Hacker Newsnew | past | comments | ask | show | jobs | submit | mdavid626's commentslogin

Works well. I used this tool once to disassemble and understand how key manager works on Vivotek cameras.

They create executables, which contain encrypted binary data. Then, when the executable runs, it decodes the encrypted data and pipes it into "sh".

The security is delusional here - the password is hard coded in the executable. It was something like "VIVOTEK Inc.".

Ghidra was able to create the C code and I was able to extract also the binary data to a file (which is essentially the bash script).


Sounds like `strings' on the binary would've sufficed if it's just hardcoded.

No, that’s not enough.

The password would be visible, but the encyption algorithm and the script’s text wouldn’t.


Then why are they letting their models write browsers and compilers?

Probably half of it still doesn’t work in Safari.

Don't worry, I'm sure in a year about 30% of it will work! (But not on mobile)

I wish we could just ignore Safari on iOS.

Safari is the new IE6

It doesn’t matter, just jump on the hype train!

or jump off, and instead grab onto the (well-deserved) sqlite-test-suite hype train.

(I'm being sarcastic.)

The opposite is not true though: successful products might have messy codebases, but that doesn’t mean, that messy codebases lead to successful products, or that quality doesn’t matter.

There's a balance to strike, and it's hard to get right. You have to give up quality enough that you actually deliver things to users rather than working on 'the perfect code', but you also have to keep quality high enough that you're not slowed down by spaghetti code and tech debt so much that you can't deliver quickly as well.

This is made more complicated by the fact that where the balance lies depends on the people working on the code - some developers can cope with working in a much more of a mess than others. There is no objective 'right way' when you're starting out.

If you have weeks of runway left spending it refactoring code or writing tests is definitely a waste of time, but if you raise your next round or land some new paying customers you'll immediately feel that you made the wrong choices and sacrificed quality where you shouldn't have. This is just a fact of life that everyone has to live with.


Which company is actually doing this?

Why do they have so many GitHub issues then?

Of course - and autonomous driving is 1 year away.

I have ridden in a Waymo dozens of times with no issues. I've also used Tesla's self-driving to similar efficacy.

That's the nature of all tech, it keeps not being good enough, until it is, and then everything changes.


As an aside, I wonder if automated driving would be one year away if we did not need to worry about it killing people.

Like if the only possible issues were property damage, I kind of think it would be here. You just insure the edge cases.


Because the average person’s brain is fried by looking at infinite scrolling apps 6 hours a day.

How is it different?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: