HN user

codezero

10,626 karma

I am a meat popsicle.

Posts220
Comments3,639
View on HN
journals.plos.org 6d ago

Likweli: A new species of Colobus monkey from the Lomami National Park

codezero
2pts0
arstechnica.com 1mo ago

A USB-connected speaker can infect a PC without ever being touched

codezero
2pts0
www.youtube.com 2mo ago

Big Yellow – Inside the Spirit Airlines Repo Operation [video]

codezero
3pts1
hackaday.social 2mo ago

Who Owns Tindie?

codezero
2pts0
arstechnica.com 2mo ago

National Science Board eviscerated; Trump admin fires all 22 members

codezero
11pts2
www.bbc.com 3mo ago

Girl, 10, finds rare Mexican axolotl under Welsh bridge

codezero
226pts215
arstechnica.com 1y ago

A star has been destroyed by a wandering supermassive black hole

codezero
21pts5
www.propublica.org 1y ago

The Turbulent, Secret World of an American Militia (2024)

codezero
1pts0
www.bbc.com 2y ago

Oklahoma orders schools to teach Bible 'immediately'

codezero
35pts55
en.wikipedia.org 2y ago

Dave Shaw, world record holding technical diver

codezero
3pts1
www.npr.org 2y ago

99 Cents stores to close down all 371 locations

codezero
3pts0
www.righto.com 2y ago

An unusual 7400-series chip implemented with a gate array

codezero
150pts31
www.righto.com 2y ago

Reverse-engineering an analog Bendix air data computer: part 4

codezero
6pts1
old.reddit.com 2y ago

Astronaut helmet found in field after the 2003 Columbia disaster (2020)

codezero
1pts1
www.whid.ninja 2y ago

Denial of Pleasure: Attacking Unusual BLE Targets with a Flipper Zero

codezero
3pts0
arxiv.org 2y ago

Larth: Dataset and Machine Translation for Etruscan

codezero
1pts1
www.bbc.com 2y ago

Off-duty pilot accused of trying crash airline jet

codezero
4pts0
arstechnica.com 2y ago

Arstechnica 10-point scale to help you rate the biggest misinformation purveyors

codezero
5pts0
www.cs.toronto.edu 2y ago

Do over or make do (2010) [pdf]

codezero
2pts0
en.wikipedia.org 3y ago

Pumice Raft

codezero
2pts0
www.bbc.com 4y ago

Canadian admits to hacking spree with Russian cyber-gang

codezero
2pts0
polymega.com 4y ago

Polymega Retrogaming System

codezero
5pts1
en.wikipedia.org 4y ago

Stock Generation Internet Ponzi Scheme

codezero
1pts1
researchers.one 4y ago

The Collected Works of Francis Perey on Probability Theory

codezero
1pts0
en.wikipedia.org 4y ago

Network Telescope

codezero
1pts0
www.bbc.com 4y ago

The hunt for Nigerians who can change into cats

codezero
132pts207
lwn.net 4y ago

Red Hat fails to take WeMakeFedora.org

codezero
2pts1
cepa.org 4y ago

Putin Places Spies Under House Arrest

codezero
2pts0
en.wikipedia.org 4y ago

Long Walls of Ancient Athens

codezero
1pts0
www.macrumors.com 4y ago

Apple Announces AirTag Updates to Address Unwanted Tracking

codezero
2pts0

What are you looking at to know that's happening? Is the Toyota downloading/displaying some information only available on your phone, or from the Internet, or something else? Could it have a 4G connection of its own? What's the connection that makes you think the phone connection is letting it upload data over the Internet using your phone?

Does anyone have any details on this claim?

  Important: Even after the modem is removed, if you connect your phone to the car via Bluetooth then the car will use your phone as an internet connection and send all the same telemetry data back to Toyota. However, if you use a wired USB connection then it does not do that (see the discussion here and elsewhere), so I exclusively use CarPlay via USB. I wish I had a way to completely disable the car’s Bluetooth functionality, but it’s deeply integrated into the head unit.
How can data via Bluetooth be routed to an active internet connection? I assume this would only work if you have the manufacturer's car application installed on your phone.

Following the thread linked to, the only thing I can find is very unsubstantiated; https://www.rav4world.com/threads/2019-rav4-dcm-deactivate-p... :

  One caveat, if you use bluetooth to connect your phone to the car DCM will use your phone to connect to the mother ship and presumably send your data. I only use my iPhone cable to connect to the car which does not have this effect.
This sounds like pure speculation, and I would love to hear if there is any information that can substantiate what they are claiming.

I doubt you will find an answer here, but a few bits of anecdata:

1. CIA had recruiting events that invited STEM majors at my university, I suspect they do this very broadly.

2. Our funding came partially from the Air Force and part of the rules was our data and source had to be open. We know from conversations and other details from integrating with Air Force partners that they had models like ours that were an order of magnitude more accurate because they amalgamated models from all academics in our field and had their own career scientists on staff (often coming up through military ranks)

We used cvs, but did switch to svn before/around 2006, but I could be mixing that up. We did not switch to git even by 2012 when I left.

The reference to the 70s and 80s code didn’t imply it was version controlled before svn/cvs though if that’s what you meant, but by that time it was and still had old timestamps commented in the text files.

Yes, but even back then I was aware of the sections in executables (wasn’t this where it was found?) and any neckbeard from the 70s and 80s might be even more so aware. That said, yeah, sure, it’s a very possible and understandable oversight, but I’m weary because of all the text in viruses and such as indicators. Seems like a pass over ‘strings’ would be obvious. Though. TIL, strings doesn’t necessarily scan the entire executable.

I’d be surprised if it were a lot. At that time (open to corrections) not a lot of scientific research was done on consumer intel platforms.

Obviously it was found by a mathematician, but I still suspect it wasn’t obvious in published research or that it ended up not causing significant enough deviations to cause research to revisit the calculations.

My team ran into some interesting but very small deviations when we moved our iterative solar wind model from 32 bit to 64 bit, but the changes weren’t significant enough to revisit or re-do prior research wholesale.

Like my team in the 2000s I suspect anyone who had data crunched by this bug also revisited it and either concluded it wasn’t significant enough or redid the work and it didn’t change the conclusions.

I am curious now if this bug was cited in any papers at the time to give a rough idea how aware or affected academics were.

None of the science being sabotaged was being published in peer reviewed journals was it? (besides the Portuguese hydrodynamic modeling stuff, but it could have been accidental or had other uses)

And yes, to be clear, I don’t consider it contributing to “science” if it’s not published, reviewed, and reproducible.

I do wonder if these breadcrumbs were also left intentionally. “Oh look, we are using old stuff, don’t be afraid!” Or for some other reason. It is a little surprising to pull off such a sophisticated attack and miss details you could find running ‘strings’ unless I’m missing something and this part was encrypted.

My favorite part of this was:

That kind of notation, called SCCS/RCS, is the equivalent of finding a rotary phone in a modern office. Nobody uses it in 2005 Windows kernel code unless their programming background goes back decades, to government and military computing environments

The astrophysics lab I worked at in 2006 was still using svn and had a bunch of Fortran with references to systems from the 70s and 80s. The code ran perfectly well thanks to modern optimizing compilers and having moved from Vax to Linux in the 90s, it was a surprisingly seamless transition.

It reminds me of a conference talk I’ve referenced before “do over or make due” basically implying rewriting large amounts of mostly functioning code was not worth the effort if it could be taped together with modern tools.

I wonder if this app is also an “app clip” - the small size applets that can bypass download size restrictions (and maybe, because of that, other restrictions).

How big is the installed size, and can you go to settings and delete app data before deleting the app? You may also check to see if it’s installed on other devices connected to your iCloud account or if you have any devices you never disconnected including Apple Watch as they have a watch app.

My wife works for macrumors and she once found an incomprehensible HomeKit bug and we had an Apple engineer come to our house to diagnose (we lived nearby to Cupertino)

It turned out to be a bug in the legacy HomeKit after upgrading on the backend. Totally opaque to the end user.

I think it likely speaks to how much more common they are as exotic pets than they have been in the past. That she found it before it died is surprising, and the longer I think about this story the longer I wonder if they just bought it as a pet and the river discovery was a gag for online clout.

Yeah, I didn't want to spoil the article with my comment, it was a good read, but it did immediately make sense why they were so popular now. I've met multiple people in passing who own Axolotl. I used to think I was super special that I met a guy who owned one, and I assumed it was because he was a famous neuroscientist, and had some special permission, but now they're relatively common as pets (to a degree).

From the article it doesn't appear they've ever been found alive in the wild anywhere but their natural habitat. This was likely a remarkable chance happening where an owner released one and she found it within close succession or else it likely would have died very quickly.

If there is a wild population, that would be an even more amazing story.

I don't even remember the name of the server or software, but even back when WoW was contemporary I had a lot more fun playing on free servers with extended XP, even though pretty often bosses would be buggy or not quite the same as in the real game. It was so much more playable and casual compared to the early WoW (or worse, EverQuest which came before). It's a shame game companies can't find a way to embrace or even profit from these kinds of servers.

At a previous company our marketing team had a $50k/mo budget with an agency that got their basically verbatim posts posted by all the tech blogs like TechCrunch, venture beat, Huffington Post etc. I got really aware of the tech media and I read every story as intentional marketing.