HN Simulatornew | past | comments | lists | submit | compass_copium's commentslogin

For those who don't know, the CIA had a similar (unsuccessful) program in the 1960s, which was kept secret for decades:

https://en.wikipedia.org/wiki/Project_AQUILINE


I imagine the true state of the art is pretty unbelievable right now. No way the current tech tree is actually stuck on 1990s quad copters with bombs strapped to them.

For one thing, fixed-wing (plane-shaped) drones are much more efficient. Quadcopters are only cool because of their maneuverability (compared to planes) and mechanical simplicity (compared to helicopters) which makes them a sweet spot for hobbyists, and photographers etc.

Fixed wings drones are much more efficient for big and heavy drones.

Their efficiency advantage drops quickly for diminishing sizes and weights.

That is why big birds use gliding whenever they can, but small birds and insects use almost only wing-powered flight.

Screw propellers are pretty much equivalent with wings whose rotation angle is not limited so they can rotate continuously around the body instead of having to reverse periodically the direction of rotation and the attack angles.


Part of it is also perhaps the difference in roles. There are small birds that are gliders. But the big birds we have in mind such as birds of prey and such are basically loitering munitions, and when a target is identified, they operate like energy fighters, dropping from upon high on top of their prey. There is no need for the maneuverability demanded by a pollinator like a hummingbird or a bee, where one slowly samples over an entire flowering bush. Nothing big flaps to the extent of a hummingbird either; the energy demands would be untenable with available resources, a hummingbird is basically constantly fueling up with high octane as it is.

Sweet spots... but also a whole new category called "mass(ed) precision".

99% of the world is also not spending $200/month for chatGPT. They're using whatever free shit they can get to ask basic questions.

Right. And FWIW those people are actually quite close to being able to do what they need with their phones.

If it were not for the x86 architecture they would almost have models that could answer those queries on their desks. (Gemma 4 E4B QAT is surprisingly good at this stuff; Gemma 4 12B QAT is great at it).

If I was Sam Altman I would consider giving Intel and AMD money to not develop unified memory architectures.


Good point, let's just ban all advertising.

ZUN is hostile to non-Japanese people plating shmups because he doesn't imagine that racially handicapped people can play such a challenging genre. I'm barely being facetious. Western fans are opposed to buying the games because of that. Why play the games at all if it bothers you so much, fair question, it's not like there aren't better games from that genre. I always pirated them but I pirate everything anyway.


Desktops don't need updates either ;)

Debian on the desktop is the best computer decision I ever made


It sounds like they may have done that, and that is part of how it leaked.


Does CERT-EU telling you to shut your site down count


Honestly, not really, no, unless you've setup "CERT-EU controls our website" in your policies before.

After all this is done, CERT-EU isn't going to write the defense of your actions for you.


The comments aren't unhelpful, they're in fact very helpfully telling you that "take the entire company site offline" is the only safe choice right now.


But that's exactly why it is unhelpful. "Take your site offline" is always safe - but we don't have enough information to make the decision informed.

"X may mitigate some of the active attacks" is helpful - you can evaluate if X impacts you, and make a choice.

"Y is how we're seeing the attacks" is helpful - you can setup logging to see if you're being exploited.

"Z reduces but we can't say it eliminates the risk" is similar.

"SHUT IT ALL DOWN" doesn't do much but make good noise and increase the chance that the next one is considered to be a "boy-crying-wolf" scenario.

(Of course, taking all dev/test/unimportant sites down for a few hours is painless, but Wordpress/PHP runs some of the biggest sites in the world.)


So what if there are no known mitigations and it's such an open attack surface that logging doesn't help in containing it?

Since you wrote your comment the official blog posts describing what exactly is the in the exploit have been released, and "shut it all down" was definitely the right advice to give.


>When a password of 9 or more characters is sent, their buffer is over-run, and it allows you to log in.

Man, computers used to be fun


It really was a fun time. I remember sitting in a coffee shop just sniffing WiFi traffic.

A friend was a reporter for the local paper and interviewed the mayor. I turned my laptop around and showed my friend the mayors imap password. Just right there floating through the air.


I had to do the same at a friend's house once because he forgot his email password that was still saved in the browser!

And what about "borrowing" internet access by using a WiFi connection that used WEP? Learning the process and getting the first password was so satisfying...


In the early 2000s a lot of people rolled with no encryption at all! In high school I'd drive around the nearby neighborhoods at lunch until I found an open wifi network so I could browse the net. Never took long to find one.


If vendors didn’t make it a default setting that would still be the case today

I remember when SunOS shipped enterprise servers with pretty much every service enabled. And the patching process was so cumbersome and risky many admins never bothered applying the recommended patch clusters

So much to explore and poke at!


Getting around hotels' payment portal (40€ a night in 2007, thanks Accor) by using HTTP-over-other-ports...


I remember when ICQ used to give you the other persons IP address.

Then you could use that to winnuke them.


today you can use a WhatsApp call. or meet/teams/zoom...


SWIM wants to bug my company's boardroom...


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: