I skimmed the paper and wouldn’t take too much stock in it. One glaring issue I see is that the “control” for their analysis is another cell network that is absolutely tiny by comparison and services a completely different population from AT&T, so they’re not really isolating other variables, they’re cherry-picking data and over-indexing on it.

The other thing that immediately jumped out at me is the format-- it sure looks an awful lot like an academic thesis, and the authors are a professor and a student who started this work during their undergrad. There’s surely no way a respectable journal would publish this document in its current iteration, so why is it in the news? Weird.

The webpage he hosted was a copy of his own blog post explaining the hack. It just about fit into the 20KB of available flash storage.

We can infer that on every request, the whole static page needs to be spooled out of flash onto RAM (in chunks no larger than 3k), then sent out over Ethernet.

That’s an awful lot of work for the chip. I’m not surprised at all that it errors out under heavy load. The request queue probably grows until it collides with the buffer that bucket brigades the web page to the network.

I’m afraid to look up what optimizations were necessary to get that level of performance. It’s damned impressive work.

Yeh it’s peak, really goes downhill from there.

Every place I’ve ever worked has tried to play cute with security researchers. I’ve never understood it. I’ve always called it out. But I keep fucking running into it!

Bro you can’t even run a publicly traded company. Don’t even say the word “utility”. Fuck outta here.

They’re certainly making an impressive go of it, but I don’t see anything in their arsenal that’s going to survive sustained attacks.

SPYDER is so comically expensive that resisting long range drones will bankrupt the country, and automated turrets, while much better from a price per kill perspective, simply don’t have the range of other solutions (hundreds of meters at best rather than 40km of SPYDER or 5km of iron dome).

A better solution for the drones in the OP might be the new Rheinmetall platforms with airburst ammunition, but I’m not sure Israel can procure those in the numbers necessary to cover their defenses or infrastructure.

I’ve been wondering about this for a while, but what does it cost to maintain the iron dome when your batteries are depleted and the missiles are on backorder? It’s not like literally anyone else is fielding this equipment, so what happens when the only customer suddenly needs a tall order every week?

Under normal economic conditions, a tamir missile costs about $80k, and a shahed drone costs about $30k (and dropping). These are not normal conditions, and I expect that Israel is going to have spotty coverage in the coming years.

The worst part is that I’m sure Netanyahu and his ilk have priced all this in and agreed that the casualties and long-term dependence on foreign funding and ordnance is a fair trade for the additional territory. I really hope the Israeli people disagree.

It’s like looking back at my own misspent youth. 10/10 great stuff, and wonderfully maintained + displayed.

Ok, how safe haven’t they been? How many were worse than deepwater horizon?

I’m guessing you’ve happily consumed what was given to you on a spoon and accepted that it was representative of the bigger picture.

I grew up an hour from a 1GW reactor that got shut down in part due to “concerned citizens” like yourself. The site it stood on is still periodically checked by the DOE but is now a recreational area. How often do old coal plants do that?

It would have cost you nothing to keep this male victim complex horseshit to yourself.

The thing is that waymo did this without decades of training data arriving per day. Tesla is worryingly far behind on the actual self-driving tech from an investor’s perspective.

Truly a “snatching defeat from the jaws of victory” moment.

We live in an unprecedented time where American technological hegemony is being rejected globally, but especially in Europe. People want performant, durable, respectful software offerings, and are increasingly looking away from the Valley and the Street for answers.

So let’s jump on board with becoming part of the extended American surveillance state! Yee fucking haw.

Yeah, this pretty clearly isn’t intended to block bots lol

To date, the only countries that have made progress in blocking VPN traffic with some success are authoritarian regimes with ISP-level surveillance.

You know you’re on to something when the only playbook you can find was written by the Chinese government.

I think that the code of conduct pre-diff is less professional but totally unambiguous about AI-generated contributions, so I’m not sure where your confusion is coming from. And I have already spent more time looking for evidence of your claims than you have, so no thanks, I think that unless you present something of substance I’m good.

I’m not sure how you think they aim to achieve that business lock-in, but many of us suspect it’s by offering a product that replaces workers.

Ok, I just searched their codeberg for the word “fuck” and both (yes, exactly 2) closed MRs were, in fact, heaps of LLM puke with no engagement from the “author”. More importantly, both of these were created after the policy was posted.

I think your argument is nonsense. Post evidence if you have it, but I’m guessing you won’t.

Why are you so sure this is “revisionism”? They’re not trying to rewrite history, they’re trying to explain their staunch policy.

It’s their project, and if they want to carefully select contributors they think will stick around and be a member of the community, then that is entirely their prerogative. This is a viable model for a niche project. There’s no requirement that they invest time and energy to review and integrate every last PR.

Yep, I’ve been telling anyone who’ll listen that if you really want to drop juniors and give tools to seniors, then you have to pay the monthly cost (whatever it will be) and you have to be ready to foot the big bill in 5 years when your seniors (with no candidate replacements) say they’ll take a 50% raise or walk.

People who develop and maintain closed-source software. Who did you think you were referring to?