makmanalp
Joined 17 years ago
Karma
9,231
Submissions
2,226
Member since
Jul 27
Recent submissions
Comment · 1 day ago
Because if you let the market fail then people suffer. If people suffer they vote the incumbent out.
Could somewhat help break the cycle by having a safety net for people instead of for overleveraged companies and banks but the US is allergic to that concept.
Comment · 1 day ago
People who love this should consider visiting the Institute and Museum of the History of Science in Florence (now rebranded the Galileo Museum for what I assume are marketing reasons :P).
It's heaven for science nerds.
Armillary spheres (including a room sized one from the 1500s), all manner of astrolabes, astronomical clocks, hand ground lenses and microscopes and telescopes and Galileo's actual middle finger (https://en.wikipedia.org/wiki/Galileo's_middle_finger), a tabula affinitatum, michelangelo's compasses, even an organum mathematicum!!!!! (https://en.wikipedia.org/wiki/Organum_Mathematicum)
Comment · 2 days ago
Comment · 3 days ago
Shockingly this has not been an issue for me
Comment · 3 days ago
No agreed, for me it’s about the incidentals - nicer camera, nicer screen, WiFi 6e, large drive etc
Comment · 4 days ago
Both of those are coming from telemetry, and mainly show attempts. Those telemetry are generally heuristic based so they overcount and are most often unsuccessful - it took much layer for actual honeypots to be hit. See my timeline in my other comment if you’re interested in details and extract dates
Comment · 4 days ago
This has been my hyperfixation for the last few days, and I've been trying to keep together a detailed and timestamped timeline of the evolving situation:
https://claude.ai/artifact/5cZex56WutyVnpMBrWXxzV
TLDR is multiple entries that show successful exploitation against particular setups (quite often honeypots that were kinda set up to be exploitable e.g. single worker mod_php or lab setups that are unclear on how well they match real deployments), one claim from dan guido / trail of bits about a broad exploit (but few details), millions of attempts in the wild but very little evidence of actual compromise (unit 42 withdrew theirs).
Comment · 4 days ago
Man every time I want to get a new macbook air they come up with a new macbook pro which means 6 months later they're going to come up with a new generation of airs by which time I think "let me wait a bit and see if people like it", and so here I am with a 2022 M2 that is perfectly fine except for the disk being too small.
Comment · 5 days ago
sheep.exe was not useless, I loved it. you take that back.
Comment · 7 days ago
omg, invoking php-nuke brings me back. fun era (recent php2shell wild ride notwithstanding). Honestly it's more like web 1.5 - not straight up hand written html but no wild client side stuff either.
And yes, there absolutely was a "look" that's a product of the technology of the time - tables for design, limited styling / js support, php "components" that you could load and replace as part of your portal, and "themes".
Comment · 8 days ago
Exactly 32.5124% is hallucinated :P You're welcome to click through to the linked sources.
Comment · 8 days ago
Here's the latest, I've been keeping it up to date as well as I can: https://news.ycombinator.com/item?id=50190603
Comment · 9 days ago
Take a peek at my detailed full-ish timeline of every actor around the embargo and leak, just added amazon's reporting in there as well:
Comment · 9 days ago
I spent a bunch of time today looking into various public posts and announcements about the PHP2Shell embargo and leaks, trying to piece together who leaked or announced what and when. It got to the point where there were so many little details that it became impossible keep it straight in my head, so it occurred to me to build a clear end to end timeline with links to the sources, and I figured I'd share it with everyone.
Please note that while I did read though the links, this isn't anything I'd bet the farm on - often there's a lot of he said she said and second or third hand information, and I tried to be clear in marking those. Plus, claude was used to compile and crosscheck references, for better or for worse.
Let me know of any inaccuracies or missing details. Thank you!
mali at akmanalp dot com