Hacker Newsnew | past | comments | ask | show | jobs | submit | more mikotodomo's commentslogin

Isn't this a security risk?


- `/dev/mem` should only be accessible by root or whoever you set the permissions to (don't `chmod 777 /dev/mem`).

- root can install device drivers which have full executable run of the system anyway and do anything you can do with this device; this is also true on Windows.

- read about CONFIG_STRICT_DEVMEM - https://man7.org/linux/man-pages/man4/mem.4.html#:~:text=Sin....

- wait until you hear about `/dev/kmem`.

- it's possible to build a Linux kernel without `/dev/mem` support and also without loadable module support (I think), so if your threat model indicates this needs to be addressed it is possible.


`CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY=y` or similar may also be of interest, see `man kernel_lockdown`.


>root can install device drivers which have full executable run of the system anyway and do anything you can do with this device; this is also true on Windows.

Oddly enough, no. Or atleast last time I tried on Ubuntu I had to disable secure boot. Seemed like an easier way than to sign the build files


Secure Boot can be configured to also trust user keys. Ubuntu's installer does it automatically if you choose to install it with third-party drivers (like Nvidia). Those user keys are then available to root to sign any DKMS kernel modules.


It would be a fun exercise/YouTube video/class… you are an unprivileged user, /dev/mem is 777, go forth and prosper.


Do nothing? Cracked software isn't a big deal. My cousin works for a 20 person company and they all make $200K / year.


Neat, must be like how bike gears only move forward when you pedal them. It looks hella dorky though. I think some Adidas running shoes are much more practical and already the fastest.


It didn't work (I think? It was just a white screen). I tried changing IP with CTRL+SHIFT+L and it wasn't doing anything, then tried copying the link and opening in a different window, but it wouldn't copy (because I used CTRL+L). Only then I realized it just doesn't let you press any button on the keyboard. JESUS CHRIST never show me this link again.


This is great. So sick of watching influencers tweet blatantly wrong information.


> An atom is like a little solar system, with a nucleus at its center.

What if each atom was a little solar system?


True, but it pushed the computer industry forward.


Makes sense, doing an intellectual activity while getting brain surgery probably helps them like when they tell you to move your muscles around when getting normal surgery.


Those tools are for generating images and art, not precise schematics. The post is criticizing them for failing at something they aren't meant to do.


> Those tools are for generating images and art, not precise schematics.

Who says that? Where does it say that Dall-E and Stable Diffusion are only for generating images and art? Why are graphs not images? And why can't they be art?

Those are models that generate images from textual prompts. Aren't you just moving the goalposts by saying they can't generate specific kinds of images?


The pictures on the homepage are astronauts and flamingos and stuff.

The homepage defines the process: "starts with a pattern of random dots and gradually alters that pattern towards an image when it recognizes specific aspects of that image"

So based on that description and context clues, I wouldn't expect it to generate a precise schematic.


If I understand your interpretation correctly, you wouldn't expect it to generate anything else precise, either. For instance, you wouldn't expect it to be able to generate the precise contours of a face, correct?


Cool. I don't have a USB Flash Drive though.


$15 can help


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: