greenish_shores

"Mainstream" (as opposed, to, say, amateur SSTV) video broadcasting, aka TV, is definitely very obsolete and too elitist in implementation to even get me "onboard". Not a second of interesting content per day for me there. But you know that you couldn't have written this comment without a computer? Regardless of its form-factor...

Somebody pls upload this https://www.nature.com/articles/s41586-024-07627-2 on sci-hub.

Now this is f*cked up, isn't it?

Order it from a Czech online pharmacy, where it's an OTC medicine (which have better quality controls than supplements). It's not a controlled substance in the US (heck, not even phenylpiracetam is), it's just not registered there.

Correct move, admins.

Try piracetam.

Ah, okay. You're welcome. I've seen also a similar paper called "Citadel" on arxiv.

Why resort down to ad personam (the last two paragraphs)? These are not insults, but not valid arguments, either.

I know very well about Zerodium. However, FPGAs can be way more secure than any kind of ASICs. If you don't understand why, then I don't think further discussion is warranted. I worked with Apple's implementation of security enclaves, and they don't isolate (or "outsource" to be processed there) nearly as much as should be isolated. For example, whole display and touch input needs to go through the application processor, anyway. It's not a good way to go, to say the least. You can't overlay anything on the top of the display nor isolate touch input from some area (say, virtual keyboard) to go to the enclave. The rest of what it does is pretty meaningless, given these constraints.

> If you are at threat of being targeted by NSO Group or Zerodium enabled attacks, you are already on the radar of a country's Law Enforcement/Interior Ministry/Dept of Homeland Security/Intelligence Community and any attacks on your phone are the least of your worries.

Ah, you mean social engineering attacks and more powerful attacks relying completely outside of the cyberspace (to say more bluntly, which perfectly fits the case here, "in the meatspace"), right?

In terms of broadly-understood virtualization, there's always FPGA with its possibility to spawn multiple number of completely independent softcores. These days some FPGAs with enough computing power for well-optimized security-critical part of general-purpose computing (messaging, web browsing, maybe DSP - not computation like neural models) have fully open-source bitstream synthesis tools.

BTW, thanks a ton for letting me know about the unpatched vulnerability in Alpine. I'll talk to the pmOS guys about patching it.

Do you have any info why this CVE is still unpatched? It seems absolutely crazy, given it is known (of course, a lot of similar bugs may not be even known as of now). Virtualization and containerization-based approaches would be a go-to method for reducing potential surface affected by them - given this was in (g)libc, even Linux namespaces would've potentially resisted most of things which can be done with it. Not to mention light hypervisors with very minimalistic codebase like Xen.

My phone doesn't run Xen yet (I've ran into some problems with kexec() support in Linux on aarch64), but it runs KVM just fine ;)

However, it seems that in Debian it's patched https://security-tracker.debian.org/tracker/CVE-2015-0235 . Is what you're talking about Alpine-specific?

This is increasingly often the case. Also, don't forget that modern WISP equipment allows for 100Mbps+ speeds for a price next to nothing (Ubiquiti, MikroTik).

CVE-2015-0235? What the hell? -2015- and still unpatched? But apparently it looks like the case.

Anyway, Alpine seem to use musl instead of glibc.

Phone signal? Okay. I thought we're talking about fixed broadband connections.

To everyone talking about anti-tracking features.

https://github.com/positive-security/find-you

"A modified version of OpenHaystack to showcase the possibility of building a stealth AirTag clone that bypasses all of Apple's tracking protection features."

Other projects from them, like https://github.com/positive-security/send-my , also seem interesting.

Well, statistically average end-user internet connection in Europe is much faster than in the US. Maybe outside some places like most of western Germany, but these are an exception. Europe has really good bandwidth speeds, overall.

I absolutely agree with the rest, though, including the part saying any "serious" software will have such features (and better support in general), and I second the examples you gave.

Yes, that's the best way which is often used. A "leaky cable" aka "leaky feeder", to be particular.

Nokia 9000i, so you had to work on CSD (which is usually billed per-minute, like dial-up), not even GPRS. How much did that cost you? :P

BTW, an interesting thing is that some/most carriers allow you to use CSD/HSCSD over 3G these days, and you can establish data CSD connection between two phone numbers, yielding essentially a dedicated L2 pipe which isn't routed over internet. Can have much lower latency and jitter if that's what you need. Some specialized telemetry is still using that, however as 3G is slowly getting phased out, it will probably have to change.

Wow. I didn't knew that Nunavut is entirely satellite fed. That's very interesting to know, thanks. Do you have some more info, though? What kind of satellite - geostationary, LEO? Also which constellation has the most share of traffic from Nunavut?

How would you define a "mobile OS" then, to keep the alignment of what you said, particularly this part: "There are always going to be unpatched and uncaught vulnerabilities"?

Everything which can fit into a pocket and has a HTML5 browser?

FYI, I know about how extremely vulnerable average cellular baseband is (and that it would often use unprotected or weakly protected DMA). Let's assume the device in question doesn't have one of these.

Check out postmarketOS. Can run on a Nokia you're specifying, but not only :)

What does "national median" matter in terms of REMOTE jobs? In theory there should be one global market then, where only (hard and soft, of course) skills matter. But I know we're yet not quite there.

THIS. Otherwise it's a huge clickbait and absolutely nothing more. We need more "specialized" IT job marketplaces, as most currently existing seem to be fulfilling exactly the same role and not a single one is bringing anything new. For example there was something like "AnonFriendly" posted here on HN some time ago, I really liked this idea.

Side note: Just checked are non-Android Linux OSes targeted by this spyware. Apparently, there's no public info in favor of such. So probably, nope. It looks mostly targeted against Android and iOS only.

Of course. And no, you don't have brushed motors in modern EVs, outside of some DIYs. It's all BLDC. However, where have I contradicted any of this?

DC ("brushed") motors won't be affected by that, especially if controlled with no transistors. See for example how old DC-powered electric railway rolling stock was built, from pre-power electronics era.

Yeah, it's "they" who should do that, of course.

I don't think I use any proprietary web services outside of either my web browser (90%) or command-line CURL (10%).

Is it physically possible to mitigate this issue by placing some sort of lens on the screen, so you would need to actually focus "to far" in order to see it?

Human bodies also use A LOT of energy, in scale of the whole humanity. For starters, that would be around 2kWh/person/day for each adult.

I don't know how developed is it now, I'm not associated with the startup shown in any way. It's mainly a question to them. However, in terms of wider industry, in general distributed high-performance GPU(-like) computing "for everyone" is in its infancy. 99% of what was already done up to this point was targeted to people who would both buy and supply power "in bulk", not "in retail". Perhaps with a little exception of several excellent projects like Folding@Home and other @home's.