the_plus_one

2 miesiące temudiscuss

In my experience, the bulleted list with emojis is usually a pretty strong tell (the one in the article just after "We call these parts sub-projects"). LLMs (maybe just ChatGPT) love doing that.

the_plus_one

7 miesięcy temudiscuss

How else would you watch things with other people at home? Are you going to huddle around your desktop, laptop, smartphone, tablet, etc.?

the_plus_one

8 miesięcy temudiscuss

Is that necessarily a bad thing? I have older laptops than the U729 that still see some use. If you're not locally compiling a big codebase, running some AI/LLM thing, playing GPU-intensive games, etc., you really don't need much.

the_plus_one

9 miesięcy temudiscuss

I don't think anyone would fight you on that. Inferno cheat plugins looked like 100 bpm Guitar Hero back in the day.

the_plus_one

11 miesięcy temudiscuss

Is it just me, or is there some kind of asteroid game shooting bullets at my cursor while I try to read this [1]? I hate to sound mean, but it's a bit distracting. I guess it's my fault for having JavaScript enabled.

[1]: https://flak.tedunangst.com/script.js

the_plus_one

12 miesięcy temudiscuss

As an American that grew up in a rural area, this definitely isn't something that would've been taught in a public school here. At best, we had typing classes in middle school, and the (quite old) teacher insisted on two spaces after the end of a sentence, something that disappeared after we stopped using typewriters.

the_plus_one

12 miesięcy temudiscuss

> or too young to remember former languages.

Do you have any good examples? Not trying to argue, just genuinely curious as someone who hasn't been in this field for decades.

the_plus_one

12 miesięcy temudiscuss

It's been several years at this point, but I used to be a cloud support engineer for AWS (i.e. the first line of defense against support tickets). We were trained to always be kind to the customer, even if we're frustrated with them, so a response like "please read how the lambda works" probably would've gotten me reprimanded. Customers can rate your response from one to five stars, and if I remember correctly, anything less than four required a written explanation to your manager as to what went wrong.

That job was a glorified call center; I didn't last very long.

the_plus_one

w zeszłym rokudiscuss

Very cool post! I enjoy anything that has to do with game hacking, and it's nice to see D, a language I don't have a ton of experience with. Just one note you/the author may be curious about:

> Notably a process_vm_writev syscall also exists, however it adhears to memory page protections - so if I wanted to inject data into a write-protected memory page, it’d fail.

You can work around this by convincing the process to re-mmap() the read-only section with PROT_WRITE. One way I've done this is by building a shared library with __attribute__((constructor)) that gets LD_PRELOADed into the game binary, though you have to be careful with the timing (e.g. your library may start running before the game has allocated the mapping you're looking for). That said, if you've done this, you are also free to just allocate your own memory rather than having to look for unused portions of it.

the_plus_one

w zeszłym rokudiscuss

We are similar. The only time my phone makes any noise whatsoever is if I get a phone call from someone in my contacts or a Slack ping during work hours. Everything else can wait.

the_plus_one

w zeszłym rokudiscuss

    - They can know when you sleep
    - They can detect when there are 2 people sleeping in the bed instead of 1
    - They can know when it’s night, and no people are in the bed

I'm probably naive, but I'm failing to see how any of this is exclusive to having remote SSH access to the bed. Who's to say this isn't already happening with other binaries in the firmware? Maybe they're already phoning home?

    [...]that bypasses all forms of formal code review process.

How does the author know if anything else in the firmware goes under any kind of code review process?

It's not a bad article, but it does seem to make a lot of assumptions, and you already agreed to let arbitrary code run on your network when you added an IoT device to it.

the_plus_one

w zeszłym rokudiscuss

Can't speak for the entire country, but rural Virginia had a nasty ice storm pass through earlier this week [1]. I lost power for about 40 hours.

[1]: https://www.wdbj7.com/2025/02/12/36k-plus-virginians-lose-po...

the_plus_one

2 lata temudiscuss

As someone who's reversed some basic MIDI stuff in an old video game and has always wanted to get into hardware hacking, I really enjoyed reading this article. Great work!

the_plus_one

2 lata temudiscuss

This is more on the user end, but there's ways for users to isolate programs in such a way that this malware wouldn't have access to e.g. browser files and cryptocurrency wallets, some more effective/practical than others. Virtual machines, containers, jails, chroots, etc.

I think one example of what you're talking about can be seen on Android. The developer has to explicitly declare permissions (like file access) in the manifiest, and the user has to explicitly approve it.

comments