wallaBBB

Agree with the headline part, but the second part not so much.

As someone mentioned it's about the trend.

I have heard from people at multiple major open source projects that what is keeping them at Github at this point are free GH Action credits that they get and they couldn't really afford CI/CD if they left. Meaning numbers would be bigger if GH wasn't "paying" projects to stay.

Also my 14yo self was far more skilled at circumventing online guardrails (mostly piracy back then) than my old ass is today. I’m not winning that battle of cat and mouse.

Those are far from easy do handle for majority of parents.

Banks keeps sending me warnings about some new ‘Nigerian prince’ level scams. They wouldn’t be doing it if grownups weren’t falling for them.

General population doesn’t want to setup piholes.

Not when big tech is doing everything they can to bring harmful content to kids while pretending to sincerely offer guardrails.

WWDC - time of the year Apple reminds us it has a VR.

I like to point out often the yellow vests protesters being ratted out by Proton as good example of how misleading their marketing is. French police contacted Swiss police to get the id of the accounts, Swiss told proton to hand over the data. Problem is - under French law, their police would not be able to get that data from local providers.

Proton - HK owner, dev team in Bulgaria and marketing with mythical claims of "Swiss company privacy". For a company that is selling essencially trust, they sure are shady as f...

Yes, because shareholder value comes first. Ffs

Thats the variation within the classes. And there will always be outliers, but even if you look at bodybuilders in 100+ kg, they are not what you’d call weak even if they don’t optimize for strength.

You cannot be strong without being big and you cannot be big without being strong.

Of course there are levels to this, variations within “weight classes”… but in general this holds true.

Also consistency trumps any program.

Not sure they can be a poster child while Firefox still exists.

"remained flat" and "remained flat when adjusted for inflation" are two very different things.

undisclosed F5 vulnerabilities

I don’t know why, but this sounds a bit like backdoors.

Qualcomm has bought plenty of companies that serviced small customers, and what happed is exactly what the person you’re replying to described. You can’t even get a quote many times.

What I expect short term is what happened to Eagle in the PCB space when Autodesk bought it (best thing that happened to kicad).

Longterm Arduino goes into the periphery of the maker market, similarly to beaglebone.

it's unrelated to the manufacturing of EVs. If any factory reaches a significant energy generation (usually this means from solar) it makes sense to look into a battery solution. It just happens to be Mazda's manufacturing plant.

Wanting the latest and greatest was a thing back in 2010s, when there was a lot of progress and a lot of experiments by the phone manufacturers. Today, me and most of my friends are pushing our phones as long as we can (4+ years). My parents hate when they have to change phones, because they then have to adjust to a new UI. If battery and screen could be easily replaceable + security updates, many people would not be changing their phones for 5+ years.

If we'd ignored anti-nuclear activists in the 70s none of this would be a problem.

Lemmi rephrase this for you: If we ignored anti-nuclear activities funded by big-oil in the 70s this would not be a problem.

Yes! and if we ignored all the destructive FUD surrounding climate change they have been doing for more than 50 years we would be better off.

Furthermore, if we stop ignoring the destruction AI hype is doing to the climate we will be better off.

I did not refer to the talent directly contributing to the technical progress.

P.S. - clarification: I mean not referring to talent at OpenAI. And yes I have very little doubt talent at DeepSeek is a lot cheaper than the things I listed above for OpenAI. I would be interested in a breakdown of the cost of OpenAI and seeing if even their technical talent costs more than the things I mentioned.

What factories are TSMC and ASML operating in US?

One thing I (intuitively) don't doubt - that they spent less money for developing R1 than OpenAI spent on marketing, lobbying and management compensation.

It had a vary suspicions statement. They stated that they see specifically a lot of Mullvad ads. Not general VPN ads. That is what makes is sound malicious. Mullvad is not even close to being in the group of biggest marketing spenders.

You need a minute on their website to see that they have a very simple approach to funding their business. No "life time subscription" exclusive offers, no BS privacy claims...

Also this is HN, not a comment section on something like Yahoo news, really hard to consider people commenting here as being detached from tech trends and news.

Have you cared to check the tiers they offer? Hint: not that many, and no free ones.

And knowing that mullvad doesn’t come close to the mainstream marketing others (well in essence one) VPN providers, your comment comes of as malicious.

After 500 issues and 27 years it's time to wrap up the Embedded Muse. It's said there's some wisdom in knowing when it is time to move on, and for me that time is now. I mostly retired a year or two ago, and will now change that "mostly" to "completely". To misquote Douglas MacArthur, who gave his farewell address to Congress at the same age I am now, like an old soldier, it's time for me to pack up my oscilloscope and fade away.

Those type of attacks (CAN injections) are very OEM specific, and come from deep insider knowledge, not something you fuck around and find out. I’m assuming you’re referring to Toyota, but anyways please give direct reference to the attack you’re referring to.

Keep in mind any need for expensive equipment is already a deterrent for many.

Not really. At least not for those immobilizers that don't use "proprietary" ciphers. Automotive loves security through obscurity until it bites them in the ass. Today most manufacturers have moved to AES128, which is not cheap to brute force, especially if there is a rolling code (should be the case for many)

But you are right that there are many (older models) that use ciphers with know quick exploits: TI's DTS40/DTS80 (40/80bit, proprietary cipher, in many cases terrible entropy), models from Toyota, HKMC, Tesla. About 6s to crack in many cases.

NXP's HTAG2 - most commonly used one in the '00s - 48bit proprietary cipher, a lot less exploited in the wild than the TI's disastrous two variants.

Regarding the Kia Boyz - immobilizers have been mandatory in most of Europe since late 90s, in Canada since 2007. Basically there is something to put on (lack of) regulations as well as on HKMC.

And one of the best Twitter accounts: https://twitter.com/WorldBollard

Why would you need such a stack? Article is analyzing unidirectional fobs, HackRF is half duplex so you could easily capture and analyze and/or replay the signal. Only additional thing you need is a PC.

One thing to consider is that the payload will be encrypted so you wont be really able to tell apart what is the rolling code. Hopefully fobs have stronger encryption so collecting enough sniffs and analyzing is insufficient (looking at tesla with their 64bit encryption, hopefully they upgraded).

Honda replay myth mentioned in the article is BS, it was popularized by ppl faking a simple replay attack while doing a more complicated one. If you record the fob command and the car never receives it, of course you can immidiatly after replay it to the car and car will accept it since RC is valid. But if you're sniffing while car is receiving it, RC gets updated. If Honda didn't have RC, it would have been far worse than the KIA boys (overriding immobilizer protection and hotwiring the car) issue that did a lot of damage to KIA in US.

You think there even would be an investigation/probe into it? Perhaps a really quick one.

Seems a bit like blame shifting. Almost any approach will work if perfectly executed by a team with a perfectly matching skill sets, but yeah we have to account for the imperfections (to put it lightly).

Not sure what products your experience comes from, but I am talking explicitly about keyfobs. This is generally produced by Tier 1 suppliers, not the OEMs themselves, and not too many players in the field. With the MCU suppliers it shrinks even more (talking about handsfree models, most common in the market, utilizing LF for localization and standard RF bands for Tx).

MCUs are highly specialized (also not publicly available), and you can play with the tuning registers up to several digits without much performance loss. 3xx/4xx MHz ones you can easily go over the regulation limits (IIRC in JPN occupancy is taken together with the power into the calculations, it's a very crowded spectrum...).

If a spread spectrum is used at 8xx/9xx range, there there is no worry of hitting the limit, here usually battery life and max peak current are limiting, and fine tuning is often done for individual samples at EOL in the plant. It doesn't necessarily mean that all at 8xx/9xx are spread spectrum, but the "premium" (usually half-duplex) are. They provide a lot better performances at low SNR (and thus great range) compared to the standard FSK/Manchester 1 or 2 CH fobs.