daghamm

Would not at all be surprised if that happens during 2025.

I think the west has been underestimating China's AI capabilities. AI is huge in China and they have found tons of "practial" applications so it's widely deployed.

In the meantime, DeepSeek published their o1 competitor on huggingface and an API that costs 5-10% of OpenAI's o1.

Maybe Sam should give up his bribery world tour and focus on creating a better product?

Well, their private keys have been leaked todays so let's hope we will see some OSS firmware soon.

Current firmware does some dubious things, I would be happy if someone removed that.

You honestly belive Musk does not boost certain tweets?

Do you remember this story??

https://arstechnica.com/tech-policy/2023/02/report-musk-had-...

I belive there is a linear relation between how big of threat to the nation Toktok is and the amount of money Zuckerberg spends on lobbyists in said nation.

Saw this on reddit

" My product is the reason Bambu blocked the API"

https://www.reddit.com/r/3Dprinting/comments/1i4gotq/my_prod...

Are you sure? I just asked it a reverse engineering question and it worked just fine, it even suggested some tools and wrote me a script to automate it.

Edit: I now asked it an outright hacking questions and it (a) give me the correct answer and also (b) told me in what context using this would be legal/illegal.

Linux Foundation is much closer to an Evil Corporate than a rebel group. It is a pay-for-legitimacy scheme that abuses the Linux name and goodwill.

I wish Linus & co would distance themselves from these people.

Looking at your portfolio, one could argue that to succeed you need to try a lot of different projects some of which you maybe have no personal interest in.

I think some people would not be comfortable with this and rather take a steady paycheck from Big Corp while working on 1-2 darling projects at home.

The part about researchers being ddosed for 10-30 secs and immediately blackholed by their VPS for 24 hours because they didn't purchase dos protection was hilarious :)

You would be surprised how much of corporate cybersecurity is done like this. It has not in anyway improved sine crowdstrike, on the contrary EDR shenanigans has probably grow 100% since last year.

These security companies must have really good salesmen. Or maybe IT departments are always ran by clueless fools, who knows?

By the time kerb published his story this has being going on for a long long while. He was openly bragging about being in army and stationed in SK.

I mean, didn't army or some agency start investigating this before Kerb?

I first heard about this dude many months ago. Why did it take so long to bring him in? He was pretty open about who he is and what he is doing.

According to Darknet Diaries there are gangs that focus on backup server first, because with backups in place ransomware is not as effective. There are examples of backup software companies being compromised to get to their clients.

This is for attacks against bug companies. But maybe it's just a matter of time before "ordinary" ransomware is updated with destroy-backups function.

Yes. There is a lot of money in this, and not really any regulations.

There are some documented cases where youtubers have been caught red handed doing this against competition

This is a bit surprising in 2024 (well almost 2025). Android has a really nice API for reducing the need for this permission, and most of it has been around sicnce android 10.

https://m.youtube.com/watch?v=UnJ3amzJM94

Maybe the author is not aware of these? How about opening an issue?

Yes, but hopefully it is more free speech than om twitter where Elon wants to decide what you can and can't see.

It is well known that he is obsessed that things that align with his own views get more visibility while things he doesn't like is suppressed

https://arstechnica.com/tech-policy/2023/02/report-musk-had-...

Yeah, I have experienced this myself.

Many years ago we worked on a project that deployed fake vulnerable services (SMTP, SSH and so on) to a /16 network. At some point so many people were trying to exploit these that the admins asked us disable it. I guess we got on some kind of list...

Honest question:

Should we not judge a man according to what was acceptable during his time and not ours?

Herge was a very open-minded man for his time, but maybe not so much according to today's standards. But this probably applies to every man ever lived including our own parents

Yeah, in this particular case MISRAC is doing more harm than good.

I wish we could get an update on these rules, but this issue has been brought up many many times bwfore and has always been brushed away without a proper analysis.

I assume a workload with many Docker containers will need much less memory on Linux compared to osx.

I think the paper is easier to follow

https://dl.acm.org/doi/pdf/10.1145/3603216.3624953

I recently read blackhat python. I feel it has not aged well as large parts are dedicated to issues that are no longer relevant.

I don't see this book doing the same mistake. On the other hand, I dont know if I want to fight the borrow checker for weeks instead if throwing together a quick script in python...

First of all, nice writeup. I am a bit surprised that so much GPU power was needed to find such short collision but it was nice to see his implementation nevertheless.

Regarding the last section, is 40k a reasonable price for one month of security analysis? Does this mean that a good security researcher make about 500k/yr?

Let's face it, if someone is really determined to get you and have some basic resources, if he doesn't eventually get you at least he is able to make your life much less enjoyable.

Just consider how hard it is to avoid paparazzis...

If you are in Paris, there are probably 10 other places with more historical relevance.

Notre Dame got to hold the French record for number of selfie sticks per m^2.

J1 was introduced in February 2015, and cost not much more than a burner phone. I am surprised you could buy one in 2019.

Anyway, the Samsung update program did not exist in 2015.

How was your experience with the Nord?

I think with Apple it's all or nothing. For Android it stops gradually: first you stop receiving OS updates, then system updates and after a while also security updates [1] and then finally maybe also apps.

[1] although they have in past updated very old phones when something really bad has happened.

Yes, and there was a case of a guy recoding young women and sextorting them.

BTW, I would assume that X230 users are the type of people who install physical shutters on their webcams.