the_plus_one

hace 2 mesesdiscuss

In my experience, the bulleted list with emojis is usually a pretty strong tell (the one in the article just after "We call these parts sub-projects"). LLMs (maybe just ChatGPT) love doing that.

the_plus_one

hace 7 mesesdiscuss

How else would you watch things with other people at home? Are you going to huddle around your desktop, laptop, smartphone, tablet, etc.?

the_plus_one

hace 8 mesesdiscuss

Is that necessarily a bad thing? I have older laptops than the U729 that still see some use. If you're not locally compiling a big codebase, running some AI/LLM thing, playing GPU-intensive games, etc., you really don't need much.

the_plus_one

hace 9 mesesdiscuss

I don't think anyone would fight you on that. Inferno cheat plugins looked like 100 bpm Guitar Hero back in the day.

the_plus_one

hace 11 mesesdiscuss

Is it just me, or is there some kind of asteroid game shooting bullets at my cursor while I try to read this [1]? I hate to sound mean, but it's a bit distracting. I guess it's my fault for having JavaScript enabled.

[1]: https://flak.tedunangst.com/script.js

the_plus_one

hace 12 mesesdiscuss

As an American that grew up in a rural area, this definitely isn't something that would've been taught in a public school here. At best, we had typing classes in middle school, and the (quite old) teacher insisted on two spaces after the end of a sentence, something that disappeared after we stopped using typewriters.

the_plus_one

hace 12 mesesdiscuss

> or too young to remember former languages.

Do you have any good examples? Not trying to argue, just genuinely curious as someone who hasn't been in this field for decades.

the_plus_one

hace 12 mesesdiscuss

It's been several years at this point, but I used to be a cloud support engineer for AWS (i.e. the first line of defense against support tickets). We were trained to always be kind to the customer, even if we're frustrated with them, so a response like "please read how the lambda works" probably would've gotten me reprimanded. Customers can rate your response from one to five stars, and if I remember correctly, anything less than four required a written explanation to your manager as to what went wrong.

That job was a glorified call center; I didn't last very long.

the_plus_one

el año pasadodiscuss

Very cool post! I enjoy anything that has to do with game hacking, and it's nice to see D, a language I don't have a ton of experience with. Just one note you/the author may be curious about:

> Notably a process_vm_writev syscall also exists, however it adhears to memory page protections - so if I wanted to inject data into a write-protected memory page, it’d fail.

You can work around this by convincing the process to re-mmap() the read-only section with PROT_WRITE. One way I've done this is by building a shared library with __attribute__((constructor)) that gets LD_PRELOADed into the game binary, though you have to be careful with the timing (e.g. your library may start running before the game has allocated the mapping you're looking for). That said, if you've done this, you are also free to just allocate your own memory rather than having to look for unused portions of it.

the_plus_one

el año pasadodiscuss

We are similar. The only time my phone makes any noise whatsoever is if I get a phone call from someone in my contacts or a Slack ping during work hours. Everything else can wait.

the_plus_one

el año pasadodiscuss

    - They can know when you sleep
    - They can detect when there are 2 people sleeping in the bed instead of 1
    - They can know when it’s night, and no people are in the bed

I'm probably naive, but I'm failing to see how any of this is exclusive to having remote SSH access to the bed. Who's to say this isn't already happening with other binaries in the firmware? Maybe they're already phoning home?

    [...]that bypasses all forms of formal code review process.

How does the author know if anything else in the firmware goes under any kind of code review process?

It's not a bad article, but it does seem to make a lot of assumptions, and you already agreed to let arbitrary code run on your network when you added an IoT device to it.

the_plus_one

el año pasadodiscuss

Can't speak for the entire country, but rural Virginia had a nasty ice storm pass through earlier this week [1]. I lost power for about 40 hours.

[1]: https://www.wdbj7.com/2025/02/12/36k-plus-virginians-lose-po...

the_plus_one

hace 2 añosdiscuss

As someone who's reversed some basic MIDI stuff in an old video game and has always wanted to get into hardware hacking, I really enjoyed reading this article. Great work!

the_plus_one

hace 2 añosdiscuss

This is more on the user end, but there's ways for users to isolate programs in such a way that this malware wouldn't have access to e.g. browser files and cryptocurrency wallets, some more effective/practical than others. Virtual machines, containers, jails, chroots, etc.

I think one example of what you're talking about can be seen on Android. The developer has to explicitly declare permissions (like file access) in the manifiest, and the user has to explicitly approve it.

the_plus_one

hace 2 añosdiscuss

I've looked into this before, and it seems like they got Starlink recently-ish (within the past couple years or so). A google search of "inurl:reddit mcmurdo starlink" brings up a few hits from /r/antarctica.

the_plus_one

hace 2 añosdiscuss

I mentioned this in another thread, but the website is out of date. The contracts for McMurdo firefighting are currently held with Amentum: https://www.amentumcareers.com/jobs/firefighter-mcmurdo-stat...

the_plus_one

hace 2 añosdiscuss

The website is out of date. The firefighting contracts used to be owned by Lockheed Martin, then PAE group, and now Amentum.

(edit: As proof, here's Amentum's listing for a McMurdo firefighter: https://www.amentumcareers.com/jobs/firefighter-mcmurdo-stat...)

the_plus_one

hace 2 añosdiscuss

I've been wondering the same. I did just see [1], where it's apparently trying to read memory from an unmapped address, but I haven't seen anything about how r8 got to the point of having said unmapped address.

[1]: https://x.com/patrickwardle/status/1814343502886477857

the_plus_one

hace 2 añosdiscuss

I bumped into kk4vcz at Defcon in 2021. I was standing around, looking clueless, and playing with my Baofeng near the ham radio village. He approached me and asked if I could transmit on a particular frequency to help test his watch. I said something along the lines of "oh that's really cool, I've read that guy's blog and follow him on Twitter." He said something along the lines of "yeah, that's me."

He even gave me a couple GoodWatch boards. Nice guy!

the_plus_one

hace 2 añosdiscuss

Speak for yourself. As an autistic person, if I could get rid of it, I absolutely would.

comments