0x0aff374668

The reason for the negativity is that this demonstrates the "Design by StackOverflow" mentality where the solution is like swatting a fly with a sledgehammer and no real domain knowledge. Plus the author didn't even train the neural nets: it's just a LEGO project. I'd higher this person to be a lab intern, but nothing above that. The fact the author couldn't solve it locally and had to invoke the CLOUD is... laughable. This problem has been solved for over two decades on lesser hardware.

This is a great example of how so many programmers think they are the first to discover something that is "ancient". In reality this is a problem older than Linux (linux just had the advantage of a huge and diverse open-source userbase from which to draw data). On the flipside, lots of good information takes years to go from discussion groups to books, so it can be hard to find relevant research. Applied compsci is literally the cutting edge of reality.

He doesn't describe an attack, he describe literally what 802.11 was designed to do. An attack is forcing a deauth and then stealing the 4-way handshake data and, say, cracking WEP. Which is why WEP was decommissioned ... checks notes ... 15 years ago.

No need to edit aircrack-ng, WireShark does what he did natively (filter out and set channels), and a good realtek chipset allows you to set the scan interval so you can cover more channels (which is why the new ALFAs suck).

Also the DTIM and keepalive can be set such that the MCU can sleep while the phy link maintains a connection without a costly handshake, esp. if using TLS <1.3 to talk to the cloud. Reconnecting costs a shit ton of energy so they usually don't disconnect.

Hacking Wi-Fi has become exceptionally more difficult, as noted by the slow dating of materials at DefCon's WiFi Village over the past 8 years: cracking WPA2 is basically so hard no one bothers, even in CtF games.

Yeah, I agree with you. I had a sneaking suspicion.

Funny you mention Electron: my company switched from Qt to Electron because it opens up a larger pool of developers with instant cross-platform portability with a fraction of the debug overhead.

I've spent significant time in HCMC (about 6 months over four years). It is vibrant, friendly, booming, tech heavy, and goddamn cheap. I didn't need medical care, and didn't have to cook because food is amazing and cheap. I computed about 1/10th to 1/12th the cost of my life in Northern Cali. I hope when I'm older it is still cheap and not environmentally wiped out. (I'm also biased because twice I met a woman who I thought was waaaay out of my league and we ended up dating.)

Wasn't there just a court case that ruled CBP couldn't force you to unlock your device without a warrant? Like just 2-3 weeks ago.

Interestingly, at DefCon last year, a presentation was talking about how in Africa there are interposer SIM shims that slip over the top of the simcard and provide additional functionality. Citation needed, but I was impressed they could fit a small MCU in such a thin form factor!

Right there with you. I'm guessing we're both over 40. Thinking your home is an investment is some "flip that house" 1990's reality TV show bullshit.

"It trips me out to see other people in the comments that don't know who ____ and ____ are..."

That's what is meant by "cult of personality."

Kinda reminds me of Transmeta. Except they had a product, a shitty one, but a product. Or Ampere, but they only have one product they inherited and no flashy names.

Silicon startup challenges are rough. RISC-V is probably the best hope for a new architecture (hint: its not a new architecture).

> This reminds me of first time founders who can't wait to get "CEO" business cards.

I worked for such a CEO. In the first year we had four week-long retreats to: an island in WA state, Palm springs, Austin, and Banff (that's where the stats team was). TONS of swag. Aeron chairs. New MBPros. Oh, and champagne fridays. Needless to say it burned through it's good will seed round in 1 year, and the CEO begged for another year's worth of money from friends before shuttering. But hey, hype sells in the software world.

Whoa. That's brilliant. Thanks!

oh, shit. that means if i just send a timeout promise and a worker promise to Promise.race([...]), and the timeout finishes but the worker never does... then I have some unfulfilled promise hanging out somewhere indefinitely? I guess so... if I do Promise.race([p1, p2]) and p1 fulfills and p2 doesn't, p2 is still alive...indefinitely. Am I right or wrong...?

I use SendGrid and STILL have to ask major companies to fix their spam filters.

the author can't even be bothered to implement proper TLS/HTTPS on their website (Mozilla blocks it)... and they voted for domain names?

> Don't take this as trash-talking, though. I simply want to get things done, not fight my environment.

I think people don't understand just how badly C++ is broken in reality (vs conceptually) until their paycheck is tied to a real, years-old, multi-developer C++ project. It is not trash talking, it is pointing out truths.

It goes well beyond "any long-lived project has its issues." I think you and I (and many others) know that it is much larger than this, it is a fundamental issue with the language, the standards body surrounding it, and the mess of toolings.

This persists today because C++ is often used to bridge a performance gap between scripted languages and C among younger programmers and academics. (Admit it: we all like that sweet sweet dopamine hit when we take our Python to C++ and the syntax is almost the same.) But that slight performance boost and that "hey this looks like Python but it's really C++" feeling are soon demolished by the accretion of unresolved issues which have enumerated ad-nauseum on HN, including this article.

I've been working with C++ since 1993 (I got a big Borland C++ Compiler as an intern plus 12 VHS tapes of Bjarne himself explaining the language)... my experience with C++ continues right up to today as a contractor having to deal with Arm mbedOS (even Keil struggles to manage hypersensitivity, GNU is a trainwreck for embedded C++) and Tensorflow/OpenCV... and C++ has yet to shake off its flaws. In fact, I think it has added to them exponentially.

I speak to nine year old relatives: they are barely articulate simians.

What is it like talking to a 9 year old who has completed a 4-year EE degree?

Can you walk up to the kid and say, "Hey, solve this bridge/op-amp circuit's transfer function?" or ask a humanities question, "What are the ethical dilemmas inherent in an open discussion forum?"

I guess this is what it feels like to be a young-earth creationist: I simply cannot wrap my head around a 9-year old being able to answer these question, so like a creationist I choose to believe it is a fake.

This is the coolest response. :)

(You didn't by any chance sail around Cape horn in 2016? I met this really cool older couple in Central America who had been living at sea for 17 years.)

Reading all of the replies I realize that sometime between 2007 and 2012 I just gave up entirely on storing media locally. I don't watch movies (e.g. no cable or netflix), but I've been using spotify for a decade maybe? One response makes a good point: it is a waste of overall bandwidth to stream content.

Chug! Chug! Chug!

(the kool-aid)

That author had to jump through so many hoops to make an argument his chiropractor must be rich. Seriously, that entire article was nonsense from top to bottom.

Why are so many folks here running media servers? Are you really streaming your own video / audio libraries, or is there something else it is useful for? I'd be rather shocked to learn people still store digitally media locally.

"Double taxation"

For such an in depth example you really missed this.

I make $100,000 in year X. That covers two brackets, and my effective rate is, say, 25% federal.

SO I have 75k left over.

I invest 5k.

It doubles to 10k.

I'm then taxed on the 5k I earned. Not the 5k I invested.

But do go on about double taxation.

> And that only increases as you get richer.

Correct. Which is why income is such a miniscule fraction of the 1% (and above's) earnings. It's all out there in the open. Pick any CEO in the top-100 corporations. Look at their income. Then look at their overall earnings. The bulk falls under capital gains due to stock. Then there is deferred compensation, where taxes are lowered even MORE if you agree to postpone being paid. There are so many clever ways for the very very rich to avoid taxes it boggles the mind.

So go ahead and keep talking about the income tax, they've got you distracted.

Funny, I've been struggling with exactly this issue. Over the past few years my eyes have worsened to the point where doctors cannot find a contact scrip that works in both eyes: we have to compromise with one eye fixing far-away and the other fixing near. I had TWO optemtrists generate an Rx and they differed in all domains, with the astigmatic axis off by 90-degrees in both eyes! I've wanted to buy a lens kit and do it myself for years, but after reading how complex a process it is to find a compromise due to all the daily fluctuations, I'm ready to accept that my eyesight is just a mess and nothing can fix it for ALL scenarios.

Which SDKs do you use that are C++?

I use Keil, IAR, Renesas's compiler, XM8/16/32 from Microchip, and GCC.

Which do you use?

One of the main features of C++, its object-oriented stuff, is built on top of constructors and destructors -- aka dynamic memory allocation. This sort of thing is not desirable on deeply embedded systems due to resource constraints and the very real spectre of heap fragmentation -- embedded stuff tends to rely on static memory allocation done at compile time or system startup.

C++ isn't quite as portable as C -- Not just the compilers which never quite supported the same combinations of features -- even if you just stuck with the ISO-ratified features -- but the language runtime, standard [template] library, and headers are far larger with various implementations including plenty of mis-features and quirks. All of this meant that it was quite common for C++ code to not even compile with a different toolchain -- especially when templates were used -- and even if it did compile, it might not actually function correctly.

If you restricted yourself to avoid the problematic areas of C++ (eg not using templates or dynamic allocations) you'll end up with a language that is basically C. So why not just use C? :)

Arduino is a sandbox for people with little experience in embedded programming to dip a toe. They aren't interested in writing optimized constrained code, which is what 99% of embedded programming for products is about. Two totally different spheres.

Makes some really great points, similar to why C++ is not favored for embedded. C++ compilers are just too unpredictable and when trying to meet code limits in 128K, 32K or even 2K of flash, C++ is a nightmare. All of the major embedded SDKs (STM, Microchip, SiLabs, TI, NXP, I could go on) are written in C... and C only. MBED is C++, but I've never encountered or heard of an OEM or integrator using MBED in a real product.

"maintenance headache."

Then stop maintaining code from languages you don't understand. This is frustrating. I've seen solutions on the comments that call PYTHON! Are you effing kidding me? PYTHON ??

Granted, BASH docs aren't particularly succinct, but shell scripts are an absolute necessity in the OS world.

It's pretty simple: If you don't understand shellcode, don't maintain an OS, or rather, don't expect to be accommodated for lack of knowledge for something that's been standard for 30+ years.

Very useful. I hate having to pull in external processes to do something simple in BASH that the manpage doesn't cover. Expecting PERL to be on every machine (or the right version of SED.. posix? gnu?) is not reliable in my line of work.

I don't know what troubles me more:

1. a clearly-expert developer bragging about 1 hour to write hit app then telling everyone to basically live the dream chicken soup for the soul bs

2. people who experience increased anxiety from said wampeter/foma/granfalloon* because they haven't wildly succeeded

My brain to me: Welcome to 2019.

* See: Kurt Vonnegut

This raises my hackles every time I see it (enough to create an account and post): Y2K was ABSOLUTELY a real problem.

There was an enormous amount of money spent prepping for it years before 2000. In 1995, a few years after I graduated from college I got a moonlighting job cleaning databases for a UK phone company, manually editing 2 digit dates to 4 digit dates (I didn't know PERL existed at the time). Yeah, nothing major happened Jan 31 1999, but that's because there was a real, concerted effort to address it that wasn't trumpeted across the news media.

Not directed at you, I just needed to yell at a cloud.