aleks224 · HackerTrans

aleks224

no profile record

Submissions

[untitled]

1 pointsby aleks224ปีที่แล้ว0 comments

Multinational Small Business (1993)

nakamotoinstitute.org

1 pointsby aleks2243 ปีที่แล้ว0 comments

Making State Transitions Programmable

akircanski.github.io

1 pointsby aleks2243 ปีที่แล้ว0 comments

“Wetware” Decompilation of Digger

digger.org

2 pointsby aleks2243 ปีที่แล้ว0 comments

What to Do When the Trisector Comes (PDF, 1983)

web.mst.edu

3 pointsby aleks2244 ปีที่แล้ว1 comments

DeFi: Shadow Banking 2.0?

papers.ssrn.com

1 pointsby aleks2244 ปีที่แล้ว1 comments

Phone Utility on VAX/VMS

marc.vos.net

23 pointsby aleks2245 ปีที่แล้ว15 comments

Broken E2EE apps and Balkan crime gangs

balkaninsight.com

1 pointsby aleks2245 ปีที่แล้ว1 comments

Recovery of deleted sequencing data sheds light on the early SARS-CoV-2 epidemic [pdf]

biorxiv.org

2 pointsby aleks2245 ปีที่แล้ว1 comments

How I Learned Symmetric-Key Cryptanalysis

akircanski.github.io

156 pointsby aleks2245 ปีที่แล้ว31 comments

Private Set Intersection: A Soft Introduction

decentralizedthoughts.github.io

1 pointsby aleks2245 ปีที่แล้ว0 comments

The Reemergent 1977 H1N1 Strain and the Gain-of-Function Debate

journals.asm.org

1 pointsby aleks2245 ปีที่แล้ว0 comments

comments

9 เดือนที่ผ่านมาdiscuss

So this would be the first stack overflow after the Morris' fingerd one (well, first one that's widely publicized):

https://seclists.org/bugtraq/1995/Feb/109

> we've installed the NCSA HTTPD 1.3 on our WWW server (HP9000/720, HP-UX 9.01) and I've found, that it can be tricked into executing shell commands. Actually, this bug is similar to the bug in fingerd exploited by the internet worm. The HTTPD reads a maximum of 8192 characters when accepting a request from port 80.

9 เดือนที่ผ่านมาdiscuss

This was great to read. Related: Morris also discovered the predictable TCP sequence number bug and described it in his paper in 1985 http://nil.lcs.mit.edu/rtm/papers/117.pdf. Kevin Mitnick describes how he met some Israeli hackers with a working exploit only in only in 1994 (9 years later) in his book "Ghost in the Wires" (chapter 33). I tried to chronicle the events here (including the Jon Postel's RFC that did not specify how the sequence number should be chosen) https://akircanski.github.io/tcp-spoofing

10 เดือนที่ผ่านมาdiscuss

There's a quote in the bible that says something similar:

"Verily, verily, I say unto you, Except a corn of wheat fall into the ground and die, it abideth alone: but if it die, it bringeth forth much fruit.”

(John 12:24)

ปีที่แล้วdiscuss

This blog post exposes the badness of SMS-based recovery. I think other recovery options such as Yubikey aren't ideal either, as a Yubikey may simply stop working and you're completely locked out. The specific situation the author of the blog post isn't dramatic - he can't receive SMS - personal decision to avoid roaming charges.

But in all seriousness, if there's an authentication recovery standard, it should serve all people including those who are in seriously difficult circumstances (e.g. homeless or ill). The question then is what should recovery look like in those cases.

To me it looks like good old recovery code on paper is the best solution, as it doesn't depend on ever-changing device ports, or hardware malfunction due to lack of use long-term (such as 10-15 years).

I wonder whether authentication apps nowdays address that aspect and make and I kinda doubt so (i.e. can you print out a QR code with all account information in your typical TOTP app?).

ปีที่แล้วdiscuss

Do TOTP authentication apps typically provide recovery codes option? Can they squash all of the added TOTP codes you have in the app into one code?

ปีที่แล้วdiscuss

Some folks claimed it's a LRAD https://en.wikipedia.org/wiki/Long-range_acoustic_device

However, there was no perceptible sound and folks describe it kinetic force that causes a state of panic and rush in the chest.

From the other angle: https://x.com/alef_pendule/status/1900980300093468844

3 ปีที่แล้วdiscuss

For a set of primitive operations (such as those in Turing machine), how can you be sure that it spans all possible computations? It sounds that's one of the challenges Turing had - so he went at lengths to show that by various "soft arguments", e.g. that it's possible to build a VM (Turing machine that runs other Turing machines IIRC). Later on, it was shown that the Turing machine is equivalent to machines other folks came up with (Goedel's recursive functions, lambda calculus, etc) and a consensus emerged that they are all describing a full set of computations.

3 ปีที่แล้วdiscuss

>The only way to mitigate this is to use computer-readable proofs, which can be verified by algorithms to ensure correctness.

This seems like a strong overstatement. We got by for more than 2000 years without computer-readable proofs, relying on intuition and validation.

4 ปีที่แล้วdiscuss

Very interesting! My understanding is that you're thinking about this more in terms of an 'application environment for power-users' than in terms of a 'multi-faceted IDE with lensing'.

To clarify, the specificity of Emacs is that it fully exposes it's internal function sets to the world. This could be done by other applications in an organized way. For example, in the picture-editing app example, it would amount to allowing scripting over the features that the app exposes. The scripting feature would come from the environment, not from anything specific the app itself does (apart from being built in that environment). The previously mentioned IDE could then be thought of simply the multi-tasking environment in which such generic applications are running.

Does this roughly correspond to what the project is about?

4 ปีที่แล้วdiscuss

If I'm understanding this correctly, with your Lisp IDE you could have an image sub-editor which may expose functions for image modification (eg. cropping), which could be called from the parent-editor. Is this accurate?

Also, what is it about Lisp specifically that makes it suitable for this undertaking?

4 ปีที่แล้วdiscuss

> A trisector is a person who has, he thinks, succeeded in dividing any angle in three equal parts using straightedge and compass alone. He comes when he sends you his trisection in the mail and asks your opinion, or (worse) calls you to discuss his work, or (worse still) shows up in person.

4 ปีที่แล้วdiscuss

The undecidability property proven here doesn't imply that there exists at least one Diophantine equation for which we'll never know if it's solvable or not, does it?

4 ปีที่แล้วdiscuss

>The question is, how do you select for those whose research will ever amount to something truly interesting

You can't, as "truly interesting" is context dependent, changes over time and something that everyone deems as futile may become interesting - that's the point of research. You just increase the bar of entry to get people who work very hard and leave it to them to decide.

4 ปีที่แล้วdiscuss

I believe the culprit is the assumption the grants/tenure-track systems make about applicants/assistant professors. That assumption is negative, as if new hires will try _not to do research_. It's also about the number of grad school offerings, it just seems so huge at the moment, which again forces introducing such metrics on what is considered "success" in academia.

4 ปีที่แล้วdiscuss

> Richard stallman himself got repetitive strain injury from emacs

Is this really true? Some notes at https://stallman.org/stallman-computing.html indicate it was a different type of strain injury, unrelated to ctrl/meta key:

> In the mid 90s I had bad hand pain, so bad that most of the day I could only type with one finger. The FSF hired typists for me part of the day, and part of the day I tolerated the pain. After a few years I found out that this was due to the hard keys of my keyboard. I switched to a keyboard with lighter key pressure and the problem mostly went away.

> My problem was not carpal tunnel syndrome: I avoid that by keeping my wrists pretty straight as I type. There are several kinds of hand injuries that can be caused by repetitive stress; don't assume you have the one you heard of.

4 ปีที่แล้วdiscuss

At what point in time did encrypting microcode in processors become common? Is this a relatively recent practice?

4 ปีที่แล้วdiscuss

> Our financial regulatory system still hasn’t fully figured out how to address the risks of the derivatives, securitizations, and money market mutual funds that comprised Shadow Banking 1.0, but we’re already facing the prospect of Shadow Banking 2.0 in the form of decentralized finance, or “DeFi.”

>The stakes are much higher when money is involved, and if DeFi is permitted to develop without any regulatory intervention, it will magnify the tendencies towards heightened leverage, rigidity, and runs that characterized Shadow Banking 1.0.

4 ปีที่แล้วdiscuss

>An "elite controller" is a person living with HIV who is able to maintain undetectable viral loads for at least 12 months despite not having started antiretroviral therapy (ART) . Elite controllers are rare: for every two hundred people living with HIV, approximately one may be an elite controller (0.5%).

> It is not entirely understood why some patients are able to achieve undetectable viral loads without ART.

https://www.aidsmap.com/about-hiv/faq/what-elite-controller

5 ปีที่แล้วdiscuss

same authors and their previous paper about magnetized cockroaches

https://www.quantumlah.org/about/highlight/2019-09-cockroach...

>The award was presented for the paper “In-vivo biomagnetic characterisation of the American cockroach", published in Scientific Reports in March 2018 by Rainer and five collaborators

5 ปีที่แล้วdiscuss

http://www0.mi.infn.it/~calcolo/OpenVMS/ssb71/6489/6489p009....

>Each person engaged in the conversation has a viewport on the screen. Phone can display as many as six viewports at a time. The viewport contains information regarding the user's name, the text of the conversation, and various status indicators, such as who is on hold. User names of people that you have on hold can be temporarily eliminated from the screen to make room for new participants.

   ANSWER      Answers the phone when you receive a call.
   DIAL        Places a call to another user.
   DIRECTORY   Displays a list of the users you can call.
   EXIT        Exits from the Phone utility.
   FACSIMILE   Includes the contents of a file in your conversation.
   HANGUP      Cancels the current phone call.
   HELP        Displays information on how to use the Phone utility.
   HOLD        Places the other users in a call on hold.
   MAIL        Sends a message to another user.
   PHONE       Places a call to another user.
   REJECT      Rejects a call from another user.
   UNHOLD      Reverses the previous HOLD command.