631 karma · joined March 28, 2019
As someone mentioned it's about the trend.
I have heard from people at multiple major open source projects that what is keeping them at Github at this point are free GH Action credits that they get and they couldn't really afford CI/CD if they left. Meaning numbers would be bigger if GH wasn't "paying" projects to stay.
Banks keeps sending me warnings about some new ‘Nigerian prince’ level scams. They wouldn’t be doing it if grownups weren’t falling for them.
General population doesn’t want to setup piholes.
Proton - HK owner, dev team in Bulgaria and marketing with mythical claims of "Swiss company privacy". For a company that is selling essencially trust, they sure are shady as f...
Of course there are levels to this, variations within “weight classes”… but in general this holds true.
Also consistency trumps any program.
I don’t know why, but this sounds a bit like backdoors.
What I expect short term is what happened to Eagle in the PCB space when Autodesk bought it (best thing that happened to kicad).
Longterm Arduino goes into the periphery of the maker market, similarly to beaglebone.
Lemmi rephrase this for you: If we ignored anti-nuclear activities funded by big-oil in the 70s this would not be a problem.
Yes! and if we ignored all the destructive FUD surrounding climate change they have been doing for more than 50 years we would be better off.
Furthermore, if we stop ignoring the destruction AI hype is doing to the climate we will be better off.
P.S. - clarification: I mean not referring to talent at OpenAI. And yes I have very little doubt talent at DeepSeek is a lot cheaper than the things I listed above for OpenAI. I would be interested in a breakdown of the cost of OpenAI and seeing if even their technical talent costs more than the things I mentioned.
You need a minute on their website to see that they have a very simple approach to funding their business. No "life time subscription" exclusive offers, no BS privacy claims...
Also this is HN, not a comment section on something like Yahoo news, really hard to consider people commenting here as being detached from tech trends and news.
And knowing that mullvad doesn’t come close to the mainstream marketing others (well in essence one) VPN providers, your comment comes of as malicious.
Keep in mind any need for expensive equipment is already a deterrent for many.
But you are right that there are many (older models) that use ciphers with know quick exploits: TI's DTS40/DTS80 (40/80bit, proprietary cipher, in many cases terrible entropy), models from Toyota, HKMC, Tesla. About 6s to crack in many cases.
NXP's HTAG2 - most commonly used one in the '00s - 48bit proprietary cipher, a lot less exploited in the wild than the TI's disastrous two variants.
One thing to consider is that the payload will be encrypted so you wont be really able to tell apart what is the rolling code. Hopefully fobs have stronger encryption so collecting enough sniffs and analyzing is insufficient (looking at tesla with their 64bit encryption, hopefully they upgraded).
Honda replay myth mentioned in the article is BS, it was popularized by ppl faking a simple replay attack while doing a more complicated one. If you record the fob command and the car never receives it, of course you can immidiatly after replay it to the car and car will accept it since RC is valid. But if you're sniffing while car is receiving it, RC gets updated. If Honda didn't have RC, it would have been far worse than the KIA boys (overriding immobilizer protection and hotwiring the car) issue that did a lot of damage to KIA in US.