Recent submissions

Comment · 3 years ago
If I am understanding the article correctly, NHTSA asserts that to open up telematics to 3rd parties would allow remote attacks on multiple vehicles' safety-critical systems simultaneously. This implies telematics has remote control on those safety critical systems.

This raises a question for me: Why the actual fuck are safety-critical systems able to receive commands from anywhere other than the driver's controls or diagnostic port? Perhaps I am old-scool, naive, ignorant, etc, but given what "safety-critical" means, that strikes me as egregiously unacceptable.

I can sympathize with the idea of convenient remote diagnostic and repair, but in my opinion, this is a case where the saftey risk not just to the driver and passengers, but anyone else nearby, outweighs the convenience of logging into Ford's/BMW/Honda's website, click button, car works again.

Comment · 3 years ago
My guess is that since the packet is officially reserved and should not be set, a common firewall or other security appliance considers said packets to be malformed and drops them as a default behavior.
Comment · 4 years ago
In the article, Firefox is cited as intending to adopt MV3 for compatibility reasons. If they indeed do so, I'm not sure how much relief running Firefox will offer from the more evil aspects of MV3.
Comment · 5 years ago
Comment · 5 years ago
I will not disagree with the premise that our current and future energy needs require diversification into more nuclear generation, and that nuclear requires uranium. I will however, reject the notion that such necessarily means that what is happening at the mill and surrounding land is acceptable or can't be done any better.

My objections with the situation described in the article are twofold.

First, the mill is not a designed as a long-term waste storage facility and is being treated as such. My understanding from the article is that the mill was originally designed and intended to be there for 15 years, then reclaimed. But it's still in operation. The holding cells for tailings were designed for the original planned life of the mill, and are still in use. Generally, I like it when things are useful for a long time. But from the OP, the mill and its temporary waste storage is running well past its design lifetime, and more waste continues to be added to the site, allowing it to be treated as long-term radioactive waste disposal by loophole. That's not acceptable. I don't disagree with long-term radioactive waste storage. I do disagree with it being stored long term in a place not properly designed for it and where a containment failure, however small, endangers the health and safety of surrounding communities or otherwise general usefulness of the land. The article describes how the groundwater in the area has been acidifying. The locals worry that such is because of contamination caused by the mill's waste. The mill claims that such is a natural process that just happens sometimes. Regardless of who is (more) correct, those holding cells were designed when the groundwater (and thus soil) were far less acidic, and are being operated decades after their intended design lifetime. The water in the cells is measuring with a pH as low as 1. You can't tell me that's not creating a needless contamination risk.

Second, the age of the mill and thus their processes. As a millennial, I read "Built in the 1980s" and reflexively think "Oh, of course that's modern," because it's something that happened in my lifetime. But it's not; that's 30-40 years ago. I would be in no way surprised that the wastes produced by this mill are as dangerous as they are because of the process they use. From the description in the article, and on the NRC website[1][2] it sounds like this mill is using a conventional process (crush, leach out the uranium with sulfuric acid). Have there genuinely been no improvements in the conventional process over 30-40 years that improve its extractive efficiency, resulting in less radioactive tailings? Or improving the solvent recovery so the tailings don't acidify the soil and ground water so much over the long term? Or in extracting the other heavy metals, (lead, molybdenum, selenium), further reducing the the hazard of the tailings, and possibly providing a useful feedstock for other industrial processes? I find that unlikely, and would be disappointed if that were the case. Even if it doesn't make sense to retrofit such improvements to this mill (more capex on something already past its original design life, etc), the economic need for nuclear capability doesn't mean that this mill must remain. Is is genuinely so impossible to build a newer, better one?

1. https://www.nrc.gov/materials/uranium-recovery/extraction-me...

2. https://www.nrc.gov/materials/uranium-recovery/extraction-me...

Comment · 5 years ago
This feels like one of those obvious-in-hindsight things. Of course an unshielded conductor would radiate RF correlating with the signal it carries, and if you could pick up the radiated RF, and knew the modulation scheme and how do decode it, you could see what was on the wire.

I do find myself wondering some things though.

Ethernet cables are 4 differential pairs. As I understand, the whole idea of these twisted pairs carrying a differential signal is that any RF the cable picked up from the environment would be common-mode, and get cancelled out receiver side, allowing the transmitted signal to arrive unspoiled. So, in theory, one would have a hard time injecting spurious transmissions into an Ethernet cable via RF.

Is this supposed to work in reverse, where the common-mode rejection of a differential pair would prevent RF from leaking out of the cable? Or is this one of those theory vs. practice things, where in theory, it shouldn't, but in practice, being a not-ideal twisted differential pair (e.g. twist rate is wrong for frequency of interest, untwisted section, conductors of slightly different lengths, etc) allows some RF emission to leak out, uncancelled. And in the case of a cheap cable, something claiming to be Cat 6A in actuality might never have passed spec for Cat 5, and thus leaks way more RF than it should, because the quality and balance of the twist was half-assed?

Or am I badly misunderstanding how this works because I haven't started studying for an amateur radio license yet?

Comment · 5 years ago
Indeed I have. I have edited my post to reflect that.
Comment · 5 years ago
That's probably deliberate. An intentional name collision seems a good way to run a front.
Comment · 5 years ago
Comment · 5 years ago
Man, I wish I would have known about this a few weeks ago when I was working on repairing a water damaged controller board from an electric smoker. Fortunately, the damaged components were not the mysterious SOT-23 devices labeled only "S3", but just a couple shorted-out diodes. Without this page, it would have been quite frustrating trying to source a new "S3" were it blown out, as I wouldn't have been able to measure polarity or hFE to narrow down a short list of candidates.
Comment · 5 years ago
At 21:44 UTC, facebook.com resolves for me.
Comment · 5 years ago
I mean, when I last worked in a NOC, we used to call ourselves "NOC monkeys", so yeah. IF you're in the NOC, you're a NOC monkey, if you're on the floor, you're a floor monkey. And so on.
Comment · 5 years ago
Yes, but Facebook is not a small company. Could PagerDuty realistically handle the scale of notifications that would be required for Facebook's operations?
Comment · 5 years ago
Link to such claims here: https://news.ycombinator.com/item?id=28750894

I have no doubt that the publicly published post-mortem report (if there even is one) will be heavily redacted in comparison to the internal-only version. But I very much want to see said hypothetical report anyway. This kind of infrastructural stuff fascinates me. And I would hope there would be some lessons in said report that even small time operators such as myself would do well to heed.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton