Hacker Newsnew | past | comments | ask | show | jobs | submit | roundandround's commentslogin

I'm curious to see, but I don't think the algorithm for calculating the password from the identifier would be very sophisticated. Assuming they didn't want to add costs to prevent easy retrieval of any secret key from the device, a complex algorithm would be kind of a waste.


I mean, even something as simple as `md5("very-long-secret-only-phillips-knows" + uid)[:4]` would be effectively unguessable. Not hard if you have the code for the firmware, but nigh-impossible otherwise.


If one person has access once and publishes it, the work of setting up a proper md5 was a waste compared to an xor.


The Sonicare app lets you download the latest firmware blob. So all you'd do is intercept it and find the function responsible for generating the password.


The app has the firmware embedded in it (resources/assets/firmware), not sure if it actually downloads a newer one or if it updates with the app. It does seem to be encrypted or compressed somehow tho.


It does seem to be for the more expensive diamondclean series tho I guess the brush checking would be similar. Didn't find any decryption in the APK, it just transfers it as is. Must be hidden inside the firmware as well. I don't think there's any way to get the firmware except dump it from the chip :/


Sounds like a variant on the 12 monkeys theme.


Funny, my mind immediately went to Vonnegut.

> There was a sound like that of the gentle closing of a portal as big as the sky, the great door of heaven being closed softly. It was a grand AH-WHOOM. I opened my eyes - and all the sea was ice-nine.


> Wow, it sure worked out fortunately that half of their military was already there.

I'll say, if the whole military had been there the Ukraine would be sixteen times larger today!


If they had every intention of staying on plan but some team had delays and costs for fixing bugs with handling a larger differential than the lander would encounter, I assume a manager would be let go.


That’s a useless thing to speculate about.

My point is that they could have used a more appropriate threshold from the very beginning. It wouldn’t have cost them any development time.


I think NASAs switch to Probabilistic Risk Assessment has everything to do with unhappiness with doing a study of the entire moon and expanding requirements that shouldn't cost any more development time.

Exactly what planning failure would occur wouldn't have been known, so how many other general capabilities would this lander have needed to maintain across different scenarios where they might interact with each other? How much less testing of the actual plan would they have made to stay on schedule and in budget?


No he's saying they are more likely to bludgeon you because you may have a gun and shoot them before they can run away.


Kids are a constant presence in your house, bullet after bullet and stomach pump after stomach pump confirms that that's an entirely different threat model than a safe can handle.


This seems like a past performance as a measure of future returns error to me.

China has had a lot of success with free market and exports while having substantial central control and without being a liberal democracy. It's not really clear how systems will fail or succeed as technological balance rebalances or unbalances power between the estates.

I think long term leaders will continue to be parasitic burdens upon their societies but its quite possible that technology will help alleviate their typical consequences on productivity.

For example, virtually every corporation is at its heart a failure in democratic control and a centrally controlled institution with either a long term dictator or oligarchy. They had substantially more problems competing in earlier times when paperwork overhead was literal paper.


But I think it was normal. Would modern undiagnosed children have flourished in less institutional settings? I think being on the dangerous edge used to be safer than being insufficiently experienced in dangers that were unavoidable and in many cases predatory.


I think the whole reason articles like this are common is that one can easily calculate these numbers from visa statistics, i.e. number of people who didn't get a job within the grace period. Naturally these kinds of statistics can be a bit off, for example someone might transition to another type of visa instead of seeking work.


In an alternative world where laptops are selling like hot cakes I would say it's because AMD woke people up who hadn't seen enough improvements to justify a purchase since 2012, the wild economy that has people job hopping, and of course the massive power requirements as Meta pushes APIs from the wildly successful metaverse to Facebook feeds.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: