HN user
Given the "kernel" requirement coupled with the design of these devices in general, any real non-interactive RCE will be claimed to not be "in the kernel"... it was a Qualcomm or ARM binary blob not the kernel!, It was the Baseband firmware not the kernel! It was libXYZ not the kernel! etc.
Why don't you drive an 18 wheeler to work every day? They are used by millions of professional people every day who's job it is to drive! Why would you be different from all those people that you think you need to use a little car instead?
The answer is obvious in both cases; You don't need it and it would be wasteful. If I don't have a huge database with constant read/write calls, If I don't have to try to manage multiple end users submitting content, if I don't need super async real-time snappy UIs to compete with the latest android app fad or session tracking of tens of thousands of users, why would I need laravel?
If nobody rolled their own specifically for what they needed, we would still be writing ASM/APL/Raw hex.
The vested interest media and political parties have in making it seem like there is an insatiable thirst for white supremacy in America.
It's on average not any worse than it ever was, but showing us how bad its always been right now serves a useful political goal in division and diversion.
Its not a conspiracy, just stupidity and greed. Outrage generates views and votes, no cartel required.
Installation in buildings. Try pulling a bundle of CAT6 cables from a comms closet with huge plastic blocks from zipties jutting out every other foot through 10-50 feet of drywall and/or drop ceiling. Loom doesn't even warrant a sarcastic comment in that context. The biggest advantage is of course the string takes the brunt of the stretch stress.
I'm not gonna go lace up a DC but it's still useful enough that every hardware store around carries rolls of twine right next to the cable spools and zip ties.
Lots! Tons and Tons and Tons! S3 is super secure and CAN NOT be hacked when properly configured and used according to our standard!
You got hacked? You must have configured it wrong because we already told you it was unhackable; Good luck proving it was our fault not yours.
If there is a gold cartel to enforce it, yes.
For a humorous example see the origin of "processed cheese".
“The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.”
So just like real US elections. What's that got to do with it?
Nah. Computing sensitivity has always been easy enough, flip bits and watch output. This is about how to do it in a generalized way that fits in with related work in the field.
Absolutely nothing, It's worse with fewer features. Mozilla itself says as much. This is for playing around with stuff, not general usage.
To your entire argument I say GOOD. Can't make profitable bluebarries? Tough shit. Free market right?
Work conditions become crap? GOOD. Can't run a business without slaves in shanties tough shit. Free market right?
Product quality goes to shit because you can't afford decent employees in reasonable working conditions? GOOD. The free market in action!
Are you afraid of a free market?
Warrant proof communication is absolutely in the best interests of the citizens for exactly the same reason it's not in the best interest of the ruling government.
We will be able to explain and understand consciousness in objective terms 1 second after the first person achieves flight by pulling themselves into the air with the bucket they are standing in. About 5 seconds after a computer can run a 100% simulation of itself running a 100% simulation of itself. A whole minute after someone writes a program that can tell if/when any other programs will stop running.
As a question that's dogged us for thousands of years, maybe its time to accept its just a shitty question.
Any interesting work coming out of "Olah Team"? I tried googling but found nothing specific just Distill articles and your twitter feed...
Depends on the MDM and phone really but, No. Triangulating a cellphone on the network via cell towers is a tried and true feature of wireless infrastructure. Even your phones GPS capabilities are most likely "A-GPS" meaning Cellular Assisted; It'll use cell location data when GPS satilites are slow/unavailable.
GPS toggle isn't doing much of anything besides application permissions enforcement.
"Unikernel" is a overly generic term. Technically the Linux kernel is already a "Unikernel". It's just most of the time its discussed as a negative not a positive and the term used is "monolith".
The project you want is "Yocoto", a complete toolchain to build customized embedded OS images.
You would have to build your own analyzer. Grepping the dependencies from the makefile/build data or just parsing the output of dpkg and translating that into yocto build specs is not unreasonable.
https://www.irs.gov/pub/irs-tege/rp1995-48.pdf
I'll bet you it still just vanishes...
Do you worry about some random asshole kid hurling a re-bar in to rush hour traffic? REing automotive tech, setting up transmitters, and spoofing traffic data to throw a virtual re-bar in to rush hour traffic could become a pandemic unless we figure out a way to fight such attacks.
Unless you have persistent mount to network FSs like NFS or SMB how do you think the ransomware would spread? You sure don't need network mounts for backups.
Cronjob to an (S)FTP server and an upload script trigger to chown/chmod all incoming files making the whole thing WORM (Write Once Read Many).
Once its submitted the same user account can't alter it. Even if the malware is clever and scans for .netrc and .id_rsa and manages to create its own connection to the backup server it doesn't have access to anything anyway.
"So do we make our flagship product useless for the entire country or not?" - The real question
No. we just feel better because it just sounds so obviously reasonable doesn't it?
Kazakhstan's low-tech approach is just that, low-tech and low-effort. They could have used tons of vectors besides simply saying "install this cert."
A tiny shred of effort would have been to package an "updater" that did the install without explicitly saying that's what it was for. Or better yet: Kazakhstan is committed to a greener more ecologically friendly future! All tax documentation will go paperless! Just use the provided USB Key to access your documents in electronic format!
A small morsel of effort would be to force it on OS vendors through regulation/licensing/threats/money for localized copies. A good deal of effort would hijack CRLs, pinnings, et al while demanding/sneaking the private keys of the CAs.
Public Key Infrastructure is fucking pointless when the infrastructure is precisely what you can't trust.
Survivor bias. Plenty of shite code got written for the 6508 but only clever crap gets blog posts 30+ years after the fact.
Not a professional liar either but I'm not sure about that. I imagine torrent trackers are a decent analog thats been through the courts already. They don't host the content, they just host URIs and metadata to people that host the content.
The drag and drop interface isn't to upload the content to be hosted like a traditional server (what's the point then?) It looks like (without digging through code) it's so they can parse the file-structure and generate the URIs to forward requests.
I was gonna make a joke about how much hate Trump generates ruining a brand like that but then I remember Hugo Boss, BMW, IBM, VW and Bayer among others were all knuckle deep with the Nazi's and every single one is still a popular brand to this day.
"Don't forget to occasionally do that thing I mentioned in passing 2 weeks ago, under my breath, during a klaxon alarm test. Otherwise the errors will DDoS the whole cluster. See you in a week, goodluck!"
Nah - that would never happen.
While everyone haggles about the internals I have an interesting anecdote about the costs of tools libraries.
A small service that landed in my lap needed to read(only) a data source that was roughly 10k lines of yaml. No way that was going to be in any way efficient so I asked for suggestions. All the work-a-day devs(I am not) instantly said the same thing without a single real thought about it: Make it a database duh!
Long story slightly less long, Loading up the libraries to interface with a database ate between 2 and 3 times the memory(depending on the DB and lib) that simply loading the entire 10k line yml ate and offered slower performance and required more code.
SQLite was pretty darn close but in the interest of saving developers from themselves vis a vis parameterized queries, or the need to queries all together for that matter, increased the required code for zero benefit.
The service still hums along with a 10k line yaml in memory. "Worse is better" indeed.
If you believe you should be able to talk down the street without getting harassed or raped, you can vote via not dressing like a slut. Who exactly should be responsible if not yourself, and how? Many people on HN sit around trying to avoid sexual violence that is laughably less brutal than what 2, 3, 4 generations ago were doing.
Morally repugnant victim blaming by any other name smells just as foul.
They exist, WW2 was proof of it. It gave us both Meth(axis) and Cocaine(allies) among other things. It's just that it comes at a very high cost of the users long term health and/or sanity.
Everything is a nail.
Whenever developer sorts get all starry eyed over "DB as an FS", they never consider data exchange between applications vendors and platforms. Their applications always exist alone in a digital vacuum.
Example: Imagine trying to attach an MS Word document stored in this DBFS to an email from a Thunderbird client. What does that look like to the user? What does it look like to the Thunderbird developer?
Abstract and encapsulate so that each application can use their own container format that includes schema and encoding details? Other applications can read this metadata directly from each containerized db object? Cool, we just reinvented the filesystem again.
It pops up with exactly as much frequency as a normal user account in most Posix-like systems would require "su" of one form or another. For exactly the same reasons. It's just expected behavior for those systems, but completely unacceptable for Windows.
And we wonder why Microsoft sucks so bad at securing Windows.