HN user

spauka

359 karma
Posts25
Comments50
View on HN
slack.com 1y ago

Salesforce updates Slack pricing to expand access to AI, Agentforce, and CRM

spauka
3pts1
opennem.org.au 3y ago

Live Power Generation and Cost in Australian National Energy Market

spauka
15pts11
www.youtube.com 4y ago

IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation

spauka
2pts0
www.economist.com 4y ago

Covid-19 patients with severe symptoms suffer long-lasting cognitive impairments

spauka
5pts0
news.ycombinator.com 5y ago

Authentication errors across multiple Microsoft services

spauka
2pts0
mobile.abc.net.au 6y ago

'The end is coming': One Country, Two Systems, and the countdown to 2047

spauka
3pts0
www.smh.com.au 7y ago

Unprecedented': Netflix revoking Why scene heralded as world first

spauka
2pts0
www.smh.com.au 7y ago

'One more thing': Apple fails in legal bid over Swatch trademark (Australia)

spauka
8pts0
www.sfchronicle.com 8y ago

Apple Park: Transcript of 911 calls about injuries from walking into glass

spauka
2pts0
www.febo.com 10y ago

GPS jumps of -13.7 us

spauka
5pts0
www.abc.net.au 13y ago

Huawei offers unrestricted access to software code

spauka
1pts0
theconversation.edu.au 13y ago

No, You're not entitled to your opinion

spauka
9pts0
www.abc.net.au 13y ago

Use of tracking app to find stolen iPad 'legal' (Aus)

spauka
2pts2
windows.microsoft.com 13y ago

Microsoft updates their Terms of Service to an easily readable Q&A format

spauka
106pts24
pirateparty.org.au 14y ago

Australian Pirate Party looking for Members to be registered in the ACT

spauka
2pts0
www.renesys.com 14y ago

Analysis of the Pirate Bay outage

spauka
3pts0
arstechnica.com 14y ago

Backdoor in Mission Critical Infrastructure (+Code)

spauka
4pts0
www.abc.net.au 14y ago

The great NBN (National Broadband Network) fail

spauka
3pts0
plus.google.com 14y ago

Being an Atheist (What does it mean?)

spauka
1pts0
msdn.microsoft.com 14y ago

An indepth runthrough of the Windows Executable (PE) File Format

spauka
4pts1
www.musicweek.com 14y ago

1st Generation iPod Nano Recall

spauka
1pts0
abc.com.au 14y ago

Stuxnet-style virus hits Iran

spauka
3pts0
www.hollywoodreporter.com 14y ago

Australian Crowd-Fund Feature 'The Tunnel' Gets BitTorrent Release

spauka
6pts1
www.newscientist.com 15y ago

What Tau Sounds Like - New Scientist

spauka
2pts0
www.abc.net.au 15y ago

Three Arrested over Sony Hack

spauka
8pts2

Ironically, you've picked an example (Artemisinin) which is discussed at some length in the linked article - as an example where TCM success is overstated and not backed up by real-world results!

See P5-6 in section "The implausibility problem" - which points out that in order for the treatment to be effective it had to be refined into a form that is not rapidly eliminated from the body.

One additional fact to keep in mind - the ability to smell hydrogen cyanide has a genetic component and 1 in 4 people will not be able to smell the "bitter almond" odour [1].

I do wonder how similar the smell of sweet and bitter almonds are, they are apparently different [2].

[1] https://academic.oup.com/occmed/article-abstract/67/9/662/47... [2] https://www.thespruceeats.com/what-are-bitter-almonds-180699...

Without comment on the question of health benefits or harms, I'm curious whether you've had the well water you use tested. Fluoride concentrations in bore-well water varies quite widely, and concentrations higher than fluoridated tap water not uncommon. There are several areas here (in Aus) where fluoride is removed to reach the recommended concentration of 0.5-1.1 ppm. This obviously varies based on location.

One of the coolest revelations to me, just looking at the status page [1] is that the Wii only had 88 MB of RAM - split between 24 MB built in to the SoC and 64 MB of GDDR3.

Given that this is the case, ntpd using 15% of the system memory means it was using about 13 MB of RAM - hardly a huge chunk by today's standards but not small either. I wonder if reducing the number of time servers would improve this much? On my system I can see I'm tracking about 9 servers from the debian pool.

Compare this to the XBox 360 which even at the time had 512 MB, it's really amazing how much they managed to squeeze out of such a tiny chip.

[1] https://blog.infected.systems/status/

Depending on how often you are refreshing - the status page only updates every 15 minutes:

So I put together a simple shell script that runs from the crontab every 15 min, outputting some system stats to a basic HTML file in the webroot.

[dead] 2 years ago

Raspberry Pi's RP2350 microcontroller introduced a multitude of new hardware security features over the RP2040, and included a Hacking Challenge which began at DEF CON to encourage researchers to find bugs. The challenge has been defeated and the chip is indeed vulnerable (in at least one way). This talk will cover the process of discovering this vulnerability, the method of exploiting it, and avenues for deducing more about the relevant low-level hardware behavior.

The RP2350 security architecture involves several interconnected mechanisms which together provide authentication of code running on the chip, protected one-time-programmable storage, fine-grained control of debug features, and so on. An antifuse-based OTP memory serves as the root of trust of the system, and informs the configuration of ARM TrustZone as well as additional attack mitigations such as glitch detectors. Raspberry Pi even constructs an impressive, bespoke Redundancy Coprocessor (RCP), which hardens execution of boot ROM code on the Cortex-M33 cores with stack protection, data validation, and instruction latency randomization.

Since there are many potential incorrect guesses to be made about where problems might lie, here I begin with the most fundamental features of the chip logic, including the reset process. Even small oversights at this level can entirely defeat sophisticated security efforts if higher-level mechanisms place complete trust in seemingly simple hardware operations. I show how cursory research into the design details of IP blocks used in the SoC can help inform an attack, and demonstrate the importance of fully testing new features which are built atop older IP. Ultimately, the significant amount of luck (or lack thereof) involved is a reminder of the need to meticulously understand and validate complex systems.

It seems like the summary of this article is: No

Encryption is mandated for data at rest and data in transit. There is a provision for encryption of data in use when homomorphic encryption becomes feasible, but the loophole referenced in the title is that it is not required now.

So ChatGPT didn't correctly summarize the text at all, this article does not talk about ethics at all, doesn't talk about potential uses and I would consider the statement about capturing context and incorporating knowledge from a wide range of sources to be a pretty poor summary of the text.

In fact I think that's a great example of exactly what is actually discussed, namely that the context that ChatGPT is able to hold is limited as it's context is held completely in its input. There is never any modification to it's internal state, we're just passing a longer input vector in to the start of the GPT-3 black box. For long inputs the embedding vector becomes more and more sparse and it needs to make more assumptions to fill in it's output.

The paper does not make conclusions about whether the vaccinated are more likely to be asymptomatic - but in case you are interested the results are presented in Table 1.

Of The 69 cases infected, 47 developed symptoms (median 4 days post diagnosis), which is 68% of cases. Viral loads for symptomatic cases was higher (page 11).

Key points: there is not enough information here to draw conclusions about the infectiousness of vaccinated vs. unvaccinated individuals, or about whether vaccinated individuals are more likely to be asymptomatic. This paper does not even try to draw such conclusions.

This may be a joke comment - but this is not the idea of the study. From the introduction:

  the idea is to use alcohol inhalation as it reduce surface tension on the alveoli and markedly decrease sputum formation with improvement on oxygenation beside its cytolethal effect on virus lipid bilayer.

This reads to me more as if though G/FB have to tell news organizations what data is being collected, rather than disclosing the actual data.

A quote from the Q&A seems to clarify:

give news media businesses clear information about the nature and availability of user data collected through users’ interactions with news on their services;

As other commenters have pointed out below, the issue the ACCC took was not that they didn't request reviews from all customers, but rather that they specifically and actively excluded people who they suspected might have had bad experiences from a program where otherwise all other customers were included.

From the ruling [0]:

On a weekly basis, Meriton provided TripAdvisor with the email addresses of guests who had stayed at its properties and TripAdvisor sent email invitations to these guests to post a review. However, rather than sending TripAdvisor the email addresses of all guests who had stayed at its properties (other than those who had requested that their details not be provided), Meriton adopted the following two practices:

(a) The first practice was to add the letters “MSA” (which stand for Meriton Serviced Apartments) to the front of the email addresses of certain guests. This rendered the email address invalid. This practice was applied to guests who had made a complaint or were otherwise considered likely to have had a negative experience at a Meriton property. I will refer to this practice as the MSA-masking practice.

(b) The second practice was to withhold from TripAdvisor the email addresses of all the guests who had stayed at a property during a period of time when there had been a major service disruption (such as the lifts not working, no hot water, etc). I will refer to this practice as the bulk withholding practice.

[0] http://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/FCA/2...

From the article:

A profitable IPO is meant to anchor a sovereign wealth fund that will, if things unfold as envisioned, generate enough investment income at home and abroad to dominate state revenue by 2030. Demand for oil will peak just before then, according to Royal Dutch Shell Plc projections, as alternative fuels and electric cars gain popularity, putting Middle East energy producers on shakier footing.

So, it sounds like they want to turn their oil reserves into cash before the price of oil begins to fall.

In answer to your two questions:

1: Yes, you will eventually need to mmap more memory. Since you want to minimize the number of mmap calls necessary for things like heap allocations, you generally allocate in larger chunks then necessary and then malloc etc. allocates from these chunks. It doesn't matter too much in terms of memory waste, since in the back end, linux allocates physical memory lazily, so the extra allocated block of virtual memory doesn't get a physical allocation until something tries to access it. For this reason, it can sometimes seem like a malloc call completes successfully, but you run into an out of memory condition once you try to actually use your "successfully" allocated memory.

2. It turns out most kernels don't actually enable the NX bit automatically, with the reason given being that early processors have buggy implementations, so by default the NX flag is not honored. As a result, all memory is executable by default, unless explicitly set not to be (i.e. using memprotect), and this is only if the kernel is compiled to support NX, which it may not be. This is changing, and some systems such implementing SELinux or similar are supposedly stricter but I haven't actually tested this out myself.

Not at all. It's saying use standards when there is a standards compliant alternative, because it's both better coding practice and because it means you won't be screwing over your users and you won't be screwing over developers who wish to write alternative implementations.

It'll be interesting to see where the opposition takes their broadband policy. With Turnbull at the helm of opposition telecommunications policy, it is certainly beginning too seem like they are less likely to completely tear down the NBN. Given that it is becoming abundantly clear that something needs to be done, I think it's probably more likely that they will simply change the scale of the project.

At any rate, they seem to have given up on the ridiculous notion that wireless is a suitable replacement in urban areas, and actually seem to be moving towards a more comprehensive plan...

I'm holding out hope that even with an opposition government that in urban areas there will be optical. The question will be how they manage the future of the infrastructure, and whether or not they adequately provide for rural areas.

P.S. If you do invite Woz out for beers, count me in :P

I am curious about the senate committee choosing to single our Microsoft and HP in their attach, when there is ample evidence to suggest that so many other well known companies are engaging in similar practices. In 5 minutes, I came up with articles from major papers documenting 3 of the biggest companies in the US using similar practices...

http://www.nytimes.com/2012/04/29/business/apples-tax-strate... http://www.bloomberg.com/news/2010-10-21/google-2-4-rate-sho... http://www.guardian.co.uk/technology/2012/apr/04/amazon-tax-...

That was certainly an interesting if not completely ridiculous read... The author seems to spend most of his time generalizing and erroneously misinterpreting the view points of those he perceives as skeptics (the most heinous of which include his characterization of skeptics as people who "hate and fear" philosophy, which is just about the most ridiculous thing I've ever heard).

He seems to have misguided views on everything from modern medicines use of the placebo, to the development of fields such as computation linguistics and medical science. Here's the deal, if the author can demonstrably prove that people who use homeopathy know that it is just a placebo, then they can go for it. But they don't. If the author can show that there exist better methods for researching language, then go for it, but he doesn't. In fact, as someone who is interested in the field and friends with many computational linguists, let me tell you they are trying to look for better models to deal with the uncertainty inherent in NLP, and I'm not even sure where his statement that computational linguists fear pragmatics comes from. That is complete crap.

Wrapping bullshit around some kernels of truth does not make it true. I.E. yes, the atheist community on reddit can have misguided views, and yes people like Hitchens and Dawkins and the like are subject to their own personal biases, but both those people and indeed most of these communities are acutely aware of this fact and spend a lot of time trying to come to terms with it (look at the recent furor about whether the glorification of people posting snarky remarks made to "fundies" on reddit constituted a positive step). His rant against the skeptic conspiracy against feminism is also something which I found incomprehensible, and as far as I can tell completely untrue.

I would encourage people to read this in its entirety, if only to convince yourself that the title is an attention grab, and that the contents, while pointing out some valid truths, are largely filled with conspiracy theories and facts which are not backed up, and based on vast generalizations and oversimplifications.

P.S. I did enjoy the bit about the skeptics movement being a neoliberal conspiracy.