Onavo

The Soviets allegedly used the same principle to make cheap single sensor missile seeker heads.

I never really saw the point of Anubis. It feels like a anti DDoS tool that's being repurposed for web scraping.

> Err...have you actually asked someone to get into a Cessna?

Yes? In practice once you convince them to get into the plane the only real issue in the air for those new to flying is air sickness.

Also fun fact a good number of pilots claim to have a fear of heights (never met one irl except online in aviation forums).

If you are in aviation/aerospace, don't be afraid to share the joy of flying. There's nothing quite like cruising at 90-100 knots @ 3000-4000ft AGL on a nice clear day.

I believe this is when the term "okay boomer" is warranted.

Best is still the apple privacy proxy.

Also fun tip, if you are ever stuck behind the Anubis PoW proxy, node.crypto is sufficient hardware acceleration to solve it in under a second.

Half of aviation safety (especially for commercial aviation) is done on the ground and has nothing to do with aerospace engineering. Stuff like shift times for pilots and ATC, mandated rest periods, proper ground equipment in zero visibility conditions etc. Many developing countries cut corners on maintenance and spare parts. Mandated use of safety technologies (the DC helicopter incident was entirely preventable). Airports that are designed with safety in mind. If you have a dual engine failure immediately after take-off on an airliner in the middle of a built-up city you are generally fucked. Midwestern airports are the best if you have to do a forced approach. Transport category aircraft (basically anything bigger than a 12 seater plane) don't really have many options, they can't easily land on the runway like smaller planes. That's why the Hudson was a miracle. Your airliners stay safe through constant maintenance and inspections. Dual engine failures are very rare (unless through deliberate pilot action like the recent case in India).

On the engineering side you can look up ETOPS and the various ICAO and FAA and EASA standards for airliner class aerospace engineering https://en.wikipedia.org/wiki/ETOPS

Trust me, y'all think airplanes are "safe" because of some sort of magical protocol. No single protocol actually works. It's mostly lots of layers that are stacked on top of each. It's why in aviation, catastrophic failure modeling uses something called the Swiss Cheese model; you need every single hole (error or failure) to line up to generally trigger a complete breakdown in safety. It may sound counter intuitive, but by aviation safety philosophy, a canvas and wooden frame plane operated under commercial standards and kept to a strict inspection schedule is "safer" than e.g. a privately operated 737 that doesn't follow manufacturer maintenance standards.

NASA has plenty of guidelines for writing "safe" aviation software. I doubt any software engineer will be willing to entertain the level of effort and certification needed to comply with those for e.g. their Django side project.

Oh yeah, and you will find very quickly that most people are a bunch of flaming hypocrites when it comes to flying. Lots of wannabe aerospace engineers in tech. Half the people I have met who put aviation on a pedestal hate flying but love to trumpet the statistics of how safe commercial aviation is. Try asking them to get into a Cessna and all of a sudden the excuses come out. It's oh noes I have a fear of heights, oh noes general aviation is less safe and only slightly safer than a motorcycle, oh noes the FAA is corrupt and allowed the helicopter crash in DC to happen, oh noes I have a family etc.

Aviation safety discussions on hacker news have barely more more depth than biotech and healthcare discussions here. It's extremely ironic because a tremendous number of pilots are engineers, and especially software engineers. It's not exactly a cheap hobby. But you don't see massive numbers of English majors come crawling out of the woodwork to join a discussion on the safety of C++ vs Rust, but tech bros flock to worshipping aviation as a platonic safety idol like moths to a flame.

Fuck aviation, stop using it as a dead horse metaphor for safety through human protocols. I am private instrument rating holder and there's very much a top down push for single pilot ops. Your newer jets (even the jetliners) are all designed with that in mind even though they may not be certified as such.

Isn't Cami Clark just the classic sleep-their-way-up type? She didn't end up in the Whitehouse unlike a certain other one but her marriage at 20 was to a 64 year old...

(According to the Wall Street Journal)

Some of the interpretations won't be correct without grounding them in old case law. That's the expensive part, in many jurisdictions, the official interpretations by the tax department are not free.

No love for botulinum eh?

Until somebody invents a solution for bypassing paywalls at scale, they are not going away. It's like people asking "why don't AI companies release their training data".

According to Wikipedia, Heymann was involved in two computer programmer suicides? Just what the hell are they doing there? Isn't Mass a liberal state?

Who were the prosecutors and lawyers involved in the Aaron Swartz case? Where are the pitchforks for them? You can't just hide behind "The Government".

If I don't want to use the wave of "venture backed ghostty wrappers" for remote mobile coding similar to Claude Code remote, what options do I have? Any plans for a first party remote solution that's not SSH?

Y'all need to abliterate it yourself. Complete refusal removal on every axis will only get you pwned. They should make a UI for abliteration creation and maybe let you upload a diff or LoRa or something.

Abliteration is a very simple technique. You just send in input sentences that it will refuse and then observe the residual streams and then zero out the refusal vectors. It's not some sort black magic.

I wonder which planes from that era are "nice to fly" by modern standards. As a point of reference, the Cessna 172 trainer originates from the C170 which was designed right after World War 2. It's an extremely forgiving and well designed plane.

People like to say that the tech industry is young but most don't realize that general aviation is only a few steps removed from the early days of Wright Brothers and their contemporaries like Dumont and Blériot. It's mostly civil aviation and military-adjacent aircrafts like the X experimentals that are truly pushing the boundaries.

It's a pity that clean sheet designs of airplanes made from composites (most famously your Diamonds and Cirruses) are dreadfully expensive to maintain relative to the old school aluminium frame designs. The composite (carbon fiber polymers) airframes have way better aerodynamic characteristics and benefit a lot more from the past 50 years of aerodynamic advances. Though given the fact that modern EVs have very aerodynamic external aluminium shells, I wonder if some of the limitations of shaping aluminium into complex aerodynamic shapes have been resolved (composites are much simpler to shape, they are basically fabric version of 3D printing).

You can see the commenters arguing with me about ASLR in the old thread. Half the commenters here, including quite a few "thought leaders" (not gonna name names or ad hominems but everybody knows who they are), insist that there are ways to implement this exploit at scale without having to do rowhammer-style spam brute forcing. I am still waiting. There's a lot of FUD and hearsay in the tech circles grapevine but very little evidence of actual working exploits against a modern Linux server outside of "attempts".

https://news.ycombinator.com/item?id=50188948

I am still waiting for them to put their money where their mouth is.

What about via US hosted data center resellers like Fireworks?

If you have well-defined, long running tasks that are relatively disposable but requires constant ML monitoring and overwatch e.g. web crawlers, monitoring prices, logs etc. DS4 Flash is perfect for those.

For tasks like crawling and real time log analysis etc., the costs really add up at scale.

The more interesting question is how much more performance can be squeezed out by post training the open weights through RL.

Also just to reply to RagingCactus's sibling comment which was somehow downvoted to death (HN users, never change.) for quoting the Wiz post, the two PHP vulnerabilities alone are still not to bypass ASLR.

CVE-2026-109619 is the main memory related vulnerability but it alone isn't enough to break OS level ASLR unless you spam it (brute forcing).

Then show me how it would work on modern Linux servers that has ASLR on by default short of spamming it DoS style.

If you claim only ancient LAMP boxes are vulnerable, then that's like me saying your "your 80 year old grandma is more prone to accidents".

Try finding a modern Linux distro without ASLR enabled defaults.

The alternative route through the web forms requires the absence of ASLR. So you need to spam the endpoint, like a lot. You can probably mitigate at the edge (CDNs) or perhaps at the reverse proxy level (NGINX) through e.g. rate limiting. More of a web version of row hammer then some sort of trivial SQL injection attack that works consistently.

Maybe a LAMP stack on an extremely ancient version of Linux is vulnerable out of the box. Quit the fear mongering please, you do the security community no favors.

The most direct exploit requires a compromised supply chain which ranks it about as dangerous as your usual dependency exploits.

Can you buy crypto with this?

Well, consider that their old IT minister has never used a computer in his life, it's probably a good thing she's the one issuing the call to update.

Another user commented on

> €580,000 to €1,000 per day. But deleted his/her comment.

To put this into perspective, €365K a year is roughly the fully loaded total comp cost of a high-senior to low staff level software engineer or a mid level ML engineer at a frontier lab in Cali.