the_plus_one

My friend, this is the "Who is hiring?" thread, not the "Who wants to be hired?" thread. You probably want to post here: https://news.ycombinator.com/item?id=49156682

My understanding is that Google Fi is a glorified T-Mobile MVNO at this point (i.e. you're a Fi customer but using T-Mobile towers). It used to give you the closest/best connection of T-Mobile, Sprint, or US Cellular, but Sprint no longer exists, and T-Mobile bought US Cellular.

In my experience, the bulleted list with emojis is usually a pretty strong tell (the one in the article just after "We call these parts sub-projects"). LLMs (maybe just ChatGPT) love doing that.

How else would you watch things with other people at home? Are you going to huddle around your desktop, laptop, smartphone, tablet, etc.?

Is that necessarily a bad thing? I have older laptops than the U729 that still see some use. If you're not locally compiling a big codebase, running some AI/LLM thing, playing GPU-intensive games, etc., you really don't need much.

I don't think anyone would fight you on that. Inferno cheat plugins looked like 100 bpm Guitar Hero back in the day.

Is it just me, or is there some kind of asteroid game shooting bullets at my cursor while I try to read this [1]? I hate to sound mean, but it's a bit distracting. I guess it's my fault for having JavaScript enabled.

[1]: https://flak.tedunangst.com/script.js

As an American that grew up in a rural area, this definitely isn't something that would've been taught in a public school here. At best, we had typing classes in middle school, and the (quite old) teacher insisted on two spaces after the end of a sentence, something that disappeared after we stopped using typewriters.

> or too young to remember former languages.

Do you have any good examples? Not trying to argue, just genuinely curious as someone who hasn't been in this field for decades.

It's been several years at this point, but I used to be a cloud support engineer for AWS (i.e. the first line of defense against support tickets). We were trained to always be kind to the customer, even if we're frustrated with them, so a response like "please read how the lambda works" probably would've gotten me reprimanded. Customers can rate your response from one to five stars, and if I remember correctly, anything less than four required a written explanation to your manager as to what went wrong.

That job was a glorified call center; I didn't last very long.

Very cool post! I enjoy anything that has to do with game hacking, and it's nice to see D, a language I don't have a ton of experience with. Just one note you/the author may be curious about:

> Notably a process_vm_writev syscall also exists, however it adhears to memory page protections - so if I wanted to inject data into a write-protected memory page, it’d fail.

You can work around this by convincing the process to re-mmap() the read-only section with PROT_WRITE. One way I've done this is by building a shared library with __attribute__((constructor)) that gets LD_PRELOADed into the game binary, though you have to be careful with the timing (e.g. your library may start running before the game has allocated the mapping you're looking for). That said, if you've done this, you are also free to just allocate your own memory rather than having to look for unused portions of it.

We are similar. The only time my phone makes any noise whatsoever is if I get a phone call from someone in my contacts or a Slack ping during work hours. Everything else can wait.

    - They can know when you sleep
    - They can detect when there are 2 people sleeping in the bed instead of 1
    - They can know when it’s night, and no people are in the bed

I'm probably naive, but I'm failing to see how any of this is exclusive to having remote SSH access to the bed. Who's to say this isn't already happening with other binaries in the firmware? Maybe they're already phoning home?

    [...]that bypasses all forms of formal code review process.

How does the author know if anything else in the firmware goes under any kind of code review process?

It's not a bad article, but it does seem to make a lot of assumptions, and you already agreed to let arbitrary code run on your network when you added an IoT device to it.

Can't speak for the entire country, but rural Virginia had a nasty ice storm pass through earlier this week [1]. I lost power for about 40 hours.

[1]: https://www.wdbj7.com/2025/02/12/36k-plus-virginians-lose-po...

As someone who's reversed some basic MIDI stuff in an old video game and has always wanted to get into hardware hacking, I really enjoyed reading this article. Great work!

This is more on the user end, but there's ways for users to isolate programs in such a way that this malware wouldn't have access to e.g. browser files and cryptocurrency wallets, some more effective/practical than others. Virtual machines, containers, jails, chroots, etc.

I think one example of what you're talking about can be seen on Android. The developer has to explicitly declare permissions (like file access) in the manifiest, and the user has to explicitly approve it.

I've looked into this before, and it seems like they got Starlink recently-ish (within the past couple years or so). A google search of "inurl:reddit mcmurdo starlink" brings up a few hits from /r/antarctica.

I mentioned this in another thread, but the website is out of date. The contracts for McMurdo firefighting are currently held with Amentum: https://www.amentumcareers.com/jobs/firefighter-mcmurdo-stat...

The website is out of date. The firefighting contracts used to be owned by Lockheed Martin, then PAE group, and now Amentum.

(edit: As proof, here's Amentum's listing for a McMurdo firefighter: https://www.amentumcareers.com/jobs/firefighter-mcmurdo-stat...)

I've been wondering the same. I did just see [1], where it's apparently trying to read memory from an unmapped address, but I haven't seen anything about how r8 got to the point of having said unmapped address.

[1]: https://x.com/patrickwardle/status/1814343502886477857

I bumped into kk4vcz at Defcon in 2021. I was standing around, looking clueless, and playing with my Baofeng near the ham radio village. He approached me and asked if I could transmit on a particular frequency to help test his watch. I said something along the lines of "oh that's really cool, I've read that guy's blog and follow him on Twitter." He said something along the lines of "yeah, that's me."

He even gave me a couple GoodWatch boards. Nice guy!

Speak for yourself. As an autistic person, if I could get rid of it, I absolutely would.

To clarify even further, you can technically log into OSRS with old accounts, but none of your stats or gear from back in the day will be there. Everyone started fresh in OSRS when it (re)released in 2013.