skysight-inc/HackerNews huggingface dataset:
Ah yes, right up my alley. Sort of. I spent many months reverse engineering a SC8 executable for fun, yep purely for fun. 10 years ago now.

I have more experience with SecuROM 8. Did you guys know there is a hidden flag that is parsed on executable running that initializes a separate application which generates a file you can send to the authors of SecuROM that holds the version of SecuROM and quite a lot of other details?

Opaque predicates, VM, simple code integrity checks(int 3), xchg used as control flow obfuscation? It was all there. It took me a while to get the program running under a debugger. Once I did there were a bunch of threads running which would detect tampering or pausing of the threads and kill the process. After suspending those I could do whatever I want.

The DRM used a lot of control flow methods, especially hardware breakpoints and UD2 instruction.

At the time of Unicorn engine's popularity I made a custom plugin to emulate the zlib code embedded inside to search for hidden API calls, unfortunately due to the way QEMU emitted some instructions for the helpers some instructon hooks were called a few times more e.g those with a rep prefix severely skewing instruction counting.

Anyway, VM hunting was difficult. The VM had quite a few single-threaded VM contexts so it could run a lot of programs. From then on it was a matter of reverse engineering the opcodes. at the time I used Olly to trace and log the instruction handlers and opcodes and then using Notepad++ magic I could clean it up from the control flow in a single coherent picture.

Honestly I've forgotten most of it now.

But a few years ago I did write my own Control flow graph generator in Java just to find the 20 or 30 thousand code integrity checks and trace them statically and then was going to use it on the VM.

The most unusual thing is, I often communicated with one of the devs of SecuROM on IRC, of course I did not ask him anything nor did he reveal anything, that is of course illegal. I remember asking him about the little "Cut my life into pieces" tidbit he left just after VMEnter.

Needless to say it is thanks to SecuROM that I gained an interest in RE. Yes I was a novice and dived deep down into a commercial DRM. Thanks to it I learned a lot and is helping me even today, yep as I type this I am working on a SH2 architecture firmware.

But back in the day SecuROM inspired me to write this little ugly thing https://github.com/farmdve/TextVM
I don't think the 14th Amendment existed in 1860.
Maybe some even more sinister monster could think of also poisoning the passengers with a laxative while locking the toilet doors. This sounds like a good script for a comic. ;)
I'm interested. Can you give examples ? "... bullshit complaints to the FCC by radio amateurs ..."
Apple (sort of) removes its requirement that apps offer 'Sign in with Apple'
In the USA if your problem can’t be solved in a way that produces a profit, you must solve it yourself or live with the consequences.

Our society is too heterogenous for us to make public benefit a goal. Every type of benefit is perceived as a zero-sum game.

Add in the fact that Americans tend to vote against their self-interest(1) in order to conform to the ideology with which they identify, and it’s turtles all the way down.

(1)This is more easily recognized when viewing the behavior of some other group, but it’s identifiable among all groups.
Protesters throw soup at da Vinci painting
yeah this seems like obvious self promotion
I primarily use HN on my phone and have no issues with the density. In fact, I wish more mobile sites were like this.

I loathe the mobile experience on sites like CNBC where there’s low density and stock photos for each headline. It takes multiple scrolls to see all the headlines.
Apple and Goldman Sachs: A timeline of the messy partnership that will soon fall
Font size for text and titles are ok, but links are too small, I developed tap anxiety as I frequently miss click things. But that’s not the worst part, navigating through huge threads of comments is. I would like to see all root comments first and then decide what thread is worth expanding, not being forced to collapse threads I’m not interested in.
If in your jurisdiction there is a law against this then it is useful to be aware of it. This is not passing judgement, this is being informed. Then, you make your own informed decision and can argue your case if you get caught.

I suppose that one angle is not that one person is extracting a very small amount, it is that if you allow it then everyone can do the same.
+1 for travelingmailbox.com. Have used for years. Banks, credit cards, IRS all accept it. DMV does not. Pro tip: pick a state with no state income tax, ideally get a drivers license there too (you will need a real street address, at least I did). You can then add a mailing address for DMV.

Bank and credit card companies, insurance, etc. in the US push you to email/online anyway, so when you opt-in to paperless you don't get much mail from them.

There's nothing shady about this as long as you don't use it to commit fraud or other crimes.
Some novices do in fact write Rust, just like how many of them gain experience in C and C++ during undergrad. With any luck, universities will adopt something safer like Rust…
The vast majority of the Apple products which I repeatedly hear are superior are used by people who are completely locked into their ecosystem and only use Apple products.

Which makes their advice less credible for several possible reasons:

* they may not have the exposure to other products to have an authoritative opinion,

* or they have used the products in a completely different context (eg, within the ecosystem with an iCloud account or other accompanying product),

* or they might be expressing a bit of stockholm-esque sentiment ("it's the best I can easily use due to the limitations in which I can use this particular product and I love living within these limitations, so it's clearly the best option because everyone should love living within these limitations too..")
Sometimes I think it might be fun to setup an express server that correctly responds to one of these attacks just so I can waste someones time.

But doing that would also waste my time.
I see it as a commitment, this is something I will remember for as long as I choose to. If it becomes irrelevant, I can delete the card. If it's too hard, I'll break it down into simpler things, or sometimes I even just write stuff out on paper cards that I review throughout the day. But once it's in anki, I'm committing to remembering it.
I remember going to the dentist a number of times a few years back and they always prescribed me something crazy like percs, vicodin, oxy, etc. I never actually got any of the scripts filled because by then I had read too may stories about the opioid crisis and was determined to never venture down that road. I did notice once the opioid crisis really hit the mainstream press, my dentist stopped prescribing those strong painkillers and prescribed prescription grade tylenol or ibuprofen instead. Never filled those prescriptions either because the prescription grade stuff was the same as taking more of the regular OTC medicine.
So the news here isn't very interesting. They had a dumb marketing idea and didn't implement it (because it was dumb). But read the article anyway just for the transcript of the meeting that leaked. It reads like a comedy skit.
What lyric is “millionaires and landlords should be guillotined” from?

Do you actually think a left-leaning, self avowed socialist who “wants communism” (quoted from his own tweet) was really just kidding when he said this?
Would you apply that in other areas?

For example, the highest income tax rate in the UK is 45%. If I estimate that it should be 60% can I truthfully say that right people are getting a 15% (of pretax income) income subsidy? There is 0% VAT on books, if I think it should be the standard 20% can I truthfully say the government is subsidising the purchases of books? When people were campaigning to abolish the 5% VAT on tampons and STs would it have been a valid counter argument to say they were being subsidised by not being subject to the 20% rate?
I would peesonally love to see Tinder-like client for HN.

Left swipe - save to favourites, right swipe - next article.
It also won in places where it should not have won, as managers copy the practices across geographical locations. So, there are people who have chosen to live in the walking distance of office premises and never prepared for being forced to work from home...
Semi-related, as long as we're requesting things: to @pr337h4m's point above, it would be interesting to have some rough guidance (even a sidebar or single paragraph) on when it makes sense to pre-train a new foundation model vs finetune vs pass in extra context (RAG). Clients of all sizes—from Fortune 100 to small businesses—are asking us this question.
Good grief Sonoma looks like garbage. Hadn’t looked at side by side comps before. Going to adopt a “don’t hire designers from Apple” policy like the old “don’t hire product people from yahoo” policy.
I can watch Alone in the Wilderness on repeat. Such a relaxing film.
S-Mode on Windows is like Apple's walled garden, but it's only a default and the end-user can opt-out at will. That's not without similar downsides--just looked it up:

> Windows 11 in S mode is a version of Windows 11 that's streamlined for security and performance, while providing a familiar Windows experience. To increase security, it allows only apps from Microsoft Store, and requires Microsoft Edge for safe browsing.
At least in windows you can pretty consistently hit ENTER in a dialog box to close it with the default action, though. That's something that has always annoyed me on Mac.
Protesters hurl soup at the Mona Lisa painting in Paris
Not financial, but it's essentially considered to be stealing water from the river basin, which is allocated by an old agreement [1]. I don't know the details, but I've heard that this has been relaxed quite a bit in recent years, with collection limits replacing outright bans in several jurisdictions.

[1] https://en.wikipedia.org/wiki/Colorado_River_Compact
I don't love how when someone in China, a country with a billion people, misuses/uses a service cleverly it's a "Chinese dev" and an attack but when it's something that actually breaks npmjs like the everything package it's just some guy like US devs aren't bragging about their "filesystem over YouTube" implementations with blog posts on HN.
What would it mean for programmers to be bound by licensure...
The article’s central claim is that to quote these lyrics is to “wish death” on the people you’re naming. The context leads me to the exact opposite interpretation: it’s a righteous condemnation of others for wishing death on you.
I'm extremely blessed to say I have way too many to list but these were the few I could think of for this post:

- i love my Luna roots sandals. They are a pain in the derrière to tie right, but they are stupid unique and feel amazing when the leather is taut. I have three pairs and would like to get a few more. The one with the bison leather feels INCREDIBLE on my feet. https://lunasandals.com/collections/roots/products/usa-bruji...

- Thanks to HN, I re-discovered soma fm and am loving listening to Indie Pop Rocks! This was my favorite station in college over 15 years ago.

- my yeti water bottle. It is incredibly distinctive and just works. Goes with me everywhere; I even have an AirTag strapped onto the thing

- i love my wife for (amongst many other things!) re-introducing me to opera and chamber music. We have a theater nearby us and she bought us tickets to a few performances for my birthday. One of the best gifts I've ever received and can't wait to see and learn more in 2024.

- My fanny packs/hip packs/bum bags/whatever you want to call them. I've lost significantly fewer items over the years thanks to these, and, again, they are crazy unique. (I don't like the super large ones that are popular atm. I like the 0.5L packs that are small but very light, like Patagonia's Ultralight Black Hole hip packs.)
Yep, enjoyed getting banned from Snapchat for using a third party client on Windows Phone.
Expo Submit:

https://docs.expo.dev/submit/introduction/
Also probably depends whether you brag about it or not. If you wilfully undermine plausible deniability the network’s custodian may not be able to ignore you even if they don’t care because of the precedent it creates. If you start hewing close to civil disobedience you also bring more attention to yourself you would not otherwise warrant.
Turbo Frame Search Filters
I love my Volkswagen Golf wagen. It’s a 2019 and apart the last generation made available in the US. It has all the essentials without the pointless gimmicks or “quirks” of modern cars, it’s the kind of slow car that’s fun to drive fast (6 speed manual), while also being able to haul a truck-load of ikea furniture. I really do not look forward to the day I have to retire the thing.

I love the feeling of overcoming a problem or some other challenge that I had previously been unable to overcome. It’s always amazing to see your own determination pay off.

I love dusk and dawn. I always go on a short 20 minute walk just to be able to indulge in the pretty colors that the sky wears during this short transition between day/night.
It's very funny that it took you 140 words to say "cut until you have 7 words".
When the "R" goes missing from R&D (2021)
If anyone is receiving these types of logs on AWS, please do yourself a favor and place AWS WAF in front of your VPC.

It's not expensive and can significantly help you, saving you from many headaches in situations like this. While it might not block everything that arrives at your service, it can be a great help!
> We are literally only a GPT generation away from the book writing machines of 1984

I think we're there already, no? Amazon is being flooded with AI-written novels, including "fun" ones like a guide to foraging mushrooms; Clarkesworld had to stop accepting submissions for awhile due to AI-generated garbage flooding their inboxes.
> Less charitably, this is the kind of advice that mostly seems like an excuse to preach at people.

No, I just picked it as a random example of something that you can do to reduce population growth. Widespread access to birth control in developing countries would be a better solution. Supposedly educating girls in developing countries also helps reduce population growth as well. And there are probably countless other things you can do.

They also have traditions in many developing countries to have very large families.
This is an amazingly clever use of HLS. I'd hate to be the NPM abuse team right now.
I'm a very technical user, but my personal travel device is the Robo & Kala Surface alternative (bought for around $650 with detachable keyboard). Runs on ARM and handles emulation surprisingly well. What's super nice is that ARM Android apps runs seamlessly via Subsystem for Android, making travel easy since I can use the Android app for whatever service I want (Disney, Netflix, etc) and sync/download content in advance. I remote into more capable devices if I need additional horsepower, but it really is completely usable already.
it's a long-known hazard in embedded and highly reliable systems, there are terms like "single-event upset" that might lead you in interesting directions
> They are not literal

For most, indeed. And that's good! But I have met people who claim to think they must be absolute truth, then put a huge asterisk around all the bits I point out and say those don't count for whatever reason.

There was a meme back in the UK, that amongst Anglicans, only extremists actually believe in God. No idea how true that is.

> Do you look for the worst paintings?

Only when they're put on a pedestal and held to be amazing. For example: https://en.wikipedia.org/wiki/The_Kiss_(Klimt)

Widely regarded as beautiful and romantic. To me, it looks like the guy has a broken neck, and the woman has been decapitated at the base of her neck, her head rotated 90° and re-attached to her torso by the ear.

Likewise, movies. The plot holes in Independence Day annoyed me so much that when the sequel came out, I started (and still have not finished) writing a book that takes the opposite road with all the mistakes the film made.

So, while I've played the Eye Of Argon game, I never even tried to finish reading it once my friends and I stopped playing, and I've never bothered watching whatever the film is that has the line "you're tearing me apart Lisa".

> FWIW, that passage is part of all Abrahamic religions.

https://en.wikipedia.org/wiki/Shashthi

https://en.wikipedia.org/wiki/Hera

I don't limit myself to just Abrahamic myth and legend :)
Labelling a video as malicious code is peak cybersecurity busywork. Have they run out of packages to report ReDoS?
Captain Disillusion: CD / Shutter Speed (Again) [video]
They dropped the vaccine requirement, so the COVID vaccine was different in their eyes.
Ask HN: What tool to choose for network structure and setup documentation
I have a task to document whole network setup and configuration information. Something similar to disaster plan for other people who woukd work on the network. The company is not related to it industry so it should be easy to understand. It should protect the data that could only be visible for other people who have the password or some other authentication. I'm thinking about mediawiki or tiddlywiki but maybe there is other good suggestions?
Good points, but just to be picky - there are a few good "flat + color" combinations out there, flat and colorless don't necessarily come as a package. After all, who doesn't want the default button to be in their brand's accent color?
Being local isn’t particularly relevant because there is such a wide range of transportation efficiency and different crude oil supplies involve differing amounts of flaring etc.
As explained in the article, the protesters don't actually harm the painting.
Except the US military made them no longer mandatory, and even allowed discharged troops to come back.

Sounds like it was a significant strain on their logistics to mandate the COVID shots, not to allow them to be optional.
if your systems have any of these easily targeted vulnerabilities exposed, fail2ban won't save you
The Cardboard Bernini
That's even better: https://en.wikipedia.org/wiki/Green_Planet_Energy
What's insane to me is that from my experience, most legal immigrants had to either game the system, or depend on the pure luck of lottery systems. Then once they are citizens, they turn around and say that everyone must go through that same process, instead of advocating for a fairer process
Isn’t AVAX transferable between blockchains and Binance? If so, this isn’t “stat arb”, it’s just regular arbitrage. When the instruments are fungible, it doesn’t matter whether there’s a statistical relationship; your profit is guaranteed once you complete the trade, regardless of how the prices move later.

The Royal Dutch/Shell case is different because the two stocks were not actually fungible, so the trade would only have been profitable if the two prices eventually converged.

PS I enjoyed the article and it’s clear you’ve spent a lot of time thinking about this space. I just can’t resist chiming in when it comes to well-established terminology.
Don’t we have a name for that already - biofuel?

Wikipedia says yes [1], research says no [2].

In any case it seems both better than regular fuels and worse than regular renewable energy sources.

[1]: “Biofuels (and bioenergy in general) are regarded as a renewable energy source”, https://en.m.wikipedia.org/wiki/Biofuel

[2]: “Energy accounting method showed quantitatively that biofuels are not renewable energy sources.”, http://www.globalbioenergy.org/uploads/media/0710_Ortega_et_...
Private equity is starting to share with workers, without taking a financial hit
Tooo cool. I sat and watched it play for a length of time that's longer than I'm comfortable admitting last night.
> Of course, there is a reason for the separation of the closing and locking functions, but not the opening and unlocking functions: it avoids a Denial of Service attack where someone can just press “close” and then jump out before the door closes. If the interior “close” button automatically locked the door, this would result in the toilet becoming permanently inaccessible.

This was done in my elementary school (~7-15yo) "back in my times", with analog doors with hand-turned locks. Those door locks usually had a 'screw-like' interface on the outside (similar to this: https://m.media-amazon.com/images/I/51KhCg9ZDFL.jpg ), so one of the kids would "have to pee" 5 minutes before the end of the lesson, go to the toilets and lock all the doors from outside with a screwdriver/swiss army knife so all of the toilet stalls would seem occupied.
fair point, the main reason I use fail2ban is to limit traffic from malicious activity rather than letting the attempts run rampant and unchecked.
It's different for surgery, in a hospital, if that's what you are referring to. But for take-home use, it's nearly non-existent in much of Europe.
None of the comments.
Art might be eternal* but your access is not eternal.

[*] also not eternal.
Thanks for this great response. At least they stopped mandating it, unfortunately mandating it killed people and used up lots of good will.
> intrusive data structures, user-controlled memory allocations

That's par for the course in c++.

> not try to replace built-in types (arrays)

How do you pass around C arrays to avoid the braindead pointer decay? You wrap them in a struct. That's literally all that std::array does.
Definitely interested in the Python cards - subscribed
Show HN: I made a mobile app and game where you workout to level up
Hi, I’ve been working on a workout logging mobile app and game to motivate myself to workout called Fittest Fire.

Logging workouts in the mobile app gives you points which are used in the game to increase damage, health, speed, etc.

The mobile apps are native Kotlin / Swift and have been released. The game is currently in demo status but has the level up system in place.

You can easily skip the account creation process for the mobile apps and play around with it first. In that case, you can only save exercises locally. If you have an account, you can save exercises online and get points. Everything is currently free to try (as in beer)

Android App: https://play.google.com/store/apps/details?id=com.davesproje...
iOS App: https://apps.apple.com/us/app/fittest-fire/id6475898710

Game Steam: https://store.steampowered.com/app/2537510/Fittest_Fire/
Game Itch: https://dtmcderm.itch.io/fittest-fire

I appreciate any feedback
[Wayland] Firefox becomes unresponsive after opening downloads menu
wonder how many nations it's pummled with it's clinical effects
And funny enough, here I was just thinking about how these jerks are making it so that, after the midwit backlash against all the criminal behavior encouraged by the Biden admin, I'll get to just live in pain the next time I have an injury!
That’s great for you. My partner was also not given anything when her wisdom teeth were removed. As the dentists anesthetic wore off, on the drive home, she started crying, then screaming as we pulled into the driveway. I got her in bed and gave her Tylenol (dentists recommendation), but she was crying, curled up in a ball, unable to move and barely talk, couldn’t drink water, just grasping her legs and suffering with tears streaming down her face.

Luckily, when I called the dentist back and frantically explained the situation, they let us get an opioid. She took a minimal amount, and was able to function normally. She only used a few pills in total over the course of a couple days, but it prevented absolute heartbreaking agony.

So that’s great that it worked for you. But your case has no bearing on somebody in the other situations either, so you don’t need to bring it up as a gotcha.