Andoryuuta

I just googled it because I've never heard of it before... it's pretty crazy.

Apparently, the wrestlers cut themselves on their scalp / forehead some time into a match to make the match look more intense, with the blood from their head mixing with sweat and dripping down...

A 17 year old kid was even hospitalized due to blood loss from it.

https://en.m.wikipedia.org/wiki/Blading_(professional_wrestl...

From my perspective of using nano for all simple text editing on linux, ctrl-X to exit seems very intuitive to me.

Plus it's even used in that one famous Matrix scene[1] where he is trying to close out of whatever he sees open on his computer. ;)

[1]: https://youtu.be/sjoad6gcRzs?t=31 (31 ~ 50s)

Nah. You are free to call me whatever you want, zionic.

;)

It's really a matter of them not doing _anything_ that could help.

Asking for additional development work on a game that is being shutdown obviously won't work, as that that amount of time spent on a dead product is just a waste of money for the business. For example, asking the company to dockerizing the server software, or split their code from the licensed third party tools like speedtree, RAD Game tools, etc and release it open open-source just wont work.

However, I do think most companies could justify asking one of their developers to spend just a single hour to document/copy+paste the _bare basics_ of the network logic for the good PR alone.

They could literally copy+paste their network serialization logic (whether it's something high level like protobuf, or just a raw C++ enum for associating the packet ID's with descriptive names). That's it. Just that one thing alone would immediately raise my opinion of any company that has to shut down an online game service. Just that single thing alone would save their fanbase hours of time spent on reverse engineering the networking for server emulator development.

Or to make a disclaimer.. like the OP post did?

Merriam webster[1]: " Definition of disclaim

intransitive verb 1 : to make a disclaimer ... "

[1]: https://www.merriam-webster.com/dictionary/disclaim

"... it's not like it's difficult to make a chat program."

A chat program? Easy. A chat program with 270 million monthly active users? Slightly harder, but sure, still easy. A chat program with 270 million monthly active users that has to integrate the entire Microsoft ecosystem [sharepoint, outlook mail + calendar + contacts, yammer, O365 groups, etc] because that is what their enterprise customers demand? Slightly less easy. A chat program with 270 million monthly active users that really isn't just a chat program but rather an entire chat + teleconferencing + screen sharing + MS O365 app platform which has to deal with B2B AAD authentication cross organization, legacy on-premise Exchange servers setup in a hybrid environment, excessive levels of enterprise-controlled configuration and policies, compliance (Purview, IB, retention policies, etc), legal requirements needed to allow Teams to be used as part of the Microsoft 365 Government offering, and many many more niche requirements/features? I suspect it's hard.

I don't particularly like the software (and had many issues with it myself at my prior job) but MS Teams is not realistically _just_ a "chat program" that is easy to build. If you are a company just looking for a good chat experience, I have no idea why you would not use Slack. However, if you are one of the countless companies who have already bought into the entire Microsoft O365+outlook+AAD+sharepoint ecosystem, Teams is probably a good choice, as it is very seamlessly integrated.

Whoa, this is neat. I've never heard of L-Systems before, but this seems like a really cool way of representing trees.

The original post said both "Billons of Chinese" and "1 Billion", so who knows, it may be closer to the full 1.4 Billion than we think.

Jeez, 1 billion personal records in a country with a population of 1.4 billion. If true, this would have to contain the basic personal information of nearly everyone citizen.

There are some insights/comparisons in speed and memory usage in the Frida 14.0 [0] release notes, when they switched from Duktape to QuickJS. Overall, QuickJS seems to be slightly more performant and requires about a fifth of the memory usage for the runtime.

[0]: https://frida.re/news/2020/10/28/frida-14-0-released/

Noted. Thanks for updating the link!

Oh! To be entirely honest, I got the link directly from a reference on a Wikipedia page, so I assumed the old link must be down since it was using archive.org.

With that being said, the archive.org link is probably better in case anyone comes across this HN discussion in the future.

Came across this and thought it was an... amusing filter.

Ah, yep. You're totally right. I didn't even consider server CPUs. Also, I thought I read somewhere that it was for all consumer CPUs starting at Alder Lake, but I have no idea where, so I could be entirely wrong. :)

Intel is removing AVX-512 support from their newer CPU's (Alder Lake +). :/

https://www.igorslab.de/en/intel-deactivated-avx-512-on-alde...

I'm surprised nobody has mentioned DIRE[0] yet. They did exactly this and got some very impressive results.

[0]: https://arxiv.org/abs/1909.09029 / J. Lacomis et al., "DIRE: A Neural Approach to Decompiled Identifier Naming," 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE), 2019, pp. 628-639, doi: 10.1109/ASE.2019.00064.

[1]: https://github.com/pcyin/dire

This same DMCA company (WorthIT Solutions) previously tried to DMCA the php docs range function page on behalf of HackerRank [0]. Pretty crazy.

[0]: https://www.mail-archive.com/php-webmaster@lists.php.net/msg...

What is it about nodejs/NPM in specific that leads to malicious changes being so noteworthy/significant?

I barely never see anything about other package indexes (crates.io, PyPI, etc).

Doesn't npm also use a lock file by default for packages?

This is my main issue with fonts made for programming that use special ligature marks. They _look_ cool, but they are very hard to tell apart from other characters.

It's like someone decided that the I, l, 1 confusion wasn't enough and decided to add more. :P

My memory on this specific issue is a bit fuzzy, but as far as I remember the issue was regarding the definition/ABI compatibility of C++ member functions. The doc you linked aren't really clear what to do in the case of C++ member functions, as they always take a hidden "this" class instance pointer as the first argument (in MSVC). So which one is passed first when you have both?

If you look at godbolt/or disassembly output of an MSVC compiled binary, you can find that it is actually passing the class pointer first, then the return value pointer. Which definitely doesn't match the absolute "the caller must allocate memory for the return value and pass a pointer to it as the first argument" statement from their own docs.

Prior discussion about this at https://news.ycombinator.com/item?id=29613640

The page currently 404's.

While I think you are right about devirtualization being used to mean that in the world of compilers, in the realm of code protection/obfuscation, obfuscating code by making in run in an embedded virtual machine is called virtualization, with the reverse being called devirtualization.

It's hard to put a exact date on the origin of "[de]virtualization" being used to refer to code obfuscation, but it's definitely been used since at _least_ 2007 in related academia. [0],

[0]: Kang, Min Gyung, Pongsin Poosankam, and Heng Yin. "Renovo: A hidden code extractor for packed executables." Proceedings of the 2007 ACM workshop on Recurring malcode. 2007

> Otherwise, the caller must allocate memory for the return value and pass a pointer to it as the first argument. The remaining arguments are then shifted one argument to the right.

I think the issue is that it isnt _fully_ documented anywhere. The MS docs do partially describe it, but it omits details about how this should be handled in the case of C++ member functions (which are the COM methods in question). C++ member functions always receive the hidden 'this' pointer as the first argument in Microsoft's x64 calling convention, which directly conflicts with this document stating the returned struct would be a "pointer to it as the first argument".

You can see this in some of the godbolt links in the linked issue. Ultimately, some COM functions that take no arguments actually end up taking two hidden parameters in rcx and rdx (this pointer, and the return struct pointer respectively)

As far as I understand, it takes a PDF that contains only image data (e.g. a scan of a price of paper) and uses OCR to recognize the text, then overlays the text on top of the image in the output PDF.

It would allow you to take a physically scanned document and create a PDF with selectable text you could copy+paste, search over, etc.

I'm really surprised that the JS challenges helped so much, given that there are open source libraries for bypassing them (e.g. cloudscraper[0]).

[0]: https://github.com/venomous/cloudscraper

Programming is like making a jigsaw puzzle entirely though, you have to decide what printed photo to use, puzzle dimensions, how many pieces, what cuts, etc. Too much mental energy.

Reverse engineering is just like solving a jigsaw puzzle, except I'm just staring at disassembly &/ decompiler views and renaming things to figure out how they fit together.

I'm @slimsag's brother (1 of 4 siblings), if my opinion counts.

This might sound really bizarre, but computers are a way of life in our family. We always had computers around us while growing up. At one point in time, we ran a small PC repair business out of our home. At another point in time, we even three 48U server racks in our living room which was hosting the infrastructure for our dad's new business/startup (hardware all being maintained by our oldest brother). We were told not to walk in front of the 48U racks because our parents were afraid they might fall over and crush us. :)

I would only be concerned to hear if Stephen was _not_ spending his free time programming something. That has been his hobby and passion since we were much, much, younger.

As for how I _personally_ feel about 100hours/week programming: it's definitely not something I could do. I work a typical 8-9 hours/day doing minor software development, and I feel a bit mentally drained afterwards. With that said, programming is not really my hobby. After my typical work day, I spend another 4-5 hours reverse engineering software because that is what I find fun.

I'm glad that Stephen found a career doing what he loves, and is able to continue doing it as a hobby outside of his working hours.

As an aside, I also asked our Mom your question (just for the fun of it). She wasn't quite sure what I was asking exactly, but said: "He's self-taught, self-made, and I'm proud as hell of him". Hahaha.

Overall, If he's happy, we're happy for him. I'm not sure what other opinion we could even have?

I'm glad that I can now say that I've contributed Windows support to a project which I probably violated the license of while working on :P

By technicality, the license has been violated by quite a large variety of corporations: Microsoft, AWS, Heroku, Bilibili, Baidu, Apache, Arduino, etc. [0~6], and much much more [7]

Crazy.

[0]: https://github.com/microsoft/bedrock/blob/a0ab244a80a94133cb...

[1]: https://github.com/awslabs/karpenter/pull/609

[2]: https://github.com/heroku/java-buildpack/blob/master/go.mod#...

[3]: https://github.com/bilibili/overlord/blob/b524449801b5411583...

[4]: https://github.com/baidu/openrasp/blob/f992962207bec063eda6f...

[5]: https://github.com/apache/camel-k/issues/2067

[6]: https://github.com/arduino/arduino-cli/issues/740

[7]: https://sourcegraph.com/search?q=context:global+%28bou.ke%7C...

Awesome! This reminds me of https://cryptopals.com/

This scenario mentioned in the book was denied by both Elon Musk[0] and Tim Cook[1].

[0]: https://mobile.twitter.com/elonmusk/status/14211509130755031...

[1]: https://mobile.twitter.com/markgurman/status/142113975622261...