cartoonworld

8 ms·

1.
by cartoonworld 6mo ago
I feel like the dream of static analysis was always a pipe. When the payment for vulns drops i'm wondering where the value is for hackers to run these tools anymore? The LLMs don't do the job for you, testing is still a LOT OF WOR
2.
by cartoonworld 6mo ago
lots of security issues form at the boundaries between packages, zones, services, sessions, etc. Static analysis could but doesn't seem to catch this stuff from my perspective. Bugs are often chains and that requires a lot of creativit
3.
by cartoonworld 7mo ago
Thanks, this is very good information! To answer your question, I thought it might just be slightly harder to extract secrets or exploit a running process directly. Thats all I was saying.
4.
by cartoonworld 7mo ago
5G CSS is harder yes, but keep in mind that most 5G is the 5G_NSA variety, and is really just riding on the same cell bands, no mmwave here. You probably notice that your phone often slips out of 5g, or you inhabit different modes here. Ess
5.
by cartoonworld 7mo ago
well, a concerted attack could easily subvert the baseband if you have a few million dollars and the correct letterhead or private contacts. GrapheneOS really wants the software in the phone to not pwn the phone. This is good. Its a differe
6.
by cartoonworld 7mo ago
GrapheneOS have hardened_malloc which is a huge advantage, I think. It makes the weird machines problem much harder. I would say be very careful, because you can still get previews of images, or old and weird media formats that could be exp
7.
by cartoonworld 7mo ago
fyi a Cell Site Simulator can masquerade as the legitimate telco operator and push type 0 messages to the handset. What that means is they can push malicious settings and configurations (Definitely) and probably malicious firmware to the ha
8.
by cartoonworld 8mo ago
Cool! I just popped in to add that NASA employee Charles White, a scientist involved with the Mars Rover project, also helped make a Burning Man Mars Rover Car (back before Playa Burning Man was completely and utterly torched twice over by
9.
by cartoonworld 8mo ago
I mean it was fine for these guys because they got huge press and happen to be in an industry that can handle this. They've got experience, current employment, industry contacts, and there's really barely a functional college cu
10.
by cartoonworld 9mo ago
Sure it does, it just always relied on external encoders. I use audacity for recording vinyl occasionally, but for CD audio I have a bunch of cli scripts. Much easier.
11.
by cartoonworld 10mo ago
I have, they're tiny shoes and it'll lock up your rear wheels at best. I would suggest that anybody reading NOT try this unless you have a quite large and empty lot with no public access. Pay close attention, they are not called E
12.
by cartoonworld 10mo ago
They also don't really stop a moving car, its a parking brake. Just wanted to add, a EPB used for emergency stop in his scenario is just using the regular stopping brakes, its not an emergency brake either.
13.
by cartoonworld 10mo ago
You can almost always pop the cable (if you have to) and hit the rotor with a hammer, or use a puller. If that doesn't work you hit it with a hammer from the other side until the parking brake shoes pop out of the pins and come off wit
14.
by cartoonworld 10mo ago
Most people doing the right thing use a torque limiter to "gun" the wheel on and then set final torque with the tires just touching the ground (for friction) which is totally adequate. The thing people might forget is to clear the
15.
by cartoonworld 10mo ago
Thats the same case with all brakes in use more or less. Also modern brakes have two hydraulic systems, in the case that one of the loops (front or rear) breaks there should be sufficient pressure to apply the brakes still. Sometimes its fr
16.
by cartoonworld 10mo ago
At the time hacker meant informal programmer, among other things. “I’m hacking on my book review website” “I’m hacking on a desktop filesharing app.” Those hackers sometimes got a nice swing at it and this place has indeed always been a fin
17.
by cartoonworld 10mo ago
Very related: https://en.wikipedia.org/wiki/Crypto_Wars
18.
by cartoonworld 10mo ago
Its almost certainly cocaine
19.
by cartoonworld 10mo ago
I feel like we could do better, quite easily. People are very gung-ho (jing-go?) on this and it seems clear to me that we can use our significant technological advantages and investigatory prowess to target these bad actors just like any ot
20.
by cartoonworld 10mo ago
The chilling effect of the executive. The current admin leverages government agencies against the corporation who will report on this if not to their liking. And more!
21.
by cartoonworld 10mo ago
The preferred response is to downvote and move on. Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something.
22.
by cartoonworld 10mo ago
That’s not all that was added in there
23.
by cartoonworld 10mo ago
Well, to steel man this a bit, Citizen’s United codified unlimited spending on political causes by nearly anyone. John Sirota has spent quite a bit of effort on journalism on this subject.
24.
by cartoonworld 10mo ago
Sorry to double reply, I forgot to mention what is likely the source of this interest. Recently, Kyle Hill produced this 30 minute video explaining why we may want to re-examine the LNT dose model https://www.youtube.com/wat
25.
by cartoonworld 10mo ago
There is a little more than that. A guitarist who plays electrified isn't just playing the guitar; the entire signal chain becomes the instrument. Everything from the room to the fingers of the player alter the sound and how a person p
26.
by cartoonworld 10mo ago
They’re probably doing that so your kid or some kid can use it and leave the penny tray because they aren’t trying to make money off of it anymore. It’s just for fun, sounds like a nice gesture.
27.
by cartoonworld 10mo ago
This is why they are so risk averse, there indeed are incredible dangers and if varies per place. Operators, manufacturers and service have spent a long time making what we have very reliable in what are now pretty old designs. If a new pu
28.
by cartoonworld 10mo ago
Sometimes it does, for example, just like gp mentions, a tube rectifier in a single ended amp can have a voltage “sag” that interacts with the rest of the system and causes an interactive “color” in the output, especially when amplifying la
29.
by cartoonworld 10mo ago
Nuclear Safety is extremely risk averse and the mortar in the bricks are incumbents for whom the strict regulations protect. Anecdotally, it is a very paranoid industry, for better or worse. Allowing higher radiation dose does sound bad,
30.
by cartoonworld 11mo ago
This is relevant to HN because it is entirely possible that Flock Safety helped the FBI here. It's just as likely that mass cellular surveillance tools like IMSI catchers were used, and its a near certainly that social media and tech p

More ›