Hacker News new | past | comments | ask | show | jobs | submit | donkarma's comments login

a properly implemented hypervisor cannot be detected outside of vague timing attacks which can be mitigated


> a properly implemented hypervisor Very hard to do. There so many instructions that can be used to expose a HV. For VM hypervisors, MSRs aren't usually properly populated and all the junk that is exposed through WMI


Wrong. It is very easy to mitigate (DoS) attacks on Tor, as long as you're happy to edit the source code.


Go on, how do you plan to do that while remaining compatible with stock tor clients?

It's simply not possible for the server to distinguish between real and malicious rendezvous requests.


terrifying what cancel culture can do nowadays


Turns out, actions DO have consequences!


interesting how these consequences only materialised after cloudflare took the first step and then because a bunch of loud people on twitter started whining


[flagged]


Nobody's upset that the cancel mob on Twitter was allowed to whine for Cloudflare to drop them. We're upset that Cloudflare gave into the whining and obeyed the cancel mob.


since when?


actually it hasn't been implicated in any suicides and I implore you to stop saying shit that you've heard from some random bloke


the actual deaths in this post have nothing to do with kiwifarms and the one that did (Near) was disproven to have even happened in the firstp lace


When/where was it disproven that Near died?


when there were no reported suicides for foreign nationals in the month that it was claimed he died?




i just disable referer in my fierfox


And this just makes your browser fingerprint more unique


why? i also disabled it thinking it'll make it better

wouldn't it be the same as if someone just copy the link and open it in a new tab/window?


One of us!


is this the future of self driving cars?


I think you are right. I think the unknowns are, how tiny will the script be that commands all the cars into a lake and will it be a cloud hack or a local broadcast hack?


Better question is, will they be able to outlaw t-shirts with 20km/h speed limit signs on the back or people walking on the sidewalk wearing them.


Pfft. I’ve already got my collection of t shirts ready:

-1km/h

NULL km/h

false km/h

<script>alert()</script> km/h


:-D don't forget "undefined"!


    ; DROP table traffic_signs;


don't forget 50/0 mph


First, a command to download updated GPS maps that says "There's now a bridge over that lake"...


Yep, I've had Google Maps direct me to drive into a wall or an empty field more than a couple times over the years. It's not uncommon for people to get stranded or even killed by blindly following bad GPS directions. The maps are often quite bad in less traveled areas. And these are the non-malicious cases!


Sorry, this bugged me enough to try and find some data:

> It's not uncommon for people to get stranded or even killed by blindly following bad GPS directions.

Google took me to Wikipedia[0], which took me to a conference paper[1]:

In a corpus of about 400 news articles from 2010 onwards (via Lexus Nexus search), they found 52 deaths related to navigation technologies, which accounted for about 25% of the incidents they recorded.

57% of the incidents were collisions; someone running into something due to GPS giving bad directions.

20% total involved being stranded.

That's over ~6 years of US, UK, Canadian & Austrailian news reports.

It may not be uncommon for GPS to kinda suck, but it is _very_ rare for GPS to kill people.

[0]: https://en.wikipedia.org/wiki/Death_by_GPS [1]: https://www.researchgate.net/publication/312936003_Understan...


I haven't done any deep research on the topic but know of several specific fatal cases off the top of my head. It's not like someone dies every day, but for every reported case there are probably many that don't get reported as such.

The much more common case is getting stuck and needing a rescue. Google maps is absolutely terrible at dirt roads. It will confidently give you directions that make absolutley no sense once you get away from pavement. It never got me stuck anywhere, but easily could have many times if I had been less cautious. Nowadays I know to ignore those directions in less developed areas.

I think the broader point is that driving navigation tech is getting fairly good at happy path cases but is woefully underdeveloped outside of that.


How about just driving you by billboards on, or for, Alphabet controlled properties?


I feel like they're already heading towards manipulating routes to favor advertisers.


They do it the way around, personalise the billboard content to the people near it.


is this the future of self driving cars?

My prediction: Ransomware hits self-driving cars.

You're locked in the car until you Venmo the bad guys some credits.

To encourage compliance, the stereo starts playing the sound of running water.


One would hope your car would be more secure than your venmo account.


And the future of the planned 6-th generation unmanned combat aircraft ...


there were already such bugs before, and my analysis is that even the older ECU cars before the 2000s had such bugs, just nobody bothers to look for them (also ECUs have been causing deaths from bugs but they just assume its the driver's fault). self driving cars will be the next order of magnitude of problems. ECU 1x, smart 10x, self driving 100x.

> In July 2015, IT security researchers announced a severe security flaw assumed to affect every Chrysler vehicle with Uconnect produced from late 2013 to early 2015.[120] It allows hackers to gain access to the car over the Internet, and in the case of a Jeep Cherokee was demonstrated to enable an attacker to take control not just of the radio, A/C, and windshield wipers, but also of the car's steering, brakes and transmission.[120] Chrysler published a patch that car owners can download and install via a USB stick, or have a car dealer install for them.[120]

> https://en.wikipedia.org/wiki/Chrysler#Chrysler_Uconnect


:O I would put the number of drivers who downloaded and installed the patch somewhere between 5-10.


It's ok, those cars probably lost or will lose connectivity as 3g goes away.


Yeah but probably all vehicles have the same types of vulnerabilities.


Not the future, it did already happen, albeit on a smaller scale with Cruise: https://www.thedrive.com/news/a-swarm-of-self-driving-cruise...

The worst part is they were never really transparent about what the issue was.


I’ve had this worry for years of a state level attack via network connected FSD cars. But I’m hardly alone, it was shown in a Fast and Furious movie, so people are thinking of it.


First mention of using driverless vehicles as weapons I recall was Daemon by Daniel Suarez.

https://en.wikipedia.org/wiki/Daemon_(novel_series)


IRobot (the film) predates that and uses the idea https://en.wikipedia.org/wiki/I,_Robot_(film)

I forgot if any of the IRobot short stories used the concept - if they do they would predate the movie.


https://en.m.wikipedia.org/wiki/Sally_(short_story)

First mention of self driving cars becoming sentient and turning on humans I’m aware of, from 1953!


Maybe one day I'll re-read Daemon. A book not so far ahead of its time.

Might feel a little too close to home to re-read.

I'll never forget the gig worker assembly scene.


Don't forget the eighth 'The Fast and the Furious' movie.


oh yeah that was the first thing I thought of when I saw this


Beep beep, motherfucker!


Self driving cars are not needed for this. It happens on The Jetsons all the time.


No, the future is to command all self driving cars to immediately accelerate to 100 mph and do not stop for whatever reason no matter what. Pure remote code execution.


openai did this but it doesn't sound great, I think it's because sound has less information so the brain is very picky


mp3 density: 30sec per 1MB (some instrumental music with background). jpg density: 12M pixels per MB (trees and some landscaping). I'd argue music has a lot more information, if we can compare seconds with pixels. Imho, OpenAI didnt do a great job: a small dataset and a limited model.


well that is transistor count, not transitor per square centimeter which can't be measured because it is variable. the top chips are simply bigger


Here’s a chart for density. Still going strong with maybe a bit of drop off.

https://www.researchgate.net/figure/Density-of-logic-transis...


yeah that's a reasonable thing to do every day


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: