13,302 karma · joined May 26, 2010
Some genius decided that, to make time input convenient, YAML would parse HH:MM:SS as SS + 60×MM + 60×60×HH. So you could enter 1:23:45 and it would give you the correct number of seconds in 1 hour, 23 minutes, and 45 seconds.
They neglected to put a maximum on the number of such sexagesimal places, so if you put, say, six numbers separated by colons like this, it would be parsed as a very large integer.
Imagine my surprise when, while working at a networking company, we had some devices which failed to configure their MAC addresses in YAML! After this YAML config file had been working for literal years! (I believe this was via netplan? It's been like a decade, I don't remember.)
Turns out, if an unquoted MAC address had even a single non-decimal hex digit, it would do what we expected (parse as a string). This is not only by FAR the more common case, but also we had an A in our vendor prefix, so we never ran into this "feature" during initial development.
Then one day we ran out of MAC addresses and got a new vendor prefix. This time it didn't have any letters in it. Hilarity ensued.
(This behavior has thankfully been removed in more recent YAML standards.)
B) none of that other stuff in the navigation message changes the pseudorange, which is what spoofers mess with. For a networking analogy - pseudoranges are calculated based on layer 1/2 properties of the network. (Specifically the code phase and Doppler shift.) Navigation messages are layer 7 information passed on top of that physical layer. You can change the timing and frequency characteristics of the PRN code without touching a single bit of the navigation message.)
The G/NAV message (note the G - government) is for a separate service - not OSNMA - where not only is the navigation message encrypted, but the PRN code is also encrypted (symmetrically, so it can't be done for the mass market or even untrusted commercial customers).
Spoofing generally works not by altering the navigation message, but by altering the timing of arriving signals. I'd recommend this video for a publicly-available overview of the techniques: https://www.youtube.com/watch?v=sAjWJbZOq6I
tl;dr Galileo spoofers exist and work just fine.
2. The amount of effort being put into this is much higher than GitHub changing their default for new repos to "main"
But I suspect that isn't the limit anti-14th-amendment people's ambitions.
If you are in Brazil or the Philippines or Germany, you're using TikTok.
"Virtue signaling" means someone is acting only to signal their own virtue, and not because they actually believe in the thing they are doing or expressing.
There is no evidence of that.
Regardless of whether you think it's a state, it is an entity with agency that makes its own rules that its companies (like TSMC) follow.