Comments URL: https://news.ycombinator.com/item?id=26571944

Points: 3

# Comments: 2

Comments URL: https://news.ycombinator.com/item?id=26261745

Points: 2

# Comments: 0

Imagine the following scenario - memory only malware lands on my computers, identifies the keyboard, uploads a malicious firmware and disappears. Using basic heuristics like time and entropy it detect when I logon to the machine, get my passwords, understands my OS, and what for a hidden signal by the memory only malware. If the signal is not detected for a while because I rebooted my computer or reinstalled it, It unlocks the computer with the password at a time of inactivity, and types in a command like wget/curl to to download the malware again, and so on.

I think this can even be used for Virtual Machine escape, as many VMs just pass-through HID commands, so its possible the firmware can be updated from a VM.

Kudos to System76 though for providing the firmware, this helps in auditing it and running tools like lint or PVS studio to decrease the chance of bugs like that. They are consistent in being open source and I hope more vendors with firmware follow their lead.

Personal perspective: I've been trying intermittent fasting for about four years, and found it helped a little in the beginning but then petered out.

What happened was I did not eat until 7PM, then ate a little bit, but once I started eating I could not stop. It was never a matter of hunger, I barely ever feel hunger at all, it was like a deep primal drive to eat once the gates had opened - each and every evening.

The one thing that actually worked for me for a while was almost complete fasting - I would eat one meal one Saturday, one meal one Sunday, and that's all. The first two weeks were hard, but then it became quite easy, except the time aches Monday morning. It also lowered my resting heart rate by 10 BPM. I managed to drop about 40lbs in 6 month. Then I started on a really tough and stressful project at work, stayed late with coworkers, they ordered pizza night after night, I ate, and the fasting was over. Couldn't get back on the wagon since ...

So having the modem connected by USB does not make attacking through it impossible - how can you tell there are no bugs in the iOS USB stack?

Comments URL: https://news.ycombinator.com/item?id=26087469

Points: 2

# Comments: 0

Can any one a little more knowledgeable explain the difference between this 3d printed engine and RocketLab's one? Thanks!

Re “Productivity equiation” from Ali Abdaal: Productivity = Useful output / time x f (where f is the ‘fun factor’), but treating f as constant is wrong - even fun projects can get tiresome . A good measure might be instead an inverse 'tediousness' factor, e.g. how tedious are the worst expected tedious parts of the project (like the 'fun' bottleneck) and make sure you don't get stuck when you reach those points.

Also fun project tend to be novel, but novel project have the highest amount of unexpectedness, so its good to decide on a few 'novel' things and let the rest of the project be based on stuff you know well.