crumbshot

Not really no, that's just your interpretation of what this supposed viewpoint may be.

I don't think the author is presenting these ideas based on "any negative depiction of poor people is bad". It's more as a pointer on these common tropes that exist in storytelling, and some of the implied unrealistic assumptions that underly them.

> it's viewpoint is obviously based on a certain political viewpoint, but the author doesn't even try to prove this viewpoint

Similarly, your comment didn't specify anything about what this political viewpoint might be, nor any reasons why you think this article is based on such a viewpoint.

And people like Henry Kissinger and Shimon Peres before that. I agree, this prize is a nonsense.

But then it's lacked credibility from the start. Nobel only funded it to help rebrand his anticipated legacy, to offset being remembered as "le marchand de la mort".

> It requires an extremely narrow way of looking at the world (at basically the PR level) to think Donald Teump is even close to being net positive for world peace.

This checks out - pretty much everything being posted by Trump fans in this thread is a rewording of the PR spin we see Twitter bots spamming everywhere.

This propensity to give one person all or almost all of the credit is the problem. And it tends to be biased towards either the wealthiest person involved, or the one that just had the idea.

As you note, it is often a team effort, and so the whole team should be rewarded with the credit for the invention. Rather than basically ignoring those whose design and/or engineering expertise were essential to its completion and delivery.

They both built the prototype. Without a proof of concept that has the actual details figured out to make it work, it's just an idea.

Downplaying the essential role of an experienced and knowledgeable engineer as merely being a "lackey" is the real disservice.

> She designed her first model in the shed behind her house in Shelbyville, Ill. Her lack of formal engineering education, however, became an obstacle, so she sought out someone who could help. Mechanic George Butters agreed to assist her in building the prototype.

So the engineer did all the actual hard work here in coming up with a working prototype, but the wealthy funder takes almost all of the credit, and puts the patent solely in their name.

A much fairer framing would be that the two of them were co-inventors.

More like if, between them, they held almost all commercially-zoned land and then proceeded to run a landlording duopoly.

Is HN being subjected to some astroturf marketing techniques here?

Seems rather suspicious to see so many commenters enthusiastically salivating over an advert for a very expensive radio.

And also for said advert to hit the #1 spot on this site, despite not fitting into the usual categories for a compelling post.

I reckon it was probably just this: https://www.nytimes.com/2020/06/21/style/tiktok-trump-rally-...

> The worst reforms in my opinion have been the ones that obfuscate memory and introduce nondeterminism, like aslr. It makes C programs impossible to debug.

Please could you explain how ASLR makes your programs impossible to debug?

I'm surprised to hear this, as I work on such executables in my debugger every day, with no problems whatsoever caused by them having ASLR enabled.

> On the other hand, stuff like ASAN is great.

It is, but it's not intended as an exploit mitigation. You typically wouldn't apply it to your binaries running in production, due to the performance hit. Its purpose is to help detect memory safety bugs during development and testing.

It came from their comment, specifically:

> a society in which one is treated badly when one doesn't strive to keep up with the Joneses

> the never-ending hamster wheel situation

> perhaps humanity wouldn't be so rapacious of the earth

Well exactly, he didn't have a logical point to make. Just an unfounded assumption that women are ruining things for everyone.

This sounds suspiciously like incel ideology.

Whatever cognitive path you're on that's led you to conclude this, I advise you to swiftly veer away from it.

Blaming all the women isn't going to help with anything. People will just think, oh there's that weird sexist guy ranting on again. That's not going to get you anywhere useful.

I'm somewhat surprised at how many commenters here are shrugging off or even supporting this blatant corruption by these wealth-defiled crooks.

I wonder how this comment section would look if it was revealed that people from a low income background had hacked the admissions system to gain entry. I expect the tone would be much more critical, calling for prosecutions and sanctions, and lamenting the sheer unfairness of it. I'm pretty sure it would be in stark contrast to all the bribery apologism we can see in these threads.

> Usually this is when one of the machines is accessed via a serial console.

I've found zssh can be quite handy for that, it layers an extra pty over the SSH connection, for file transfer. By default it uses the ZMODEM protocol via rz/sz, but any pair of programs can be plugged in instead - useful if the connection isn't 8-bit clean.

That is not quite correct, it is in WSL1 that they are NT processes, with Linux syscall emulation.

But in WSL2 the whole thing runs in a Hyper-V VM, with a customised Linux kernel (available via http://linux.microsoft.com) to help with interoperability between WSL and Windows.

That is interesting, what sort of NGOs did you find to have the most socially meaningful and ethical work available?

> I'm very surprised to see most of the comments here in favor of the "landlord tech" described.

I think it's not too surprising, this sort of post always seems to bring HN's resident landlords out to argue in favour of whatever happens to benefit them financially, and gives them more control over their tenants' lives.

It's a bit like how any topic here relating to social justice attracts hordes of far-righteous types peppering the comments with comically bad takes, before flagging the submission off the front page.

> Why should the landlord fit the bill because Jonhy does want to live in a high sought place?

It's just one of the very few risks a person of wealth might have to accept, should they decide to use their elevated position in society to inflict landlordism upon people.

With that model, if the government are going to be effectively paying whatever the landlords demand for rent, then the best solution would be for the government to seize rental housing from the landlords (perhaps with some token compensation so they don't complain too much) and run it as a non-profit rental service, i.e. social housing for all.

Obviously not the best solution for the landlords, but, really, so what? Removing a class of parasites from the housing system would be a feature, not a bug.

To my reading of their comment, it was implied later on:

> The oppressors are not always landlords - they are [...] other tenants who sit on their rent controlled housing until they die.

> Landlord tech is certainly not good for city renters who think they deserve lower than market rent purely on account of (1) how long they have lived in the city and (2) how little they earn.

Why shouldn't low income earners pay lower rent? From a humanitarian perspective, it doesn't make sense to have a landlord greedily siphoning off the vast majority of a person's income, just so that person can have fulfilled the basic human right of not being homeless. It's parasitic.

I second your recommendation. After installing it on some of my now long-running servers back in 2016, I've only touched it a couple of times since. It's been working seamlessly since then.

Configuration was easy, I just ended up writing a simple shell script for the deploy challenge hook, to copy the certificates and reload configurations on nginx etc.

The two times I chose to intervene were straightforward too. The first was because of the ACME protocol upgrade, for which I just needed to drop in a newer copy of dehydrated, and rename references to its old name. The second was because I needed to configure the ACME DNS challenge to get a wildcard domain, and that just involved modifying the deploy challenge hook to temporarily run a custom DNS server that responded to the challenge.

I did take a look at certbot, or whatever it was called back then, and decided against it quite quickly due to the perceived complexity. Also I seem to recall it didn't support nginx properly.

After reading this user review, I'm quite glad I did that. Though I do wonder why the author persisted in using that client despite all the problems they were having with it, given the choices available in the wider Let's Encrypt ecosystem.

> it’s not a bad idea to try fringe approaches

Sounds like a great way to get scammed by charlatans, and potentially interfere with the treatment you're receiving from medical professionals.

Their first mistake was taking heed of anything ESR has to say, including his archaic opinion on what hacking is.

If it's nothing to do with software or hardware security, then it's not hacking.

And yes, this site is itself woefully misnamed.

Interested readers should check out the author's earlier work exploiting CVE-2019-9810: https://github.com/0vercl0k/CVE-2019-9810

And their fantastically detailed writeup of a PoC they wrote for that vulnerability: https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionm...

This exploit is different in that they use the arbitrary read/write primitive gained by CVE-2019-9810 to flip a couple of bits and patch out a few instructions with the effect of removing the security boundary between a normal web page and XPCOM. The interesting difference in this exploitation approach is there's no need for ROP chains and shellcode, as you have all the XPCOM components available to use.

Once they're in that privileged context in the content process, they escape its sandbox by exploiting CVE-2019-11708. This works by sending an particular IPC message to the parent process, that causes a web page of the exploiter's choice to load in that process. In this case, the choice is to exploit CVE-2019-9810 again, then use XPCOM components to drop an executable to disk and run it.

Awesome work, and a real pleasure to read, it's satisfying to see such well-commented and clear exploit code.

It used to have a POSIX subsystem, but was removed in Windows 8.1: https://blog.ret2.io/2017/09/20/subsystem-posix/

Interesting argument, though I think this could also support the claim that paying taxes increases personal liberty. By having a portion of income paid into the commons for the general benefit of society, this means you don't have to work directly on such government-led projects, giving you increased freedom in where you apply your labour.

I don't see how taxes are an infringement of personal freedom, could you elaborate?