Hacker Newsnew | past | comments | ask | show | jobs | submit | evilos's commentslogin

It's funny to see all the commenters who didn't read the article closely enough or at all. This is basically the bluetooth device equivalent of "left S3 bucket open to public".

That said, really cool work. I honestly thought it would be harder to turn a usb connected device into an exploit vector.

That it's as easy as emulating a keyboard that pops a local terminal and runs a malicious command is actually pretty funny. Though it will be a non-admin terminal so the damage should be somewhat limited. And on Windows, users often just click through any UAC prompt so I bet you'd get full access on many windows boxes.


I assume the malicious HID keyboard can press through the UAC prompt on its own, just like the user's actual one can.

That's a fantastic point haha, I've never tried it myself.

> they live a far more deprived life

It took me a minute to figure out the typo ("depraved" instead of "deprived")

Japan compares much better to the US in terms of how much wealth the top 1% control. 24.6% vs 34.8% according to https://wid.world

Graph here: https://imgur.com/a/UwWvaHW


That is true, but at this point in time, looking at wealth inequality in the US for comparison feels pointless, as the US can't be seen as a humanoid society anymore. By that I mean the riches of the Top 1%, and the "soon" attitude of the bottom 80% in the US feel alien, surreal, and perverted to an extent it stopped being useful as a measure for humans.


If you look at the graph I linked, you can see that the world average for that statistic has consistently been higher compared to the US, though the two series have been converging lately. So according to that data the US has not been uniquely unfair, but it has been getting worse.

I do think there will have to be large changes soon.


Depends what you mean by "control". If you don't own a nice house, car, driver etc. but your company just happens to provide it as a perk, then you still have it.


That's a fair point. Is it actually common for CEOs to live on a company property? I can see how transport would be company controlled.


Yu Suzuki ("creator of Virtual Fighter") had 3 company ferraris. He played while his employees worked 14+ hours days. It's extremely common in Japan for bosses to get tons of perks and have their employees overworked and underpaid. Programming job in Japan start at $20k a year and except for a few western companies, peak at ~$50k a year. Be careful what you wish for


That phrase is on par with "chemtrails" and "vaccine truther" with its ability to vaporize one's credibility, if used unironically as OP did in those emails.


Your need to sort people based on trigger phrases says it all.


No, it really doesn't. You're reacting super defensively throughout this entire thread. It's a really bad look.


He's actually being measured and fair, even in the face of aggressive insults from strangers.


It's not the phrase that's the issue, but you knew that.


What is the issue? Please be specific.


No one can even agree on what woke even means. "Woke mind virus" 99% of the time is uttered by extremely unserious and contrarian people. It's a fantastic signal that screams "Ignore me, I'm not worth the trouble."

So the issue is that you're insufficiently socialized to understand this or don't care, both of which are very poor signs for someone who wants to lead a long lived organization which stewards a open global platform. IMO your behavior in this thread is very strong evidence that any org you lead is unlikely to thrive. You seem to lack the disposition and people skills.


"Woke" refers to Critical Social Justice ideology, hope that helps.


That's what it means to you, most users mean "something liberal/progressive I don't like".


Most people don't know the academic umbrella term, but if you ask for examples of "woke", it's usually pretty obvious they're referring to Critical Social Justice ideology and its associated norms.

People can argue about the boundaries of the term, but pretending nobody knows what is being referred to is not a serious argument.


> but pretending nobody knows what is being referred to is not a serious argument

The claim is that it's too broad to be useful. But as I said earlier, this is all besides the point.


It's clearly an effective label, otherwise it wouldn't be so widely used.

The real objection is that supporters of the ideology dislike the characterization embedded in the term.


Effective as a social signal, absolutely. Not for anything substantive.

Again, besides the point.


Fun, I was only confident in one answer but got lucky with a 3/3.


The people who doubted the sustainability of dot com era bubbles were correct even though the tech was actually transformational. Personally I expect roughly the same outcome.


They very much designed for collisions. They have an engineer discussing those aspects this video.

https://m.youtube.com/watch?v=Tv5QwgQUMGY


thank you! That was quite educational.


They're already building this one. Nuscale didn't break ground AFAIK.


I mean the LWR fleet has proven to be incredibly safe by any objective measure with deaths per TWhr as good or better than wind/solar. The very incident you mentioned had a direct death count of 0 or 1 depending on who you ask. Industrial shit blows up all the time, you just don't hear about it because it's normal and accepted.

What needs to improve about nuclear is our ability to deliver it on time and on budget. Safety is already more than adequate.


That is never going to happen until we are building more of a consistent design. I think every LWR is use today is a custom bespoke piece of equipment.


Yes, standardizing on a handful of designs will help immensely, as well as building two or more reactors on one site to share the overhead costs between units.

For example, building out more AP-1000s is really a no brainer. The first-of-a-kind is always expensive and the AP-1000 was especially so due to many factors. We bore that cost and now we should reap the benefits of Nth of a kind builds.


Yes but it is important not to confuse the source with the form.

For example we can create hydrocarbons using solar/wind energy and that is still "renewable" even though hydrocarbons are involved. They are merely the medium of energy storage.


Call me when the hydrocarbons we buy off the shelf are actually made from wind and solar. Until that day you’re still arguing for the artificiality of a real distinction.


How much are you willing to pay? https://renewablelube.com/ mostly plant based for the solar source. In general about 5x the price of pumped oil, and they may not last as long. I've bought for them before, no other relation


Prices of products are a very strong function of total production. Solar panel electricity once was 20x the price of other ways - now its 0.5x or less. In competitive industries the price will come down to only a small multiplier on raw input price.


Technologies of making synthetic fuel using energy, water and carbon dioxide are a century old and they have been used for producing great quantities is special circumstances when the price did not matter, e.g. by Germany during WWII (though at that time they produced cabon monoxide by burning coal, instead of reducing carbon dioxide from air, because this was cheaper).

The only reason why they are not used now is that the current price of fossil oil is significantly lower.

There is research to develop more efficient methods for the synthesis of hydrocarbons, based on the electrolytic reduction of carbon dioxide, but their progress is slow, in good part because such critical research is funded much less than frivolous research, such as that for AGI.


Has there actually been a conviction purely for "viewing source"?


That was a real news story. A journalist looked at the state's educator-credentials checker, viewed the source and saw it had teacher's SSNs in base64 somewhere in the plaintext. Missouri Governor Mike Parson then tried to legally threaten the journalist. Honestly, if this case wasn't as high-profile, I think he might have got a conviction, at least in state court.

https://www.theregister.com/2022/02/15/missouri_html_hacking...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: