Hacker Newsnew | past | comments | ask | show | jobs | submit | qguv's commentslogin

Also, is there a CVE assigned to this exploit already?


As far as I know, not yet.


This is insane. I was reading up on the "advanced protection program", cited as the only mitigation currently available to prevent this exploit.

But it's got some enormous downsides! The only apps you're allowed to install are signed ones from the Play store; you have to use a passkey for all things Google; and that Chrome is the only supported browser for logging in.

Google, fix this attack vector!


I think this is AI generated; the Lean snippet on page 33 is full of LaTeX syntax.


Nota bene: their Github link 404s, and there are goofy LaTeX mixed in with their Lean snippets.


Why did you share it then?


    ; set the first syscall argument to 42
    push   0x2a
    pop    edi

    ; select syscall 60 (sys_exit)
    push   0x3c
    pop    eax

    ; sys_exit(42)
    syscall


LOL my asm is rusty, didn't even know about the syscall instruction (I'd have used int 0x80 here)


What's the point of `push`ing constants to the stack and `pop`ing them to registers instead of `mov`ing them directly?


I think they encode smaller?


That's cool - I wonder why exit code is not set to 42 in practice? binary still returns 0, must be a bug somewhere.


A successful run not exiting with EXIT_SUCCESS usually requires a good reason to justify it.


After reading through "A T Cell Army against SARS-CoV-2" and not getting much out of it, I started looking for a primer on how viruses infect cells. But without a strong background in biology, even that was somewhat out of reach for me. This article started to frame the idea of DNA as a DSL for generating molecules, which put me on better footing.


I think they're saying that you may have thrown out the baby with the bathwater. If your conclusion horrifies you—doesn't resemble what you were optimizing for—you may be optimizing for the wrong thing. Rationality isn't broken; revisit your optimization criteria. See the paperclip optimizer, the smiles optimizer, etc.


Gender segregation in sports is certainly not without controversy.


That's news to me. References?


http://www.cbsnews.com/news/john-mcenroe-refuses-to-apologiz...


This is not "birth control"—it's "coerced sterilization."


It's my understanding that the hormone-releasing implants for the women are birth control - remove it and you can get pregnant again in a month or two. I see this is an arm implant, not an IUD as a couple of friends have used (and subsequently removed and had a beautiful healthy daughter), so I may be incorrect.

But yes, the vasectomy offered to the men is far more permanent than "birth control".


India pioneered a "reversible vasectomy" [1]. Basically they gum up the ducts from the testes. It does not have to be irreversible.

The thing to watch is whether knowing they have become, at least temporarily, infertile, will lead them to unsafe sex practices resulting in more venereal disease.

[1]http://newatlas.com/risug-male-contraception/18824/


There's a YC company, Contraline[1][2], doing a similar thing.

[1]: http://contraline.com/

[2]: http://contraline.com/news/2016/05/13/contraline-is-accepted...


I remember reading an impressive statistic where the implant actually has a higher real world success rate due to more botched/healed ligations.

Edit: http://www.ohjoysextoy.com/implant/ -0.05% failure rate on implants, 0.5% on sterilisation. Impressive.


United States: 3–8 per day on my cell phone. Some nights, I get dozens of calls one after the other. I work on-call.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: