HNHacker News
TopNewBestAskShowJobs

spauka

359 karma · joined March 17, 2011

submissionscomments
spauka··on Big Data was used to see if TCM was scientific (2023)
Ironically, you've picked an example (Artemisinin) which is discussed at some length in the linked article - as an example where TCM success is overstated and not backed up by real-world results!

See P5-6 in section "The implausibility problem" - which points out that in order for the treatment to be effective it had to be refined into a form that is not rapidly eliminated from the body.

spauka··on Poison Pill: Is the killer behind 1982 Tylenol poisonings still on the loose?
One additional fact to keep in mind - the ability to smell hydrogen cyanide has a genetic component and 1 in 4 people will not be able to smell the "bitter almond" odour [1].

I do wonder how similar the smell of sweet and bitter almonds are, they are apparently different [2].

[1] https://academic.oup.com/occmed/article-abstract/67/9/662/47... [2] https://www.thespruceeats.com/what-are-bitter-almonds-180699...

spauka··on Statewide fluoride ban for tap water passes in Florida
Without comment on the question of health benefits or harms, I'm curious whether you've had the well water you use tested. Fluoride concentrations in bore-well water varies quite widely, and concentrations higher than fluoridated tap water not uncommon. There are several areas here (in Aus) where fluoride is removed to reach the recommended concentration of 0.5-1.1 ppm. This obviously varies based on location.
spauka··on Blog hosted on a Nintendo Wii
One of the coolest revelations to me, just looking at the status page [1] is that the Wii only had 88 MB of RAM - split between 24 MB built in to the SoC and 64 MB of GDDR3.

Given that this is the case, ntpd using 15% of the system memory means it was using about 13 MB of RAM - hardly a huge chunk by today's standards but not small either. I wonder if reducing the number of time servers would improve this much? On my system I can see I'm tracking about 9 servers from the debian pool.

Compare this to the XBox 360 which even at the time had 512 MB, it's really amazing how much they managed to squeeze out of such a tiny chip.

[1] - https://blog.infected.systems/status/

spauka··on Blog hosted on a Nintendo Wii
Depending on how often you are refreshing - the status page only updates every 15 minutes:

> So I put together a simple shell script that runs from the crontab every 15 min, outputting some system stats to a basic HTML file in the webroot.

spauka··on [dead]
Raspberry Pi's RP2350 microcontroller introduced a multitude of new hardware security features over the RP2040, and included a Hacking Challenge which began at DEF CON to encourage researchers to find bugs. The challenge has been defeated and the chip is indeed vulnerable (in at least one way). This talk will cover the process of discovering this vulnerability, the method of exploiting it, and avenues for deducing more about the relevant low-level hardware behavior.

The RP2350 security architecture involves several interconnected mechanisms which together provide authentication of code running on the chip, protected one-time-programmable storage, fine-grained control of debug features, and so on. An antifuse-based OTP memory serves as the root of trust of the system, and informs the configuration of ARM TrustZone as well as additional attack mitigations such as glitch detectors. Raspberry Pi even constructs an impressive, bespoke Redundancy Coprocessor (RCP), which hardens execution of boot ROM code on the Cortex-M33 cores with stack protection, data validation, and instruction latency randomization.

Since there are many potential incorrect guesses to be made about where problems might lie, here I begin with the most fundamental features of the chip logic, including the reset process. Even small oversights at this level can entirely defeat sophisticated security efforts if higher-level mechanisms place complete trust in seemingly simple hardware operations. I show how cursory research into the design details of IP blocks used in the SoC can help inform an attack, and demonstrate the importance of fully testing new features which are built atop older IP. Ultimately, the significant amount of luck (or lack thereof) involved is a reminder of the need to meticulously understand and validate complex systems.

spauka··on Did DORA's last update create an encryption loophole?
It seems like the summary of this article is: No

Encryption is mandated for data at rest and data in transit. There is a provision for encryption of data in use when homomorphic encryption becomes feasible, but the loophole referenced in the title is that it is not required now.

spauka··on What is ChatGPT doing and why does it work?
So ChatGPT didn't correctly summarize the text at all, this article does not talk about ethics at all, doesn't talk about potential uses and I would consider the statement about capturing context and incorporating knowledge from a wide range of sources to be a pretty poor summary of the text.

In fact I think that's a great example of exactly what is actually discussed, namely that the context that ChatGPT is able to hold is limited as it's context is held completely in its input. There is never any modification to it's internal state, we're just passing a longer input vector in to the start of the GPT-3 black box. For long inputs the embedding vector becomes more and more sparse and it needs to make more assumptions to fill in it's output.

spauka··on Transparent Aluminum
Worth noting that the material is not conductive or otherwise metallic in any way. In a lot of ways this material is similar to Alumina (Sapphire) which you could also describe as "Transparent Aluminum".

Conductive transparent materials do exist (see ITO https://en.wikipedia.org/wiki/Indium_tin_oxide), but this is not it.

spauka··on Ask HN: Firefox connection problems after enabling DoH?
While your point stands - it's worth pointing out that this bug was NOT caused by an update [1], but seems to have been a long-standing bug in the HTTP3 stack that was triggered due to some external site (including apparently Mozilla's telemetry provider) that changed their stack.

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=1749908

spauka··on Transmission of SARS-CoV-2 Delta Among Vaccinated Healthcare Workers, Vietnam
The paper does not make conclusions about whether the vaccinated are more likely to be asymptomatic - but in case you are interested the results are presented in Table 1.

Of The 69 cases infected, 47 developed symptoms (median 4 days post diagnosis), which is 68% of cases. Viral loads for symptomatic cases was higher (page 11).

Key points: there is not enough information here to draw conclusions about the infectiousness of vaccinated vs. unvaccinated individuals, or about whether vaccinated individuals are more likely to be asymptomatic. This paper does not even try to draw such conclusions.

spauka··on High-End Gaming PCs Banned in Six US States
That is not accurate - take a look at Page 9 of the product compliance datasheet: https://downloads.dell.com/rdoc/dell%20alienware%20ryzen%20e...

WOL and similar features do not change power consumption and this is not where the listed PC's fail. They fail on idle/standby power consumption and to be clear - there is NO reason they have to. Similar spec'd PC's can be purchased that meet these requirements.

spauka··on Treatment for Covid-19 Using Ethanol Vapor Inhalation
This may be a joke comment - but this is not the idea of the study. From the introduction:

  the idea is to use alcohol inhalation as it reduce surface tension on the alveoli and markedly decrease sputum formation with improvement on oxygenation beside its cytolethal effect on virus lipid bilayer.
spauka··on Google: Open Letter to Australians
This reads to me more as if though G/FB have to tell news organizations what data is being collected, rather than disclosing the actual data.

A quote from the Q&A seems to clarify:

> give news media businesses clear information about the nature and availability of user data collected through users’ interactions with news on their services;

spauka··on “We already store data. In a database. It works well”
Where does it say that? My reading of the linked page suggests that MSSQL and Oracle are being deprecated, but SQLite and Postgres are supported and maintained.

In fact, SQLite is the first database listed on the detailed install instructions page[1]!

[1] https://www.mediawiki.org/wiki/Manual:Installing_MediaWiki#C...

spauka··on Australian firm Meriton fined $3M for misleading consumers on TripAdvisor
As other commenters have pointed out below, the issue the ACCC took was not that they didn't request reviews from all customers, but rather that they specifically and actively excluded people who they suspected might have had bad experiences from a program where otherwise all other customers were included.

From the ruling [0]:

On a weekly basis, Meriton provided TripAdvisor with the email addresses of guests who had stayed at its properties and TripAdvisor sent email invitations to these guests to post a review. However, rather than sending TripAdvisor the email addresses of all guests who had stayed at its properties (other than those who had requested that their details not be provided), Meriton adopted the following two practices:

(a) The first practice was to add the letters “MSA” (which stand for Meriton Serviced Apartments) to the front of the email addresses of certain guests. This rendered the email address invalid. This practice was applied to guests who had made a complaint or were otherwise considered likely to have had a negative experience at a Meriton property. I will refer to this practice as the MSA-masking practice.

(b) The second practice was to withhold from TripAdvisor the email addresses of all the guests who had stayed at a property during a period of time when there had been a major service disruption (such as the lifts not working, no hot water, etc). I will refer to this practice as the bulk withholding practice.

[0] http://www.austlii.edu.au/cgi-bin/viewdoc/au/cases/cth/FCA/2...

spauka··on Saudi Arabia's Oil Wealth Is About to Get a Reality Check
From the article:

> A profitable IPO is meant to anchor a sovereign wealth fund that will, if things unfold as envisioned, generate enough investment income at home and abroad to dominate state revenue by 2030. Demand for oil will peak just before then, according to Royal Dutch Shell Plc projections, as alternative fuels and electric cars gain popularity, putting Middle East energy producers on shakier footing.

So, it sounds like they want to turn their oil reserves into cash before the price of oil begins to fall.

spauka··on Japan's radiation disaster toll: none dead, none sick
From your link:

>Researchers at Fukushima Medical University, which has been taking the leading role in the study, have so far said they do not believe that the most recent cases are related to the nuclear crisis.

spauka··on How to crash IE9 with some simple CSS
Doesn't kill IE10 on my box. V: 10.0.9200.16521
spauka··on A New Look for Facebook
This is nice but isn't it basically the design of the new myspace rehashed?
spauka··on Self-propagating heap memory crawler in x86-64 Linux Assembly
In answer to your two questions:

1: Yes, you will eventually need to mmap more memory. Since you want to minimize the number of mmap calls necessary for things like heap allocations, you generally allocate in larger chunks then necessary and then malloc etc. allocates from these chunks. It doesn't matter too much in terms of memory waste, since in the back end, linux allocates physical memory lazily, so the extra allocated block of virtual memory doesn't get a physical allocation until something tries to access it. For this reason, it can sometimes seem like a malloc call completes successfully, but you run into an out of memory condition once you try to actually use your "successfully" allocated memory.

2. It turns out most kernels don't actually enable the NX bit automatically, with the reason given being that early processors have buggy implementations, so by default the NX flag is not honored. As a result, all memory is executable by default, unless explicitly set not to be (i.e. using memprotect), and this is only if the kernel is compiled to support NX, which it may not be. This is changing, and some systems such implementing SELinux or similar are supposedly stricter but I haven't actually tested this out myself.

spauka··on Microsoft begs Web devs not to make WebKit the new IE6
Not at all. It's saying use standards when there is a standards compliant alternative, because it's both better coding practice and because it means you won't be screwing over your users and you won't be screwing over developers who wish to write alternative implementations.
spauka··on Paypal Here - The Paypal Card Reader
This product looks incredibly similar to the one being offered by stripe.
spauka··on USSD code to factory data reset a Galaxy S3 can be trigged from a HTML page
In this case, the USSD is not the bug. The fact that it can be triggered from HTML and cause a factory reset without user interaction is the bug. At least with older phones, after entry, it was necessary to hit dial before any effect was taken.
spauka··on Steve Wozniak wants to become Australian
It'll be interesting to see where the opposition takes their broadband policy. With Turnbull at the helm of opposition telecommunications policy, it is certainly beginning too seem like they are less likely to completely tear down the NBN. Given that it is becoming abundantly clear that something needs to be done, I think it's probably more likely that they will simply change the scale of the project.

At any rate, they seem to have given up on the ridiculous notion that wireless is a suitable replacement in urban areas, and actually seem to be moving towards a more comprehensive plan...

I'm holding out hope that even with an opposition government that in urban areas there will be optical. The question will be how they manage the future of the infrastructure, and whether or not they adequately provide for rural areas.

P.S. If you do invite Woz out for beers, count me in :P

spauka··on Senate report: Microsoft used loopholes to avoid billions in taxes
I am curious about the senate committee choosing to single our Microsoft and HP in their attach, when there is ample evidence to suggest that so many other well known companies are engaging in similar practices. In 5 minutes, I came up with articles from major papers documenting 3 of the biggest companies in the US using similar practices...

http://www.nytimes.com/2012/04/29/business/apples-tax-strate... http://www.bloomberg.com/news/2010-10-21/google-2-4-rate-sho... http://www.guardian.co.uk/technology/2012/apr/04/amazon-tax-...

spauka··on 2012 MacBook Pro Powers on By Itself on Rough Roads
The difference here is that I might reasonably be expected to be taking my laptop with me on road trips which could get bumpy. I.E. this is not that much of an extreme case.
spauka··on Use of tracking app to find stolen iPad 'legal' (Aus)
It never actually occurred to me that using the tracking tool on your phone/device might constitute an illegal search.

Does anyone know of anywhere where this is the case?

spauka··on Why I am no longer a skeptic
That was certainly an interesting if not completely ridiculous read... The author seems to spend most of his time generalizing and erroneously misinterpreting the view points of those he perceives as skeptics (the most heinous of which include his characterization of skeptics as people who "hate and fear" philosophy, which is just about the most ridiculous thing I've ever heard).

He seems to have misguided views on everything from modern medicines use of the placebo, to the development of fields such as computation linguistics and medical science. Here's the deal, if the author can demonstrably prove that people who use homeopathy know that it is just a placebo, then they can go for it. But they don't. If the author can show that there exist better methods for researching language, then go for it, but he doesn't. In fact, as someone who is interested in the field and friends with many computational linguists, let me tell you they are trying to look for better models to deal with the uncertainty inherent in NLP, and I'm not even sure where his statement that computational linguists fear pragmatics comes from. That is complete crap.

Wrapping bullshit around some kernels of truth does not make it true. I.E. yes, the atheist community on reddit can have misguided views, and yes people like Hitchens and Dawkins and the like are subject to their own personal biases, but both those people and indeed most of these communities are acutely aware of this fact and spend a lot of time trying to come to terms with it (look at the recent furor about whether the glorification of people posting snarky remarks made to "fundies" on reddit constituted a positive step). His rant against the skeptic conspiracy against feminism is also something which I found incomprehensible, and as far as I can tell completely untrue.

I would encourage people to read this in its entirety, if only to convince yourself that the title is an attention grab, and that the contents, while pointing out some valid truths, are largely filled with conspiracy theories and facts which are not backed up, and based on vast generalizations and oversimplifications.

P.S. I did enjoy the bit about the skeptics movement being a neoliberal conspiracy.

spauka··on Have you ever chatted with a hacker within a virus?
Site seems to be going up and down. Just keep refreshing, and you should get the site again. With images.
Page 1 of 2Next →