Recent submissions

Comment · 9 hours ago
Comment · 5 days ago
We've had enough people around here _accidentally_ jam the 868 MHz and each time it took months to figure out what was going on before meshtastic worked again..
Comment · 6 days ago
These bands are trivial to jam should any adversary want.
Comment · 9 days ago
Mainstream browsers were a juicy but also a very short term attack target.

The more interesting targets will be various REST etc apis being called over https. Lots of people doing API clients have been ignoring the "what if someone tricks me to connect to an evil server" vector, because they assume TLS verification will protect them.

Comment · 11 days ago
If the client uses "certificate_authorities" extension to list support CA's, a TLD server that holds multiple x509 certificates can present to the client the certificate signed by the clients trusted CA.

Of course, the browsers don't use the "certificate_authorities" because the list would be hilariously large for a TLS CLient Hello packet.

Comment · 15 days ago
The only proven method of stopping immigration to your country: make your country such a shit hole nobody wants to move to it.
Comment · 17 days ago
> you sometimes need the model to have (restricted) access to the internet.

Poor excuse. Internet is prod env, for testing do a proper test env.

Just give the models in training access to a snapshot from archive.org - which frontier labs surely have a crawled copy of already.

Comment · 21 days ago
Yes they can. But then you see which account as took part of the DDOS scraping, and delete all accounts that match the pattern and site gets back under control.

Fundamentally it's all a game of whack-a-mole for admins unless some kind of microtransaction system is invented. Then a DDOS scraping event is just extra revenue.

Comment · 21 days ago
With the AI(?) bots doing a DDOS on on public websites via residential proxies the future is all website will require login.
Comment · 26 days ago
According to partisan online newsletter "public.news" that claims to have interviewed anonymous US government sources.

Unfortunately online search has gone useless and it's not possible to find out if anyone ever confirmed anything about that report. Just gazillion of other newslets repeating the original claim.

Comment · 27 days ago
Well yes. drug cartels have a revenue source.

Miscreants with even half a braincell will find themselves in illegal drugs business over terrorism.

Political and religious fanatics with even a half a braincell figure out terrorism will only damage their cause.

People who end up as terrorists have already failed the two above tests.

Comment · 27 days ago
So what is currently the best way to run docker images in microvm these days? The article is pushing for docker sandboxes, but the "you need a docker login" makes is pretty much no-go for my use case.
Comment · 28 days ago
For terrorists it is tho. Four lions is basically a documentary. The only clever and creative terror attack happened 25 years ago.
Comment · 28 days ago
Basically, the security model has changed:

https://xkcd.com/1200/

Also, if you are really old, you may remember how unhappy people were when wheel group appeared, and not everyone could "su" to root anymore. Giving everyone root was supposed to be normal!

Comment · 1 month ago
Range extender EVs made a lot more sense a decade a go when batteries were much more expensive, and fast chargers were not yet ubiquitous. Then range extenders were more affordable than EVs and could go to places EVs couldn't.

Now these EREVs are mostly luxury niche of big cars (where extra space taken by two power trains doesn't matter) for people who don't want to spend 20 minutes at rapid chargers on that yearly long trip they do. Or for people who live in some global warming ignoring backwater[1] that hasn't built out rapid charger yet.

[1] even China has ubiquitous fast charging network now

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton