Hacker Newsnew | past | comments | ask | show | jobs | submit | Igglyboo's commentslogin

Not really, automatically checking for updates on startup is very commonplace with desktop applications.


They squashed AMD long ago, I don't think it's this.


And then you change the code a tiny bit and the signature doesn't catch it anymore.


> change the code a tiny bit

How? That's the principle that everyone's missing! Sure, you can change the code a bit, but the millions of copies of your worm out there already can't magically change themselves after AV vendors update their blacklist. Sure, you can make a polymorphic worm, but even after mutation, your worm still probably has common patterns that blacklist makers can catch.

I'm a fan of proactive, not reactive security --- but let's not pretend that what AV vendors are doing is completely bogus.

You also have to keep in mind that blacklists are behavior heuristics are more suited to a bygone age --- one of low-bandwidth, sporadic connections and floppy disks that could be infected with trojans. Nowadays, we're more worried about drive-by 0day flash exploits from ad networks than about infected, self-propagating executables.

I've always found it fascinating that the human immune system has both proactive and reactive security, just like our computers should. The innate immune system [1] is analogous to mandatory access control, OS file permissions, buffer hardening, and other non-specific security mechanisms. The adaptive immune system, on the other hand, works like a blacklist updated throughout your life (and propagated from mother to child!).

Both systems catch threats the other does not. There's still a lot to learn from biology.

[1] https://en.wikipedia.org/wiki/Innate_immune_system [2] https://en.wikipedia.org/wiki/Adaptive_immune_system


And then you make it metamorphic.


No one ever got hooked with the bottle of Tylenol 3 they send you home with after you get your wisdom teeth out.

But when it's oxy or hydromorphone I'd agree, also I don't even want to think about having morphine or fentanyl patches in my possession.


Still, when I had my wisdom teeth out at 17, I threw away the painkillers. I knew that they would be problematic for me, so I decided to not even go there.


That is absolutely untrue.


Opiate pain relief is orders of magnitude better than marijuana.


It's more orders of magnitude more dangerous and addictive (in that marijuana is almost impossible to OD on, and isn't addictive at all).

Marijuana is certainly not the magical silver bullet some make it out to be, but it's incredibly effective for many people whose only other recourse would be opiates.


FYI, cannabis certainly can be addictive, just without serious physical dependance. And even on the mentally addictive side, obviously far less than opiates - but certainly there are people who fit the definition of being addicted to weed.


Cannabis is not physically addicting, and if the person is psychologically addicted then it will be that person's environment which will be the culprit.


Kratom is a great and currently legal alternative. It works on opioid receptors and cannot be fatally overdosed. Unfortunately, many sates are already moving on banning it. Big pharma lobby for the win.


Kratom still comes with risks of withdrawal. Pure leaf kratom would be difficult to OD on, but extracts and tinctures could easily be overdosed on.


What are you talking about? Link to any case of death that has been attributed exclusively to an overdose of kratom. You can't, because it doesn't exist.


Stock up while you can. However some states have unbanned it, and others yet are not voting their bans into legislation. There's hope yet, but it will be a hard fight, particularly with the FDA.


This may be genetically variable; OPRM1 A118G seems to predict some amount of decreased effectiveness for a lot of exogenous opioids.


Re-Submitted because I uploaded it to the chrome web store, had some reports of people not being able to enable it or install it because of some recent security changes.

Just a tiny little extension that lets you collapse comments on HN. Any feedback would be greatly appreciated.

Here's the github link if you're interested https://github.com/Igglyboo/hn_collapse


This is pretty cool! I switched from a similar extension purely because I prefer the location on the left of the comment rather than the right.

I've tried a lot of these and one thing I haven't seen is a similar feature to RES that remembers collapsed threads. Any ideas if this is something that HN's design somehow precludes or is it just a matter of someone sitting down and writing the code?


Cool! I've always found it hard to read comments in the big discussions. It would be helpful if you had more details on what comments it collapses in the Chrome store description. In the screenshot it didn't look like comments were collapsed. Can I adjust which comments are collapsed, is it just deeply nested comments?


Awesome work. This is really helpful on stories that have more than a hundred comments.


They aren't prescribing recreational doses, he would be perfectly functional and experience no dissociation whatsoever, it's something the drug community has been talking about for a long time.

Lookup "microdosing" if you're interested, a lot of people do it with dissociatives or psychedelics and the point of it is to a below threshold dosage and avoid the typical drug high.


You're still in an "altered state" for an hour or so after an IV infusion, according to several practices I've seen offering the service - not necessarily dissociative or hallucinating, but definitely "out of it".


Ah, didn't realize they were doing IV infusion, if they made capsules or something with a time release mechanism they could probably avoid the "altered state".


They own tumblr, and a ton of alibaba shares.


And only one of those is valuable.


Seems like a good use case for protocol buffers [1].

[1]https://developers.google.com/protocol-buffers/?hl=en


It might be that they consider it important to be able to interrogate the in-memory or on-disk representations without the help of a decoding step. Protobufs are great for getting objects into a nice compact format to throw on the wire, but god help you if you end up with multiple actors filling up a queue with inconsistently encoded objects.


doesn't Apache Avro solve this problem?


I own a macbook pro and I'm extremely envious of that bezel.


Not really. Did you notice the enormous 1-inch black strip of bezel at the bottom with the giant DELL logo? That's also where the camera is.

The bezel looks sexy on top, but overall, it's just more crappy design decisions from Dell.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: