HNHacker News
TopNewBestAskShowJobs

klue07

130 karma · joined October 27, 2014

[ my public key: https://keybase.io/klue; my proof: https://keybase.io/klue/sigs/bgeO8tNIfFrT563mk8AliQsX-Td1D1gY67B_-Gt9tE0 ]
submissionscomments
klue07··on Plaque Begets Plaque, but Cholesterol and ApoB Does Not
This goes against modern understanding that say LDL or ApoB is an independent risk factor for cardiovascular disease. Also interestingly one of the authors, Dave Feldman, was a fellow SWE that left tech and started challenging this notion.
klue07··on Debugging macOS Kernel Using VirtualBox
Wow this is great. I can confirm this works, though since SMAP is 20th bit, it should be

    cpuid.7.ebx = "-----------0--------------------"
Inside the VM:

    machdep.cpu.leaf7_features: SMEP ERMS RDWRFSGS TSC_THREAD_OFFSET BMI1 HLE AVX2 BMI2 INVPCID RTM RDSEED ADX FPU_CSDS
I have updated the post crediting you!
klue07··on Debugging macOS Kernel Using VirtualBox
Remove "-Werror".

Sometimes there are too many errors to deal with. I find building on a machine that's on the exact macOS version that you are trying to build does the trick.

klue07··on Debugging macOS Kernel Using VirtualBox
Author here. Nothing in the post is illegal.

Apple allows 3rd party kernel extensions so naturally you would need to be able to debug the kernel. In my post, I link plenty of official Apple documentation that provide information on how to debug the kernel.

klue07··on Debugging macOS Kernel Using VirtualBox
Jonathan Levin's MOXiL 2nd Edition volume 3 is out and I recommend you get it. 1st edition is still very good and can hold you off until the other volumes are out.

Amit Singh has a Mac OS X Internals A Systems Approach that is good we well.

There are also various talks at security conferences that detail parts of macOS/iOS.

klue07··on Vimperator: a Vim-like Firefox
I haven't used vimperator for a long time, but in petadactyl you can use C-o and C-i to go back and forth, respectively. The key bind matches pretty well to what it is in Vim too.
klue07··on Deep Learning Enables You to Hide Screen When Your Boss Is Approaching
Reminds me of:

http://pcottle.github.io/MSOutlookit/

http://pcottle.github.io/MSWorddit/

http://codereddit.com

klue07··on PEGASUS iOS Kernel Vulnerability Explained
Apple also released a fix for OS X with its latest update.

https://support.apple.com/en-us/HT207130

klue07··on EquationGroup Tool Leak – ExtraBacon Demo
Many people in infosec generally learn programming on their own and only code for their own need. They don't care about coding style, small optimizations, programming best practices, etc.
klue07··on Learn Voraciously (2015)
This is why when we hire entry level techies, we mainly look to see if they have a drive and passion to learn the work they do.
klue07··on LastPass autofill exploit
https://bugs.chromium.org/p/project-zero/issues/detail?id=88...
klue07··on Employee benefits at Basecamp
It's a pity not more employers do this. I've always been a big proponent of 4-on-3-off work schedules. Traditional work 5 out of 7 was arbitrarily chosen. Regular 3-day weekends really rejuvenates you. If 40 hours of work a week is mandatory, spreading the 8 hours of the fifth day into the 4 days isn't so bad.
klue07··on China is challenging the idea that censorship thwarts online innovation
https://en.wikipedia.org/wiki/SW26010
klue07··on Vim GIFs
Call me old fashioned, but I still think the best way to learn Vim is vimtutor. Then just google whatever you might need or consult :help.
klue07··on Feynman on Fermat's Last Theorem
> is far from the real 110 pages long proof of FLT that took A.Whiles years to put together

He could've gotten away with the pun "took A. Wile to put together."

klue07··on Ways to maximize your cognitive potential
While I don't think athletes are the most intelligent, I think the stereotypes of dumb jocks is simply a type of bias. If you were an athlete with potential, you would put more focus on your sport instead of academics. If you were bad at sports you would typically spend less time doing them which would then allow you to focus your time on other things like academia. In America, when all you need to do to get As in like highschool is to put effort, the ones who weren't great in sports tend to get higher grades which is perceived as having a higher intelligence. Thinking that athleticism is negatively correlated to intelligence is just ignorant.
klue07··on The emotional arcs of stories are dominated by six basic shapes
Am I missing something? The result for the 6 main emotional arcs basically enumerates all the possible permutations of rise and fall of length 1, 2, and 3 which seems pretty obvious.

Length 1: rise, fall

Length 2: rise-fall, fall-rise

Length 3: rise-fall-rise, fall-rise-fall (must be interchanging because for example fall-fall-rise would probably just be considered fall-rise)

klue07··on As Suicide Rates Rise, Scientists Find New Warning Signs
> Computers analyzed more than 30,000 different risk factors, including traditional ones like age and mental-health history. But some surprising issues—such as gastrointestinal problems, infections and injuries like rib fractures—were tied to increased risk.

> Dr. Nock says that some of these may be self-inflicted or related to impulsive behavior. Using the historical data, the approach was able to detect 45% of suicidal acts an average of about three years before the event.

> A study using similar methods looking at suicide risk among U.S. Army soldiers in the year after hospitalization for psychiatric issues was published in 2015 in JAMA Psychiatry. The algorithm was able to predict about 53% of the suicides in that high-risk period.

I wonder what the false positive rates on these are.

klue07··on Life in the People’s Republic of WeChat
Wow, it seems life has changed quite a bit in China than what it was like when I was there (2002-2011). The author mentions that everything is using Wechat for e-payments and QR codes are every where. I wonder with such high rate of adoption and change, how secure every thing is.
klue07··on Vote.org is a non-profit that wants to get the U.S. to 100% voter turnout
Recent phrack had an article on Internet voting for those interested.

http://phrack.org/issues/69/11.html#article

klue07··on The Great Suspender: Free up memory by suspending inactive Chrome tabs
Except you'd have extremely vulnerable browsers.
klue07··on The Great Suspender: Free up memory by suspending inactive Chrome tabs
Any good alternatives recommended for Firefox?
klue07··on Benefits of 1 Minute of All-Out Effort during Exercise
You should know what your limit is to not get sick if that is a recurring problem. What I was referring to is some people stopping a set right when they feel slightly fatigued or feel the burn. I was referring to people who smile and talk as they are lifting or working out.
klue07··on Benefits of 1 Minute of All-Out Effort during Exercise
I'm in the exact same boat. My feeling is that as they workout more they will realize how much more they can do as well as just getting used to the fatigue.
klue07··on Benefits of 1 Minute of All-Out Effort during Exercise
I have a feeling that your true 1rm is higher than you think it is if you can pull it off without acclimating to that weight.

I never said you will for sure get injured, merely the chances increase. And I agree that some people have warm ups that are too intense.

klue07··on Benefits of 1 Minute of All-Out Effort during Exercise
I completely agree. I was going to post the same thing until I saw your comment. The inexperience with exercise causes people to not know how hard they can push their body and still be fine. When I bring a friend to the gym or something, they stop lifting for the set when they feel slightly tired. I can't imagine their pushing themselves to where there's phlegm in their lungs and still going.
klue07··on Benefits of 1 Minute of All-Out Effort during Exercise
I wouldn't entirely agree. If you aren't lifting any relatively heavy, extra weights, e.g. running or something, warming up isn't as important. However, when lifting relatively heavy weights, I think warming up is pretty important.

Warming up has the benefit of lubing up your joints. I think we've all had the instance where our body are relatively stiff and if we do, say, a push up, our joints pop or make cracking sounds. I remember squatting once when I didn't fully warm up. My knee wanted to pop during the squat and it felt extremely uncomfortable trying to exert force on that leg. When there isn't any extra weight, merely extending your leg with a pop wouldn't bother anybody, but exerting a lot of force and doing so slowly sure wasn't a pleasant experience. What are the chances of serious injury? I don't know, but it hurt enough for me to not want to find out.

Another thing warming up helps with is to acclimate you to your working set weight. I know the first set of my bench press usually ends in a grinder and is the roughest out of all my sets. I'm not sure if it's just my mind acclimating to the weight or a physiological thing like more blood getting pumped to my muscles. Either way, I'm fairly certain (but do not have any sources) injury rates would be increased if you tried to deadlift your max without properly warming up.

klue07··on Detecting the use of “curl – bash” server side
Reminds me of why I also don't copy paste text from websites directly into my terminal.

https://thejh.net/misc/website-terminal-copy-paste

klue07··on Nearly half of Americans would have trouble finding $400 to pay for an emergency
> But recent research indicates that when people get some money—a bonus, a tax refund, a small inheritance—they are, in fact, more likely to spend it than to save it.

Not recent at all. I first read about it in The Millionaire Next Door book. Referred to as the "better than" theory [1].

Plain and simple, people don't like to save when they have the option. They like immediate reward. If you make $500 more a month after a raise, many people will reward themselves for the raise, justify buying something they've wanted, etc. After a while, the mindset that they are living just fine while spending the extra money sets in and they end up never saving the extra $500.

[1] https://en.wikipedia.org/wiki/The_Millionaire_Next_Door#.22B...

klue07··on A polyglot's guide to multiple dispatch
I run into the same problem. I thought it was because I work in infosec so many people here don't have CS degrees or do a lot of dev work. I don't remember exactly where I learned dispatch, binding, etc. We did have a software dev class where I learned different design patterns.

Visitor pattern always blows people's minds when they first see it in action hehe.

Page 1 of 2Next →