimized security-critical part of general-purpose computing (messaging, web browsing, maybe DSP - not computation like neural models) have fully open-source bitstream synthesis tools.

BTW, thanks a ton for letting me know about the unpatched vulnerability in Alpine. I'll talk to the pmOS guys about patching it.

Comment · 2 years ago
Comment · 2 years ago
This is increasingly often the case. Also, don't forget that modern WISP equipment allows for 100Mbps+ speeds for a price next to nothing (Ubiquiti, MikroTik).
Comment · 2 years ago
CVE-2015-0235? What the hell? -2015- and still unpatched? But apparently it looks like the case.

Anyway, Alpine seem to use musl instead of glibc.

Comment · 2 years ago
Phone signal? Okay. I thought we're talking about fixed broadband connections.
Comment · 2 years ago
To everyone talking about anti-tracking features.

https://github.com/positive-security/find-you

"A modified version of OpenHaystack to showcase the possibility of building a stealth AirTag clone that bypasses all of Apple's tracking protection features."

Other projects from them, like https://github.com/positive-security/send-my , also seem interesting.

Comment · 2 years ago
Well, statistically average end-user internet connection in Europe is much faster than in the US. Maybe outside some places like most of western Germany, but these are an exception. Europe has really good bandwidth speeds, overall.

I absolutely agree with the rest, though, including the part saying any "serious" software will have such features (and better support in general), and I second the examples you gave.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton