st_goliath

Joined 7 years ago

Karma
5,652
Submissions
647
Member since
Aug 28
https://infraroot.at/

https://goliath32.com/

https://github.com/AgentD/

https://hn-wrapped.kadoa.com/st_goliath?share

View on Hacker News

Recent submissions

Comment · 11 days ago
The upstream has no public repository, neither on GitHub nor anywhere else.

JWZ might not even use git in the first place, the source might be in a local SVN repo, or just a series of tarballs and patches, assuming it is version controlled at all.

Comment · 11 days ago
OpenLSD, bicycle day edition?
Comment · 21 days ago
> "conducting a test involving interactions with randomly selected websites"

In other words: shamelessly running a spam bot.

And we found out about it because rather than flooding website guestbooks with porn links, it ultimately slopped a police tip line.

Comment · 26 days ago
Given that MED-EL, the company mentioned in the article, has been around since 1990 and is constantly expanding, I would assume that this is indeed viable.

I live in Innsbruck, Austria, where MED-EL is headquartered. Like most people I know, I too have briefly worked there in 2008. I currently live 5 minutes on foot from where the entrance used to be back then, before it was walled off, they massively expanded the building and added another building behind it, where in 2008 a bunch of office containers with clean rooms used to be. There is now a raised walk way to the other side where they used to rent just a few units back then and now co-opted the building, plus a patch work of smaller rental spaces all around.

The implants themselves are not cheap and (at least at the time?) eventually needed to replaced. From what I recall, some of the technology involved was also licensed out or sold for other applications. Ultimately, I would also guess that all the licensing, approval and red-tape involved in actually making implants for humans also kind of limits competition quite a bit.

Comment · 29 days ago
> _any_ bugfix is assigned a cve

Any patch that is back ported to a stable kernel, indiscriminately. And they have also started assigning CVSS scores with the same kind of malicious compliance.

Take for example, this patch in the device mapper RAID code:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

After back porting to stable, it got assigned CVE-2026-89558 (which is in this list), and a CVSS score of 9.8:

https://git.kernel.org/pub/scm/linux/security/vulns.git/tree...

Reasoning behind it being that theoretically, a RAID could be accessible over the network via NFS, iSCSI, etc... so if it gets corrupted, the buggy code path in the recovery (CVE-2026-89558) is effectively triggered over the network.

Comment · 1 month ago
Comment · 1 month ago
> the "IDunno" of archeology - "It most likely served ritual and cultural purposes"

If all you know about archeology is from daytime television and clickbait articles, all you know about history is what you vaguely remember from school, you never met anybody working in those fields and actually don't even have a passing interest to engage with the subject, then yes, you might be inclined to believe that's how it works.

EDIT: of course this comment accumulates nothing but drive-by down votes from arrogant computer touchers, presumably before heading off to other comment sections to discuss law, macroeconomics, quantum physics and whatever else they are experts at, having watched YouTube videos. You see, only CS requires years of study and is divided into dozens of intricate sub fields, everything else is simple, straight forward and can be "disrupted".

Comment · 1 month ago
> Then it would be possible to reuse old embedded equipment.

Unlikely, virtualization/emulation has been a thing well before this project and you can just buy USB to RS232 adapters. There are GPIO solutions for industrial PCs other than the parallel port. Or you can simply buy new industrial PCs which have those ports.

If you find an industrial appliance controlled by genuine old PC hardware that hasn't been replaced, the RS232 ports are the least of your concerns.

In my experience, such machines usually have something insanely proprietary plugging into a custom ISA card, and whatever is connected to it usually doesn't take too kindly if the bus timings are off. And neither does the accompanying bare metal software that relies heavily on timing loops and hardware peculiarities.

Comment · 1 month ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton